chromium/third_party/blink/web_tests/fast/dom/css-inline-style-declaration-crash.html

<!DOCTYPE html>
<script src="../../resources/js-test.js"></script>
<script>
description('Setting a CSSStyleDeclaration after its element has been GCed should not crash.');

var span = document.createElement('span');
var style = span.style;
span = null;
gc();
style.cssText = 'color:red';

testPassed('Did not crash');
</script>