chromium/third_party/blink/web_tests/fast/dom/HTMLProgressElement/progress-element-with-child-crash.html

<html>
<head>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
</head>
<body>
  <h1>Test for <a href="https://bugs.webkit.org/show_bug.cgi?id=48019">Bug 48019</a>. It is OK not to crash.</h1>
  <progress value=50 max=100>
    <b>
      <menu>
        <select autofocus>
      </menu>
      <input>
    </b>
  </progress>
</body>
</html>