ClusterFuzz has detected this issue as fixed in range 493793:493839.

Detailed report: https://clusterfuzz.com/testcase?key=6243596436242432

Fuzzer: ochang_domfuzzer
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Null-dereference
Crash Address: 0x000000000010
Crash State:
  __tsan::CallUserSignalHandler
  rtl_sigaction
  blink::Node::IsDescendantOf
  
Sanitizer: thread (TSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=493054:493075
Fixed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=493793:493839

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6243596436242432

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6243596436242432 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.