Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6357046916284416

Fuzzer: mbarbella_js_mutation
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: UNKNOWN READ
Crash Address: 0x0000003c
Crash State:
  v8::internal::compiler::OperandGenerator::UseLocation
  v8::internal::compiler::InstructionSelector::InitializeCallBuffer
  v8::internal::compiler::InstructionSelector::VisitCall
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=405982:406005

Minimized Testcase (0.19 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96sn9N7RGgakt741gQEO_l2tRabwnOgZ4dGXvOBwKPF24x7JJVVI_fKGUoowANm8GQ-8cEbXM0y0QtSg1gJiFA6x2uhkV4ZNkJCgmFE30p8wpTqnv_CoZGEy8oxNjusr0tk0G90vfg1Kyean1jhE0CfYD0odQ?testcase_id=6357046916284416
"use strict";
function __f_0() {
  for  (var __v_0 = 0; __v_0 < 10000; __v_0++) {
    try {
      throw 1;
    } catch(e) {
      if (typeof a == "number") return a && isNaN();
    }
  }
}
__f_0();


Filer: nyerramilli

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.