Bug 242226

Summary:	[mac] WebCoreNSURLSession.mm: ASSERTION FAILED: _dataTasks.contains(task): http/tests/media/modern-media-controls/time-control/10-hours-or-more.html is randomly crashing
Product:	WebKit	Reporter:	Fujii Hironori <fujii.hironori>
Component:	Page Loading	Assignee:	Nobody <webkit-unassigned>
Status:	NEW
Severity:	Normal	CC:	achristensen, ap, beidson, hhjalmarsson, hi, webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
See Also:	https://bugs.webkit.org/show_bug.cgi?id=221698

Fujii Hironori

Reported 2022-06-30 23:10:57 PDT

[mac] WebCoreNSURLSession.mm: ASSERTION FAILED: _dataTasks.contains(task): http/tests/media/modern-media-controls/time-control/10-hours-or-more.html is randomly crashing https://results.webkit.org/?suite=layout-tests&test=http%2Ftests%2Fmedia%2Fmodern-media-controls%2Ftime-control%2F10-hours-or-more.html For example, 251950@main Buildbot: builder Apple-BigSur-Debug-AppleSilicon-WK2-Tests build 6685 https://build.webkit.org/#/builders/103/builds/6685 ASSERTION FAILED: _dataTasks.contains(task) /Volumes/Data/worker/Apple-BigSur-Debug-Build/build/Source/WebCore/platform/network/cocoa/WebCoreNSURLSession.mm(323) : -[WebCoreNSURLSession taskCompleted:] 1 0x142471fcc WTFCrash 2 0x11c443d20 WebCore::JSHTMLHeadElement::createPrototype(JSC::VM&, WebCore::JSDOMGlobalObject&) 3 0x12150fe10 -[WebCoreNSURLSession taskCompleted:] 4 0x12152fd58 -[WebCoreNSURLSessionDataTask _resource:loadFinishedWithError:metrics:]::$_17::operator()()::'lambda'()::operator()() const 5 0x12152fc18 WTF::Detail::CallableWrapper<-[WebCoreNSURLSessionDataTask _resource:loadFinishedWithError:metrics:]::$_17::operator()()::'lambda'(), void>::call() 6 0x14249ced8 WTF::Function<void ()>::operator()() const 7 0x142535150 WTF::RunLoop::performWork() 8 0x142539f18 WTF::RunLoop::performWork(void*) 9 0x191fa9744 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ 10 0x191fa9690 __CFRunLoopDoSource0 11 0x191fa937c __CFRunLoopDoSources0 12 0x191fa7d04 __CFRunLoopRun 13 0x191fa7258 CFRunLoopRunSpecific 14 0x192d52648 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] 15 0x192de4b30 -[NSRunLoop(NSRunLoop) run] 16 0x191c1f768 _xpc_objc_main 17 0x191c1ef94 xpc_main 18 0x105442914 WebKit::XPCServiceMain(int, char const**) 19 0x107853834 WKXPCServiceMain 20 0x10406ff18 main 21 0x191ec9430 start com.apple.WebKit.GPU.Development terminated (pid 45223) for reason: crash LEAK: 1 WebPageProxy

Attachments
Add attachment proposed patch, testcase, etc.

Fujii Hironori

Comment 1 2022-06-30 23:15:39 PDT

251903@main Buildbot: builder Apple-BigSur-Debug-WK2-Tests build 7339 https://build.webkit.org/#/builders/23/builds/7339

Alexey Proskuryakov

Comment 2 2022-07-04 11:42:02 PDT

> 2 0x11c443d20 WebCore::JSHTMLHeadElement::createPrototype(JSC::VM&, WebCore::JSDOMGlobalObject&) This would be shocking in the GPU Process - but it seems like incorrect WTF symbolication, as the actual crash log is more reasonable: 0 com.apple.JavaScriptCore 0x0000000142471fd4 WTFCrash + 20 (Assertions.cpp:328) 1 com.apple.WebCore 0x000000011c443d20 WTFCrashWithInfo(int, char const*, char const*, int) + 32 (Assertions.h:754) 2 com.apple.WebCore 0x000000012150fe10 -[WebCoreNSURLSession taskCompleted:] + 176 (WebCoreNSURLSession.mm:323) 3 com.apple.WebCore 0x000000012152fd58 -[WebCoreNSURLSessionDataTask _resource:loadFinishedWithError:metrics:]::$_17::operator()()::'lambda'()::operator()() const + 80 (WebCoreNSURLSession.mm:998) Still, no good.

Radar WebKit Bug Importer

Comment 3 2022-07-04 11:42:11 PDT

<rdar://problem/96403450>

Hercules Hjalmarsson

Comment 4 2022-07-14 12:22:39 PDT

http/tests/media/modern-media-controls/time-control/10-hours-or-more.html http/tests/media/modern-media-controls/time-control/less-than-10-minutes.html http/tests/media/modern-media-controls/time-control/10-minutes-to-1-hour.html http/tests/media/modern-media-controls/time-control/1-to-10-hours.html 4X http/tests/media/modern-media-controls/time-control (layout-tests) are very flakily crashing on macOS ToT. I'm not able to update the title. HISTORY: https://results.webkit.org/?suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&test=http%2Ftests%2Fmedia%2Fmodern-media-controls%2Ftime-control%2F1-to-10-hours.html&test=http%2Ftests%2Fmedia%2Fmodern-media-controls%2Ftime-control%2F10-hours-or-more.html&test=http%2Ftests%2Fmedia%2Fmodern-media-controls%2Ftime-control%2F10-minutes-to-1-hour.html&test=http%2Ftests%2Fmedia%2Fmodern-media-controls%2Ftime-control%2Fless-than-10-minutes.html These all appear to share the same/very similar crash stdio output: ASSERTION FAILED: _dataTasks.contains(task) /Volumes/Data/worker/Apple-BigSur-Debug-Build/build/Source/WebCore/platform/network/cocoa/WebCoreNSURLSession.mm(323) : -[WebCoreNSURLSession taskCompleted:] 1 0x142471fcc WTFCrash 2 0x11c443d20 WebCore::JSHTMLHeadElement::createPrototype(JSC::VM&, WebCore::JSDOMGlobalObject&) 3 0x12150fe10 -[WebCoreNSURLSession taskCompleted:] 4 0x12152fd58 -[WebCoreNSURLSessionDataTask _resource:loadFinishedWithError:metrics:]::$_17::operator()()::'lambda'()::operator()() const 5 0x12152fc18 WTF::Detail::CallableWrapper<-[WebCoreNSURLSessionDataTask _resource:loadFinishedWithError:metrics:]::$_17::operator()()::'lambda'(), void>::call() 6 0x14249ced8 WTF::Function<void ()>::operator()() const 7 0x142535150 WTF::RunLoop::performWork() 8 0x142539f18 WTF::RunLoop::performWork(void*) 9 0x191fa9744 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ 10 0x191fa9690 __CFRunLoopDoSource0 11 0x191fa937c __CFRunLoopDoSources0 12 0x191fa7d04 __CFRunLoopRun 13 0x191fa7258 CFRunLoopRunSpecific 14 0x192d52648 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] 15 0x192de4b30 -[NSRunLoop(NSRunLoop) run] 16 0x191c1f768 _xpc_objc_main 17 0x191c1ef94 xpc_main 18 0x105442914 WebKit::XPCServiceMain(int, char const**) 19 0x107853834 WKXPCServiceMain 20 0x10406ff18 main 21 0x191ec9430 start com.apple.WebKit.GPU.Development terminated (pid 45223) for reason: crash CRASH LOG URL(s): https://build.webkit.org/results/Apple-Monterey-Debug-AppleSilicon-WK2-Tests/252322@m[…]dia-controls/time-control/10-minutes-to-1-hour-crash-log.txt https://build.webkit.org/results/Apple-Monterey-Debug-AppleSilicon-WK2-Tests/252251@m[…]n-media-controls/time-control/10-hours-or-more-crash-log.txt https://build.webkit.org/results/Apple-Monterey-Debug-AppleSilicon-WK2-Tests/252398@m[…]dia-controls/time-control/less-than-10-minutes-crash-log.txt https://build.webkit.org/results/Apple-Monterey-Debug-AppleSilicon-WK2-Tests/251263@m[…]dern-media-controls/time-control/1-to-10-hours-crash-log.txt

Hercules Hjalmarsson

Comment 5 2022-07-14 12:27:11 PDT

I'm able to reproduce this crash on macOS ToT running 1k iterations of command: run-webkit-tests -f --force http/tests/media/modern-media-controls/time-control/10-hours-or-more.html

EWS

Comment 6 2022-07-14 12:45:32 PDT

Test gardening commit 252471@main (29784aacc481): <https://commits.webkit.org/252471@main> Reviewed commits have been landed. Closing PR #2422 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.