diff --git a/css/css-tables/crashtests/dynamic_table_layout_crash.html b/css/css-tables/crashtests/dynamic_table_layout_crash.html
new file mode 100644
index 00000000000000..cc28f3bfdc87c4
--- /dev/null
+++ b/css/css-tables/crashtests/dynamic_table_layout_crash.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<table id="target" style="border: solid; border-collapse: collapse; table-layout: fixed; width: 50px;">
+  <tr><td style="background: lime;">hi</td></tr>
+  <td colspan=3>there</td>
+</table>
+<script>
+document.body.offsetTop;
+document.getElementById('target').style.tableLayout = 'auto';
+</script>
