chromium/third_party/blink/web_tests/svg/animations/target-move-values-crash.html

<!DOCTYPE html>
<svg>
  <defs id="gl">
    <linearGradient id="g">
      <animateTransform/>
    </linearGradient>
  </defs>
  <feFuncG id="f">
    <animate href="#g" attributeName="color" values="blue">
  </feFuncG>
</svg>
<script>
if (window.testRunner) {
  testRunner.dumpAsText();
  testRunner.waitUntilDone();
}
setTimeout(function() {
  f.append(gl);
  requestAnimationFrame(function() {
    if (window.testRunner)
      testRunner.notifyDone()
  });
});
</script>
<p>PASS if no crash</p>