Detailed report: https://clusterfuzz.com/testcase?key=5885605048483840

Fuzzer: ochang_domfuzzer
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  GetDocument().body() != ref_child (BODY id="dom-fuzz-NUMBER" (editable)id="dom-f
  
Sanitizer: thread (TSAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5885605048483840


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.