chromium/third_party/blink/web_tests/fast/multicol/box-reflect-and-mask-crash.html

<!DOCTYPE html>
<div style="columns:2; column-gap:0; column-fill:auto; height:100px;">
  <div style="columns:1; -webkit-box-reflect:right; -webkit-mask:url('?');">
    <div></div>
    <div style="break-before:column;">
      <span style="-webkit-box-reflect:right; -webkit-mask:url('?');"></span>
    </div>
  </div>
</div>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script>
  test(()=> {}, "no crash");
</script>