Predator and CL could not provide any possible suspects.

Using Code Search for the file, "StyleEngine.cpp" assigning to the concern owner who might be related.

Suspect CL: https://chromium.googlesource.com/chromium/src/+/3127493e35d5f602996741b808f60df624ea07e7%5E%21/third_party/WebKit/Source/core/css/StyleEngine.cpp

nainar@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

Assigning to futhark@ since they are the author of the suspected CL

ClusterFuzz has detected this issue as fixed in range 527007:527034.

Detailed report: https://clusterfuzz.com/testcase?key=5486105842679808

Fuzzer: bj_broddelwerk
Job Type: linux_cfi_chrome
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000040
Crash State:
  chrome
  blink::StyleEngine::NodeWillBeRemoved
  blink::Document::NodeWillBeRemoved
  
Sanitizer: cfi (CFI)

Regressed: https://clusterfuzz.com/revisions?job=linux_cfi_chrome&range=526966:526980
Fixed: https://clusterfuzz.com/revisions?job=linux_cfi_chrome&range=527007:527034

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5486105842679808

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5486105842679808 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.