chromium/third_party/blink/web_tests/scrollbars/scrollbar-removed-by-viewport-crash.html

<!DOCTYPE html>
<!--
  Tests that we do not crash when the main frame scrollbar is adopted by the
  visual viewport due to viewport settings being enabled after the first layout.
 -->
<meta name="viewport" content="width=2000">
<div style="width: 1900px; height: 100px">
  PASS: did not crash.
</div>
<script>
  document.body.offsetTop;
  internals.settings.setViewportEnabled(true);
  internals.settings.setViewportMetaEnabled(true);
  if (window.testRunner)
    testRunner.dumpAsText();
</script>