chromium/third_party/blink/web_tests/fast/multicol/clone-block-children-inline-mismatch-crash.html

<!DOCTYPE html>
<html>
Test passes if it does not crash.
<style>
#div1 { -webkit-column-count: 2; }
#q1 { display: block; }
#q1::before { display: table-row; }
#div2 { -webkit-column-span: all; }
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

function runTest() 
{
    div1 = document.createElement('div');
    div1.setAttribute('id', 'div1'); 
    document.body.appendChild(div1); 
    q1 = document.createElement('q'); 
    q1.setAttribute('id', 'q1');
    div1.appendChild(q1);
    div2 = document.createElement('div');
    div2.setAttribute('id', 'div2'); 
    q1.appendChild(div2); 
}

window.onload = runTest;
</script>
</html>