The result is a list of CLs that change the crashed files. 

Author: tzik
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/5f3ffb296e91d9616af89883b9d64bfa1be60b34
Time: Wed Sep 21 16:54:54 2016
File mock_web_speech_recognizer.cc is changed in this cl (and is part of stack frame #0, "test_runner::"; frame #1, "test_runner::MockWebSpeechRecognizer::RunTaskFromQueue")
Minimum distance from crash line to modified line: 47. (file: mock_web_speech_recognizer.cc, crashed on: 307, modified: 260).

ClusterFuzz has detected this issue as fixed in range 441524:442831.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6205245211541504

Fuzzer: inferno_twister
Job Type: linux_asan_content_shell_drt
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  test_runner::ClientCallTask::run
  test_runner::MockWebSpeechRecognizer::RunTaskFromQueue
  base::debug::TaskAnnotator::RunTask
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_content_shell_drt&range=420048:420163
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_content_shell_drt&range=441524:442831

Minimized Testcase (0.30 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94lIhjH3CET9SQnCpEEbizL5HkeHS6U99c2QePJkc-QbprcW6rXsdHu-Y2xGlkWh6GgyqL8nelOAugiF6B_hFCNrm-6-303dszyJgh4u757VVUWWAgtPm4oAmZCrijw-XrI0zn_XQcJFo1lQaqu2SsY1vKmUQ?testcase_id=6205245211541504
<script>
  var recognition = new webkitSpeechRecognition();
  recognition.onend     = function() {
    recognition.start();
  };
  recognition.start();
  var recognition2 = new webkitSpeechRecognition();
  recognition2.start();
; if (window.layoutTestController) layoutTestController.waitUntilDone();
</script>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.