This test passes if it doesn't crash (or ASSERT).
<script>
if (window.layoutTestController)
    layoutTestController.dumpAsText();

var f = document.createDocumentFragment();
var s = document.createElement('div');
f.appendChild(s);
s.insertAdjacentHTML('afterend', "aaa");
</script>