Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6731147175526400

Fuzzer: foozzie_js_mutation
Job Type: foozzie_ignition_staging
Platform Id: linux

Crash Type: V8 correctness failure
Crash Address: 
Crash State:
  configs: x64,fullcode:x64,ignition_staging
  sources: a85
  
Sanitizer: address (ASAN)

Regressed: V8: r42334:42335

Minimized Testcase (0.64 Kb): https://cluster-fuzz.appspot.com/download/AMIfv944KAZAYFOT-47ckxbxNnKV2oI5PVs-YK7CyezKjRCEpnTWH5o5P7oxHc9chUK8Ei7YRU6edu43P2C4pmxAz-yMGjATD1g1VFzVCgOwYWQG0hmK_C5NDtLz7HRhcEPWWjmUaTCTf9TniOlwbQs4smzLCb0AyM_-TdfdjI8YdhYaeDluyplThbQ9yT-zaqc3O1uxW1WqFOs8M-Vdj3_Q9og57gjvUpNNQIG3VWnu_etrxIVJSEdIJaw-UA2tYbnxuyMlaz_JL0BjMkV5RJbt0orv8LtaRbfTj1tyYNLwLTBBJhyeG6a-joAUmkozQGu7l4I5qDxkmSAROuN2JGqxEnykLepI3-KAFfqkIWV_hkVoIxMQQeg?testcase_id=6731147175526400

Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.