The stack trace indicates this is a v8 issue, hence marking it as untraige and adding V8 Clusterfuzz Sheriff for more updates.

Thanks!

ClusterFuzz has detected this issue as fixed in range 542395:542397.

Detailed report: https://clusterfuzz.com/testcase?key=4687069675520000

Fuzzer: ochang_domfuzzer
Job Type: windows_asan_content_shell
Platform Id: windows

Crash Type: Fatal error
Crash Address: 
Crash State:
  
  gin::PrintStackTrace
  v8::internal::JSObject::GetFastElementsUsage
  v8::internal::JSObject::AddDataElement
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=531299:531319
Fixed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=542395:542397

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4687069675520000

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.