The next step is to determine whether the crash also occurs with scanimage -L or scanimage --test, and to examine the coredump from coredumpctl info. That should help identify the library that is actually faulting instead of assuming the issue is the HP plugin itself.