Bug 278106 – [WASM] workers/worker-user-gesture.html is a flakey EWS crash

• Component: WebAssembly
• Status: NEW

[David Kilzer (:ddkilzer)]

[WASM] workers/worker-user-gesture.html is a flakey EWS crash.

PR: <https://github.com/WebKit/WebKit/pull/32164>
Test run: <https://ews-build.webkit.org/#/builders/62/builds/11469>
Test results #1: <https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sonoma-Debug-WK2-Tests-EWS/b77b4d0a-11469/results.html>
Test results #2: <https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sonoma-Debug-WK2-Tests-EWS/b77b4d0a-11469-rerun/results.html>
Test history:  <https://results.webkit.org/?suite=layout-tests&test=workers%2Fworker-user-gesture.html>


Crash stack for test results #1:


03:40:25.298 20919 worker/17 worker/17 workers/wasm-references.html output stderr lines:
03:40:25.298 20919 worker/17   ASSERTION FAILED: ((opcode & (1 << 24)) - 1) == opcode
03:40:25.298 20919 worker/17   ./wasm/WasmOpcodeOrigin.h(56) : JSC::Wasm::OpcodeOrigin::OpcodeOrigin(OpType, uint32_t, size_t)
03:40:25.298 20919 worker/17   1   0x11d766774 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
03:40:25.298 20919 worker/17   2   0x11d74a778 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
03:40:25.300 20919 worker/17 workers/wasm-references.html passed
03:40:25.309 20919 worker/17 com.apple.WebKit.WebContent.Development crash, pid = 30613
03:40:25.351 20919 worker/15 stopping
03:40:25.523 20919 worker/17 Couldn't quit 21080 with SIGTERM, sending SIGKILL.
03:40:25.577 20919 worker/17 killed pid 21080
03:40:25.578 20919 worker/17 Test workers/worker-user-gesture.html crashed, we will now gather a crash log.
03:41:55.615 20919 worker/17 worker/17 workers/worker-user-gesture.html crashed, (stderr lines):
03:41:55.615 20919 worker/17   3   0x11d723eec JSC::Wasm::OMGIRGenerator::origin()
03:41:55.615 20919 worker/17   4   0x11d729dd4 JSC::Wasm::OMGIRGenerator::addTableFill(unsigned int, JSC::B3::Variable*, JSC::B3::Variable*, JSC::B3::Variable*)
03:41:55.615 20919 worker/17   5   0x11d7c5758 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseExpression()
03:41:55.615 20919 worker/17   6   0x11d7b6b54 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseBody()
03:41:55.615 20919 worker/17   7   0x11d746968 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parse()
03:41:55.615 20919 worker/17   8   0x11d74ab00 JSC::Wasm::parseAndCompileOMG(JSC::Wasm::CompilationContext&, JSC::Wasm::OptimizingJITCallee&, JSC::Wasm::FunctionData const&, JSC::Wasm::TypeDefinition const&, WTF::Vector<JSC::Wasm::UnlinkedWasmToWasmCall, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, JSC::Wasm::CalleeGroup&, JSC::Wasm::ModuleInformation const&, JSC::MemoryMode, JSC::Wasm::CompilationMode, unsigned int, std::__1::optional<bool>, unsigned int, JSC::Wasm::TierUpCount*)
03:41:55.615 20919 worker/17   9   0x11d80e458 JSC::Wasm::OMGPlan::work(JSC::Wasm::Plan::CompilationEffort)
03:41:55.616 20919 worker/17   10  0x11d8abfe0 JSC::Wasm::Worklist::Thread::work()
03:41:55.616 20919 worker/17   11  0x11b23c7a4 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const
03:41:55.616 20919 worker/17   12  0x11b23c354 WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call()
03:41:55.616 20919 worker/17   13  0x11b258b54 WTF::Function<void ()>::operator()() const
03:41:55.616 20919 worker/17   14  0x11b38ef1c WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
03:41:55.616 20919 worker/17   15  0x11b39b79c WTF::wtfThreadEntryPoint(void*)
03:41:55.616 20919 worker/17   16  0x184ea6f94 _pthread_start
03:41:55.616 20919 worker/17   17  0x184ea1d34 thread_start
03:41:55.616 20919 worker/17   com.apple.WebKit.WebContent.Development terminated (pid 30613) for reason: crash
03:41:55.616 20919 worker/17   LEAK: 1 WebPageProxy
03:41:55.616 20919 [73475/73536] workers/worker-user-gesture.html failed unexpectedly (com.apple.WebKit.WebContent.Development crashed [pid=30613])
03:41:55.616 20919 worker/17 killing driver
03:41:56.026 20919 worker/17 workers/worker-user-gesture.html failed:
03:41:56.026 20919 worker/17 com.apple.WebKit.WebContent.Development crashed [pid=30613]


Crash stack for test results #2:


04:33:36.346 30779 worker/15 worker/15 workers/wasm-references.html output stderr lines:
04:33:36.346 30779 worker/15   ASSERTION FAILED: ((opcode & (1 << 24)) - 1) == opcode
04:33:36.346 30779 worker/15   ./wasm/WasmOpcodeOrigin.h(56) : JSC::Wasm::OpcodeOrigin::OpcodeOrigin(OpType, uint32_t, size_t)
04:33:36.347 30779 worker/15   1   0x11caaa774 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
04:33:36.347 30779 worker/15   2   0x11ca8e778 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
04:33:36.347 30779 worker/15   3   0x11ca67eec JSC::Wasm::OMGIRGenerator::origin()
04:33:36.347 30779 worker/15   4   0x11ca6ddd4 JSC::Wasm::OMGIRGenerator::addTableFill(unsigned int, JSC::B3::Variable*, JSC::B3::Variable*, JSC::B3::Variable*)
04:33:36.347 30779 worker/15   5   0x11cb09758 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseExpression()
04:33:36.347 30779 worker/15   6   0x11cafab54 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseBody()
04:33:36.347 30779 worker/15   7   0x11ca8a968 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parse()
04:33:36.356 30779 worker/15 com.apple.WebKit.WebContent.Development crash, pid = 40459
04:33:36.593 30779 worker/15 Couldn't quit 30938 with SIGTERM, sending SIGKILL.
04:33:36.648 30779 worker/15 killed pid 30938
04:33:36.651 30779 worker/15 Test workers/worker-user-gesture.html crashed, we will now gather a crash log.
04:35:06.668 30779 worker/15 worker/15 workers/worker-user-gesture.html crashed, (stderr lines):
04:35:06.669 30779 worker/15   8   0x11ca8eb00 JSC::Wasm::parseAndCompileOMG(JSC::Wasm::CompilationContext&, JSC::Wasm::OptimizingJITCallee&, JSC::Wasm::FunctionData const&, JSC::Wasm::TypeDefinition const&, WTF::Vector<JSC::Wasm::UnlinkedWasmToWasmCall, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, JSC::Wasm::CalleeGroup&, JSC::Wasm::ModuleInformation const&, JSC::MemoryMode, JSC::Wasm::CompilationMode, unsigned int, std::__1::optional<bool>, unsigned int, JSC::Wasm::TierUpCount*)
04:35:06.669 30779 worker/15   9   0x11cb52458 JSC::Wasm::OMGPlan::work(JSC::Wasm::Plan::CompilationEffort)
04:35:06.669 30779 worker/15   10  0x11cbeffe0 JSC::Wasm::Worklist::Thread::work()
04:35:06.669 30779 worker/15   11  0x11a5807a4 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const
04:35:06.669 30779 worker/15   12  0x11a580354 WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call()
04:35:06.669 30779 worker/15   13  0x11a59cb54 WTF::Function<void ()>::operator()() const
04:35:06.669 30779 worker/15   14  0x11a6d2f1c WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
04:35:06.669 30779 worker/15   15  0x11a6df79c WTF::wtfThreadEntryPoint(void*)
04:35:06.669 30779 worker/15   16  0x184ea6f94 _pthread_start
04:35:06.669 30779 worker/15   17  0x184ea1d34 thread_start
04:35:06.669 30779 worker/15   com.apple.WebKit.WebContent.Development terminated (pid 40459) for reason: crash
04:35:06.670 30779 worker/15   LEAK: 1 WebPageProxy
04:35:06.670 30779 [73472/73536] workers/worker-user-gesture.html failed unexpectedly (com.apple.WebKit.WebContent.Development crashed [pid=40459])
04:35:06.670 30779 worker/15 killing driver
04:35:06.903 30779 worker/2 imported/w3c/web-platform-tests/xhr/xmlhttprequest-timeout-worker-synconworker.html?timeout%20hit%20before%20load passed
04:35:07.208 30779 worker/15 workers/worker-user-gesture.html failed:
04:35:07.208 30779 worker/15 com.apple.WebKit.WebContent.Development crashed [pid=40459]

[Radar WebKit Bug Importer]

<rdar://problem/133845872>