Technical details:
The crash is caused by following sequence of commands:
0017dee8 (c0:db060004, c1:ffffffff): uc2:moveword SEGMENT ffffffff -> seg1
......
......
......
0029b118 (c0:01004008, c1:01000000): uc2:vertex n: 4, v0: 0, from: 007fffff
As you can see, moveword command set wrong value for SEGMENT 1
Previous value for this segment was
0017dea0 (c0:db060004, c1:0029af70): uc2:moveword SEGMENT 0029af70 -> seg1
BTW, Project64 generates the same dlist, so it's not 1964 specific bug.