Crash in QQmlData::wasDeleted()

Run the test case, click the red rectangle, then change tab -> Crash

#0 0x00007ffff7171ad8 in QQmlData::wasDeleted (object=0xbbe8b0) at ../../include/QtQml/5.3.2/QtQml/private/../../../../../src/qml/qml/qqmldata_p.h:242
#1 0x00007ffff716a829 in QV4::QObjectWrapper::wrap (engine=0xaa2650, object=0xbbe8b0) at jsruntime/qv4qobjectwrapper.cpp:570
#2 0x00007ffff725a012 in QV8Engine::fromVariant (this=0xaa1bb0, variant=...) at qml/v8/qv8engine.cpp:286
#3 0x00007ffff717109b in LoadProperty<ReadAccessor::Indirect> (engine=0xaa1bb0, object=0xd12a70, property=..., notifier=0x0) at jsruntime/qv4qobjectwrapper.cpp:214
#4 0x00007ffff71692e3 in QV4::QObjectWrapper::getProperty (object=0xd12a70, ctx=0x7fffffff9660, property=0x7fffffff9350, captureRequired=true) at jsruntime/qv4qobjectwrapper.cpp:397
#5 0x00007ffff7168afd in QV4::QObjectWrapper::getQmlProperty (this=0x7fffe8367ba0, ctx=0x7fffffff9660, qmlContext=0xb72da0, n=0x7fffe835b870, revisionMode=QV4::QObjectWrapper::IgnoreRevision, hasProperty=0x0,
includeImports=true) at jsruntime/qv4qobjectwrapper.cpp:333
#6 0x00007ffff716af27 in QV4::QObjectWrapper::get (m=0x7fffe8367ba0, name=..., hasProperty=0x0) at jsruntime/qv4qobjectwrapper.cpp:672
#7 0x00007ffff7067add in QV4::Object::get (this=0x7fffe8367ba0, name=..., hasProperty=0x0) at ../../include/QtQml/5.3.2/QtQml/private/../../../../../src/qml/jsruntime/qv4object_p.h:244
#8 0x00007ffff717f610 in QV4::Runtime::getProperty (ctx=0x7fffffff9660, object=..., name=...) at jsruntime/qv4runtime.cpp:662

(gdb) print priv
$1 = (QObjectPrivate *) 0x0

Related change: https://codereview.qt-project.org/#/c/90700/