providing Findit results for internal purpose:
Suspected CLs	Git blame below is NOT necessarily who introduced the crash nor the owner for it. Please check the code before assigning to anyone.(No CL in the regression range changed the crashing files.)

Author: Blink Reformat
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/1c8e1a7719e9d223cc84e838c9a31a0210f5878b
Time: Sat Oct 01 00:25:32 2016
The CL last changed line 115 of file Member.h, which is stack frame 0.

Author: Blink Reformat
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/1c8e1a7719e9d223cc84e838c9a31a0210f5878b
Time: Sat Oct 01 00:25:32 2016
The CL last changed line 736 of file Element.h, which is stack frame 1.

Author: Blink Reformat
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/1c8e1a7719e9d223cc84e838c9a31a0210f5878b
Time: Sat Oct 01 00:25:32 2016
The CL last changed line 371 of file Element.cpp, which is stack frame 2.

Author: Blink Reformat
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/1c8e1a7719e9d223cc84e838c9a31a0210f5878b
Time: Sat Oct 01 00:25:32 2016
The CL last changed line 1210 of file Element.cpp, which is stack frame 3.

Author: Blink Reformat
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/1c8e1a7719e9d223cc84e838c9a31a0210f5878b
Time: Sat Oct 01 00:25:32 2016
The CL last changed line 100 of file HTMLKeygenElement.cpp, which is stack frame 4.

Author: Blink Reformat
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/1c8e1a7719e9d223cc84e838c9a31a0210f5878b
Time: Sat Oct 01 00:25:32 2016
The CL last changed line 1275 of file Element.cpp, which is stack frame 5.

Author: Blink Reformat
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/1c8e1a7719e9d223cc84e838c9a31a0210f5878b
Time: Sat Oct 01 00:25:32 2016
The CL last changed line 3526 of file Element.cpp, which is stack frame 6.

Suspected Project: chromium
Suspected Component: Blink>DOM

uisng codesearch, seeing some changes to Elements.cpp in https://chromium.googlesource.com/chromium/src/+/6aa048c86241d01d2084127c980d620f39edb8b1

hayato@, could you please check the issue and help.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 433807:434033.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6215049757851648

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_asan_chrome_media
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000058
Crash State:
  blink::Element::synchronizeAttribute
  blink::Element::setAttribute
  blink::HTMLKeygenElement::parseAttribute
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_media&range=428077:428329
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_media&range=433807:434033

Minimized Testcase (0.87 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97oxWIGVm6j_Fcgu1y4hLlE7Ik8Rsal6BZjbQkiHqphp5DbCP2lqOTWK8IQwhBWYD1FM43-KzsfFHAjH8ZX5OadsLJJbyyfai1v4_XOORshQLfP9vBzNq9LncRcryVsAPbB81cFQ63cv5z0uaOWfQObcc-u3A?testcase_id=6215049757851648

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.