Suspecting:

Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/5b65a57f38f0260e21b8ec190d201ae2504d73e5
Time: Mon Apr 18 23:16:17 2016
The CL last changed line 22 of file ColumnBalancer.cpp, which is stack frame 2.

@mstensho: Could you please look into this issue.

Thank you.

ClusterFuzz has detected this issue as fixed in range 420372:420465.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4618957403455488

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  isFirstAfterBreak(flowThreadOffset()) || !box.paginationStrut()
  blink::InitialColumnHeightFinder::examineBoxAfterEntering
  blink::ColumnBalancer::traverseSubtree
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=375035:375059
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=420372:420465

Minimized Testcase (0.17 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94lsfceER6rBTgs_lAOTyKF6ixYqR15TpXF_up4PFMwPYPQW5ONM_c0xUmgKw73UE48d4nH44Xqk7v96GIMsty_lPgyPhZAD7_BaoMEUUkWk0Z_oHZ5UqZ2WXhgyvdpop6ZPx2qsGxW3paidulimDo1C1El3w?testcase_id=4618957403455488
<div style="-webkit-columns:3;">
   <div style="height:12345678987654321px;">
   </div>
   <div style="-webkit-columns:3;">
    <div style="height:10000px;">
    </div>
    <br/>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Still failing here.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot