Here __iterator_get_unchecked is called for potential side effects until self.index == self.a.size(), ignoring however that it could have already been called in next_back with those indexes.

Playground link that demonstrates how this can be exploited to get two mutable references to the same data and cause an use-after-free bug.