Open Bug 1756265 Opened 3 years ago Updated 3 years ago

Intermittent mozcrash.py | application crashed [@ __GI___mprotect + 0x7] | after | (args: "--dll /builds/worker/fetches/injector/libbreakpadinjector.so") | (TIMEOUT) [300.0 s]

Categories

(Core :: JavaScript: GC, defect, P5)

defect

Tracking

()

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Crash Data

Filed by: mlaza [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=368435363&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/NxQxAQEETimNF934uv90vQ/runs/1/artifacts/public/logs/live_backing.log


[task 2022-02-18T23:13:06.910Z] TEST-PASS | non262/operators/instanceof-bound-function-recursion.js | (args: "--dll /builds/worker/fetches/injector/libbreakpadinjector.so") [39.1 s]
[task 2022-02-18T23:17:46.217Z] TEST-UNEXPECTED-FAIL | non262/Symbol/equality.js | (args: "--dll /builds/worker/fetches/injector/libbreakpadinjector.so") | (TIMEOUT) [300.0 s]
[task 2022-02-18T23:17:46.470Z] make[1]: *** [Makefile:63: check-jstests] Error 1
[task 2022-02-18T23:17:46.470Z] make[1]: Leaving directory '/builds/worker/workspace/obj-spider/js/src'
[task 2022-02-18T23:17:46.470Z] make: *** [Makefile:220: check-jstests] Error 2
[task 2022-02-18T23:17:46.471Z] in directory /builds/worker/workspace/obj-spider, running ['/builds/worker/workspace/obj-spider/_virtualenvs/build/bin/python3', '/builds/worker/checkouts/gecko/testing/mozbase/mozcrash/mozcrash/mozcrash.py', '/tmp', '/builds/worker/workspace/obj-spider/dist/crashreporter-symbols']
[task 2022-02-18T23:17:46.563Z] mozcrash INFO | Copy/paste: /builds/worker/fetches/minidump_stackwalk/minidump_stackwalk --symbols-url=https://symbols.mozilla.org/ --human /tmp/29ffd350-1206-5589-1927-b5292bed0436.dmp /builds/worker/workspace/obj-spider/dist/crashreporter-symbols
[task 2022-02-18T23:17:47.090Z] mozcrash INFO | Saved minidump as /builds/worker/artifacts/29ffd350-1206-5589-1927-b5292bed0436.dmp
[task 2022-02-18T23:17:47.091Z] mozcrash checking /tmp for minidumps...
[task 2022-02-18T23:17:47.091Z] PROCESS-CRASH | mozcrash.py | application crashed [@ __GI___mprotect + 0x7]
[task 2022-02-18T23:17:47.091Z] Crash dump filename: /tmp/29ffd350-1206-5589-1927-b5292bed0436.dmp
[task 2022-02-18T23:17:47.091Z] Operating system: Linux
[task 2022-02-18T23:17:47.091Z]                   0.0.0 Linux 4.4.0-1014-aws #14taskcluster1-Ubuntu SMP Tue Apr 3 10:27:00 UTC 2018 x86_64
[task 2022-02-18T23:17:47.091Z] CPU: amd64
[task 2022-02-18T23:17:47.091Z]      family 6 model 85 stepping 4
[task 2022-02-18T23:17:47.091Z]      16 CPUs
[task 2022-02-18T23:17:47.091Z] Linux debian 11 - bullseye (Debian GNU/Linux 11 (bullseye))
[task 2022-02-18T23:17:47.091Z] 
[task 2022-02-18T23:17:47.091Z] Crash reason:  SIGABRT / 0x00000000
[task 2022-02-18T23:17:47.091Z] Crash address: 0x3e800001047
[task 2022-02-18T23:17:47.091Z] Process uptime: not available
[task 2022-02-18T23:17:47.091Z] 
[task 2022-02-18T23:17:47.091Z] Thread 0  (crashed)
[task 2022-02-18T23:17:47.091Z]  0  libc.so.6!__GI___mprotect + 0x7
[task 2022-02-18T23:17:47.091Z]     rax = 0x0000000000000000   rdx = 0x0000000000000003
[task 2022-02-18T23:17:47.091Z]     rcx = 0x00007ffff7b2dc27   rbx = 0x0000394adf318000
[task 2022-02-18T23:17:47.091Z]     rsi = 0x0000000000001000   rdi = 0x0000394adf318000
[task 2022-02-18T23:17:47.091Z]     rbp = 0x00007fffffffa860   rsp = 0x00007fffffffa858
[task 2022-02-18T23:17:47.091Z]      r8 = 0x00000000001bfcbc    r9 = 0x0000000000000003
[task 2022-02-18T23:17:47.091Z]     r10 = 0x0018c19c533d10db   r11 = 0x0000000000000246
[task 2022-02-18T23:17:47.091Z]     r12 = 0x000055555822c500   r13 = 0x00007fffffffaa40
[task 2022-02-18T23:17:47.091Z]     r14 = 0x00007ffff6e187a8   r15 = 0x00007ffff6e18830
[task 2022-02-18T23:17:47.091Z]     rip = 0x00007ffff7b2dc27
[task 2022-02-18T23:17:47.091Z]     Found by: given as instruction pointer in context
[task 2022-02-18T23:17:47.091Z]  1  js!js::gc::GCRuntime::unprotectHeldRelocatedArenas(js::AutoLockGC const&) [Compacting.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 941 + 0xc]
[task 2022-02-18T23:17:47.091Z]     rbp = 0x00007fffffffa880   rsp = 0x00007fffffffa870
[task 2022-02-18T23:17:47.091Z]     rip = 0x000055555615d42d
[task 2022-02-18T23:17:47.091Z]     Found by: previous frame's frame pointer
[task 2022-02-18T23:17:47.091Z]  2  js!js::gc::GCRuntime::releaseHeldRelocatedArenas() [Compacting.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 948 + 0x7]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x00007ffff6e187a8   rbp = 0x00007fffffffa8d0
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffa890   rip = 0x000055555615d50d
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z]  3  js!js::gc::GCRuntime::beginSweepPhase(JS::GCReason, js::gc::AutoGCSession&) [Sweeping.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 1672 + 0x7]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x00007ffff6e187a8   rbp = 0x00007fffffffa8f0
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffa8e0   r12 = 0x000055555822c500
[task 2022-02-18T23:17:47.091Z]     r14 = 0x00007fffffffa940   r15 = 0x00007ffff6e18830
[task 2022-02-18T23:17:47.091Z]     rip = 0x000055555621301f
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z]  4  js!js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool) [GC.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 3196 + 0xe]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x00007ffff6e18830   rbp = 0x00007fffffffa9e0
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffa900   r12 = 0x000055555822c500
[task 2022-02-18T23:17:47.091Z]     r14 = 0x00007ffff6e187a8   r15 = 0x00007ffff6e18830
[task 2022-02-18T23:17:47.091Z]     rip = 0x0000555556177813
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z]  5  js!js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason) [GC.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 3690 + 0xd]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x0000000000000001   rbp = 0x00007fffffffaab0
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffa9f0   r12 = 0x0000000000000007
[task 2022-02-18T23:17:47.091Z]     r13 = 0x00007ffff6e187a8   r14 = 0x0000000000000000
[task 2022-02-18T23:17:47.091Z]     r15 = 0x00007ffff6e18830   rip = 0x000055555617b388
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z]  6  js!js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason) [GC.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 3875 + 0x13]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x0000000000000000   rbp = 0x00007fffffffab90
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffaac0   r12 = 0x00007ffff6e187a8
[task 2022-02-18T23:17:47.091Z]     r13 = 0x0000000000000000   r14 = 0x0000000000000007
[task 2022-02-18T23:17:47.091Z]     r15 = 0x000003d5934da912   rip = 0x000055555617c5d6
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z]  7  js!js::gc::GCRuntime::runDebugGC() [GC.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 4326 + 0xe]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x0000000000000003   rbp = 0x00007fffffffac40
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffaba0   r12 = 0x00007ffff6e2a200
[task 2022-02-18T23:17:47.091Z]     r13 = 0x0000000000000000   r14 = 0x00007ffff6e187a8
[task 2022-02-18T23:17:47.091Z]     r15 = 0x00007fffffffac00   rip = 0x000055555617fc3c
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z]  8  js!bool js::gc::GCRuntime::checkAllocatorState<(js::AllowGC)1>(JSContext*, js::gc::AllocKind) [Allocator.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 404 + 0x10]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x00007ffff6e187a8   rbp = 0x00007fffffffac70
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffac50   r12 = 0x00007ffff6e2a200
[task 2022-02-18T23:17:47.091Z]     r13 = 0x0000000000000000   r14 = 0x000000000000000e
[task 2022-02-18T23:17:47.091Z]     r15 = 0x00007ffff6e2a200   rip = 0x0000555556149c45
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z]  9  js!JSObject* js::AllocateObject<(js::AllowGC)1>(JSContext*, js::gc::AllocKind, unsigned long, js::gc::InitialHeap, JSClass const*, js::gc::AllocSite*) [Allocator.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 70 + 0x15]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x0000000000000078   rbp = 0x00007fffffffacd0
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffac80   r12 = 0x00007ffff6e2a200
[task 2022-02-18T23:17:47.091Z]     r13 = 0x0000000000000000   r14 = 0x00007ffff6e187a8
[task 2022-02-18T23:17:47.091Z]     r15 = 0x000000000000000e   rip = 0x0000555556149a59
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z] 10  js!js::ArrayObject::create(JSContext*, js::gc::AllocKind, js::gc::InitialHeap, JS::Handle<js::Shape*>, unsigned int, unsigned int, js::AutoSetNewObjectMetadata&, js::gc::AllocSite*) [ArrayObject-inl.h:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 43 + 0x1b]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x0000000000000000   rbp = 0x00007fffffffad30
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007ffffffface0   r12 = 0x000000000000000e
[task 2022-02-18T23:17:47.091Z]     r13 = 0x00007fffffffade0   r14 = 0x0000000000000000
[task 2022-02-18T23:17:47.091Z]     r15 = 0x0000000000000000   rip = 0x000055555591d37c
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z] 11  js!js::ArrayObject* NewArrayWithShape<(unsigned int)4294967295>(JSContext*, JS::Handle<js::Shape*>, unsigned int, js::NewObjectKind, js::gc::AllocSite*) [Array.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 4434 + 0x1d]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x00007fffffffad60   rbp = 0x00007fffffffadc0
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffad40   r12 = 0x0000000000000000
[task 2022-02-18T23:17:47.091Z]     r13 = 0x00007ffff6e2a200   r14 = 0x000000000000000a
[task 2022-02-18T23:17:47.091Z]     r15 = 0x00007fffffffade0   rip = 0x000055555594ab9a
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z] 12  js!js::NewDenseFullyAllocatedArray(JSContext*, unsigned int, js::NewObjectKind, js::gc::AllocSite*) [Array.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 4624 + 0x89]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x00007ffff6e2a200   rbp = 0x00007fffffffae20
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffadd0   r12 = 0x000000000000000a
[task 2022-02-18T23:17:47.091Z]     r13 = 0x00007fffffffadd0   r14 = 0x00007ffff6efd9c8
[task 2022-02-18T23:17:47.091Z]     r15 = 0x0000000000000000   rip = 0x000055555591c374
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z] 13  js!js::NewArrayObjectOptimizedFallback(JSContext*, unsigned int, js::gc::AllocKind, js::NewObjectKind) [Interpreter.cpp:63f54f50c32dcbfa01321485c0cafad0c5bbfbba : 5346 + 0xd]
[task 2022-02-18T23:17:47.091Z]     rbx = 0x00007ffff6e2a200   rbp = 0x00007fffffffae50
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffae30   r12 = 0x000000000000000a
[task 2022-02-18T23:17:47.091Z]     r13 = 0x3fd2b62344000000   r14 = 0x000000000000000e
[task 2022-02-18T23:17:47.091Z]     r15 = 0x0000000000000000   rip = 0x00005555558e37a1
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z] 14  0x394a002d33dc
[task 2022-02-18T23:17:47.091Z] 
[task 2022-02-18T23:17:47.091Z]     rbx = 0x00000a816b1f9560   rbp = 0x3fd2b62344000000
[task 2022-02-18T23:17:47.091Z]     rsp = 0x00007fffffffae60   r12 = 0xfffe34ed7cc4d2a8
[task 2022-02-18T23:17:47.091Z]     r13 = 0x3fd2b62344000000   r14 = 0x00007ffff5cb08e4
[task 2022-02-18T23:17:47.091Z]     r15 = 0x3fe9756d3c000000   rip = 0x0000394a002d33dd
[task 2022-02-18T23:17:47.091Z]     Found by: call frame info
[task 2022-02-18T23:17:47.091Z] 
[task 2022-02-18T23:17:47.091Z] Thread 1 

Linux, mprotect, Abort ?! This does not make any sense.

Linux should let the program handle the failures of mprotect, and not fail.
While MacOS would fail while running out of memory, this case is well handled in Linux (or at least, last time I experienced it).

Priority: -- → P5
Blocks: 1765970
No longer blocks: sm-defects-intermittents
You need to log in before you can comment on or make changes to this bug.