ClusterFuzz has detected this issue as fixed in range 445281:445285.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6704455967047680

Fuzzer: mbarbella_js_mutation
Job Type: linux_ubsan_vptr_d8
Platform Id: linux

Crash Type: Fatal error
Crash Address: 
Crash State:
  NULL
Sanitizer: undefined (UBSAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_vptr_d8&range=442831:443258
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_vptr_d8&range=445281:445285

Minimized Testcase (0.25 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv95O9gpCjuBeY3lXtP34_VwhE7D2M0KtSvDw9DThp0VOIw5hI7ZsXk5SHiS1P-luZyX5TTe2D7lCxU34CSriw8HeT-olXSqyctJm68r_MI98oPWtOtH75g-N0s9v8dcDW1NFP4Cgh-IpQbja1RJgzvh9wb8od-IlWEVC-SHvbIWX_EG4Fo6zNdJlFWeaKI62fU8sRKAqQW8T4Aep0sw-WqK13JYnyrQU7tEmP4APrn0nxmMqAGdYxETJxzWVPsPv3P7WEFpHaqu1tz2T5TFYITIklC17KL9Zzre_grWhj2Bm-mC7ELCdp4gEKiVODgczRg5pIckgWBI7Axiq5WBZmPElF0Iymk0euso_A192yeQmtKPJEPM?testcase_id=6704455967047680
try {
__v_9 = "outer_s";
} catch(e) {; }
 {
}
try {
} catch(e) {; }
function __f_9(deopt) {
  let __v_10 = __v_9[Symbol.iterator]();
  if (deopt) {
    return __v_10.next().value;
  }
}
__f_9();
__f_9();
%OptimizeFunctionOnNextCall(__f_9);
__f_9(true)


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6704455967047680 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.