third_party/blink/web_tests/fast/events/blur-remove-parent-crash.html

<iframe></iframe>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
var iframe = document.querySelector('iframe');
var doc = iframe.contentDocument;
var input = doc.createElement('input');
input.value = 'foo';
doc.body.appendChild(input);
input.addEventListener('blur', function() {
    iframe.remove();
});
input.focus();
iframe.focus();
document.body.textContent = 'PASS; NOT CRASHED';
</script>