CF points to 9884fb91e15e5e85218886b67af410668a08c38b.

ClusterFuzz has detected this issue as fixed in range 42431:42432.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5727331244310528

Fuzzer: v8_builtins_generator
Job Type: linux_asan_d8_v8_arm64_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !v8::internal::FLAG_enable_slow_asserts || (IsWasmInstanceWrapper(fixed_array)) 
  
Sanitizer: address (ASAN)

Regressed: V8: r42266:42267
Fixed: V8: r42431:42432

Minimized Testcase (0.09 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96UvvxoLEctKfUv0NhzH-aZTVB0BCo1fpoPzXD84TEdK5Ef4loMLxML5yK08x2lO7pmz9g1cbu9Dg_xsXc0ZC-vXLzAkdwsPzgLyQV-Wq8IPtr3SRFMlW6g5zZ4PxVprfdLS7JagZB9k2IUf1FD6GbzMs0y0PFERCogyGBApLrztezi9gVDLSFIwnFW4-SFDboLVupAbNVF2a9iwptliB5bwbX_KmoDn3OfLvCOFd23_u3tUJxqKAQvU8AusOo2QBewfF8r3CviCP9gY_TLIOtipaQrKu5KhSJRgZ3s6XV0T83F8ke120ABjovw_kcdPyEU32penkL-QEwjEWu9eJ0Qy_TV8h_580dtN76NbftrAiZqToh32o_hP_H9xaJYzgDoZRAZ4UMpS4-9LyKwo_JuEiUu3Q?testcase_id=5727331244310528
var v0 = {};
 v6 = new Function(); 
 v7 = new WebAssembly.Memory(v0); 
 v17 = v7.grow( v6); 


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.