Assign to the Dev from find it:

Suspected CLs	The result is a list of CLs that change the crashed files.

Author: mstensho
Component: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/3f96177578cf0511174d42546a70660cc8d6eeeb
Time: Wed Feb 24 10:08:17 2016
Files LayoutBlockFlow.cpp, LayoutMultiColumnSet.cpp are changed in this cl (and is part of stack frame #5, "applyAfterBreak"; frame #6, "blink::LayoutBlockFlow::layoutBlockChild")
Minimum distance from crash line to modified line: 13. (file: LayoutMultiColumnSet.cpp, crashed on: 113, modified: 100).

Suspected Component: chromium
Suspected Cr- Label: Cr-Blink-Layout

@mstensho -- Could you please look into the issue and update. Pardon me if it has nothing to do with your changes and if possible please assign it to concern Dev.
Thank You.

Over-eager LayoutTests foraging? I added LayoutTests/fast/multicol/5-levels-of-nesting-crash.html along with a fix for a divide-by-zero (Floating point exception) bug. But the fuzzer build that was used here is too old, and doesn't contain the fix, so no wonder it still crashes. :)

ClusterFuzz has detected this issue as fixed in range 384665:385240.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5606725096308736

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: Floating-point-exception
Crash Address: 
Crash State:
  blink::LayoutMultiColumnSet::pageRemainingLogicalHeightForOffset
  blink::LayoutFlowThread::pageRemainingLogicalHeightForOffset
  blink::LayoutBlock::pageRemainingLogicalHeightForOffset
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=377255:377290
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=384665:385240

Minimized Testcase (0.53 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv966wWMQlG094HRBnNft0ZdmkPIUQYjommKMOmpPQlmS7VYr2Kx6MW-DnncUhZR0vDbO4RfG_5PTsSvzkybJfs9bFNIr_tozzZZmSUi5I1ciiKYIO6ysPa1xPENuTrT398qNfa6Xdg7gysgJgHdz97bvBmGDAw
<div style="columns:1;">
    <div style="height:1px;"></div>
    <div style="columns:1;">
        <div style="height:6px; break-after:column;"></div>
        <div style="columns:1;">
            <div style="break-after:column;">
                <br>
            </div>
            <div style="columns:1;">
                <div style="break-after:column; columns:1;">
                    <br>
                    <br>
                    <br>
                </div>
            </div>
        </div>
    </div>
    <div style="height:1px;">


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot