chromium/third_party/blink/web_tests/fast/forms/search/search-change-type-onsearch.html

<!DOCTYPE html>
<body>
<script src="../../../resources/testharness.js"></script>
<script src="../../../resources/testharnessreport.js"></script>
<div id="log"></div>
<input type="search" incremental>
<script>
var input = document.querySelector('input');
input.onsearch = function() {
    input.type = 'text';
    test.done();
};

var test = async_test('Changing the input type in search event handler should not crash.');
test.step(function() {  
    input.focus();
    eventSender.keyDown('a'); // Trigger 'search' event.
});
</script>
</body>