Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5978660622565376

Fuzzer: mbarbella_js_mutation
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: CHECK failure
Crash Address: 
Crash State:
  args[2]->IsFixedArray() in runtime-literals.cc
  V8_Fatal
  v8::internal::Runtime_CreateObjectLiteral
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=413785:413791

Minimized Testcase (0.19 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96CottOJb_gFUGnnawcSYgzj-qJ3Lm5_If56mnSvlfZl1XbJi-XIJet0goREo2O1iwPe6jeQBRYJvgpDtDp5vb_Lm1KexsJ6_XgVlwo7bdTWn-WG1KKnpmGjJDjqU6ec6RjD0E95bMjhtOCHWamTbqE0Vg1eg?testcase_id=5978660622565376
var __v_8 = {};
try {
__v_9 = null;
} catch(e) {; }
try {
async function __f_5() {
}
async function __f_6() {
    await __f_5();
}
} catch(e) {; }
try {
__f_6();
} catch(e) {"Caught: " + e; }


Issue manually filed by: mmohammad

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.