Predator and CL did not provide any possible suspects.
Using Code Search for the file, "layer_tree_impl.cc" assigning to the concern owner.
Suspecting Commit#
https://chromium.googlesource.com/chromium/src/+/faf2ee225610f256279fe77bf1413bb512dec3c2

@pdr -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

ClusterFuzz has detected this issue as fixed in range 455700:456019.

Detailed report: https://clusterfuzz.com/testcase?key=5691105460092928

Fuzzer: marty_html_twiddler
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x00000023
Crash State:
  cc::LayerTreeImpl::DidUpdateScrollState
  cc::LayerTreeImpl::RegisterScrollbar
  cc::ScrollbarLayerImplBase::PushPropertiesTo
  
Memory Tool: SYZYASAN

Regressed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=455091:455389
Fixed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=455700:456019

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv97c72RG-hPz5a0M4uRj7qGCyjz3-cmyy1peZbfJke-eEcw6JKWb95FdqgezL4j-X2oNjY6fwJjScFzaBrZ3h8cBcKcQxM0qbTLNo5WOpIwDA6VohAxuwtn7YeDGI3eU8n7rUYEhW1hFSXCbVcv-ugKcN0T3k5eybXt_38RWCE1xoEq3Cx8fLqnw7Zo_LXMhs67RuSB5mHyHRy7UhPJFRkHCF5DaMZ022oImloDzdQL-Y5YCUWmoUstIrepjs-STgh_hvMxVyqZ3cUEaBaIw-mv9DGsv-7_b-YyepyTGbnI5jm6n17uCEFCjfJ3FbxpO6e6R7jEU3_RQXcxRVqFa-nZ0G8SkNJ5cCtqiyhY5wxCb_lRAHGg?testcase_id=5691105460092928


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5691105460092928 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.