chromium/third_party/blink/web_tests/svg/dispatch-event-crash-on-destruct.html

<!DOCTYPE html>
<svg>
    <image xlink:href="data:image/svg+xml,a"></image>
</svg>
<p>PASS if it does not crash in debug.<p>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>