LayoutTests/fast/forms/lazy-shadow-tree-creation-crash.html

PASS if no crash.
<div id=x></div>
<script>
let audio0 = document.createElement('audio');
x.append(audio0);
audio0.controls = true;
x.append(document.createElement('input'));
x.outerHTML += '';
x.remove();
</script>