Find it did not provide any results
Suspected CLs	Findit could not determine the memory tool from the stacktrace. Is it in a new format?

From the CL,
https://chromium.googlesource.com/chromium/src/+log/1b37f672598fd11ebeb8e329dc257f62fbd8232e..a3c4a786757f0b365392d648e654f7cfda8c5b88?pretty=fuller

Assigning to the concern owner,
Suspecting Commit# 	fa41120b705ec7ae5fc8c8f280bd76a05bfc97ef
Suspecting Review URL# https://codereview.chromium.org/2414263002

@xiaochengh -- Could you please look into the issue, pardon me if it has nothing to do with your changes and if possible please assign it to concern owner.
Thank You.

It's the same bug as  issue 646204  that <track> modifies DOM tree in layout update, with  issue 372245  being the root cause.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 450347:450395.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6538881011023872

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !m_start.document()->needsLayoutTreeUpdate() in VisibleSelection.cpp
  blink::VisibleSelectionTemplate<>::toNormalizedEphemeralRange
  blink::WebViewImpl::selectionBounds
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=425278:425286
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=450347:450395

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97oP1E_dhVlwJFDyoYYwb2kRsrihQ6qb1P3qT8_uiYDD-A8E_1oGuGj4Si1Ul7ny8_cjP4MYQ10hbA8fNVq4O7AwXGDl8R1j-5cDSstjbQrZYQOYwZxFJTOd45HKrruTcyUbY2qWaBN3FOF6fnX0npN23GpEg?testcase_id=6538881011023872


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 450347:450395.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6538881011023872

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !m_start.document()->needsLayoutTreeUpdate() in VisibleSelection.cpp
  blink::VisibleSelectionTemplate<>::toNormalizedEphemeralRange
  blink::WebViewImpl::selectionBounds
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=425278:425286
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=450347:450395

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97oP1E_dhVlwJFDyoYYwb2kRsrihQ6qb1P3qT8_uiYDD-A8E_1oGuGj4Si1Ul7ny8_cjP4MYQ10hbA8fNVq4O7AwXGDl8R1j-5cDSstjbQrZYQOYwZxFJTOd45HKrruTcyUbY2qWaBN3FOF6fnX0npN23GpEg?testcase_id=6538881011023872


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 450347:450395.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6538881011023872

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !m_start.document()->needsLayoutTreeUpdate() in VisibleSelection.cpp
  blink::VisibleSelectionTemplate<>::toNormalizedEphemeralRange
  blink::WebViewImpl::selectionBounds
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=425278:425286
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=450347:450395

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97oP1E_dhVlwJFDyoYYwb2kRsrihQ6qb1P3qT8_uiYDD-A8E_1oGuGj4Si1Ul7ny8_cjP4MYQ10hbA8fNVq4O7AwXGDl8R1j-5cDSstjbQrZYQOYwZxFJTOd45HKrruTcyUbY2qWaBN3FOF6fnX0npN23GpEg?testcase_id=6538881011023872


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.