Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6160609337147392

Fuzzer: inferno_webbot
Job Type: linux_asan_chrome_mp
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  widget->isPluginContainer()
  blink::PluginDocumentParser::pluginView
  blink::PluginDocumentParser::createDocumentStructure
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_mp&range=410634:410757

Minimized Testcase (0.10 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv960J1OhoofgrvYAFZ8GLiTEvM_0Clpn9NHtp5loS4ZDeHBOTnT-XU_R2y_Ql5xkeLNAap84qVpxLcYAHssg8S-m06pkDYIZ6EFTfBRTxBoUHO9SqJz3v9T34T6GoF5pD_7mNVQxdkC5VrmY7w4jUxIKyFs8Ig?testcase_id=6160609337147392
<script>
window.open("http://celebsempire.com");
window.location = "http://yuvaspeak.com";</script>


Issue manually filed by: ochang

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.