Don't updateRenderTree in the middle of a DOM insertion.

Source/core/html/HTMLOptionElement.cpp

Index: Source/core/html/HTMLOptionElement.cpp
diff --git a/Source/core/html/HTMLOptionElement.cpp b/Source/core/html/HTMLOptionElement.cpp
index 018bc3d5924b2d1931c0efc0b6731c3e7db51236..0dc524641e6e6d436d5dc4512fd0e3b2735e7726 100644
--- a/Source/core/html/HTMLOptionElement.cpp
+++ b/Source/core/html/HTMLOptionElement.cpp
@@ -331,11 +331,15 @@ bool HTMLOptionElement::isDisabledFormControl() const
 Node::InsertionNotificationRequest HTMLOptionElement::insertedInto(ContainerNode* insertionPoint)
 {
     HTMLElement::insertedInto(insertionPoint);
+    return InsertionShouldCallDidNotifySubtreeInsertions;
+}
+
+void HTMLOptionElement::didNotifySubtreeInsertionsToDocument()
+{
     if (HTMLSelectElement* select = ownerSelectElement()) {
         select->setRecalcListItems();
         select->optionInserted(*this, m_isSelected);
     }
-    return InsertionDone;
 }
 
 void HTMLOptionElement::removedFrom(ContainerNode* insertionPoint)