LayoutTests/fast/inline/partial-layout-with-damage-at-inline-box-start-crash.html

<pre id=pre>PASS_
</pre>
<div id=container><span id=append_this><q>if_no_crash_or
</q></span>
</div><div style="display: none;"><span id=move_this><img></span>_assert</div><script>
if (window.testRunner)
  testRunner.dumpAsText();

document.body.offsetHeight;

pre.appendChild(append_this);
document.body.offsetHeight;

container.appendChild(move_this);

document.body.offsetHeight;
move_this.after("_assert");
</script>