chromium/third_party/blink/web_tests/fast/multicol/multicol-becomes-abspos-crash.html

<!DOCTYPE html>
<style>
.c5:first-child { position: absolute; }
</style>
<div id="container">
    <span id="dummy"></span>
    <div class="c5" style="-webkit-column-count:3;">PASS if no crash or assertion failure.</div>
</div>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
    document.body.offsetTop;
    document.getElementById("container").removeChild(document.getElementById("dummy"));
</script>