https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90659
--- Comment #2 from Marek Polacek <mpolacek at gcc dot gnu.org> --- The crash is here: 3126 unsigned HOST_WIDE_INT max = tree_to_uhwi (nelts); (gdb) p nelts $1 = <plus_expr 0x7fffeab40140> (gdb) pge (sizetype) (SAVE_EXPR <(ssizetype) n + -1>) + 1