Bug ID 1173636
Summary Chromium crashes helper process after start
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Other
Assignee screening-team-bugs@suse.de
Reporter mkoutny@suse.com
QA Contact qa-bugs@suse.de
CC tchvatal@suse.com
Found By ---
Blocker ---

This happened after some TW update (alas I don't know which was the last
working version), there relevant versions:

chromium-83.0.4103.116-2.1.x86_64
glibc-2.31-6.1.x86_64
kernel 5.8.0-rc3-1.g162848a-default

Relevant excerpt from coredumpctl info
>  Command Line: /usr/lib64/chromium/chromium --type=renderer --enable-threaded-compositing --disable-webrtc-apm-in-audio-service --field-trial-handle=18408759359563851481,8353948009982933349,131072 --lang=en-US --enable-auto-reload --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --shared-files=v8_snapshot_data:100
>     Executable: /usr/lib64/chromium/chromium
>  Control Group: /user.slice/user-1000.slice/user@1000.service/gnome-launched-chromium-browser.desktop-18521.scope
>      Owner UID: 1000 (mkoutny)
>        Message: Process 20584 (chromium) of user 1000 dumped core.
>                 
>                 Stack trace of thread 4:
>                 #0  0x000055be6a79e35e _ZN7sandbox19CrashSIGSYS_HandlerERKNS_17arch_seccomp_dataEPv (chromium + 0x579435e)
>                 #1  0x000055be6a7a8879 _ZN7sandbox4Trap6SigSysEiP9siginfo_tP10ucontext_t (chromium + 0x579e879)
>                 #2  0x00007fc139b2a260 __restore_rt (libpthread.so.0 + 0x14260)
>                 #3  0x00007fc136429a60 __fcntl64_nocancel_adjusted (libc.so.6 + 0xf5a60)
>                 #4  0x00007fc136424ef4 __GI___libc_fcntl64 (libc.so.6 + 0xf0ef4)
>                 #5  0x000055be69408f31 evutil_make_socket_nonblocking (chromium + 0x43fef31)
>                 #6  0x000055be6940a432 evsignal_init (chromium + 0x4400432)
>                 #7  0x000055be6940ae3e epoll_init (chromium + 0x4400e3e)
>                 #8  0x000055be6940830a event_base_new (chromium + 0x43fe30a)
>                 #9  0x000055be6933b273 _ZN4base19MessagePumpLibeventC2Ev (chromium + 0x4331273)
>                 #10 0x000055be6927ac1d _ZN4base11MessagePump6CreateENS_15MessagePumpTypeE (chromium + 0x4270c1d)
>                 #11 0x000055be692e01d4 _ZN4base8internal7InvokerINS0_9BindStateIZNS_6Thread16StartWithOptionsERKNS3_7OptionsEEUlNS_15MessagePumpTypeEE_JS7_EEEFSt10unique_ptrINS_11MessagePumpESt14default_deleteISB_EEvEE7RunOnceEPNS0_13BindStateBaseE (chromium + 0x42d61d4)
>                 #12 0x000055be692e07e6 _ZN4base12_GLOBAL__N_129SequenceManagerThreadDelegate19BindToCurrentThreadENS_10TimerSlackE (chromium + 0x42d67e6)
>                 #13 0x000055be692e0bc3 _ZN4base6Thread10ThreadMainEv (chromium + 0x42d6bc3)
>                 #14 0x000055be6932a325 _ZN4base12_GLOBAL__N_110ThreadFuncEPv (chromium + 0x4320325)
>                 #15 0x00007fc139b1eeaa start_thread (libpthread.so.0 + 0x8eaa)
>                 #16 0x00007fc136433b1f __clone (libc.so.6 + 0xffb1f)
>                 
>                 Stack trace of thread 1:
>                 #0  0x00007fc1364992fe __memmove_avx_unaligned_erms (libc.so.6 + 0x1652fe)
>                 #1  0x000055be67ed521b _ZN2v88internal8FlagList18SetFlagsFromStringEPKcm (chromium + 0x2ecb21b)
>                 #2  0x000055be67d942f9 _ZN2v82V818SetFlagsFromStringEPKcm (chromium + 0x2d8a2f9)
>                 #3  0x000055be6ce9fa91 _ZN7content17RenderProcessImplC2Ev (chromium + 0x7e95a91)
>                 #4  0x000055be6ce9fd9f _ZN7content17RenderProcessImpl6CreateEv (chromium + 0x7e95d9f)
>                 #5  0x000055be6ced099c _ZN7content12RendererMainERKNS_18MainFunctionParamsE (chromium + 0x7ec699c)
>                 #6  0x000055be68cecda4 _ZN7content9RunZygoteEPNS_19ContentMainDelegateE (chromium + 0x3ce2da4)
>                 #7  0x000055be68cede70 _ZN7content21ContentMainRunnerImpl3RunEb (chromium + 0x3ce3e70)
>                 #8  0x000055be68d18d79 _ZN15service_manager4MainERKNS_10MainParamsE (chromium + 0x3d0ed79)
>                 #9  0x000055be68ceb91b _ZN7content11ContentMainERKNS_17ContentMainParamsE (chromium + 0x3ce191b)
>                 #10 0x000055be65f24f35 ChromeMain (chromium + 0xf1af35)
>                 #11 0x00007fc13635acca __libc_start_main (libc.so.6 + 0x26cca)
>                 #12 0x000055be65f24d7a _start (chromium + 0xf1ad7a)
>                 
>                 Stack trace of thread 2:
>                 #0  0x00007fc13671de44 _ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base (libstdc++.so.6 + 0xc3e44)
>                 #1  0x000055be69317378 _ZN4base5debug12_GLOBAL__N_122SandboxSymbolizeHelper26OpenObjectFileContainingPcEmRmS3_Pci (chromium + 0x430d378)
>                 #2  0x000055be69401870 _ZN6googleL20SymbolizeAndDemangleEPvPci (chromium + 0x43f7870)
>                 #3  0x000055be69315fff _ZN4base5debug12_GLOBAL__N_116ProcessBacktraceEPKPvmPKcPNS1_22BacktraceOutputHandlerE (chromium + 0x430bfff)
>                 #4  0x000055be69316bc3 _ZNK4base5debug10StackTrace15PrintWithPrefixEPKc (chromium + 0x430cbc3)
>                 #5  0x000055be693165c1 _ZN4base5debug12_GLOBAL__N_122StackDumpSignalHandlerEiP9siginfo_tPv (chromium + 0x430c5c1)
>                 #6  0x00007fc139b2a260 __restore_rt (libpthread.so.0 + 0x14260)
>                 #7  0x000055be6a79e35e _ZN7sandbox19CrashSIGSYS_HandlerERKNS_17arch_seccomp_dataEPv (chromium + 0x579435e)
>                 #8  0x000055be6a7a8879 _ZN7sandbox4Trap6SigSysEiP9siginfo_tP10ucontext_t (chromium + 0x579e879)
>                 #9  0x00007fc139b2a260 __restore_rt (libpthread.so.0 + 0x14260)
>                 #10 0x00007fc136429a60 __fcntl64_nocancel_adjusted (libc.so.6 + 0xf5a60)
>                 #11 0x00007fc136424ef4 __GI___libc_fcntl64 (libc.so.6 + 0xf0ef4)
>                 #12 0x000055be69408f31 evutil_make_socket_nonblocking (chromium + 0x43fef31)
>                 #13 0x000055be6940a432 evsignal_init (chromium + 0x4400432)
>                 #14 0x000055be6940ae3e epoll_init (chromium + 0x4400e3e)
>                 #15 0x000055be6940830a event_base_new (chromium + 0x43fe30a)
>                 #16 0x000055be6933b273 _ZN4base19MessagePumpLibeventC2Ev (chromium + 0x4331273)
>                 #17 0x000055be6927ac1d _ZN4base11MessagePump6CreateENS_15MessagePumpTypeE (chromium + 0x4270c1d)
>                 #18 0x000055be692e01d4 _ZN4base8internal7InvokerINS0_9BindStateIZNS_6Thread16StartWithOptionsERKNS3_7OptionsEEUlNS_15MessagePumpTypeEE_JS7_EEEFSt10unique_ptrINS_11MessagePumpESt14default_deleteISB_EEvEE7RunOnceEPNS0_13BindStateBaseE (chromium + 0x42d61d4)
>                 #19 0x000055be692e07e6 _ZN4base12_GLOBAL__N_129SequenceManagerThreadDelegate19BindToCurrentThreadENS_10TimerSlackE (chromium + 0x42d67e6)
>                 #20 0x000055be692e0bc3 _ZN4base6Thread10ThreadMainEv (chromium + 0x42d6bc3)
>                 #21 0x000055be6932a325 _ZN4base12_GLOBAL__N_110ThreadFuncEPv (chromium + 0x4320325)
>                 #22 0x00007fc139b1eeaa start_thread (libpthread.so.0 + 0x8eaa)
>                 #23 0x00007fc136433b1f __clone (libc.so.6 + 0xffb1f)
>                 
>                 Stack trace of thread 3:
>                 #0  0x00007fc139b25b08 futex_abstimed_wait_cancelable (libpthread.so.0 + 0xfb08)
>                 #1  0x000055be69326c2a _ZN4base17ConditionVariable9TimedWaitERKNS_9TimeDeltaE (chromium + 0x431cc2a)
>                 #2  0x000055be693276ff _ZN4base13WaitableEvent9TimedWaitERKNS_9TimeDeltaE (chromium + 0x431d6ff)
>                 #3  0x000055be69351cf6 _ZN4base8internal12WorkerThread9RunWorkerEv (chromium + 0x4347cf6)
>                 #4  0x000055be69352393 _ZN4base8internal12WorkerThread15RunPooledWorkerEv (chromium + 0x4348393)
>                 #5  0x000055be6932a325 _ZN4base12_GLOBAL__N_110ThreadFuncEPv (chromium + 0x4320325)
>                 #6  0x00007fc139b1eeaa start_thread (libpthread.so.0 + 0x8eaa)
>                 #7  0x00007fc136433b1f __clone (libc.so.6 + 0xffb1f)

It looks to me like wrong pointer was passed to fcntl().

Since it's TW I'm expecting similar troubles from time to time, so I file this
for the reference. I can do some debugging if something would be helpful.


You are receiving this mail because: