Steps to reproduce:
Run: read -e
Type: 0 ESC 0 \C-? \C-w
dualbus@afl2-hjbw:~$ cat -A
amin/id:000080,sig:11,src:005611+014207,op:splice,rep:16.min
0^[0^?^W
dualbus@afl2-hjbw:~$ xxd
amin/id:000080,sig:11,src:005611+014207,op:splice,rep:16.min
00000000: 301b 307f 17 0.0..
Starting program: /home/dualbus/src/gnu/bash/bash
bash-4.4$ read -e
0
Program received signal SIGSEGV, Segmentation fault.
strlen () at ../sysdeps/x86_64/strlen.S:106
106 ../sysdeps/x86_64/strlen.S: No such file or directory.
(gdb) bt
#0 strlen () at ../sysdeps/x86_64/strlen.S:106
#1 0x0000555555647425 in _rl_copy_to_kill_ring (text=0x5555559417a0
"0", append=0) at kill.c:134
#2 0x0000555555647568 in rl_kill_text (from=1, to=0) at kill.c:179
#3 0x00005555556478f1 in rl_unix_word_rubout (count=-1, key=23) at kill.c:328
#4 0x000055555562d76e in _rl_dispatch_subseq (key=23,
map=0x555555895140 <emacs_standard_keymap>, got_subseq=0) at
readline.c:851
#5 0x000055555562d4e5 in _rl_dispatch (key=0, map=0x555555895140
<emacs_standard_keymap>) at readline.c:797
#6 0x000055555562d16d in readline_internal_char () at readline.c:629
#7 0x000055555562d1c5 in readline_internal_charloop () at readline.c:656
#8 0x000055555562d1e9 in readline_internal () at readline.c:670
#9 0x000055555562cc06 in readline (prompt=0x55555566dc94 "") at readline.c:374
#10 0x0000555555606f17 in edit_line (p=0x55555566dc94 "", itext=0x0)
at ./read.def:1069
#11 0x0000555555605e3d in read_builtin (list=0x0) at ./read.def:550
#12 0x00005555555a2034 in execute_builtin (builtin=0x55555560510e
<read_builtin>, words=0x5555558d0b40, flags=0, subshell=0)
at execute_cmd.c:4605
#13 0x00005555555a2f10 in execute_builtin_or_function
(words=0x5555558d0b40, builtin=0x55555560510e <read_builtin>, var=0x0,
redirects=0x0, fds_to_close=0x5555558d09b0, flags=0) at execute_cmd.c:5103
#14 0x00005555555a193a in execute_simple_command
(simple_command=0x5555558d0970, pipe_in=-1, pipe_out=-1, async=0,
fds_to_close=0x5555558d09b0) at execute_cmd.c:4391
#15 0x000055555559b2f0 in execute_command_internal
(command=0x5555558d0c00, asynchronous=0, pipe_in=-1, pipe_out=-1,
fds_to_close=0x5555558d09b0) at execute_cmd.c:811
#16 0x000055555559a84c in execute_command (command=0x5555558d0c00) at
execute_cmd.c:393
#17 0x00005555555849ca in reader_loop () at eval.c:172
#18 0x0000555555582617 in main (argc=1, argv=0x7fffffffe498,
env=0x7fffffffe4a8) at shell.c:794
