Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4966623384698880

Fuzzer: inferno_twister
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Float-cast-overflow
Crash Address: 
Crash State:
  blink::TableLayoutAlgorithmAuto::layout
  blink::LayoutTable::layout
  blink::LayoutBlockFlow::positionAndLayoutOnceIfNeeded
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=368790:368799

Minimized Testcase (0.07 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94Jw3W2tXQooR-iXAcrqFr169sgKJQLJM4Pe9n17noI89PyOvPnLqozdI47Yu3ROJRqJUmVrtCItyjGLcTXg88U2HI-V2ajLcnssYqYQJ0YO6qMPkZo112bUbllw3ZyN2_VybmO1FVM62_iy0_6eKSf1u0OXw?testcase_id=4966623384698880
<table>
    <td><style>
* { animation-name: cfpulse95; width: calc(11516%);


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.