third_party/WebKit/LayoutTests/paint/input/textarea-crash.html

<!-- Passes if it does not crash. -->
<textarea id="target">
  Test text test text
</textarea>
<script>
if (window.testRunner)
  testRunner.dumpAsText();
if (!window.eventSender) {
  console.log('This test requires eventSender.');
} else {
  var x = target.offsetLeft + (target.offsetWidth / 2);
  var y = target.offsetTop + (target.offsetHeight / 2);
  eventSender.mouseMoveTo(x, y);
  eventSender.mouseDown();
  x = target.offsetLeft + target.offsetWidth + 5;
  eventSender.mouseMoveTo(x, y);
  eventSender.mouseUp();
}
</script>
<style>
textarea {
  display: contents;
}
</style>