Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5474124668600320

Fuzzer: foozzie_js_mutation
Job Type: foozzie_ignition_staging
Platform Id: linux

Crash Type: V8 correctness failure
Crash Address: 
Crash State:
  configs: x64,fullcode:x64,ignition_staging
  sources: 9d2
  
Sanitizer: address (ASAN)

Regressed: V8: r42334:42335

Minimized Testcase (0.75 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95CwpDjVcsDtq8XDT4ZPNGFPH_BYpL4wIZfN_Awh8eGFIT6r7Q4Xylinzd5AIxI4FvRKY7KPB1mdve0UhWWEQmQsvcaWLrw3M_mpqGjrOP5Oi4AIT6nWgs8uMpSk1CufHIDtLUorLqhqypTKY_Fctn-MDcRnAlEYNitjjPUZu4u3i-r2t5PDHzzNh4nGlN6kOUTD4plVxBgMO9YijliqDtEnli0P6Wzlj1ZdozSntDLqm3s5eAkPmbXRC2Hyq00MjmZhakTbqqdF2G5Qms17drdseg3CzB6yQVznCRPbDIDoXYH6jJ_FOXXUXrStQQWuyvQeEX83HH3rq0SX6Y0GvatlM2Wow0KPBiCs_5FHodS0rCZC8I?testcase_id=5474124668600320

Additional requirements: Requires Gestures

Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.