Detailed report: https://clusterfuzz.com/testcase?key=6666585308921856

Fuzzer: libFuzzer_v8_wasm_asmjs_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  AllowHeapAllocation::IsAllowed() in heap.cc
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=478667:478736

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6666585308921856


Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.