[Wasm][AOT] Running a very large app causes Assertion at aot-runtime.c:5883, condition `*(gint16*)ptr == method_index' not met

[jeromelaban]

Description

When running a very large FullAOT app (dotnet.wasm of 164MB), the runtime fails with multiple errors:

Assertion at /__w/1/s/runtime/src/mono/mono/mini/aot-runtime.c:5883, condition `*(gint16*)ptr == method_index' not met
  | _emscripten_asm_const_int | @ | dotnet.js:5440
  | wasm_trace_logger | @ | 2932b246:0x2cc804f
  | eglib_log_adapter | @ | 2932b246:0x458cc61
  | monoeg_g_logstr | @ | 2932b246:0x2d0d178
  | monoeg_g_logv_nofree | @ | 2932b246:0xf9d641
  | monoeg_assertion_message | @ | 2932b246:0x117f19
  | mono_assertion_message | @ | 2932b246:0x11128d
  | mono_aot_get_unbox_trampoline | @ | 2932b246:0x8498fd
  | mini_llvmonly_add_method_wrappers | @ | 2932b246:0x48841f
  | mini_llvmonly_load_method | @ | 2932b246:0x84a682
  | resolve_vcall | @ | 2932b246:0xf9b86f
  | mini_llvmonly_init_vtable_slot | @ | 2932b246:0x84a6e9
  | mini_llvmonly_get_imt_trampoline | @ | 2932b246:0x2d2de1a
  | initialize_imt_slot | @ | 2932b246:0x1974fe0
  | build_imt_slots | @ | 2932b246:0x4735cdb
  | mono_vtable_build_imt_slot | @ | 2932b246:0xf9e0bf
  | mini_llvmonly_initial_imt_tramp | @ | 2932b246:0x2d2dd3a
  | invoke_iii | @ | dotnet.js:11079
  | Uno_UI_System_Linq_Enumerable_TryGetFirst_Windows_UI_Xaml_UIElement_RoutedEventHandlerInfo_System_Collections_Generic_IEnumerable_1_Windows_UI_Xaml_UIElement_RoutedEventHandlerInfo_System_Func_2_Windows_UI_Xaml_UIElement_RoutedEventHandlerInfo_bool_bool_ | @ | 2932b246:0x566e3b0

and this one as well:

Assertion at /__w/1/s/runtime/src/mono/mono/sgen/sgen-gc.c:2847, condition !pending_unqueued_finalizer not met
  | _emscripten_asm_const_int | @ | dotnet.js:5440
  | wasm_trace_logger | @ | 2932b246:0x2cc804f
  | eglib_log_adapter | @ | 2932b246:0x458cc61
  | monoeg_g_logstr | @ | 2932b246:0x2d0d178
  | monoeg_g_logv_nofree | @ | 2932b246:0xf9d641
  | monoeg_assertion_message | @ | 2932b246:0x117f19
  | mono_assertion_message | @ | 2932b246:0x11128d
  | sgen_gc_invoke_finalizers | @ | 2932b246:0x83e7b9
  | mono_runtime_do_background_work | @ | 2932b246:0x2d13dc6
  | mono_background_exec | @ | 2932b246:0x2d2898f
  | Module._mono_background_exec | @ | dotnet.js:10688
  | pump_message | @ | dotnet.js:5760
  | setTimeout (async) |   |  
  | _schedule_background_exec | @ | dotnet.js:8877
  | mono_threads_schedule_background_job | @ | 2932b246:0x48577f
  | collect_nursery | @ | 2932b246:0xa97cc3
  | sgen_perform_collection_inner | @ | 2932b246:0xf99158
  | sgen_perform_collection | @ | 2932b246:0x32998a
  | sgen_ensure_free_space | @ | 2932b246:0x48490b
  | sgen_alloc_obj_nolock | @ | 2932b246:0x5dea58
  | mono_gc_alloc_vector | @ | 2932b246:0x8466ac
  | aot_wrapper_icall_mono_gc_alloc_vector | @ | 2932b246:0xa993dd
  | aot_wrapper_alloc_1_AllocVector_obj_iiii | @ | 2932b246:0x10e59a
  | corlib_System_Collections_Generic_List_1_T_REF__ctor_int | @ | 2932b246:0x2ec5ad
  | corlib_System_Reflection_CustomAttribute_GetCustomAttributes_System_Reflection_ICustomAttributeProvider_System_Type_bool | @ | 2932b246:0x1c2391
  | corlib_System_Attribute_GetAttr_System_Reflection_ICustomAttributeProvider_System_Type_bool | @ | 2932b246:0xa939b4
  | corlib_System_Attribute_GetCustomAttribute_System_Reflection_Assembly_System_Type | @ | 2932b246:0x4e2013
  | corlib_System_Reflection_CustomAttributeExtensions_GetCustomAttribute_System_Reflection_Assembly_System_Type | @ | 2932b246:0x2a7fae
  | corlib_System_Reflection_CustomAttributeExtensions_GetCustomAttribute_T_REF_System_Reflection_MemberInfo | @ | 2932b246:0x4689960

Configuration

8170c06

Regression?

No

Other information

[jeromelaban]

Fixed by https://github.com/dotnet/runtime/pull/50220/files