chromium/third_party/blink/web_tests/fast/loader/onunload-form-submit-crash.html

<html>
    <body onUnload="document.myForm.submit()">
        <p>This is just a dummy page that loads the next page to see if we crash.</p>
        <form name="myForm" action="resources/onunload-form-submit-crash2.html"></form>
        <script>
            if (window.testRunner) {
                testRunner.dumpAsText();
                testRunner.waitUntilDone();
            }

            window.setTimeout("location.href='resources/onunload-form-submit-success.html'", 0);
        </script>
    </body>
<html>