chromium/third_party/blink/web_tests/fast/html/layout-runs-and-floats-crash.html

<style>
* {
    -webkit-columns: 10ex;
    margin-block-end: 60;
}
</style>
<main></main>
<bdi>
    <object></object>
    <object align="left"></object>
    <object></object>
</bdi>
<p>This test passes if it doesn't crash</p>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>