Different root cause on this one.

Sending out fix in:
https://codereview.chromium.org/2107683002/

Fixed in:
https://crrev.com/c5856779ebfa3d2a3772035a0414b1575db76be1

ClusterFuzz has detected this issue as fixed in range 37347:37351.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5147410468962304

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  (left_index == right_index) || (ignore_sign && (left_index <= 1) && (right_index
  
Regressed: V8: r34586:34587
Fixed: V8: r37347:37351

Minimized Testcase (0.26 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv95K7G_1MOaWz-trIKxCRDPqd5JXa8jwTt_8AYsxIJF5IU4AlXZ1tbhw4WBOmAYJnbNuAxbcc5c45L-SrPd_djOfmSX339Z2w99EhQAWCsauimI84q-BpzqwRGDVMo4BSmD1Ubu24XehSxJYXI6DHbTZ4e7suA?testcase_id=5147410468962304
  function __f_1(){
    'use asm';
    function __f_3() {
      var __v_11 = 1, __v_10 = 0, __v_12 = 0;
        __v_12 = (__v_10 | 12) % 4294967295 | -1073741824;
    }
    return { __f_3: __f_3 };
  }
  var __v_35 = Wasm.instantiateModuleFromAsm(__f_1.toString());


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot