The issue was that there were two custom data layers on the mesh that referenced an anonymous attribute id.
This happened because when the face normal attribute was added later on, it was moved before the anonymous attribute (because custom data layers are ordered by type). However, the layer was not sufficiently cleared before it was reused, leading to a use-after-free crash.