Predator and CL could not provide any possible suspects.

Using Code Search for the file, "layout_geometry_map.cc" suspecting the below Cl might have caused this issue

Suspect CL: https://chromium.googlesource.com/chromium/src/+/e5214927c9d079ff414fbe06dab8f98655cf0641

vmpstr@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

ClusterFuzz has detected this issue as fixed in range 577087:577088.

Detailed report: https://clusterfuzz.com/testcase?key=4889485314359296

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_debug_chrome
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  layout_object_mapped_result.EqualWithinEpsilon(result.BoundingBox(), 1.1f) || la
  blink::LayoutGeometryMap::MapToAncestor
  blink::LayoutGeometryMap::AbsoluteRect
  
Sanitizer: address (ASAN)

Fixed: https://clusterfuzz.com/revisions?job=linux_debug_chrome&range=577087:577088

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4889485314359296

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 4889485314359296 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.