https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113612
--- Comment #4 from Marek Polacek <mpolacek at gcc dot gnu.org> ---
It was freed here in duplicate_decls:
#1 0x00000000012f535d in ggc_free (p=0x7fffea210e10) at
/home/mpolacek/src/gcc/gcc/ggc-page.cc:1630
#2 0x0000000000e971b2 in duplicate_decls (newdecl=<ggc_freed 0x7fffea210e10>,
olddecl=<var_decl 0x7fffea210d80 t>, hiding=false, was_hidden=false)
at /home/mpolacek/src/gcc/gcc/cp/decl.cc:3334
#3 0x00000000010a4bca in register_specialization (spec=<ggc_freed
0x7fffea210e10>,
tmpl=<template_decl 0x7ffff7fc2080 t>, args=<tree_vec 0x7fffea3a7ca0>,
is_friend=false, hash=2199381591)
at /home/mpolacek/src/gcc/gcc/cp/pt.cc:1627
#4 0x00000000010b46e8 in process_partial_specialization (decl=<ggc_freed
0x7fffea210e10>)
at /home/mpolacek/src/gcc/gcc/cp/pt.cc:5422
#5 0x00000000010b9420 in push_template_decl (decl=<ggc_freed 0x7fffea210e10>,
is_friend=false)
at /home/mpolacek/src/gcc/gcc/cp/pt.cc:6005
#6 0x0000000000ea198b in start_decl (declarator=0x48c4eb0,
declspecs=0x7fffffffd080, initialized=1,
attributes=<tree 0x0>, prefix_attributes=<tree 0x0>,
pushed_scope_p=0x7fffffffcf40)
at /home/mpolacek/src/gcc/gcc/cp/decl.cc:6108
