Unable to find actual suspect through code search and also observing no CL's under regression range, hence adding appropriate label and requesting someone from dev team to look in to this issue.

Thanks!

ClusterFuzz has detected this issue as fixed in range 573152:573153.

Detailed report: https://clusterfuzz.com/testcase?key=6722456023465984

Fuzzer: bj_broddelwerk
Job Type: linux_debug_chrome
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !range.IsCollapsed() in selection_template.cc
  blink::SelectionTemplate<blink::EditingAlgorithm<blink::NodeTraversal> >::Builde
  blink::ApplyStyleCommand::UpdateStartEnd
  
Sanitizer: address (ASAN)

Fixed: https://clusterfuzz.com/revisions?job=linux_debug_chrome&range=573152:573153

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6722456023465984

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6722456023465984 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.