Manual regression range:

Good build: 61.0.3144.0 
Bad build: 61.0.3145.0

Note: This issue is also reproducible on Mac OS.

Kindly review the attached screen-cast for reference.

Deleted: Actual behavior.mp4 3.9 MB

	Actual behavior.mp4 3.9 MB View Download

Deleted: Expected behavior.mp4 2.9 MB

	Expected behavior.mp4 2.9 MB View Download

Using the per-revision bisect providing the bisect results,
Good build:61.0.3144.0(Revision:483234).
Bad build:61.0.3145.0(Revision:483574).

You are probably looking for a change made after 483400 (known good), but no later than 483401 (first known bad).

CHANGE-LOG URL:
---------------
https://chromium.googlesource.com/chromium/src/+log/d1ba25881cbb45cc23a1f446ac174842986161c0..6ae8ca822914c7216962dbf2255af34aa5605622
In V8 - AutoRoll
https://chromium.googlesource.com/v8/v8/+log/8ff4cb25..69a568f8

From the CL above, assigning the issue to the concern owner

@machenbach: Could you please look into the issue, pardon me if it has nothing to do with your changes and if possible please assign it to concern owner.

Review-Url: https://codereview.chromium.org/2962163002
Note :Able to reproduce the issue in Win 10.0,Ubuntu 14.04 & Mac 10.12.5 and Able to reproduce in latest Canary #61.0.3147.0
Adding Release Block-Beta for this issue.Please remove if not the case.

Stack Trace:
------------
Thread 16 (id: 3612) CRASHED [EXCEPTION_ACCESS_VIOLATION_READ @ 0x00000000 ] MAGIC SIGNATURE THREAD
Stack Quality100%Show frame trust levels
0x000007fee4b7fb60	(chrome_child.dll -scheduler.cc:1625 )	v8::internal::compiler::ScheduleLateNodeVisitor::ScheduleRegion(v8::internal::compiler::BasicBlock *,v8::internal::compiler::Node *)
0x000007fee4860610	(chrome_child.dll -scheduler.cc:1421 )	v8::internal::compiler::ScheduleLateNodeVisitor::VisitNode(v8::internal::compiler::Node *)
0x000007fee4860481	(chrome_child.dll -scheduler.cc:1369 )	v8::internal::compiler::ScheduleLateNodeVisitor::ProcessQueue(v8::internal::compiler::Node *)
0x000007fee48052d0	(chrome_child.dll -scheduler.cc:1678 )	v8::internal::compiler::Scheduler::ScheduleLate()
0x000007fee4805491	(chrome_child.dll -scheduler.cc:61 )	v8::internal::compiler::Scheduler::ComputeSchedule(v8::internal::Zone *,v8::internal::compiler::Graph *,v8::base::Flags<v8::internal::compiler::Scheduler::Flag,int>)
0x000007fee47fe116	(chrome_child.dll -pipeline.cc:1203 )	v8::internal::compiler::EffectControlLinearizationPhase::Run(v8::internal::compiler::PipelineData *,v8::internal::Zone *)
0x000007fee47fe089	(chrome_child.dll -pipeline.cc:817 )	v8::internal::compiler::PipelineImpl::Run<v8::internal::compiler::EffectControlLinearizationPhase>()
0x000007fee47ff540	(chrome_child.dll -pipeline.cc:1744 )	v8::internal::compiler::PipelineImpl::OptimizeGraph(v8::internal::compiler::Linkage *)
0x000007fee47fe40e	(chrome_child.dll -pipeline.cc:652 )	v8::internal::compiler::PipelineCompilationJob::ExecuteJobImpl()
0x000007fee4695396	(chrome_child.dll -compiler.cc:134 )	v8::internal::CompilationJob::ExecuteJob()
0x000007fee47fd21a	(chrome_child.dll -optimizing-compile-dispatcher.cc:115 )	v8::internal::OptimizingCompileDispatcher::CompileNext(v8::internal::CompilationJob *)
0x000007fee47fd171	(chrome_child.dll -optimizing-compile-dispatcher.cc:67 )	v8::internal::OptimizingCompileDispatcher::CompileTask::Run()
0x000007fee4682a86	(chrome_child.dll -callback.h:91 )	base::Callback<void ,0,0>::Run( ?? )
0x000007fee46829ff	(chrome_child.dll -task_annotator.cc:59 )	base::debug::TaskAnnotator::RunTask(char const *,base::PendingTask *)
0x000007fee468366f	(chrome_child.dll -task_tracker.cc:335 )	base::internal::TaskTracker::PerformRunTask(std::unique_ptr<base::internal::Task,std::default_delete<base::internal::Task> >,base::internal::Sequence *)
0x000007fee468509b	(chrome_child.dll -task_tracker.cc:251 )	base::internal::TaskTracker::RunNextTask(base::internal::Sequence *)
0x000007fee46833d3	(chrome_child.dll -scheduler_worker.cc:80 )	base::internal::SchedulerWorker::Thread::ThreadMain()
0x000007fee480d93b	(chrome_child.dll -platform_thread_win.cc:89 )	base::`anonymous namespace'::ThreadFunc
0x76a959cc	(kernel32.dll + 0x000159cc )	BaseThreadInitThunk
0x76f4b980	(ntdll.dll + 0x0002b980 )	RtlUserThreadStart

Thank You!

-> V8 compiler triage queue.

Users experienced this crash on the following builds:

Win Canary 61.0.3147.0 -  2.11 CPM, 42 reports, 35 clients (signature v8::internal::compiler::ScheduleLateNodeVisitor::ScheduleRegion)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas

Issue 738781 has been merged into this issue.

The triggering change has been reverted already (https://codereview.chromium.org/2970663002/), but the root cause still has to be addressed.