chromium/third_party/blink/web_tests/fast/dom/StyleSheet/removed-stylesheet-rule-deleted-parent-crash.html

<html>
<head>
<script src="../../../resources/gc.js"></script>
<script>
if (window.testRunner)
{
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}

function runTest()
{
    style = document.createElement('style');
    style.textContent = 'body { color: red }';
    document.head.appendChild(style);
    rule = document.styleSheets[0].rules[0];
  
    document.styleSheets[0].deleteRule(0);
    document.head.removeChild(style);

    gc();

    if (!rule.parentStyleSheet)
        document.getElementById('result').innerHTML = "PASS";
    if (window.testRunner)
        testRunner.notifyDone();
}

</script>
</head>
<body onload="runTest()">
<div id="result"></div>
</body>
</html>