Unable to find actual suspect through code search and also observing no CL's under regression range, hence adding appropriate labels for further triage.

Thanks!

ClusterFuzz has detected this issue as fixed in range 539509:539515.

Detailed report: https://clusterfuzz.com/testcase?key=6556395705729024

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000010
Crash State:
  blink::LayoutTextCombine::TransformToInlineCoordinates
  blink::TextPainter::Paint
  blink::InlineTextBoxPainter::Paint
  
Sanitizer: thread (TSAN)

Fixed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=539509:539515

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6556395705729024

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6556395705729024 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.