chromium/third_party/blink/web_tests/svg/animations/animval-web-animations-flush-crash.html

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<style>
@keyframes anim { 0% { opacity: 0; } }
* { animation-name: anim; animation-duration: 4s; }
</style>
<p>PASS if no crash</p>
<script>
async_test(function(t) {
  window.onload = t.step_func(function() {
    let parent = document.createElement("div");
    element = parent.appendChild(
                  document.createElementNS("http://www.w3.org/2000/svg", "marker"));

    setTimeout(t.step_func_done(function() {
      element.computedName;
      let before = performance.now();
      while (performance.now() - before < 17)
          ;
      element.className.animVal;
    }));
  });
});
</script>