Through regression range, suspected CL is
https://chromium.googlesource.com/chromium/src/+/ef3b9727c297214c9a7093cdf51f92200d78140c
fs@, could you please take a look?
Thank you.

This is probably a dupe of  issue 701128  (fix landed in 459150) or  issue 710247  (fix landed in 464037.) I'll wait for this particular bot to catch up (last run with revision 458998) before doing anything further here.

ClusterFuzz has detected this issue as fixed in range 459146:459184.

Detailed report: https://clusterfuzz.com/testcase?key=5899214610759680

Fuzzer: ifratric-browserfuzzer-v3
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x0000000b
Crash State:
  blink::SVGNumber::calculateAnimatedValue
  blink::SVGAnimateElement::calculateAnimatedValue
  blink::SVGAnimationElement::updateAnimation
  
Memory Tool: SYZYASAN

Regressed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=456190:456407
Fixed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=459146:459184

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv95nP65i7_qZ7gBGHVM_DsoD_Ci7YtVsk8qZMIJfRSoW6ufiEoj6bOVkgYecJZSChuxN5ADo12L9wz98hr-P5sgXbExgQOHN7lvXZisAPdmK1PpwE6fNXbYtbuQTfE_0DNpLoSR17TaWGNCViEkLAHXTwJ_iuW_3J3VnoW1dpU7e2neM1lSBGQDbIF2-3qQ7RY8vsGw4SmiD6lRtxCS8aVz3Uk5IN_62kyJJd8A3nniT8FuUuflVkN7Z6T1btn3uZD_fVhfmyX8dKg_KUDT6p1ZM3uWgDnHPTVzprU-fu485Vk0NDCUZa_oelZYxZgluN_EhsWFHxoUKACFhQf_STsndQbAti3-8CHN6Av4RMFJBXvBkPHI?testcase_id=5899214610759680


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5899214610759680 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.