chromium/third_party/blink/web_tests/fast/events/touch/nested-document-with-touch-handler-detached-crash.html

<!doctype html>
<html>
<body>
<iframe id="testIframe" srcdoc="<iframe seamless srcdoc='     '> border: 2px solid black"></iframe>
<div>Test passes if DRT doesn't crash.</div>
<script>
if (window.testRunner)
	testRunner.dumpAsText();

var testIframe = document.getElementById('testIframe');
var input = testIframe.contentDocument.createElement('input');
input.type = "RANGE";
input = 0;
</script>
</body>