fast/dynamic/crash-subtree-layout-when-auto-size-enabled.html calls enableAutoSize() with a certain rect and apparently this rect does not get reset for the next test.
Committed r192136: <http://trac.webkit.org/changeset/192136>
^^ is not the actual fix. (just a workaround to make the bots green)