Bug 278744 – REGRESSION(282559@main?): [macOS Debug wk2] 2 tests in imported/w3c/web-platform-tests/html/semantics/embedded-content/media-elements are flaky crashes with "post-layout: dirty renderer(s)" (failure in EWS)

• Status: NEW
• Component: Layout and Rendering

[Marta Darbinyan]

The following tests are a flaky crash on macOS Sonoma and Ventura Debug wk2. The crashes occurred around the time of change 282559@main

imported/w3c/web-platform-tests/html/semantics/embedded-content/media-elements/ready-states/autoplay-with-slow-text-tracks.html
imported/w3c/web-platform-tests/html/semantics/embedded-content/media-elements/autoplay-with-broken-track.html

This issue can be reproduced by using the command: 
run-webkit-tests --root  --exit-after-n-failures 10 --debug <test>

Test output:
STDERR: warning: Section `.reg-xstate/693291' in core file too small.
STDERR: ERROR: post-layout: dirty renderer(s)
STDERR: /app/webkit/Source/WebCore/page/LocalFrameViewLayoutContext.cpp(88) : WebCore::RenderTreeNeedsLayoutChecker::~RenderTreeNeedsLayoutChecker()::<lambda(const WebCore::RenderObject&)>


History:
https://results.webkit.org/?suite=layout-tests&suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Fhtml%2Fsemantics%2Fembedded-content%2Fmedia-elements%2Fready-states%2Fautoplay-with-slow-text-tracks.html&test=imported%2Fw3c%2Fweb-platform-tests%2Fhtml%2Fsemantics%2Fembedded-content%2Fmedia-elements%2Fautoplay-with-broken-track.html&flavor=wk2&style=debug

Link:
https://build.webkit.org/results/GTK-Linux-64-bit-Debug-Tests/282559@main%20(14090)/results.html#

Full crash log: 
https://build.webkit.org/results/Apple-Sonoma-Debug-AppleSilicon-WK2-Tests/282772@main%20(3862)/imported/w3c/web-platform-tests/html/semantics/embedded-content/media-elements/ready-states/autoplay-with-slow-text-tracks-crash-log.txt

[Radar WebKit Bug Importer]

<rdar://problem/134810928>

[EWS]

Test gardening commit 282822@main (06665c11de78): <https://commits.webkit.org/282822@main>

Reviewed commits have been landed. Closing PR #32787 and removing active labels.

[Alexey Proskuryakov]

SHOULD NEVER BE REACHED
/Volumes/Data/worker/Apple-Sonoma-Debug-Build/build/Source/WebCore/page/LocalFrameViewLayoutContext.cpp(93) : auto WebCore::RenderTreeNeedsLayoutChecker::~RenderTreeNeedsLayoutChecker()::(anonymous class)::operator()(const RenderObject &) const
1   0x3627377c0 WebCore::RenderTreeNeedsLayoutChecker::~RenderTreeNeedsLayoutChecker()::'lambda'(WebCore::RenderObject const&)::operator()(WebCore::RenderObject const&) const
2   0x362737718 WebCore::RenderTreeNeedsLayoutChecker::~RenderTreeNeedsLayoutChecker()
3   0x362728efc WebCore::RenderTreeNeedsLayoutChecker::~RenderTreeNeedsLayoutChecker()
4   0x36272838c WebCore::LocalFrameViewLayoutContext::performLayout()
5   0x3627278c0 WebCore::LocalFrameViewLayoutContext::layout()
6   0x3615aeac0 WebCore::Document::resolveStyle(WebCore::Document::ResolveStyleType)
7   0x3615af6e4 WebCore::Document::updateStyleIfNeeded()
8   0x3615afadc WebCore::Document::updateLayout(WTF::OptionSet<WebCore::LayoutOptions>, WebCore::Element const*)
9   0x3615ab0e8 WebCore::Document::updateLayoutIgnorePendingStylesheets(WTF::OptionSet<WebCore::LayoutOptions>, WebCore::Element const*)
10  0x360ee10a4 WebCore::ComputedStyleExtractor::propertyValue(WebCore::CSSPropertyID, WebCore::ComputedStyleExtractor::UpdateLayout, WebCore::ComputedStyleExtractor::PropertyValueType) const
11  0x360d38294 WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue(WebCore::CSSPropertyID, WebCore::ComputedStyleExtractor::UpdateLayout) const
12  0x360d38464 WebCore::CSSComputedStyleDeclaration::getPropertyValue(WebCore::CSSPropertyID) const
13  0x360d38f04 WebCore::CSSComputedStyleDeclaration::getPropertyValueInternal(WebCore::CSSPropertyID)
14  0x360e6e9dc WebCore::CSSStyleDeclaration::propertyValueForCamelCasedIDLAttribute(WTF::AtomString const&)
15  0x35dc1f66c WebCore::jsCSSStyleDeclaration_propertyValueForCamelCasedIDLAttributeGetter(JSC::JSGlobalObject&, WebCore::JSCSSStyleDeclaration&, JSC::PropertyName)
16  0x35db5f178 long long WebCore::IDLAttribute<WebCore::JSCSSStyleDeclaration>::getPassingPropertyName<&WebCore::jsCSSStyleDeclaration_propertyValueForCamelCasedIDLAttributeGetter(JSC::JSGlobalObject&, WebCore::JSCSSStyleDeclaration&, JSC::PropertyName), (WebCore::CastedThisErrorBehavior)3>(JSC::JSGlobalObject&, long long, JSC::PropertyName)
17  0x35db5f02c WebCore::jsCSSStyleDeclaration_propertyValueForCamelCasedIDLAttribute(JSC::JSGlobalObject*, long long, JSC::PropertyName)
18  0x12875e02c WTF::FunctionPtr<(WTF::PtrTag)57072, long long (JSC::JSGlobalObject*, long long, JSC::PropertyName), (WTF::FunctionAttributes)1>::operator()(JSC::JSGlobalObject*, long long, JSC::PropertyName) const
19  0x1289f98a8 JSC::PropertySlot::customGetter(JSC::VM&, JSC::PropertyName) const
20  0x128724c64 JSC::PropertySlot::getValue(JSC::JSGlobalObject*, JSC::PropertyName) const
21  0x127d9b3b8 JSC::JSValue::get(JSC::JSGlobalObject*, JSC::PropertyName, JSC::PropertySlot&) const
22  0x128460960 JSC::LLInt::performLLIntGetByID(JSC::BytecodeIndex, JSC::CodeBlock*, JSC::JSGlobalObject*, JSC::JSValue, JSC::Identifier const&, JSC::GetByIdModeMetadata&)
23  0x128460760 llint_slow_path_get_by_id
24  0x1292bda78 llint_entry
25  0x1292d9d0c llint_entry
26  0x1292d9d0c llint_entry
27  0x1292b1ab4 vmEntryToJavaScript
28  0x1282b0754 JSC::Interpreter::executeCallImpl(JSC::VM&, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
29  0x1282b0844 JSC::Interpreter::executeCall(JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
30  0x12857fb80 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
31  0x12857fc38 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&)

[EWS]

Test gardening commit 282848@main (d41e6c40278f): <https://commits.webkit.org/282848@main>

Reviewed commits have been landed. Closing PR #32837 and removing active labels.