gesture-tap-mouseup-listener-update-distribution-crash.html

<!DOCTYPE html>
<div>crbug.com/417064 minimal reproduction case for hitting assertion check</div>
<span id='tapme'>Tap me!</span>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

var tapme = document.querySelector('#tapme');

tapme.addEventListener('mouseup', function() {
    tapme.attachShadow({mode: 'open'});
}, false);

if (window.eventSender) {
    eventSender.gestureTap(tapme.offsetLeft + tapme.offsetWidth / 2, tapme.offsetTop + tapme.offsetHeight / 2);
}
</script>

chromium/third_party/blink/web_tests/fast/dom/shadow/gesture-tap-mouseup-listener-update-distribution-crash.html