third_party/WebKit/LayoutTests/fast/table/table-overflow-crash.html

<style>
rt, script, body {
  outline-style: solid;
  position: absolute;
  will-change: transform;
  display: table-cell;
  border-spacing: 4499;
}
</style>
Test passes if it does not CRASH in debug.
Note, this test does not have a DOCTYPE as the failure does not
reproduce with a DOCTYPE.
<rt>
<menu></menu>
<script>
  if (window.testRunner)
    testRunner.dumpAsText();

  document.execCommand("selectAll");
  document.designMode = "On";
  document.execCommand("italic")
</script>