Not changeing the labels as per: https://github.com/v8/v8/wiki/Triaging%20issues and Requesting V8 sheriff to take a look at this.

bmeurer@ could you please look into this.please feel free to re-assigned back if needed. thanks in advance !

Please assign to clusterfuzz sheriffs.

CF points to https://chromiumcodereview.appspot.com/2385423005

The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/58e0e3f635d028ed7dfcb123062db7f412c9407f

commit 58e0e3f635d028ed7dfcb123062db7f412c9407f
Author: cbruni <cbruni@chromium.org>
Date: Wed Oct 26 07:21:02 2016

[builtins] Fix Object.create(null) special case

Fix failing assertions in the CodeStubAssembler that cause Object.create(null,
global) fail.
Drive-by-fix: convert some Assert to CSA_ASSERT.

BUG= chromium:657692 

Review-Url: https://codereview.chromium.org/2446203003
Cr-Commit-Position: refs/heads/master@{#40576}

[modify] https://crrev.com/58e0e3f635d028ed7dfcb123062db7f412c9407f/src/code-stub-assembler.cc
[modify] https://crrev.com/58e0e3f635d028ed7dfcb123062db7f412c9407f/src/code-stub-assembler.h
[modify] https://crrev.com/58e0e3f635d028ed7dfcb123062db7f412c9407f/test/mjsunit/object-create.js

ClusterFuzz has detected this issue as fixed in range 40575:40576.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6539269571346432

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_arm64_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  pc_->Mask(ExceptionMask) == HLT in simulator-arm64.cc
  
Regressed: V8: r40428:40429
Fixed: V8: r40575:40576

Minimized Testcase (0.09 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94J4_tAAmzyN1JTVahlObhSWHmX9t7tBT65RrTDNjC3YkPUegE9Xws-UKgWHcD2TLfibN4Sk7Twi21mbKcHs2dR1bY-Ob2ARxwIP_sfaMlhcsws925bpwS6GxVoZQ2CFdDI6RHY7w0kV0id2k6SLBLPRhLNcg?testcase_id=6539269571346432
__v_0 = (function(){return this;})();
try {
} catch(e) {; }
 foo: Object.create(null, __v_0) ;


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot