chromium/third_party/blink/web_tests/fast/gradients/crash-on-degenerate-gradient.html

<head>
<script>
if (window.testRunner)
  testRunner.dumpAsText();
</script>
</head>
<body>
<h1>Degenerate Linear gradient. Should not crash</h1>
<button style="background-image: -webkit-radial-gradient(1 1, Scrollbar -1, red -1)">
<button style="background-image: radial-gradient(1 1, Scrollbar -1, red -1)">
</body>