Segfault when taking heap snapshot with inspector session [Node v16, v18]

### Version v16.17.0 ### Platform Linux 5.15.0-46-generic 49~20.04.1-Ubuntu SMP x86_64 x86_64 x86_64 GNU/Linux ### Subsystem _No response_ ### What steps will reproduce the bug? The following script causes a segmentation fault ```js const inspector = require('inspector'); const session = new inspector.Session(); session.connect(); session.post('HeapProfiler.enable', () => { session.on('HeapProfiler.addHeapSnapshotChunk', (message) => { console.log(message); }); session.post('HeapProfiler.takeHeapSnapshot', { reportProgress: true }, (err, result) => { console.log(result); }); }); ``` ### How often does it reproduce? Is there a required condition? The bug happens every time the script is run, tested on multiple Linux machines. ### What is the expected behavior? It is expected that node logs the result of the heap snapshot ### What do you see instead? [1] 1152371 segmentation fault (core dumped) node segfault.js ### Additional information The bug seems to appear with Node v16 and is also present in Node v18, works fine with Node v14 This only happens when setting `reportProgress: true` flag when taking the heap snapshot with `HeapProfiler.takeHeapSnapshot` Here is the stacktrace when the segfault occurs ``` #0 0x00000000010aabc0 in v8::internal::HeapObject::SizeFromMap(v8::internal::Map) const () #1 0x0000000000f0084e in v8::internal::PagedSpaceObjectIterator::Next() () #2 0x0000000000e95f09 in v8::internal::HeapObjectIterator::NextObject() () #3 0x0000000000e9f288 in v8::internal::HeapObjectIterator::Next() () #4 0x000000000117263f in v8::internal::V8HeapExplorer::IterateAndExtractReferences(v8::internal::HeapSnapshotGenerator*) () #5 0x0000000001172a98 in v8::internal::HeapSnapshotGenerator::GenerateSnapshot() () #6 0x00000000011643e6 in v8::internal::HeapProfiler::TakeSnapshot(v8::ActivityControl*, v8::HeapProfiler::ObjectNameResolver*, bool, bool) () #7 0x00000000012a0e83 in v8_inspector::V8HeapProfilerAgentImpl::takeHeapSnapshot(v8_crdt…