Ensure invalidation in LayoutBlockChildNode::removeChildNodes() without notifyLayoutObject

Some callers of LayoutBlockChildNode::removeChildNodes() passes
notifyLayoutObject=false and we missed invalidation of the painting
layer and the object.

The test case is converted from a cluster-fuzz test case.

BUG=628146

Review-Url: https://codereview.chromium.org/2160723006
Cr-Commit-Position: refs/heads/master@{#406436}
4 files changed