Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5866530988621824

Fuzzer: inferno_twister
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Undefined-shift
Crash Address: 
Crash State:
  double WTF::toDoubleType<unsigned char,
  blink::parseToDoubleForNumberType
  blink::HTMLMeterElement::valueRatio
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=370022:370027

Minimized Testcase (0.17 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97z8odwY-jx8ZxC5Ff9nOfSede7lsFeiNxCBL-jD6SnbG1RlAJ51FKk6W67u0PXeEQu-seUatMD9ON8iByOPx0IXTjF8gQlJ5P6Jam5hZSlMr5VwXewaWaNAURkAgwXUx4E_UQ-LxrrmcOxQDWnB6KjGA3GJw?testcase_id=5866530988621824
<meter value=0 id=shadow style="-webkit-appearance: none;"</meter>
<script>
        document.getElementById("shadow").value = 68789778460659950309389563375096843506;
    </script>


Issue manually filed by: inferno

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.