chromium/third_party/blink/web_tests/fast/multicol/dynamic/sole-spanner-becomes-abspos-crash.html

<!DOCTYPE html>
<p>PASS if no crash or assertion failure.</p>
<div style="-webkit-column-count:2;">
    <div id="spanner" style="-webkit-column-span:all;"></div>
</div>
<script type="text/javascript">
    if (window.testRunner)
        testRunner.dumpAsText();
    document.body.offsetTop;
    document.getElementById("spanner").style.position = "absolute";
</script>