CrashTracer beneath JSC::MarkedBlock::specializedSweep