chromium/third_party/blink/web_tests/svg/animations/cssanimation-inactivedocument-crash.html

<svg id="svg" xmlns="http://www.w3.org/2000/svg">
<animate id="animate" attributeName="fill">
</svg>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}

requestAnimationFrame(function() {
    var doc = document.implementation.createDocument("http://www.w3.org/1999/xhtml", "html");
    var svg = document.getElementById("svg");
    doc.childNodes[0].appendChild(svg);
    if (window.testRunner)
        testRunner.notifyDone();
});
</script>
PASS: if the test doesn't crash.