https://gcc.gnu.org/bugzilla/show_bug.cgi?id=100513
--- Comment #1 from Jiu Fu Guo <guojiufu at gcc dot gnu.org> --- The error is raised after ipa “inlining” pass, when doing ggc_collect at stage 2. At code: xlimit = ((*xlimit).next); The value of xlimit becomes 0xa5a5a5a5a5a5a5a5 before crash. 0xa5 may comes from poison_pages. If using "-fno-inline" the crash disappears.