Predator and CL could not provide any possible suspects.

Using Code Search for the file, "html_marquee_element.cc" suspecting the below Cl might have caused this issue

Suspect CL: https://chromium.googlesource.com/chromium/src/+/aebffa30d259f1a0252818d2425c1fbf2fb13cd8

smcgruer@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

ClusterFuzz has detected this issue as fixed in range 573076:573077.

Detailed report: https://clusterfuzz.com/testcase?key=6531971203989504

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_debug_chrome
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  false. TypeError should not be thrown in html_marquee_element.cc
  blink::NonThrowableExceptionState::ThrowTypeError
  blink::ExceptionState::ThrowTypeError
  
Sanitizer: address (ASAN)

Fixed: https://clusterfuzz.com/revisions?job=linux_debug_chrome&range=573076:573077

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6531971203989504

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6531971203989504 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.