chromium/third_party/blink/web_tests/svg/custom/animate-use-crash.xhtml

<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
    <g>
        <defs> 
            <text id="text">
                <a onmousedown="">
                    <animateTransform attributeName="a" end=",1"></animateTransform>
                </a>Passes if doesn't crash     
            </text>
        </defs> 
        <use x="25" y="25" xlink:href="#text"/>
        <script><![CDATA[
        if (window.testRunner)
            testRunner.dumpAsText();
        ]]></script>
    </g>
</svg>