These were detected by a Debug build run on JSC stress tests.
<rdar://problem/97796738>
Pull request: https://github.com/WebKit/WebKit/pull/2858
Committed 252958@main (1b9e51c7647a): <https://commits.webkit.org/252958@main> Reviewed commits have been landed. Closing PR #2858 and removing active labels.