I had this happen in Drupal 9.5.11. Sorry it's not the latest, but that's what I have currently and where it was triggered.
I've attached a sanitized backtrace showing where it loops. The inner block looped hundreds of times before running out of memory.
I've also attached a basic patch that uses a static integer to count how many times ParamNotConvertedException is thrown (and then just don't throw the exception if it's more than once).
For me, this specifically triggers on an invalid /node/## path, and when NOT logged in. I used the path /node/8675309, but any number that is not a node ID should trigger it as well.
I do hope someone can make sense of this information, and find the actual cause instead of my static int counter workaround.
This is a pretty serious bug, because we had a rogue web scraper hit HUNDREDS of bad /node/## pages, tying up all of our PHP processes, and essentially DDOS'ing our server for a little while.
Perfect. My status report page was bombing. Patch from comment 9 fixes it!
Adding these two lines to config_enforce_devel_config_enforce_form_denylist works around the problem. Not ideal, but here's a patch to get around the issue.
'block_admin_display_form',
'block_form',
millenniumtree → created an issue.
Found the two dependencies site module needed to install cleanly, and added them to site.info.yml
millenniumtree → created an issue.