<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>301566</bug_id>
          
          <creation_ts>2025-10-28 06:11:20 -0700</creation_ts>
          <short_desc>[Debug] [mac-wk2] ASSERTION FAILED: registry on `custom-elements/registries/Element-innerHTML.html`</short_desc>
          <delta_ts>2025-11-04 05:12:11 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>Safari Technology Preview</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>154907</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Ahmad Saleem">ahmad.saleem792</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>annevk</cc>
    
    <cc>rniwa</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2154692</commentid>
    <comment_count>0</comment_count>
    <who name="Ahmad Saleem">ahmad.saleem792</who>
    <bug_when>2025-10-28 06:11:20 -0700</bug_when>
    <thetext>Hi Team,

While importing custom-elements/registries/ from WPT Upstream in PR - https://github.com/WebKit/WebKit/pull/53067 , I noticed that we crash on debug Mac-wk2 for &apos;Element-innerHTML.html&apos;.

**** Crash Log ***

stderr:
ASSERTION FAILED: registry
/Volumes/Data/worker/macOS-Tahoe-Debug-Build-EWS/build/Source/WebCore/bindings/js/JSCustomElementInterface.cpp(228) : void WebCore::JSCustomElementInterface::upgradeElement(Element &amp;)
1   0x3046d40e0 WebCore::JSCustomElementInterface::upgradeElement(WebCore::Element&amp;)
2   0x3053fe144 WebCore::CustomElementReactionQueueItem::invoke(WebCore::Element&amp;, WebCore::JSCustomElementInterface&amp;)
3   0x3053fdea0 WebCore::CustomElementReactionQueue::invokeAll(WebCore::Element&amp;)
4   0x3053feb0c WebCore::CustomElementQueue::invokeAll()
5   0x3053fe8d4 WebCore::CustomElementQueue::processQueue(JSC::JSGlobalObject*)
6   0x300b4358c WebCore::CustomElementReactionStack::~CustomElementReactionStack()
7   0x300b432e8 WebCore::CustomElementReactionStack::~CustomElementReactionStack()
8   0x301486a68 WebCore::setJSElement_innerHTMLSetter(JSC::JSGlobalObject&amp;, WebCore::JSElement&amp;, JSC::JSValue)
9   0x30133e7c8 bool WebCore::IDLAttribute&lt;WebCore::JSElement&gt;::set&lt;&amp;WebCore::setJSElement_innerHTMLSetter(JSC::JSGlobalObject&amp;, WebCore::JSElement&amp;, JSC::JSValue), (WebCore::CastedThisErrorBehavior)0&gt;(JSC::JSGlobalObject&amp;, long long, long long, JSC::PropertyName)
10  0x30133e6ac WebCore::setJSElement_innerHTML(JSC::JSGlobalObject*, long long, long long, JSC::PropertyName)
11  0x12de5bbd0 WTF::FunctionPtr&lt;(WTF::PtrTag)30177, bool (JSC::JSGlobalObject*, long long, long long, JSC::PropertyName), (WTF::FunctionAttributes)1&gt;::operator()(JSC::JSGlobalObject*, long long, long long, JSC::PropertyName) const
12  0x12df655e8 JSC::JSObject::putInlineSlow(JSC::JSGlobalObject*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&amp;)
13  0x12d49a0e4 JSC::JSObject::putInlineForJSObject(JSC::JSCell*, JSC::JSGlobalObject*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&amp;)
14  0x12d499dcc JSC::JSCell::putInline(JSC::JSGlobalObject*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&amp;)
15  0x12d49de10 JSC::JSValue::putInline(JSC::JSGlobalObject*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&amp;)
16  0x12db2bf24 llint_slow_path_put_by_id
17  0x12ea6ecec jsc_llint_llintOpWithMetadata__llintOpWithReturn__llintOp__commonOp__fn__fn__makeReturn__fn__fn__fn__opPutByIdSlow_LowLevelInterpreter_asm_655
18  0x136238cb4 17  ???                                 0x0000000136238cb4 0x0 + 5203266740
19  0x12ea89c7c op_call_return_location
20  0x12ea89c7c op_call_return_location
21  0x12ea6075c llint_call_javascript
22  0x12d96013c JSC::Interpreter::executeProgram(JSC::SourceCode const&amp;, JSC::JSGlobalObject*, JSC::JSObject*)
23  0x12dcb9410 JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&amp;, JSC::JSValue, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
24  0x12dcb9564 JSC::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&amp;, JSC::JSValue, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
25  0x304795324 WebCore::JSExecState::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&amp;, JSC::JSValue, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
26  0x304794d50 WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&amp;, WebCore::DOMWrapperWorld&amp;)
27  0x304794a94 WebCore::ScriptController::evaluateInWorldIgnoringException(WebCore::ScriptSourceCode const&amp;, WebCore::DOMWrapperWorld&amp;)
28  0x30479516c WebCore::ScriptController::evaluateIgnoringException(WebCore::ScriptSourceCode const&amp;)
29  0x30573a6c0 WebCore::ScriptElement::executeClassicScript(WebCore::ScriptSourceCode const&amp;)
30  0x305738220 WebCore::ScriptElement::prepareScript(WTF::TextPosition const&amp;)
31  0x305e3d864 WebCore::HTMLScriptRunner::runScript(WebCore::ScriptElement&amp;, WTF::TextPosition const&amp;)
com.apple.WebKit.WebContent.Development terminated (pid 12889) for reason: crash

****

Just raising, so we can track it and fix it.

Thanks!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2156260</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2025-11-04 05:12:11 -0800</bug_when>
    <thetext>&lt;rdar://problem/164005829&gt;</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>