Victim <select> — tap this first

Then long-press the tab strip and drag this tab to the other Chrome window (triggers ReparentingTask.detach() → setTopLevelNativeWindow(null) → SelectPopup.onWindowAndroidChanged → close()).

Cross-origin attacker OOPIF (port 8081):