Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6300502146154496

Fuzzer: foozzie_js_mutation
Job Type: foozzie_ignition_staging
Platform Id: linux

Crash Type: V8 correctness failure
Crash Address: 
Crash State:
  configs: x64,fullcode:x64,ignition_staging
  sources: b80
  
Sanitizer: address (ASAN)

Regressed: V8: r42370:42371

Minimized Testcase (5.51 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96aWEHlIpr3I5rxyMoPVoKFVw6iYnHrxr1AnuUtH0iGv9l2C6P1po_nuSt_H7b3-_gPcw_X67dRIrOmL6I3l0v5Llf88pqiJAwSvQBXj-QzsQhGWoi_qdzsMqCubW5kIUuUr__DG_jh5IcvcbFjSy_c0pR-jEd1xyCQrhg4D0dBLmKCls-7zbs3wf3YZNWQZuUrQc8aRuDqTPGLyCGxrhaQkrMcEfv9R5RztAJGdsRrYbc2825l3bWM1oK2pzvU__CG5DF6JAW0E3kCHdhdXWxbYYSuPWu4tHv_NomVGCBKObrOXPRdBeEKF-tjYN-ezKAmHYYApbmFsa8rllyjw99e_Obmvd_9u75-HsMto5_iLrjXf0A?testcase_id=6300502146154496

Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.