chromium/third_party/blink/web_tests/external/wpt/selection/crashtests/selection-modify-line-next-to-input-and-make-it-invisible.html

<!doctype html>
<html>
<head>
<meta charset="utf-8">
<script>
document.addEventListener("DOMContentLoaded", () => {
  getSelection().addRange(document.createRange());
  const range = document.createRange();
  range.selectNode(document.querySelector("meter"));
  getSelection().addRange(range);
  getSelection().modify('move', 'left', 'line');
  document.querySelector("input").style.display = "none";
  getSelection().modify('move', 'left', 'lineboundary');
})
</script>
</head>
<body>
<input>
<div contenteditable>
<meter>
</div>
</body>
</html>