orthogonal-writing-modes-floats-crash-2.html

<!DOCTYPE html>
<style>
.box {
  position: absolute;
  width: 100px;
}
#container {
  float: right;
  writing-mode: vertical-lr;
  offset-path: path("M0,0");
  margin-top: 20px;
}
</style>
<p id="title">crbug.com/656419: Only delete float lists from orthogonal roots when they are due a layout that will rebuild them. Passes if it does not crash.</p>
<div id="container">
  <div class="box"></div>
</div>
<div></div>
<script>
if (window.testRunner)
  testRunner.dumpAsText();
document.designMode = 'on';
document.execCommand("selectAll", false, null);
document.execCommand("inserttext",false,"abc");
document.execCommand("selectAll", false, null);
document.body.offsetTop;
container.remove();
</script>

chromium/third_party/blink/web_tests/fast/writing-mode/orthogonal-writing-modes-floats-crash-2.html