chromium/third_party/blink/web_tests/fast/overflow/overflow-dirty-relayout-boundary-no-crash.html

<!DOCTYPE html>
<style>
#relayout-boundary {
    transform: translateX(0);
    overflow: hidden;
    width: 100px;
    height: 100px;
}
</style>
<div id="relayout-boundary">
    <div id="layout-target">
        This test queries layout overflow for propagation on a relayout boundary that has dirty layout.
        It should not trigger assertions that assume clean layout.
    </div>
</div>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

document.scrollingElement.scrollWidth;

var layoutTarget = document.getElementById("layout-target");
layoutTarget.style.width = "99px";

var relayoutBoundary = document.getElementById("relayout-boundary");
relayoutBoundary.style.transform = "translateX(1px)";

document.scrollingElement.scrollWidth;
</script>