When adding [HTMLConstruct] to HTMLFormElement.idl, we get following crash
with LayoutTests/external/wpt/custom-elements/builtin-coverage.html


listed_element is nullptr.

void HTMLFormControlsCollection::UpdateIdNameCache() const {
  if (HasValidIdNameCache())
    return;

  NamedItemCache* cache = NamedItemCache::Create();
  HashSet<StringImpl*> found_input_elements;

  for (const auto& listed_element : ListedElements()) {
    if (listed_element->IsEnumeratable()) {
      HTMLElement* element = ToHTMLElement(listed_element);




HTMLFormControlsCollection::UpdateIdNameCache() Line 141
HTMLCollection::NamedItems(const WTF::AtomicString & name, blink::HeapVector<blink::Member<blink::Element>,0> & result) Line 528
HTMLFormElement::GetNamedElements(const WTF::AtomicString & name, blink::HeapVector<blink::Member<blink::Element>,0> & named_items) Line 769
HTMLFormElement::AnonymousNamedGetter(const WTF::AtomicString & name, blink::RadioNodeListOrElement & return_value) Line 806
HTMLFormElementV8Internal::namedPropertyGetter(const WTF::AtomicString & name, const v8::PropertyCallbackInfo<v8::Value> & info) Line 379
V8HTMLFormElement::namedPropertyGetterCallback(v8::Local<v8::Name> name, const v8::PropertyCallbackInfo<v8::Value> & info) Line 611
v8.dll!v8::internal::PropertyCallbackArguments::BasicCallNamedGetterCallback(void(*)(v8::Local<v8::Name>, const v8::PropertyCallbackInfo<v8::Value> &) f, v8::internal::Handle<v8::internal::Name> name) Line 108
v8.dll!v8::internal::PropertyCallbackArguments::CallNamedGetter(v8::internal::Handle<v8::internal::InterceptorInfo> interceptor, v8::internal::Handle<v8::internal::Name> name) Line 85
v8.dll!v8::internal::`anonymous namespace'::GetPropertyWithInterceptorInternal(v8::internal::LookupIterator * it, v8::internal::Handle<v8::internal::InterceptorInfo> interceptor, bool * done) Line 1858
v8.dll!v8::internal::JSObject::GetPropertyWithInterceptor(v8::internal::LookupIterator * it, bool * done) Line 15753
v8.dll!v8::internal::Object::GetProperty(v8::internal::LookupIterator * it) Line 1124
v8.dll!v8::internal::LoadIC::Load(v8::internal::Handle<v8::internal::Object> object, v8::internal::Handle<v8::internal::Name> name) Line 461
v8.dll!v8::internal::__RT_impl_Runtime_LoadIC_Miss(v8::internal::Arguments args, v8::internal::Isolate * isolate) Line 2083
v8.dll!v8::internal::Runtime_LoadIC_Miss(int args_length, v8::internal::Object * * args_object, v8::internal::Isolate * isolate) Line 2066