The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/9c281f2407fe8b7d366f4767a8737de04dee17ba

commit 9c281f2407fe8b7d366f4767a8737de04dee17ba
Author: bmeurer <bmeurer@chromium.org>
Date: Fri Jul 01 12:50:42 2016

[turbofan] Properly lower NumberSinh, NumberCosh and NumberTanh.

R=jarin@chromium.org
BUG= chromium:625121 

Review-Url: https://codereview.chromium.org/2116533004
Cr-Commit-Position: refs/heads/master@{#37479}

[modify] https://crrev.com/9c281f2407fe8b7d366f4767a8737de04dee17ba/src/compiler/simplified-lowering.cc
[add] https://crrev.com/9c281f2407fe8b7d366f4767a8737de04dee17ba/test/mjsunit/regress/regress-625121.js

ClusterFuzz has detected this issue as fixed in range 37466:37479.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6213317429559296

Fuzzer: mbarbella_js_mutation
Job Type: linux_v8_d8_be
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  Unexpected operator #115:NumberSinh @ node #291 in instruction-selector.cc
  
Regressed: V8: r37410:37442
Fixed: V8: r37466:37479

Minimized Testcase (1.59 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94nQqRvlhGGsAgEJRmFiuNWLwC33dwwk1IzGUJQXRwzROTSfZ_8owmu2JPqzTWJ2oY66gSKqtgg98D3UWhJUIJDFC822SVfXu90DSRREbhbSaW4SalmmXM6vPVNRHTj8eEOxUwe0zMYRAA4MAARizSYEZ-c1g?testcase_id=6213317429559296

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot