Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5181912999264256

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  destination.deepEquivalent().isConnected(). #text "\n     \uNUMBER\n     "@offse
  blink::CompositeEditCommand::moveParagraphs
  blink::CompositeEditCommand::moveParagraph
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=388139:388165

Minimized Testcase (0.40 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94dAqI8o84HYkNNucrWsF4Z2ZYiCE7YMikZEMUeRShvRlUTy_D1pb9-9PnprEcRPWBXxQVpyPei2stCOD15M8I5wQdobjpSBp_zg85Oiw6ss295Q2g03ot4YV_eCfBQVAoc-ZRuERO3mHwIQ1OpBewYY3jyZIyYKEoFllYiGlkbFCyI3-MRJS_5XrpnfYdqag2JofuMGXBiU0Ld6ALB21g-zv2ecyL6aPR3_0nXlWTaW_AMMzGNnIk1_8EnG_5aB6abvunnN6sCC1v3winQvK65c6gQUteo7IAb1HLzwKi4KG-3jSnn6in85moOb_qkYtrLXiNBWo5TrNvsIibt5HKwU0NOjq1BDUVfZmF1yezANFV1tYg?testcase_id=5181912999264256
<nobr>
     •
     <a>
      Corporate Services
     </a>
    <nobr>
  <style>
   * {
    visibility: visible;
}
*:only-of-type {
    visibility: collapse;
  </style>
  <script>
onload = function() {
    document.designMode = 'on';
    var __v_1 = document.querySelector('blockquote');
    getSelection().collapse(__v_1, 2);
    document.execCommand('Outdent');
};
  </script>
  <blockquote>
   <table>
   <table>


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.