chromium/third_party/blink/web_tests/editing/selection/deleteFromDocument-crash.html

<script>
onload = function() {
    document.execCommand('selectAll');
    selection = document.getSelection();
    selection.deleteFromDocument();
}
</script>
<textarea autofocus >
text
text2
text3</textarea>
<iframe srcdoc="foo"></iframe>