<html>
  <head>
    <script>
      onload = function() {
        document.getElementById("svgRoot").setAttribute('filter', 'url(#imageFilter)')
      }
    </script>
  </head>
  <body>
    <p>PASS if no crash</p>
    <svg width="10" height="10" id="svgRoot" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
      <filter id="imageFilter">
        <feImage id="feImage" xlink:href="#svgRoot"/>
        <feOffset dx="50" dy="50" />
      </filter>
      <g filter="url(#imageFilter)">
        <rect x="0" y="0" width="50" height="50" fill="green" />
      </g>
    </svg>
  </body>
</html>