Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6593134896611328

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_mipsel_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !isolate->has_pending_exception() in src/compiler.cc
  
Regressed: V8: r34586:34587

Minimized Testcase (0.41 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97Oy50eQQViAy5CnPTbWZb7Ow2HSVOOlXeQuIP63-4mFjFBUn4u9r3Lr6JeMTw55eUuQuXduavqCVF6DvVTQaVnGTn-6YXrfNX_8kTH2hGQyopHfqryS6BsZjYHRnmsxoF7XWjjxxFcSUjPgJ-irWSo1bKMHg
function __f_4(type, props) {
  for (var __v_3 = 0; __v_3 < props.length; __v_3++) {
    __f_0(type, props[__v_3]);
  }
}
function __f_0(type, prop) {
  var __v_4 = delete type[prop];
}
function __f_6() {
  __f_4(Function.prototype, ["toString"]);
}
__f_6();
(function __f_17() {
  function __f_16(){
  }
  var __v_24 = Wasm.instantiateModuleFromAsm(__f_16.toString());
})();
function __f_20() {
}
__v_19 = __f_20();


Filer: mstarzinger

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.