Reported a bug here:
REVIT-87689: NewFamilyInstance on face of element in linked document crashes Revit
REVIT-87689: NewFamilyInstance on face of element in linked document crashes Revit