chromium/third_party/blink/web_tests/shadow-dom/crashes/selection-delete-crash.html

<!DOCTYPE html>
<script src='../../resources/testharness.js'></script>
<script src='../../resources/testharnessreport.js'></script>
<object>
<div id=foo0></div>
<div id=foo1></div>
<div id=foo2></div>
<div id=foo3></div>
<div id=foo4></div>
<div id=foo5></div>
<div id=foo6 style="display:list-item"></div>
<button>
<script>
async_test((test) => {
  window.addEventListener('load', test.step_func_done((_e) => {
    const selection = window.getSelection();
    document.execCommand("SelectAll");
    selection.deleteFromDocument();
  }));
}, "crbug.com/844301. Selection delete for list-item should not crash.");
</script>