Ok I just tried this at home and it is reproducable. Problem goes away if I remove TextEditor objects from MCP itself but this one is tough one to debug. When it crashes MUI just jumps to random address and crashes with illegal instruction. There is no single trace to MCP or MCC hunks but maybe my stack trace isnt deep enough...