Found using the undefined behaviour sanitizer (-fsanitize=undefined).

Change-Id: I5534a97c0e38f76b38c6a53b42759b0b676e360a