<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>278106</bug_id>
          
          <creation_ts>2024-08-14 08:59:42 -0700</creation_ts>
          <short_desc>[WASM] workers/worker-user-gesture.html is a flakey EWS crash</short_desc>
          <delta_ts>2024-08-14 09:00:02 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebAssembly</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=174592</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="David Kilzer (:ddkilzer)">ddkilzer</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2052742</commentid>
    <comment_count>0</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2024-08-14 08:59:42 -0700</bug_when>
    <thetext>[WASM] workers/worker-user-gesture.html is a flakey EWS crash.

PR: &lt;https://github.com/WebKit/WebKit/pull/32164&gt;
Test run: &lt;https://ews-build.webkit.org/#/builders/62/builds/11469&gt;
Test results #1: &lt;https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sonoma-Debug-WK2-Tests-EWS/b77b4d0a-11469/results.html&gt;
Test results #2: &lt;https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sonoma-Debug-WK2-Tests-EWS/b77b4d0a-11469-rerun/results.html&gt;
Test history:  &lt;https://results.webkit.org/?suite=layout-tests&amp;test=workers%2Fworker-user-gesture.html&gt;


Crash stack for test results #1:


03:40:25.298 20919 worker/17 worker/17 workers/wasm-references.html output stderr lines:
03:40:25.298 20919 worker/17   ASSERTION FAILED: ((opcode &amp; (1 &lt;&lt; 24)) - 1) == opcode
03:40:25.298 20919 worker/17   ./wasm/WasmOpcodeOrigin.h(56) : JSC::Wasm::OpcodeOrigin::OpcodeOrigin(OpType, uint32_t, size_t)
03:40:25.298 20919 worker/17   1   0x11d766774 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
03:40:25.298 20919 worker/17   2   0x11d74a778 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
03:40:25.300 20919 worker/17 workers/wasm-references.html passed
03:40:25.309 20919 worker/17 com.apple.WebKit.WebContent.Development crash, pid = 30613
03:40:25.351 20919 worker/15 stopping
03:40:25.523 20919 worker/17 Couldn&apos;t quit 21080 with SIGTERM, sending SIGKILL.
03:40:25.577 20919 worker/17 killed pid 21080
03:40:25.578 20919 worker/17 Test workers/worker-user-gesture.html crashed, we will now gather a crash log.
03:41:55.615 20919 worker/17 worker/17 workers/worker-user-gesture.html crashed, (stderr lines):
03:41:55.615 20919 worker/17   3   0x11d723eec JSC::Wasm::OMGIRGenerator::origin()
03:41:55.615 20919 worker/17   4   0x11d729dd4 JSC::Wasm::OMGIRGenerator::addTableFill(unsigned int, JSC::B3::Variable*, JSC::B3::Variable*, JSC::B3::Variable*)
03:41:55.615 20919 worker/17   5   0x11d7c5758 JSC::Wasm::FunctionParser&lt;JSC::Wasm::OMGIRGenerator&gt;::parseExpression()
03:41:55.615 20919 worker/17   6   0x11d7b6b54 JSC::Wasm::FunctionParser&lt;JSC::Wasm::OMGIRGenerator&gt;::parseBody()
03:41:55.615 20919 worker/17   7   0x11d746968 JSC::Wasm::FunctionParser&lt;JSC::Wasm::OMGIRGenerator&gt;::parse()
03:41:55.615 20919 worker/17   8   0x11d74ab00 JSC::Wasm::parseAndCompileOMG(JSC::Wasm::CompilationContext&amp;, JSC::Wasm::OptimizingJITCallee&amp;, JSC::Wasm::FunctionData const&amp;, JSC::Wasm::TypeDefinition const&amp;, WTF::Vector&lt;JSC::Wasm::UnlinkedWasmToWasmCall, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;&amp;, JSC::Wasm::CalleeGroup&amp;, JSC::Wasm::ModuleInformation const&amp;, JSC::MemoryMode, JSC::Wasm::CompilationMode, unsigned int, std::__1::optional&lt;bool&gt;, unsigned int, JSC::Wasm::TierUpCount*)
03:41:55.615 20919 worker/17   9   0x11d80e458 JSC::Wasm::OMGPlan::work(JSC::Wasm::Plan::CompilationEffort)
03:41:55.616 20919 worker/17   10  0x11d8abfe0 JSC::Wasm::Worklist::Thread::work()
03:41:55.616 20919 worker/17   11  0x11b23c7a4 WTF::AutomaticThread::start(WTF::AbstractLocker const&amp;)::$_0::operator()() const
03:41:55.616 20919 worker/17   12  0x11b23c354 WTF::Detail::CallableWrapper&lt;WTF::AutomaticThread::start(WTF::AbstractLocker const&amp;)::$_0, void&gt;::call()
03:41:55.616 20919 worker/17   13  0x11b258b54 WTF::Function&lt;void ()&gt;::operator()() const
03:41:55.616 20919 worker/17   14  0x11b38ef1c WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
03:41:55.616 20919 worker/17   15  0x11b39b79c WTF::wtfThreadEntryPoint(void*)
03:41:55.616 20919 worker/17   16  0x184ea6f94 _pthread_start
03:41:55.616 20919 worker/17   17  0x184ea1d34 thread_start
03:41:55.616 20919 worker/17   com.apple.WebKit.WebContent.Development terminated (pid 30613) for reason: crash
03:41:55.616 20919 worker/17   LEAK: 1 WebPageProxy
03:41:55.616 20919 [73475/73536] workers/worker-user-gesture.html failed unexpectedly (com.apple.WebKit.WebContent.Development crashed [pid=30613])
03:41:55.616 20919 worker/17 killing driver
03:41:56.026 20919 worker/17 workers/worker-user-gesture.html failed:
03:41:56.026 20919 worker/17 com.apple.WebKit.WebContent.Development crashed [pid=30613]


Crash stack for test results #2:


04:33:36.346 30779 worker/15 worker/15 workers/wasm-references.html output stderr lines:
04:33:36.346 30779 worker/15   ASSERTION FAILED: ((opcode &amp; (1 &lt;&lt; 24)) - 1) == opcode
04:33:36.346 30779 worker/15   ./wasm/WasmOpcodeOrigin.h(56) : JSC::Wasm::OpcodeOrigin::OpcodeOrigin(OpType, uint32_t, size_t)
04:33:36.347 30779 worker/15   1   0x11caaa774 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
04:33:36.347 30779 worker/15   2   0x11ca8e778 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
04:33:36.347 30779 worker/15   3   0x11ca67eec JSC::Wasm::OMGIRGenerator::origin()
04:33:36.347 30779 worker/15   4   0x11ca6ddd4 JSC::Wasm::OMGIRGenerator::addTableFill(unsigned int, JSC::B3::Variable*, JSC::B3::Variable*, JSC::B3::Variable*)
04:33:36.347 30779 worker/15   5   0x11cb09758 JSC::Wasm::FunctionParser&lt;JSC::Wasm::OMGIRGenerator&gt;::parseExpression()
04:33:36.347 30779 worker/15   6   0x11cafab54 JSC::Wasm::FunctionParser&lt;JSC::Wasm::OMGIRGenerator&gt;::parseBody()
04:33:36.347 30779 worker/15   7   0x11ca8a968 JSC::Wasm::FunctionParser&lt;JSC::Wasm::OMGIRGenerator&gt;::parse()
04:33:36.356 30779 worker/15 com.apple.WebKit.WebContent.Development crash, pid = 40459
04:33:36.593 30779 worker/15 Couldn&apos;t quit 30938 with SIGTERM, sending SIGKILL.
04:33:36.648 30779 worker/15 killed pid 30938
04:33:36.651 30779 worker/15 Test workers/worker-user-gesture.html crashed, we will now gather a crash log.
04:35:06.668 30779 worker/15 worker/15 workers/worker-user-gesture.html crashed, (stderr lines):
04:35:06.669 30779 worker/15   8   0x11ca8eb00 JSC::Wasm::parseAndCompileOMG(JSC::Wasm::CompilationContext&amp;, JSC::Wasm::OptimizingJITCallee&amp;, JSC::Wasm::FunctionData const&amp;, JSC::Wasm::TypeDefinition const&amp;, WTF::Vector&lt;JSC::Wasm::UnlinkedWasmToWasmCall, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;&amp;, JSC::Wasm::CalleeGroup&amp;, JSC::Wasm::ModuleInformation const&amp;, JSC::MemoryMode, JSC::Wasm::CompilationMode, unsigned int, std::__1::optional&lt;bool&gt;, unsigned int, JSC::Wasm::TierUpCount*)
04:35:06.669 30779 worker/15   9   0x11cb52458 JSC::Wasm::OMGPlan::work(JSC::Wasm::Plan::CompilationEffort)
04:35:06.669 30779 worker/15   10  0x11cbeffe0 JSC::Wasm::Worklist::Thread::work()
04:35:06.669 30779 worker/15   11  0x11a5807a4 WTF::AutomaticThread::start(WTF::AbstractLocker const&amp;)::$_0::operator()() const
04:35:06.669 30779 worker/15   12  0x11a580354 WTF::Detail::CallableWrapper&lt;WTF::AutomaticThread::start(WTF::AbstractLocker const&amp;)::$_0, void&gt;::call()
04:35:06.669 30779 worker/15   13  0x11a59cb54 WTF::Function&lt;void ()&gt;::operator()() const
04:35:06.669 30779 worker/15   14  0x11a6d2f1c WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
04:35:06.669 30779 worker/15   15  0x11a6df79c WTF::wtfThreadEntryPoint(void*)
04:35:06.669 30779 worker/15   16  0x184ea6f94 _pthread_start
04:35:06.669 30779 worker/15   17  0x184ea1d34 thread_start
04:35:06.669 30779 worker/15   com.apple.WebKit.WebContent.Development terminated (pid 40459) for reason: crash
04:35:06.670 30779 worker/15   LEAK: 1 WebPageProxy
04:35:06.670 30779 [73472/73536] workers/worker-user-gesture.html failed unexpectedly (com.apple.WebKit.WebContent.Development crashed [pid=40459])
04:35:06.670 30779 worker/15 killing driver
04:35:06.903 30779 worker/2 imported/w3c/web-platform-tests/xhr/xmlhttprequest-timeout-worker-synconworker.html?timeout%20hit%20before%20load passed
04:35:07.208 30779 worker/15 workers/worker-user-gesture.html failed:
04:35:07.208 30779 worker/15 com.apple.WebKit.WebContent.Development crashed [pid=40459]</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2052743</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2024-08-14 09:00:02 -0700</bug_when>
    <thetext>&lt;rdar://problem/133845872&gt;</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>