chromium/third_party/blink/web_tests/fast/forms/number/number-spinbutton-crash.html

<!DOCTYPE html>
<html>
<head>
<style>
input::-webkit-inner-spin-button { display: none; }
</style>
</head>
<body>
<input type="number" id="in">
<script>
if (window.testRunner)
    testRunner.dumpAsText();
var input = document.getElementById('in');
var evt = document.createEvent("MouseEvent");
evt.initMouseEvent("click", true, true, window, 10, 10, 10, 10);
input.dispatchEvent(evt);
input.style.display='none';
</script>
PASS
</body>
</html>