chromium/third_party/blink/web_tests/external/wpt/css/cssom/stylesheet-dom-mutation-event-crash.html

<script>
function go() {
  b.innerHTML = undefined
}
document.addEventListener("DOMContentLoaded", () => {
  b.appendChild(document.createTextNode(""))
  a.addEventListener("DOMNodeRemoved", go)
  go();
})
</script>
<div id="a">
<style id="b">
</style>