orthogonal-writing-modes-change-root-inline-crash.html

<!DOCTYPE html>
<style>
html {
  writing-mode:vertical-rl;
}
#h {
  writing-mode: horizontal-tb;
}
</style>
<span>
  <span id="h">Test passes if it does not crash.</span>
</span>
<script>
window.onload = function() {
  var root = document.documentElement;
  root.style.writingMode = "horizontal-tb";

  if (window.testRunner)
    testRunner.dumpAsText();
}
</script>

chromium/third_party/blink/web_tests/fast/writing-mode/orthogonal-writing-modes-change-root-inline-crash.html