chromium/third_party/blink/web_tests/animations/stability/base-render-style-body-crash.html

<!DOCTYPE html>
<style>
body { transition: background-color 1s }
.green { background-color: green }
</style>
<style id="sheet"></style>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script>
var test = async_test("Test passes if it does not crash");

onload = test.step_func(() => {
    document.body.className = "green";
    // Needs these frames to establish a baseComputedStyle.
    requestAnimationFrame(test.step_func(() => {
        requestAnimationFrame(test.step_func(() => {
            requestAnimationFrame(test.step_func_done(() => {
                sheet.innerText = "@font-face { font-family: notfound; src: url(notfound.ttf) }";
            }));
        }));
    }));
});
</script>