chromium/third_party/blink/web_tests/fast/css/sticky/remove-inline-sticky-crash.html

<!DOCTYPE html>
<html>
<head>
<style>
    body {
        margin: 0;
        height: 2000px;
    }
    
    .box {
        width: 200px;
        height: 200px;
    }

    .sticky {
        position: sticky;
        top: 100px;
        background-color: green;
    }
</style>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
    
    function doTest()
    {
        var stickyBox = document.getElementById('sticky');
        stickyBox.parentNode.removeChild(stickyBox);
        window.scrollTo(0, 10);
    }
    window.addEventListener('load', doTest, false);
</script>
</head>
<body>
    <p>This test should not crash</p>
    <span id="sticky" class="sticky box"></span>
</body>
</html>