=================================================================
==19800==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x77db13c31710 at pc 0x55b2857b05b8 bp 0x7ffca52e2c30 sp 0x7ffca52e2c28
WRITE of size 8 at 0x77db13c31710 thread T0
    #0 0x55b2857b05b7 in v8::internal::compiler::JSInliningHeuristic::TryReuseDispatch(v8::internal::compiler::Node*, v8::internal::compiler::Node*, v8::internal::compiler::Node**, v8::internal::compiler::Node**, v8::internal::compiler::Node**, int, int*) v8/src/compiler/js-inlining-heuristic.cc:714:32
    #1 0x55b2857b09e7 in v8::internal::compiler::JSInliningHeuristic::CreateOrReuseDispatch(v8::internal::compiler::Node*, v8::internal::compiler::Node*, v8::internal::compiler::JSInliningHeuristic::Candidate const&, v8::internal::compiler::Node**, v8::internal::compiler::Node**, v8::internal::compiler::Node**, int, int*) v8/src/compiler/js-inlining-heuristic.cc:735:7
    #2 0x55b2857ac8ad in v8::internal::compiler::JSInliningHeuristic::InlineCandidate(v8::internal::compiler::JSInliningHeuristic::Candidate const&, bool) v8/src/compiler/js-inlining-heuristic.cc:817:3
    #3 0x55b2857ae01e in v8::internal::compiler::JSInliningHeuristic::Finalize() v8/src/compiler/js-inlining-heuristic.cc:386:33
    #4 0x55b285620a9c in v8::internal::compiler::GraphReducer::ReduceNode(v8::internal::compiler::Node*) v8/src/compiler/graph-reducer.cc:86:57
    #5 0x55b285adf25e in v8::internal::compiler::InliningPhase::Run(v8::internal::compiler::TFPipelineData*, v8::internal::Zone*) v8/src/compiler/pipeline.cc:952:19
    #6 0x55b2859230df in bool v8::internal::compiler::PipelineImpl::Run<v8::internal::compiler::InliningPhase>() v8/src/compiler/pipeline.cc:852:9
    #7 0x55b28591aed7 in v8::internal::compiler::PipelineImpl::CreateGraph(v8::internal::compiler::Linkage*) v8/src/compiler/pipeline.cc:1862:3
    #8 0x55b285919e9a in v8::internal::compiler::PipelineCompilationJob::ExecuteJobImpl(v8::internal::RuntimeCallStats*, v8::internal::LocalIsolate*) v8/src/compiler/pipeline.cc:785:20
    #9 0x55b28150e5c2 in v8::internal::OptimizedCompilationJob::ExecuteJob(v8::internal::RuntimeCallStats*, v8::internal::LocalIsolate*) v8/src/codegen/compiler.cc:475:22
    #10 0x55b281559b36 in v8::internal::(anonymous namespace)::CompileTurbofan(v8::internal::Isolate*, v8::internal::Handle<v8::internal::JSFunction>, v8::internal::DirectHandle<v8::internal::SharedFunctionInfo>, v8::internal::ConcurrencyMode, v8::internal::BytecodeOffset, v8::internal::(anonymous namespace)::CompileResultBehavior) v8/src/codegen/compiler.cc:1072:12
    #11 0x55b281534c7a in v8::internal::(anonymous namespace)::GetOrCompileOptimized(v8::internal::Isolate*, v8::internal::DirectHandle<v8::internal::JSFunction>, v8::internal::ConcurrencyMode, v8::internal::CodeKind, v8::internal::BytecodeOffset, v8::internal::(anonymous namespace)::CompileResultBehavior) v8/src/codegen/compiler.cc:1392:12
    #12 0x55b281532b28 in v8::internal::Compiler::CompileOptimized(v8::internal::Isolate*, v8::internal::DirectHandle<v8::internal::JSFunction>, v8::internal::ConcurrencyMode, v8::internal::CodeKind) v8/src/codegen/compiler.cc:3310:7
    #13 0x55b28319ab20 in v8::internal::(anonymous namespace)::CompileOptimized(v8::internal::DirectHandle<v8::internal::JSFunction>, v8::internal::ConcurrencyMode, v8::internal::CodeKind, v8::internal::Isolate*) v8/src/runtime/runtime-compiler.cc:253:3
    #14 0x55b28318f11d in v8::internal::Runtime_OptimizeTurbofanEager(int, unsigned long*, v8::internal::Isolate*) v8/src/runtime/runtime-compiler.cc:295:3
    #15 0x55b28928bebc in Builtins_CEntry_Return1_ArgvOnStack_NoBuiltinExit crtstuff.c
    #16 0x55b289048532 in Builtins_OptimizeTurbofanEager crtstuff.c
    #17 0x55b2890466ee in Builtins_InterpreterEntryTrampoline crtstuff.c
    #18 0x55b28903f666 in Builtins_JSEntryTrampoline crtstuff.c
    #19 0x55b28903f3aa in Builtins_JSEntry crtstuff.c
    #20 0x55b281962fef in v8::internal::(anonymous namespace)::Invoke(v8::internal::Isolate*, v8::internal::(anonymous namespace)::InvokeParams const&) v8/src/execution/execution.cc:475:22
    #21 0x55b2819668d7 in v8::internal::Execution::CallScript(v8::internal::Isolate*, v8::internal::DirectHandle<v8::internal::JSFunction>, v8::internal::DirectHandle<v8::internal::Object>, v8::internal::DirectHandle<v8::internal::Object>) v8/src/execution/execution.cc:575:10
    #22 0x55b2811c2251 in v8::Script::Run(v8::Local<v8::Context>, v8::Local<v8::Data>) v8/src/api/api.cc:2039:7
    #23 0x55b280e97f02 in v8::Shell::ExecuteSource(v8::Isolate*, v8::Shell::Source const&, v8::Local<v8::String>, v8::Shell::ReportExceptions, v8::Global<v8::Value>*) v8/src/d8/d8.cc:1155:44
    #24 0x55b280ee061d in v8::SourceGroup::Execute(v8::Isolate*) v8/src/d8/d8.cc:6099:12
    #25 0x55b280eeef7c in v8::Shell::RunMainIsolate(v8::Isolate*, bool) v8/src/d8/d8.cc:7136:37
    #26 0x55b280eedeac in v8::Shell::RunMain(v8::Isolate*, bool) v8/src/d8/d8.cc:7042:18
    #27 0x55b280ef22f6 in v8::Shell::Main(int, char**) v8/src/d8/d8.cc:7992:18
    #28 0x7bdb15b4f249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

Address 0x77db13c31710 is located in stack of thread T0 at offset 272 in frame
    #0 0x55b2857ac40f in v8::internal::compiler::JSInliningHeuristic::InlineCandidate(v8::internal::compiler::JSInliningHeuristic::Candidate const&, bool) v8/src/compiler/js-inlining-heuristic.cc:783

  This frame has 10 object(s):
    [32, 48) 'nodes_arr'
    [64, 72) 'nodes_arr'
    [96, 104) 'ref.tmp' (line 794)
    [128, 136) 'ref.tmp' (line 796)
    [160, 200) 'calls' (line 805)
    [240, 272) 'if_successes' (line 806) <== Memory access at offset 272 overflows this variable
    [304, 312) 'if_exception' (line 821)
    [336, 376) 'if_exceptions' (line 823)
    [416, 424) 'ref.tmp' (line 865)
    [448, 456) 'ref.tmp' (line 868)
HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
      (longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow v8/src/compiler/js-inlining-heuristic.cc:714:32 in v8::internal::compiler::JSInliningHeuristic::TryReuseDispatch(v8::internal::compiler::Node*, v8::internal::compiler::Node*, v8::internal::compiler::Node**, v8::internal::compiler::Node**, v8::internal::compiler::Node**, int, int*)
Shadow bytes around the buggy address:
  0x77db13c31480: f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5
  0x77db13c31500: f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5
  0x77db13c31580: f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5 f5
  0x77db13c31600: f1 f1 f1 f1 f8 f8 f2 f2 f8 f2 f2 f2 f8 f2 f2 f2
  0x77db13c31680: f8 f2 f2 f2 00 00 00 00 00 f2 f2 f2 f2 f2 00 00
=>0x77db13c31700: 00 00[f2]f2 f2 f2 f8 f2 f2 f2 f8 f8 f8 f8 f8 f2
  0x77db13c31780: f2 f2 f2 f2 f8 f2 f2 f2 f8 f3 f3 f3 f3 f3 f3 f3
  0x77db13c31800: f1 f1 f1 f1 f8 f8 f8 f2 f2 f2 f2 f2 f8 f8 f2 f2
  0x77db13c31880: f8 f8 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00
  0x77db13c31900: 00 00 00 00 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3
  0x77db13c31980: f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==19800==ABORTING