multicol-legend-becomes-floated-crash.html

<!DOCTYPE html>
<link rel="author" title="Morten Stenshorne" href="mailto:[email protected]">
<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1122722">
<fieldset id="fieldset">
  <legend id="legend"></legend>
</fieldset>
<script>
  document.body.offsetTop;
  fieldset.style.columns = "2";
  legend.style.cssFloat = "left";
</script>

chromium/third_party/blink/web_tests/external/wpt/html/rendering/non-replaced-elements/the-fieldset-and-legend-elements/multicol-legend-becomes-floated-crash.html