chromium/third_party/blink/web_tests/fast/forms/resources/validation-message-crash-iframe.html

<!DOCTYPE html>
<select id="select" required></select>
<script>
select.reportValidity();
</script>
<input type="image">