chromium/third_party/blink/web_tests/paint/tables/table-row-mask-crash.html

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script>test(function(){});</script>
<table>
  <tr style="-webkit-mask: url(#xyz)">
    <td></td>
  </tr>
</table>