NEW 278106
[WASM] workers/worker-user-gesture.html is a flakey EWS crash 
https://bugs.webkit.org/show_bug.cgi?id=278106
Summary [WASM] workers/worker-user-gesture.html is a flakey EWS crash
David Kilzer (:ddkilzer)
Reported 2024-08-14 08:59:42 PDT
[WASM] workers/worker-user-gesture.html is a flakey EWS crash. PR: <https://github.com/WebKit/WebKit/pull/32164> Test run: <https://ews-build.webkit.org/#/builders/62/builds/11469> Test results #1: <https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sonoma-Debug-WK2-Tests-EWS/b77b4d0a-11469/results.html> Test results #2: <https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sonoma-Debug-WK2-Tests-EWS/b77b4d0a-11469-rerun/results.html> Test history: <https://results.webkit.org/?suite=layout-tests&test=workers%2Fworker-user-gesture.html> Crash stack for test results #1: 03:40:25.298 20919 worker/17 worker/17 workers/wasm-references.html output stderr lines: 03:40:25.298 20919 worker/17 ASSERTION FAILED: ((opcode & (1 << 24)) - 1) == opcode 03:40:25.298 20919 worker/17 ./wasm/WasmOpcodeOrigin.h(56) : JSC::Wasm::OpcodeOrigin::OpcodeOrigin(OpType, uint32_t, size_t) 03:40:25.298 20919 worker/17 1 0x11d766774 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long) 03:40:25.298 20919 worker/17 2 0x11d74a778 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long) 03:40:25.300 20919 worker/17 workers/wasm-references.html passed 03:40:25.309 20919 worker/17 com.apple.WebKit.WebContent.Development crash, pid = 30613 03:40:25.351 20919 worker/15 stopping 03:40:25.523 20919 worker/17 Couldn't quit 21080 with SIGTERM, sending SIGKILL. 03:40:25.577 20919 worker/17 killed pid 21080 03:40:25.578 20919 worker/17 Test workers/worker-user-gesture.html crashed, we will now gather a crash log. 03:41:55.615 20919 worker/17 worker/17 workers/worker-user-gesture.html crashed, (stderr lines): 03:41:55.615 20919 worker/17 3 0x11d723eec JSC::Wasm::OMGIRGenerator::origin() 03:41:55.615 20919 worker/17 4 0x11d729dd4 JSC::Wasm::OMGIRGenerator::addTableFill(unsigned int, JSC::B3::Variable*, JSC::B3::Variable*, JSC::B3::Variable*) 03:41:55.615 20919 worker/17 5 0x11d7c5758 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseExpression() 03:41:55.615 20919 worker/17 6 0x11d7b6b54 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseBody() 03:41:55.615 20919 worker/17 7 0x11d746968 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parse() 03:41:55.615 20919 worker/17 8 0x11d74ab00 JSC::Wasm::parseAndCompileOMG(JSC::Wasm::CompilationContext&, JSC::Wasm::OptimizingJITCallee&, JSC::Wasm::FunctionData const&, JSC::Wasm::TypeDefinition const&, WTF::Vector<JSC::Wasm::UnlinkedWasmToWasmCall, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, JSC::Wasm::CalleeGroup&, JSC::Wasm::ModuleInformation const&, JSC::MemoryMode, JSC::Wasm::CompilationMode, unsigned int, std::__1::optional<bool>, unsigned int, JSC::Wasm::TierUpCount*) 03:41:55.615 20919 worker/17 9 0x11d80e458 JSC::Wasm::OMGPlan::work(JSC::Wasm::Plan::CompilationEffort) 03:41:55.616 20919 worker/17 10 0x11d8abfe0 JSC::Wasm::Worklist::Thread::work() 03:41:55.616 20919 worker/17 11 0x11b23c7a4 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const 03:41:55.616 20919 worker/17 12 0x11b23c354 WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call() 03:41:55.616 20919 worker/17 13 0x11b258b54 WTF::Function<void ()>::operator()() const 03:41:55.616 20919 worker/17 14 0x11b38ef1c WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) 03:41:55.616 20919 worker/17 15 0x11b39b79c WTF::wtfThreadEntryPoint(void*) 03:41:55.616 20919 worker/17 16 0x184ea6f94 _pthread_start 03:41:55.616 20919 worker/17 17 0x184ea1d34 thread_start 03:41:55.616 20919 worker/17 com.apple.WebKit.WebContent.Development terminated (pid 30613) for reason: crash 03:41:55.616 20919 worker/17 LEAK: 1 WebPageProxy 03:41:55.616 20919 [73475/73536] workers/worker-user-gesture.html failed unexpectedly (com.apple.WebKit.WebContent.Development crashed [pid=30613]) 03:41:55.616 20919 worker/17 killing driver 03:41:56.026 20919 worker/17 workers/worker-user-gesture.html failed: 03:41:56.026 20919 worker/17 com.apple.WebKit.WebContent.Development crashed [pid=30613] Crash stack for test results #2: 04:33:36.346 30779 worker/15 worker/15 workers/wasm-references.html output stderr lines: 04:33:36.346 30779 worker/15 ASSERTION FAILED: ((opcode & (1 << 24)) - 1) == opcode 04:33:36.346 30779 worker/15 ./wasm/WasmOpcodeOrigin.h(56) : JSC::Wasm::OpcodeOrigin::OpcodeOrigin(OpType, uint32_t, size_t) 04:33:36.347 30779 worker/15 1 0x11caaa774 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long) 04:33:36.347 30779 worker/15 2 0x11ca8e778 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long) 04:33:36.347 30779 worker/15 3 0x11ca67eec JSC::Wasm::OMGIRGenerator::origin() 04:33:36.347 30779 worker/15 4 0x11ca6ddd4 JSC::Wasm::OMGIRGenerator::addTableFill(unsigned int, JSC::B3::Variable*, JSC::B3::Variable*, JSC::B3::Variable*) 04:33:36.347 30779 worker/15 5 0x11cb09758 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseExpression() 04:33:36.347 30779 worker/15 6 0x11cafab54 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseBody() 04:33:36.347 30779 worker/15 7 0x11ca8a968 JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parse() 04:33:36.356 30779 worker/15 com.apple.WebKit.WebContent.Development crash, pid = 40459 04:33:36.593 30779 worker/15 Couldn't quit 30938 with SIGTERM, sending SIGKILL. 04:33:36.648 30779 worker/15 killed pid 30938 04:33:36.651 30779 worker/15 Test workers/worker-user-gesture.html crashed, we will now gather a crash log. 04:35:06.668 30779 worker/15 worker/15 workers/worker-user-gesture.html crashed, (stderr lines): 04:35:06.669 30779 worker/15 8 0x11ca8eb00 JSC::Wasm::parseAndCompileOMG(JSC::Wasm::CompilationContext&, JSC::Wasm::OptimizingJITCallee&, JSC::Wasm::FunctionData const&, JSC::Wasm::TypeDefinition const&, WTF::Vector<JSC::Wasm::UnlinkedWasmToWasmCall, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, JSC::Wasm::CalleeGroup&, JSC::Wasm::ModuleInformation const&, JSC::MemoryMode, JSC::Wasm::CompilationMode, unsigned int, std::__1::optional<bool>, unsigned int, JSC::Wasm::TierUpCount*) 04:35:06.669 30779 worker/15 9 0x11cb52458 JSC::Wasm::OMGPlan::work(JSC::Wasm::Plan::CompilationEffort) 04:35:06.669 30779 worker/15 10 0x11cbeffe0 JSC::Wasm::Worklist::Thread::work() 04:35:06.669 30779 worker/15 11 0x11a5807a4 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const 04:35:06.669 30779 worker/15 12 0x11a580354 WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call() 04:35:06.669 30779 worker/15 13 0x11a59cb54 WTF::Function<void ()>::operator()() const 04:35:06.669 30779 worker/15 14 0x11a6d2f1c WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) 04:35:06.669 30779 worker/15 15 0x11a6df79c WTF::wtfThreadEntryPoint(void*) 04:35:06.669 30779 worker/15 16 0x184ea6f94 _pthread_start 04:35:06.669 30779 worker/15 17 0x184ea1d34 thread_start 04:35:06.669 30779 worker/15 com.apple.WebKit.WebContent.Development terminated (pid 40459) for reason: crash 04:35:06.670 30779 worker/15 LEAK: 1 WebPageProxy 04:35:06.670 30779 [73472/73536] workers/worker-user-gesture.html failed unexpectedly (com.apple.WebKit.WebContent.Development crashed [pid=40459]) 04:35:06.670 30779 worker/15 killing driver 04:35:06.903 30779 worker/2 imported/w3c/web-platform-tests/xhr/xmlhttprequest-timeout-worker-synconworker.html?timeout%20hit%20before%20load passed 04:35:07.208 30779 worker/15 workers/worker-user-gesture.html failed: 04:35:07.208 30779 worker/15 com.apple.WebKit.WebContent.Development crashed [pid=40459]
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2024-08-14 09:00:02 PDT
<rdar://problem/133845872>
Note You need to log in before you can comment on or make changes to this bug.