chromium/third_party/blink/web_tests/paint/invalidation/svg/invalid-clip-path-crash.html

<!DOCTYPE html>
<style>
  path {
    animation: inset-anim 2s linear;
  }
  @keyframes inset-anim {
    from { clip-path: inset(10%); }
    to   { clip-path: inset(20%); }
  }
</style>
<script src="../resources/text-based-repaint.js"></script>
<script>
  outputRepaintRects = false;
  onload = runRepaintTest;
  function repaintTest() {
  };
</script>
Test for crbug.com/448227: This test passes if it does not crash.
<svg>
  <path d="M0 0"/>
</svg>