Predator could not provide any possible suspects.

From the below CL observing some changes related to 'V8ObjectConstructor' hence suspecting the same
https://chromium.googlesource.com/chromium/src/+log/cc140215b906e22d0692804c500f6a5150739339..1fa06605790c5c914f474346417f7eaa8ee23884?pretty=fuller&n=10000

Suspect CL: https://chromium.googlesource.com/chromium/src/+/f47b361887a31cccf42a6e21a82bccf28372bdaa

peria@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

This issue has been happening for long, so it is not a regression.

ClusterFuzz has detected this issue as fixed in range 544435:544631.

Detailed report: https://clusterfuzz.com/testcase?key=6584618741137408

Fuzzer: inferno_twister
Job Type: mac_asan_content_shell
Platform Id: mac

Crash Type: CHECK failure
Crash Address: 
Crash State:
  get_interface_object in V8ObjectConstructor.cpp
  blink::V8ObjectConstructor::CreateInterfaceObject
  blink::V8PerContextData::ConstructorForTypeSlowCase
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_asan_content_shell&range=520533:520567
Fixed: https://clusterfuzz.com/revisions?job=mac_asan_content_shell&range=544435:544631

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6584618741137408

Additional requirements: Requires HTTP

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.