chromium/third_party/blink/web_tests/fast/dom/shadow/remove-styles-in-shadow-crash-3.html

<!DOCTYPE html>
<style></style>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();

    onload = function() {
        var link = document.createElement("link");
        link.setAttribute("rel", "stylesheet");
        link.setAttribute("href", "file:notfound.css");
        document.head.appendChild(link);
        var root = host.attachShadow({mode: 'open'});
        root.innerHTML = "<span><style></style><style></style>";
        root.innerHTML = "";
    }
</script>
<p>PASS if no crash</p>
<div id="host"></div>