chromium/third_party/blink/web_tests/editing/spelling/mark-empty-crash.html

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<ul contenteditable>
<li id="foo"></li>
</ul>
<script>
test(function() {
    if (!window.internals)
        return;
    if (window.testRunner)
        testRunner.setMockSpellCheckerEnabled(true);
    window.getSelection().selectAllChildren(document.getElementById('foo'));
    document.execCommand('insertParagraph');

    internals.runIdleTimeSpellChecker(document);
}, 'spelling');
</script>