chromium/third_party/blink/web_tests/fast/speechsynthesis/speech-synthesis-cancel-twice.html

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<script src="../../resources/js-test.js"></script>
</head>
<body id="body">

<div id="console"></div>

<script>

    description("This tests that cancelling an utterance a second time after garbage collection doesn't crash under ASAN.");

    if (window.internals)
        internals.enableMockSpeechSynthesizer(window);

    speechSynthesis.speak(new SpeechSynthesisUtterance("Hello"));
    speechSynthesis.cancel();
    window.gc();
    speechSynthesis.cancel();

</script>

</body>
</html>