Weird lifetimes cause a segfault in safe code

[ithuleyho]

This contrived example compiles just fine, but running it results in a segmentation fault:

static UNIT: &'static &'static () = &&();

fn foo<'a, 'b, T>(_: &'a &'b (), v: &'b T) -> &'a T { v }

fn bad<'a, T>(x: &'a T) -> &'static T {
    let f: fn(_, &'a T) -> &'static T = foo;
    f(UNIT, x)
}

fn main() {
    let r = bad(&Box::new(&10));
    dbg!(r);
}

Playground link

The problem occurs on multiple rustc versions.

[lukas-code]

duplicate of #25860

[ithuleyho]

duplicate of #25860

Thanks, I tried to search for this but found no mention.