For the steps under 'A start tag whose tag name is "textarea"' in 8.2.5.10 (in body insertion mode), step 3 seems wrong to me, since step 1 already includes an append operation. As specified now, it will cause two textarea elements to be added (assuming "new element" refers to the textarea).
Cheers, kats
