ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4810989853212672

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_arm64_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  Node #838:ObjectState in B3 is not dominated by input@2 #789:HeapConstant in src
  
Regressed: V8: r33114:33115

Minimized Testcase (1.70 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97AOxXH8CFDlX7T2CQsn-zPblkj2DZJ569EgD9hd45v8EeQ-73mrqi09XDIrXgppvTW2xgDyee2UFn8NrkUKjgSKLbXXUJqXni51kJkuGU1Pkmvix9q0GUyBXuud-lAQAe9oMRWiUts1uAnhG0jEPxqJJumrw

Additional requirements: Requires Gestures

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5953210556874752

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  Node #545:FrameState in B0 is not dominated by input@2 #505:TypedStateValues in 
  
Regressed: V8: r36418:36419

Minimized Testcase (2.81 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95I-ln2jYNZ-S8w2vxnsJab3ukW9H-JU2TmvqZ17aiIInQJxUdcmqXhseY76PeCAB1xk_oofL-cBdSvKPuLVRtpZSsCYqyK2AxjMvGcbt8Z2ISOZVFZRnNg39FQ3Ibid4PQ-D5dHg0IhwJCY9eg1q2hLB0y-Q

Filer: mstarzinger

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5694111185371136

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  Node #NUMBER:TypedStateValues in B0 is not dominated by input@7 #NUMBER:HeapCons
  

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94pZsjAmYWofGC75ulDis8zO8X_GAEPS_Olyvwj0mMXpTCftH7SI3hz_haWXzpB2wS2teXqmtju9NITw8a0WsH7tn0rN-iAPp7m8aIOobZELL_CTIK6o1jrVZehvBZv4rUID55ICorC4HOZkpKPZVkxqnManw


Filer: mstarzinger

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5694111185371136

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  Node #NUMBER:TypedStateValues in B0 is not dominated by input@7 #NUMBER:HeapCons
  
Regressed: V8: r36418:36419

Minimized Testcase (4.72 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96HrLx8kl6WLlLr_EzSn5tD7Z5kc9-t_nnlqWaoXg06oEaqBOPsHfoKe9eYu2-nARrhniAkQs9HVmDE4u7Jowc4-oN9xvw3AnIZQDAqo8H1tExitOo9WNbVOjD86-WxqZp9R7I_5u4Z4v-zwMYW5SdMr4AINQ

Filer: mstarzinger

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5953210556874752

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  Node #545:FrameState in B0 is not dominated by input@2 #505:TypedStateValues in 
  

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97t4oN6PUpvosbAII4mpg-ahJw9xLZsj4l6SNFgQZLXO9Q5HH9npd1y0YEj7qKK3qb-z1SA_Q6PabbOdqZiN5hFsMa-cE5oyumozPHNbHIh02SIrlAAVF8tkgpY6vjh1PSnYjQnGcLPgi7OpqpiFbva6bdQyQ?testcase_id=5953210556874752


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 37394:37395.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5694111185371136

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  Node #NUMBER:TypedStateValues in B0 is not dominated by input@7 #NUMBER:HeapCons
  
Regressed: V8: r36418:36419
Fixed: V8: r37394:37395

Minimized Testcase (4.72 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94KeCH-ijT3WcpKS0eenrOz49YWPID-J8c8AjQblgczwJ1VRuu4Q-4x7nMSJ9LVOYnoucxO4Q6VY7aBrzuNmEAxrFM5s5Cy0zshO4EPPkLBasdCK8Cd6mhYHsp_UXvu3H7vamOXGxblE2rc-t4fOqmRC7tQBg?testcase_id=5694111185371136

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot