chromium/third_party/blink/web_tests/svg/css/marker-crash.html

This test passes if it does not crash.
<div style="marker: initial"></div>
<div style="marker: inherit"></div>
<script>
if (window.testRunner)
  testRunner.dumpAsText();
</script>