Open Bug 1544357 Opened 5 years ago Updated 10 months ago

Intermittent runner.py | application crashed [@ NS_CycleCollectorSuspect3]

Categories

(Core :: Cycle Collector, defect)

defect

Tracking

()

People

(Reporter: intermittent-bug-filer, Unassigned)

Details

(Keywords: crash, intermittent-failure, regression, Whiteboard: qa-not-actionable)

Crash Data

#[markdown(off)]
Filed by: btara [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=240291464&repo=autoland

https://queue.taskcluster.net/v1/task/CrfvkrpkS3m0lgFM61Sqmg/runs/0/artifacts/public/logs/live_backing.log

05:03:24 INFO - raptor-control-server received webext_raptor-page-timeout: [u'raptor-tp6-reddit-firefox', u'https://www.reddit.com/r/technology/comments/9sqwyh/we_posed_as_100_senators_to_run_ads_on_facebook/', {u'fcp': True, u'hero': False, u'dcf': True, u'fnb paint': True, u'ttfi': False, u'load time': True}]
05:03:24 INFO - 127.0.0.1 - - [15/Apr/2019 05:03:24] "POST / HTTP/1.1" 200 -
05:03:24 INFO - raptor-control-server received webext_status: __raptor_shutdownBrowser
05:03:24 INFO - raptor-control-server shutting down browser (pid: 1769)
05:03:24 INFO - 127.0.0.1 - - [15/Apr/2019 05:03:24] "POST / HTTP/1.1" 200 -
05:03:24 INFO - raptor-control-server received webext_status: Removed tab 2
05:03:40 INFO - mozcrash Downloading symbols from: https://queue.taskcluster.net/v1/task/CYxIjJQhS0efqfYriS05yQ/artifacts/public/build/target.crashreporter-symbols.zip
05:03:45 INFO - mozcrash Copy/paste: /Users/cltbld/tasks/task_1555301826/build/macosx64-minidump_stackwalk /var/folders/hz/52pqmkl14cb7jcswxyb48zg800000x/T/tmpKrMFMM.mozrunner/minidumps/F62C0C31-99F3-460C-8DBE-17EA69A04A99.dmp /var/folders/hz/52pqmkl14cb7jcswxyb48zg800000x/T/tmpPlvE28
05:03:50 INFO - mozcrash Saved minidump as /Users/cltbld/tasks/task_1555301826/build/blobber_upload_dir/F62C0C31-99F3-460C-8DBE-17EA69A04A99.dmp
05:03:50 INFO - mozcrash Saved app info as /Users/cltbld/tasks/task_1555301826/build/blobber_upload_dir/F62C0C31-99F3-460C-8DBE-17EA69A04A99.extra
05:03:50 INFO - PROCESS-CRASH | runner.py | application crashed [@ NS_CycleCollectorSuspect3]
05:03:50 INFO - Crash dump filename: /var/folders/hz/52pqmkl14cb7jcswxyb48zg800000x/T/tmpKrMFMM.mozrunner/minidumps/F62C0C31-99F3-460C-8DBE-17EA69A04A99.dmp
05:03:50 INFO - Operating system: Mac OS X
05:03:50 INFO - 10.10.5 14F27
05:03:50 INFO - CPU: amd64
05:03:50 INFO - family 6 model 69 stepping 1
05:03:50 INFO - 4 CPUs
05:03:50 INFO - GPU: UNKNOWN
05:03:50 INFO - Crash reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
05:03:50 INFO - Crash address: 0x0
05:03:50 INFO - Process uptime: 229 seconds
05:03:50 INFO - Thread 0 (crashed)
05:03:50 INFO - 0 XUL!NS_CycleCollectorSuspect3 [nsCycleCollector.cpp:dc2fb967b01982c985558197b923c459811705c6 : 3761 + 0x0]
05:03:50 INFO - rax = 0x0000000000000000 rdx = 0x000000011c93b280
05:03:50 INFO - rcx = 0x0000000000000000 rbx = 0x0000000000000050
05:03:50 INFO - rsi = 0x0000000109b6c1b0 rdi = 0x0000000109b9f8d8
05:03:50 INFO - rbp = 0x00007fff5d90bac0 rsp = 0x00007fff5d90baa0
05:03:50 INFO - r8 = 0x0000000155300000 r9 = 0x0000000155301768
05:03:50 INFO - r10 = 0x0000000155301738 r11 = 0xffff8001c8208ce8
05:03:50 INFO - r12 = 0x000000011c93b280 r13 = 0x0000000000000000
05:03:50 INFO - r14 = 0x0000000109b6c1b0 r15 = 0x000000011c93b280
05:03:50 INFO - rip = 0x0000000102fad1c0
05:03:50 INFO - Found by: given as instruction pointer in context
05:03:50 INFO - 1 XUL!nsCycleCollector::Collect(ccType, js::SliceBudget&, nsICycleCollectorListener*, bool) [nsCycleCollector.cpp:dc2fb967b01982c985558197b923c459811705c6 : 3434 + 0x177]
05:03:50 INFO - rbp = 0x00007fff5d90bc80 rsp = 0x00007fff5d90bad0
05:03:50 INFO - rip = 0x0000000102fab57f
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 2 XUL!nsJSContext::RunCycleCollectorSlice(mozilla::TimeStamp) [nsJSEnvironment.cpp:dc2fb967b01982c985558197b923c459811705c6 : 1486 + 0x7a]
05:03:50 INFO - rbp = 0x00007fff5d90bd20 rsp = 0x00007fff5d90bc90
05:03:50 INFO - rip = 0x0000000104687ef0
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 3 XUL!ICCRunnerFired(mozilla::TimeStamp) [nsJSEnvironment.cpp:dc2fb967b01982c985558197b923c459811705c6 : 1537 + 0x8]
05:03:50 INFO - rbp = 0x00007fff5d90bd40 rsp = 0x00007fff5d90bd30
05:03:50 INFO - rip = 0x00000001046884a8
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 4 XUL!mozilla::IdleTaskRunner::Run() [IdleTaskRunner.cpp:dc2fb967b01982c985558197b923c459811705c6 : 58 + 0x1f]
05:03:50 INFO - rbp = 0x00007fff5d90bd70 rsp = 0x00007fff5d90bd50
05:03:50 INFO - rip = 0x0000000103043298
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 5 XUL!mozilla::TimedOut(nsITimer*, void*) [IdleTaskRunner.cpp:dc2fb967b01982c985558197b923c459811705c6 : 78 + 0x8]
05:03:50 INFO - rbp = 0x00007fff5d90bda0 rsp = 0x00007fff5d90bd80
05:03:50 INFO - rip = 0x0000000103043985
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 6 XUL!nsTimerEvent::Run() [TimerThread.cpp:dc2fb967b01982c985558197b923c459811705c6 : 260 + 0x7e]
05:03:50 INFO - rbp = 0x00007fff5d90c260 rsp = 0x00007fff5d90bdb0
05:03:50 INFO - rip = 0x000000010305759d
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 7 XUL!mozilla::SchedulerGroup::Runnable::Run() [SchedulerGroup.cpp:dc2fb967b01982c985558197b923c459811705c6 : 295 + 0xa]
05:03:50 INFO - rbp = 0x00007fff5d90c2e0 rsp = 0x00007fff5d90c270
05:03:50 INFO - rip = 0x000000010304aa38
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 8 XUL!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:dc2fb967b01982c985558197b923c459811705c6 : 1180 + 0x6]
05:03:50 INFO - rbp = 0x00007fff5d90c7d0 rsp = 0x00007fff5d90c2f0
05:03:50 INFO - rip = 0x000000010305e557
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 9 XUL!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp:dc2fb967b01982c985558197b923c459811705c6 : 486 + 0xd]
05:03:50 INFO - rbp = 0x00007fff5d90c800 rsp = 0x00007fff5d90c7e0
05:03:50 INFO - rip = 0x0000000103060fd9
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 10 XUL!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp:dc2fb967b01982c985558197b923c459811705c6 : 88 + 0x7]
05:03:50 INFO - rbp = 0x00007fff5d90c850 rsp = 0x00007fff5d90c810
05:03:50 INFO - rip = 0x0000000103744881
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 11 XUL!nsBaseAppShell::Run() [nsBaseAppShell.cpp:dc2fb967b01982c985558197b923c459811705c6 : 137 + 0x45]
05:03:50 INFO - rbp = 0x00007fff5d90c890 rsp = 0x00007fff5d90c860
05:03:50 INFO - rip = 0x00000001062646fc
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 12 XUL!nsAppShell::Run() [nsAppShell.mm:dc2fb967b01982c985558197b923c459811705c6 : 704 + 0x8]
05:03:50 INFO - rbp = 0x00007fff5d90c8d0 rsp = 0x00007fff5d90c8a0
05:03:50 INFO - rip = 0x00000001062e89a7
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 13 XUL!XRE_RunAppShell() [nsEmbedFunctions.cpp:dc2fb967b01982c985558197b923c459811705c6 : 919 + 0x9]
05:03:50 INFO - rbp = 0x00007fff5d90c930 rsp = 0x00007fff5d90c8e0
05:03:50 INFO - rip = 0x000000010791a362
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 14 XUL!XRE_InitChildProcess(int, char**, XREChildData const*) [message_loop.cc:dc2fb967b01982c985558197b923c459811705c6 : 315 + 0xc]
05:03:50 INFO - rbp = 0x00007fff5d90cc20 rsp = 0x00007fff5d90c940
05:03:50 INFO - rip = 0x0000000107919f47
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 15 plugin-container!main [MozillaRuntimeMain.cpp:dc2fb967b01982c985558197b923c459811705c6 : 23 + 0x2c]
05:03:50 INFO - rbp = 0x00007fff5d90cc60 rsp = 0x00007fff5d90cc30
05:03:50 INFO - rip = 0x00000001022f2f07
05:03:50 INFO - Found by: previous frame's frame pointer
05:03:50 INFO - 16 libdyld.dylib + 0x35c9
05:03:50 INFO - rbp = 0x00007fff5d90cc70 rsp = 0x00007fff5d90cc70
05:03:50 INFO - rip = 0x00007fff92c285c9
05:03:50 INFO - Found by: previous frame's frame pointer

Null deref crash on this line:
if (MOZ_LIKELY(data->mCollector)) {
I guess data is null? That usually means the CC hasn't been set up on this thread, either because we're on the wrong thread or it is early in startup or late in shutdown, but I can't see how that's the case from the stack.

It looks like we're in CollectWhite(), so I think calling suspect is expected.

Don't mark intermittent crashes as P5s. We want them to go to triage owners.

Priority: P5 → --
Whiteboard: qa-not-actionable

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Severity: critical → S3
Component: XPCOM → Cycle Collector
You need to log in before you can comment on or make changes to this bug.