We kill off unreachable blocks in arbitrary order. Therefore if there is a network of unreachable blocks, we may try to do unreachable-successor fix-up when the successor has already been deleted. Then we crash.
This is hit by:
Created attachment 142810 [details]
Landed in http://trac.webkit.org/changeset/117654