There is at least one instance of fast/css/variables/build-supports-variables.html triggering the ASSERT(scope->hasScopedHTMLStyleChild()) assertion at HTMLStyleElement.cpp:162.
This is a dupe of #105005.
*** This bug has been marked as a duplicate of bug 105005 ***