chromium/third_party/blink/web_tests/fast/multicol/dynamic/remove-content-before-inner-multicol-with-spanner-crash.html

<!DOCTYPE html>
<p>Remove the only piece of column content that comes after a spanner that establishes an inner multicol container and has a spanner inside as well.</p>
<p>PASS if no crash or assertion failure.</p>
<div style="-webkit-columns:3;">
    <div style="-webkit-column-span:all; -webkit-columns:3;">
        <div style="-webkit-column-span:all;"></div>
    </div>
    <div id="elm"></div>
</div>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
    document.body.offsetTop;
    document.getElementById("elm").style.display = "none";
</script>