LayoutTests/editing/inserting/insert-paragraph-separator-with-inline-table-bold-crash.html

<style>
  b {
    display: inline-table;
  }
</style>
<script>
  if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
  }
  onload = () => {
    document.designMode = 'on';
    document.execCommand('SelectAll');
    document.execCommand('InsertText', false, 'a');
    document.execCommand('SelectAll');
    document.execCommand('Bold');
    document.execCommand('Copy');
    document.execCommand('PasteAsQuotation');
    document.execCommand('InsertParagraph');
    document.body.innerHTML = 'This test passes if it does not crash.';
    if (window.testRunner)
      testRunner.notifyDone();
  };
</script>