chromium/third_party/blink/web_tests/fast/block/float/rubybase-children-moved-crash.html

<!DOCTYPE html>
<style>
.CLASS1{display:list-item;}
.CLASS13{float:right;}
</style>
<p>crbug.com/681423: Don't clear floats when moving just some of the children of a ruby column. This test passes if it does not crash.</p>
<script>
	if (window.testRunner)
		testRunner.dumpAsText();
	function fuzz() {
	document.designMode = 'on';
		document.execCommand("selectAll");
		document.execCommand("Strikethrough");
		document.execCommand("Strikethrough");
	}
	setTimeout(fuzz); 
</script>
<ruby>
<rt>
<rtc class="CLASS1">
<input class="CLASS13">