propagate-style-to-anonymous-children-of-inline.html

<!DOCTYPE html>
<style>
* {
  writing-mode: vertical-lr;
}
#child {
  display: table-header-group;
}
</style>
<script>
function start() {
  document.styleSheets[0].deleteRule(0);

  if (window.testRunner)
    testRunner.dumpAsText();
}
</script>
<body onload="start();">
<span><span id="child">Test passes if it does not crash.</span></span>
</body>

chromium/third_party/blink/web_tests/fast/inline/propagate-style-to-anonymous-children-of-inline.html