Predator and CL could not provide any possible suspects.

Using Code Search for the file, "flat_tree_traversal.cc" suspecting the below Cl might have caused this issue

Suspect CL: https://chromium.googlesource.com/chromium/src/+/4c7bc246716d75389c0896744a72bdb586f6ca60

kymuto@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

It looks related to Editing.
yosin@, could you have a chance to triage this?

xiaochengh@, does http://crrev.com/c/1331571 fix this?

ClusterFuzz has detected this issue as fixed in range 607498:607499.

Detailed report: https://clusterfuzz.com/testcase?key=6424762945110016

Fuzzer: bj_broddelwerk
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000010
Crash State:
  blink::FlatTreeTraversal::TraverseChild
  TraverseLastChild
  LastWithin
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_lsan_chrome_mp&range=606747:606748
Fixed: https://clusterfuzz.com/revisions?job=linux_lsan_chrome_mp&range=607498:607499

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6424762945110016

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6424762945110016 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.