Reproduces on tip-of-tree as follows ...

$ ./out/x64.debug/d8 --expose-wasm -e 'Wasm.instantiateModuleFromAsm("@@string2")'

#
# Fatal error in ../src/execution.cc, line 110
# Check failed: has_exception == isolate->has_pending_exception().
#

==== C stack trace ===============================

 1: V8_Fatal
 2: 0x11f2792
 3: v8::internal::Execution::Call(v8::internal::Isolate*, v8::internal::Handle<v8::internal::Object>, v8::internal::Handle<v8::internal::Object>, int, v8::internal::Handle<v8::internal::Object>*)
 4: v8::Script::Run(v8::Local<v8::Context>)
 5: v8::Shell::ExecuteString(v8::Isolate*, v8::Local<v8::String>, v8::Local<v8::Value>, bool, bool, v8::Shell::SourceType)
 6: v8::SourceGroup::Execute(v8::Isolate*)
 7: v8::Shell::RunMain(v8::Isolate*, int, char**, bool)
 8: v8::Shell::Main(int, char**)
 9: main
10: __libc_start_main
11: 0xd8d135
Illegal instruction (core dumped)

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6299926300721152

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_arm64_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  has_exception == isolate->has_pending_exception() in execution.cc
  
Regressed: V8: r34586:34587

Minimized Testcase (0.12 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94AAZuVXUr7MumA8KbHS4anbsAqB9tM7WvWHUANEcY1PCJ8P8mvDedb3lZ3qzN1qeJo_gC8g1WSl2JtPH9Z9y7W2ncc028bjA7BOflNdF1meM7p9XDGCZS9hWBZuCY_22tQYybgGgOCgds9ygjvgziNHcXaBA?testcase_id=6299926300721152
try {
} catch(e) {; }
__v_7 = "Avtnennan gunzvmu pubExnY nEvln vaTxh rmuhguhaTxnY"
  Wasm.instantiateModuleFromAsm(__v_7);


Filer: mstarzinger

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 38805:38806.

Detailed report: https://clusterfuzz.com/testcase?key=6299926300721152

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_arm64_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  has_exception == isolate->has_pending_exception() in execution.cc
  v8::internal::Invoke
  v8::internal::Execution::Call
  
Sanitizer: address (ASAN)

Regressed: V8: 34586:34587
Fixed: V8: 38805:38806

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6299926300721152


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 38805:38806.

Detailed report: https://clusterfuzz.com/testcase?key=6284174256504832

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_arm64_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  has_exception == isolate->has_pending_exception() in execution.cc
  
Sanitizer: address (ASAN)

Fixed: V8: 38805:38806

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6284174256504832


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6284174256504832 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.