As per  issue 681383 , assigning to jarin@. please duplicate if it is same issue or already fixed.

Thank you.

ClusterFuzz has detected this issue as fixed in range 445054:445058.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4652594229411840

Fuzzer: mbarbella_js_mutation
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: Fatal error
Crash Address: 
Crash State:
  
  v8::internal::TranslatedState::MaterializeAt
  v8::internal::TranslatedValue::GetValue
  v8::internal::Deoptimizer::MaterializeHeapObjects
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=444720:444724
Fixed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=445054:445058

Minimized Testcase (0.20 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv976Cudgoqtp3nF5C4hcgr0dgZMV0DnqUHY64qrCNMJeY0U4YmQYpfInVO5UCLfw3cAVNiyr6n1AkQZnO22n3OXzlGA8cNM38CyaDnHf6Z9oIarVe1HPVSFkST87XzuTHhagfnObqTmbSkrtyZx-eHLw6gybkjxKIFWPbwwxrwC_slF0-zkMLhnNvtrr0u_HKlBHyz7l85axDNIoj7SNLrpcsaW-ZCeSHpOuENaa8cCDGI71zdOyjsjYC8F7XRmspdZg7Xsxpjwvr_Cl8zaEdqgaNvd0WlS15wWEGCR7o5Mg3JovYuAQIedvze0OoiYtW5P4qFbZE3YbkQ9G3fXfqkaHreibWVq4r3hJWpYGbAo2t4LcpUA?testcase_id=4652594229411840
function __f_0(deopt) {
  let __v_0 = [42];
  let __v_1 = __v_0[Symbol.iterator]();
  if (deopt) {
    return __v_1.next().value;
  }
}
__f_0();
__f_0();
%OptimizeFunctionOnNextCall(__f_0);
__f_0(true)


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.