<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>307835</bug_id>
          
          <creation_ts>2026-02-13 12:19:42 -0800</creation_ts>
          <short_desc>REGRESSION(307241@main?): [macOS iOS] ASSERTION FAILED: m_ptr /Volumes/Data/worker/Apple-Tahoe-Debug-Build/build/WebKitBuild/Debug/usr/local/include/wtf/RefPtr.</short_desc>
          <delta_ts>2026-02-13 14:45:41 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>307794</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Marta Darbinyan">darbinyan</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>cdumez</cc>
    
    <cc>webkit-bot-watchers-bugzilla</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>youennf</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2181430</commentid>
    <comment_count>0</comment_count>
    <who name="Marta Darbinyan">darbinyan</who>
    <bug_when>2026-02-13 12:19:42 -0800</bug_when>
    <thetext>The following crash is occurring on macOS and iOS after 307241@main on streams/blob-and-tee.html.

The test is crashing on EWS bots and triggering re-tries.

ASSERTION FAILED: m_ptr
/Volumes/Data/worker/Apple-Tahoe-Debug-Build/build/WebKitBuild/Debug/usr/local/include/wtf/RefPtr.h(79) : T &amp;WTF::RefPtr&lt;WebCore::ReadableStream&gt;::operator*() const [T = WebCore::ReadableStream, _PtrTraits = WTF::RawPtrTraits&lt;WebCore::ReadableStream&gt;, _RefDerefTraits = WTF::DefaultRefDerefTraits&lt;WebCore::ReadableStream&gt;]
1   0x34b84615c WTF::RefPtr&lt;WebCore::ReadableStream, WTF::RawPtrTraits&lt;WebCore::ReadableStream&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::ReadableStream&gt;&gt;::operator*() const
2   0x34ce138d8 WTF::RefPtr&lt;WebCore::ReadableStream, WTF::RawPtrTraits&lt;WebCore::ReadableStream&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::ReadableStream&gt;&gt;::operator-&gt;() const
3   0x34d6e94d4 WebCore::TeeBYOBReadRequest::runChunkStepsInMicrotask(JSC::JSValue)
4   0x34d6e905c auto WebCore::TeeBYOBReadRequest::runChunkSteps(JSC::JSValue)::&apos;lambda&apos;(auto)::operator()&lt;JSC::JSValue&gt;(auto) const
5   0x34d6e8dd0 WTF::Detail::CallableWrapper&lt;WebCore::TeeBYOBReadRequest::runChunkSteps(JSC::JSValue)::&apos;lambda&apos;(auto), void, JSC::JSValue&gt;::call(JSC::JSValue)
6   0x34d6e3958 WTF::Function&lt;void (JSC::JSValue)&gt;::operator()(JSC::JSValue) const
7   0x34d6e38a8 WebCore::StreamTeeState::queueMicrotaskWithValue(JSC::JSValue, WTF::Function&lt;void (JSC::JSValue)&gt;&amp;&amp;)::&apos;lambda&apos;()::operator()() const
8   0x34d6e37d8 WTF::Detail::CallableWrapper&lt;WebCore::StreamTeeState::queueMicrotaskWithValue(JSC::JSValue, WTF::Function&lt;void (JSC::JSValue)&gt;&amp;&amp;)::&apos;lambda&apos;(), void&gt;::call()
9   0x349437180 WTF::Function&lt;void ()&gt;::operator()() const
10  0x34ee05a50 WebCore::EventLoopFunctionMicrotaskDispatcher::run(JSC::QueuedTask&amp;)
11  0x34ee9ca6c WebCore::MicrotaskQueue::performMicrotaskCheckpoint()::$_0::operator()(JSC::QueuedTask&amp;) const
12  0x34ee7be64 void JSC::MicrotaskQueue::performMicrotaskCheckpoint&lt;false, WebCore::MicrotaskQueue::performMicrotaskCheckpoint()::$_0&gt;(JSC::VM&amp;, WebCore::MicrotaskQueue::performMicrotaskCheckpoint()::$_0 const&amp;)
13  0x34ee7bac8 WebCore::MicrotaskQueue::performMicrotaskCheckpoint()
14  0x34edf8c54 WebCore::EventLoop::performMicrotaskCheckpoint()
15  0x34edf9aa8 WebCore::EventLoop::run(std::__1::optional&lt;WTF::ApproximateTime&gt;)
16  0x34f01495c WebCore::WindowEventLoop::didReachTimeToRun()
17  0x34f01ae24 WebCore::Timer::Timer&lt;WebCore::WindowEventLoop, WebCore::WindowEventLoop&gt;(WebCore::WindowEventLoop&amp;, void (WebCore::WindowEventLoop::*)())::&apos;lambda&apos;()::operator()() const
18  0x34f01ac7c WTF::Detail::CallableWrapper&lt;WebCore::Timer::Timer&lt;WebCore::WindowEventLoop, WebCore::WindowEventLoop&gt;(WebCore::WindowEventLoop&amp;, void (WebCore::WindowEventLoop::*)())::&apos;lambda&apos;(), void&gt;::call()
19  0x349437180 WTF::Function&lt;void ()&gt;::operator()() const
20  0x349588094 WebCore::Timer::fired()
21  0x3503e1bc0 WebCore::ThreadTimers::sharedTimerFiredInternal()
22  0x3503ebef4 WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0::operator()() const
23  0x3503ebea0 WTF::Detail::CallableWrapper&lt;WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0, void&gt;::call()
24  0x349437180 WTF::Function&lt;void ()&gt;::operator()() const
25  0x35037644c WebCore::MainThreadSharedTimer::fired()
26  0x3504f7368 WebCore::timerFired(__CFRunLoopTimer*, void*)
27  0x182a0f18c __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__
28  0x182a0ee4c __CFRunLoopDoTimer
29  0x182a0e9c4 __CFRunLoopDoTimers
30  0x1829ff76c __CFRunLoopRun
31  0x182ab9e34 _CFRunLoopRunSpecificWithOptions
com.apple.WebKit.WebContent.Development terminated (pid 31163) for reason: crash

Test results:
https://build.webkit.org/results/Apple-Tahoe-Debug-AppleSilicon-WK2-Tests/307467@main%20(845)/results.html

Test history:
https://results.webkit.org/?suite=layout-tests&amp;test=streams%2Fblob-and-tee.html&amp;flavor=wk2</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2181431</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2026-02-13 12:20:17 -0800</bug_when>
    <thetext>&lt;rdar://problem/170338139&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2181459</commentid>
    <comment_count>2</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2026-02-13 13:16:53 -0800</bug_when>
    <thetext>Test gardening commit 307509@main (5b4d8ee94b08): &lt;https://commits.webkit.org/307509@main&gt;

Reviewed commits have been landed. Closing PR #58660 and removing active labels.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2181504</commentid>
    <comment_count>3</comment_count>
    <who name="youenn fablet">youennf</who>
    <bug_when>2026-02-13 14:45:41 -0800</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 307794 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>