fast/xmlhttprequest/xmlhttprequest-recursive-sync-event.html crashes on local Windows box and https://ci.chromium.org/p/chromium/builders/luci.chromium.ci/Win7%20Tests%20%28dbg%29%281%29/72791

The test succeeds on release build.

Here is stack trace:
blink_platform.dll!blink::PageFromObject(const void * object) Line 883
blink_platform.dll!blink::ThreadState::FromObject(const void * object) Line 680
blink_platform.dll!blink::ThreadState::IsOnThreadHeap(const void * object) Line 554
blink_core.dll!blink::MemberBase<blink::ExecutionContext,blink::TracenessMemberConfiguration::kTraced>::CheckPointer() Line 153
blink_core.dll!blink::MemberBase<blink::ExecutionContext,blink::TracenessMemberConfiguration::kTraced>::MemberBase(blink::ExecutionContext * raw) Line 46
blink_core.dll!blink::Member<blink::ExecutionContext>::Member(blink::ExecutionContext * raw) Line 211
blink_core.dll!blink::probe::CallFunction::CallFunction(blink::ExecutionContext * context, v8::Local<v8::Function> function, int depth) Line 1647
blink_core.dll!blink::V8ScriptRunner::CallFunction(v8::Local<v8::Function> function, blink::ExecutionContext * context, v8::Local<v8::Value> receiver, int argc, v8::Local<v8::Value> * args, v8::Isolate * isolate) Line 403
blink_core.dll!blink::V8EventHandlerNonNull::Invoke(blink::ScriptWrappable * callback_this_value, const WTF::Vector<blink::ScriptValue,0,WTF::PartitionAllocator> & args) Line 96
blink_core.dll!blink::JSEventHandler::CallListenerFunction(blink::EventTarget & event_target, blink::Event & event, v8::Local<v8::Value> js_event) Line 107
blink_core.dll!blink::JSBasedEventListener::handleEvent(blink::ExecutionContext * execution_context_of_event_target, blink::Event * event) Line 159
blink_core.dll!blink::EventTarget::FireEventListeners(blink::Event & event, blink::EventTargetData * d, blink::HeapVector<blink::RegisteredEventListener,1> & entry) Line 851
blink_core.dll!blink::EventTarget::FireEventListeners(blink::Event & event) Line 695
blink_core.dll!blink::EventTarget::DispatchEventInternal(blink::Event & event) Line 602
blink_core.dll!blink::EventTarget::DispatchEvent(blink::Event & event) Line 595
blink_core.dll!blink::XMLHttpRequestProgressEventThrottle::DispatchReadyStateChangeEvent(blink::Event * event, blink::XMLHttpRequestProgressEventThrottle::DeferredEventAction action) Line 137
blink_core.dll!blink::XMLHttpRequest::DispatchReadyStateChangeEvent() Line 594
blink_core.dll!blink::XMLHttpRequest::ChangeState(blink::XMLHttpRequest::State new_state) Line 573
blink_core.dll!blink::XMLHttpRequest::open(const WTF::AtomicString & method, const blink::KURL & url, bool async, blink::ExceptionState & exception_state) Line 723
blink_core.dll!blink::XMLHttpRequest::open(const WTF::AtomicString & method, const WTF::String & url_string, bool async, const WTF::String & username, const WTF::String & password, blink::ExceptionState & exception_state) Line 648
blink_core.dll!blink::xml_http_request_v8_internal::open2Method(const v8::FunctionCallbackInfo<v8::Value> & info) Line 328
blink_core.dll!blink::xml_http_request_v8_internal::openMethod(const v8::FunctionCallbackInfo<v8::Value> & info) Line 347
blink_core.dll!blink::V8XMLHttpRequest::openMethodCallback(const v8::FunctionCallbackInfo<v8::Value> & info) Line 597
v8.dll!v8::internal::FunctionCallbackArguments::Call(v8::internal::CallHandlerInfo * handler) Line 145
v8.dll!v8::internal::`anonymous namespace'::HandleApiCallHelper<0>(v8::internal::Isolate * isolate, v8::internal::Handle<v8::internal::HeapObject> function, v8::internal::Handle<v8::internal::HeapObject> new_target, v8::internal::Handle<v8::internal::FunctionTemplateInfo> fun_data, v8::internal::Handle<v8::internal::Object> receiver, v8::internal::BuiltinArguments args) Line 111
v8.dll!v8::internal::Builtin_Impl_HandleApiCall(v8::internal::BuiltinArguments args, v8::internal::Isolate * isolate) Line 139
v8.dll!v8::internal::Builtin_HandleApiCall(int args_length, v8::internal::Object * * args_object, v8::internal::Isolate * isolate) Line 127