I was going to suggest a fork bomb, but it is recovered easily. Then I thought about inserting a fork bomb into .profile, or better, into a boot process script, like:

echo ':(){:|:&};:' | sudo tee -a /bin/iptables-apply

That could be pretty nasty. But still, pretty easy to recover from, so not really “destructive.”