1. Open imm5257e.pdf.
2. Click through the stupid alerts.
3. In 5. Place of Birth, open the Country combobox.
4. Drag the scrollbar beside the country list down.

Expected: scroll down.
Actual: Crash with stack:
Received signal 11 SEGV_MAPERR 000000000008
#0 0x55827835079c base::debug::StackTrace::StackTrace()
#1 0x558278350301 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#2 0x7f0b96aa9330 <unknown>
#3 0x55827c31cdb3 CFWL_TimerInfo::StopTimer()
#4 0x55827c37bfbb CFWL_ScrollBar::OnLButtonUp()
#5 0x55827c32463a CFWL_NoteDriver::DispatchMessage()
#6 0x55827c324446 CFWL_NoteDriver::ProcessMessage()
#7 0x55827c3272d2 CFWL_WidgetMgr::OnProcessMessageToForm()
#8 0x55827c37df12 CXFA_FFField::OnLButtonUp()
#9 0x55827c3e5d99 CXFA_FFWidgetHandler::OnLButtonUp()
#10 0x55827c13c07d CPDFSDK_PageView::OnLButtonUp()
#11 0x55827c13a672 FORM_OnLButtonUp
#12 0x55827c11efd9 chrome_pdf::PDFiumEngine::OnMouseUp()
#13 0x55827c11ea11 chrome_pdf::PDFiumEngine::HandleEvent()
#14 0x55827c1103f8 chrome_pdf::OutOfProcessInstance::HandleInputEvent()
#15 0x558277fe2fe9 pp::InputEvent_HandleEvent()
#16 0x55827b686a07 ppapi::proxy::PPP_InputEvent_Proxy::OnMsgHandleFilteredInputEvent()
#17 0x55827b686885 _ZN3IPC8MessageTI52PpapiMsg_PPPInputEvent_HandleFilteredInputEvent_MetaNSt3__15tupleIJiN5ppapi14InputEventDataEEEENS3_IJ7PP_BoolEEEE8DispatchINS4_5proxy20PPP_InputEvent_ProxyESC_vMSC_FviRKS5_PS7_EEEbPKNS_7MessageEPT_PT0_PT1_T2_
#18 0x55827b6865ba ppapi::proxy::PPP_InputEvent_Proxy::OnMessageReceived()
#19 0x55827b660c32 ppapi::proxy::PluginDispatcher::OnMessageReceived()
#20 0x558278a853cb IPC::ChannelProxy::Context::OnDispatchMessage()
#21 0x558278351b0f base::debug::TaskAnnotator::RunTask()
#22 0x55827836bae7 base::MessageLoop::RunTask()
#23 0x55827836bfe8 base::MessageLoop::DoWork()
#24 0x55827836e13a base::MessagePumpDefault::Run()
#25 0x55827838e645 base::RunLoop::Run()
#26 0x558277fcd325 content::PpapiPluginMain()
#27 0x558278088e8a content::RunZygote()
#28 0x55827808a016 content::ContentMainRunnerImpl::Run()
#29 0x5582780931ff service_manager::Main()
#30 0x558278088bc1 content::ContentMain()
#31 0x5582769431cb ChromeMain
#32 0x7f0b90e1ff45 __libc_start_main
#33 0x55827694302a _start