New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 613228 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Mar 2017
Cc:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug



Sign in to add a comment

Chrome Crash: MAGIC SIGNATURE: '[GPU hang] glWaitSync'

Project Member Reported by bhthompson@chromium.org, May 19 2016

Issue description

Version: 51.0.2704.42
OS: Chrome
Jerry systems seem to be crashing with the signature below:

Thread 0 MAGIC SIGNATURE THREAD
0xb20e2484	(libpthread-2.19.so + 0x0000e484 )	
0xb20df3cf	(libpthread-2.19.so -sem_wait.c:48 )	do_futex_wait
0xb20df443	(libpthread-2.19.so -sem_wait.c:69 )	__new_sem_wait
0xb10adde9	(libmali.so.0.1.20 + 0x001e5de9 )	ump_write
0xb10adef7	(libmali.so.0.1.20 + 0x001e5ef7 )	ump_write
0xb104ce73	(libmali.so.0.1.20 + 0x00184e73 )	gles_vertexp_bb_neon_transform_and_produce_clip_bits
0xb104d669	(libmali.so.0.1.20 + 0x00185669 )	gles_vertexp_bb_neon_transform_and_produce_clip_bits
0xb104ce3f	(libmali.so.0.1.20 + 0x00184e3f )	gles_vertexp_bb_neon_transform_and_produce_clip_bits
0xb104e03f	(libmali.so.0.1.20 + 0x0018603f )	gles_vertexp_bb_neon_transform_and_produce_clip_bits
0xb104ce3f	(libmali.so.0.1.20 + 0x00184e3f )	gles_vertexp_bb_neon_transform_and_produce_clip_bits
0xb0f10185	(libmali.so.0.1.20 + 0x00048185 )	glWaitSync
Thread 6 CRASHED [SIGSEGV @ 0x00000000 ]
0xb596c8f0	(chrome -gpu_watchdog_thread.cc:366 )	content::GpuWatchdogThread::DeliberatelyTerminateToRecoverFromHang
0xb684bbda	(chrome + 0x04041bda )	_fini
0xb596c85b	(chrome + 0x0316285b )	
0xb2fd779d	(chrome -bind_internal.h:181 )	base::internal::Invoker<base::IndexSequence<0u>, base::internal::BindState<base::internal::RunnableAdapter<bool (HotwordService::*)()>, void(HotwordService*), base::WeakPtr<HotwordService> >, base::internal::InvokeHelper<true, void, base::internal::RunnableAdapter<bool (HotwordService::*)()> >, void()>::Run
0xb2c497bf	(chrome -callback.h:397 )	base::debug::TaskAnnotator::RunTask
0xb65d7927	(chrome -thread_cache.h:368 )	tc_malloc
0xb20febbd	(libgcc_s.so.1 -bpabi.c:41 )	__gnu_ldivmod_helper
0xb20f6b5f	(libgcc_s.so.1 + 0x0000eb5f )	__aeabi_ldivmod
0xb307e9bd	(chrome -safe_math_impl.h:207 )	base::internal::CheckedMul<long long int>
0xb684bbda	(chrome + 0x04041bda )	_fini
0xb2c3e919	(chrome -message_loop.cc:479 )	base::MessageLoop::DoDelayedWork
0xb2fd7747	(chrome -bind_internal.h:365 )	base::internal::Invoker<base::IndexSequence<0u, 1u, 2u, 3u, 4u, 5u, 6u>, base::internal::BindState<base::internal::RunnableAdapter<void (*)(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&)>, void(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&), base::WeakPtr<prerender::PrerenderResourceThrottle>, std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&>, base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void (*)(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&)> >, void()>::Run
0xb6e52b16	(chrome + 0x04648b16 )	_fini
0xb684bbda	(chrome + 0x04041bda )	_fini
0xb596c76b	(chrome -gpu_watchdog_thread.cc:235 )	content::GpuWatchdogThread::OnCheck
0xb2fd7747	(chrome -bind_internal.h:365 )	base::internal::Invoker<base::IndexSequence<0u, 1u, 2u, 3u, 4u, 5u, 6u>, base::internal::BindState<base::internal::RunnableAdapter<void (*)(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&)>, void(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&), base::WeakPtr<prerender::PrerenderResourceThrottle>, std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&>, base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void (*)(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&)> >, void()>::Run
0xb6e52b16	(chrome + 0x04648b16 )	_fini
0xb684bbda	(chrome + 0x04041bda )	_fini
0xb596c76b	(chrome -gpu_watchdog_thread.cc:235 )	content::GpuWatchdogThread::OnCheck
0xb2fd7747	(chrome -bind_internal.h:365 )	base::internal::Invoker<base::IndexSequence<0u, 1u, 2u, 3u, 4u, 5u, 6u>, base::internal::BindState<base::internal::RunnableAdapter<void (*)(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&)>, void(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&), base::WeakPtr<prerender::PrerenderResourceThrottle>, std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&>, base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void (*)(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&)> >, void()>::Run
0xb6e52b16	(chrome + 0x04648b16 )	_fini
0xb684bbda	(chrome + 0x04041bda )	_fini
0xb596c76b	(chrome -gpu_watchdog_thread.cc:235 )	content::GpuWatchdogThread::OnCheck
0xb2fd7747	(chrome -bind_internal.h:365 )	base::internal::Invoker<base::IndexSequence<0u, 1u, 2u, 3u, 4u, 5u, 6u>, base::internal::BindState<base::internal::RunnableAdapter<void (*)(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&)>, void(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&), base::WeakPtr<prerender::PrerenderResourceThrottle>, std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&>, base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void (*)(const base::WeakPtr<prerender::PrerenderResourceThrottle>&, const std::basic_string<char, std::char_traits<char>, std::allocator<char> >&, content::ResourceType, bool, int, int, const GURL&)> >, void()>::Run
0xb6e52b16	(chrome + 0x04648b16 )	_fini
0xb684bbda	(chrome + 0x04041bda )	_fini
0xb596c76b	(chrome -gpu_watchdog_thread.cc:235 )	content::GpuWatchdogThread::OnCheck
0xb2c3ed35	(chrome -message_pump_default.cc:37 )	base::MessagePumpDefault::Run
0xb32989f1	(chrome -run_loop.cc:35 )	base::RunLoop::Run
0xb3289ee7	(chrome -message_loop.cc:295 )	base::MessageLoop::Run
0xb596c76b	(chrome -gpu_watchdog_thread.cc:235 )	content::GpuWatchdogThread::OnCheck
0xb32a8f37	(chrome -thread.cc:254 )	base::Thread::ThreadMain
0xb32a6f61	(chrome -platform_thread_posix.cc:70 )	base::::ThreadFunc
0xb32a6f1f	(chrome + 0x00a9cf1f )	
0xb20d96b9	(libpthread-2.19.so -pthread_create.c:311 )	start_thread

https://crash.corp.google.com/browse?q=product.name%3D%27Chrome_ChromeOS%27%20AND%20product.version%3D%2751.0.2704.42%27%20AND%20custom_data.ChromeCrashProto.os_linux.lsb_release%20CONTAINS%20LOWER(%27JERRY%27)%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D%27%5BGPU%20hang%5D%20glWaitSync%27&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=%3D

https://crash.corp.google.com/browse?q=product.name%3D%27Chrome_ChromeOS%27%20AND%20product.version%3D%2751.0.2704.42%27%20AND%20custom_data.ChromeCrashProto.os_linux.lsb_release%20CONTAINS%20LOWER(%27JERRY%27)%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D%27%5BGPU%20hang%5D%20glWaitSync%27&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=%3D&stbtiq=&reportid=4448146a00000000&index=0
 
Cc: arm@chromium.org
+ARM FYI

I don't know of a repro, but we should look for one. I have never seen that before.
Is there anything else we can do with this? Not sure whom a good owner would be.

Comment 3 by marcheu@google.com, May 26 2016

you can look for a repro
Labels: M-52
Could be related to comment#4 on crbug/611659:

Chrome crashed on device Jerry with M52 52.0.2739.0 / 8337.0.0 dev build as soon as hangout call was started. Though repro steps are different from the initial bug report, I am updating this bug as crash stack trace looks similar to comment#3.
We are missing debug symbols so crash ID is different but may have same root cause.

Crash ID: 3dc92bca00000000, 2e67ebca00000000

Thread 0 CRASHED [SIGSEGV @ 0x45f8bb7c ] MAGIC SIGNATURE THREAD
0xb3b05142	(chrome + 0x014a5142 )	
0xb3b138df	(chrome + 0x014b38df )	
0xb2b4a3b7	(chrome + 0x004ea3b7 )	
0xb3b2b8cf	(chrome + 0x014cb8cf )	
0xb2b48f99	(chrome + 0x004e8f99 )	
0xb3b27aa5	(chrome + 0x014c7aa5 )	
0xb6ecdbf2	(chrome + 0x0486dbf2 )	
0xb3b201f9	(chrome + 0x014c01f9 )	
0xb664bf9d	(chrome + 0x03febf9d )	
0xb2ab84fd	(chrome + 0x004584fd )	
0xb6ecdbf2	(chrome + 0x0486dbf2 )	
0xb2ac4987	(chrome + 0x00464987 )	
0xb2b4a5f7	(chrome + 0x004ea5f7 )	
0xb2e45c59	(chrome + 0x007e5c59 )	
0xb2e45df3	(chrome + 0x007e5df3 )	
0xb2b441db	(chrome + 0x004e41db )	
0xb2b41fbb	(chrome + 0x004e1fbb )	
0xb67966c6	(chrome + 0x041366c6 )	
0xb69bf98e	(chrome + 0x0435f98e )	
0xb69bfa1a	(chrome + 0x0435fa1a )	
0xb62149c7	(chrome + 0x03bb49c7 )	
0xb1f37bbd	(libgcc_s.so.1 -bpabi.c:41 )	__gnu_ldivmod_helper
0x000003e6		
0xb667872a	(chrome + 0x0401872a )	
0xb1f37bbd	(libgcc_s.so.1 -bpabi.c:41 )	__gnu_ldivmod_helper
0xb93fbd36		
0xb2ac1599	(chrome + 0x00461599 )	

Cc: gkihumba@chromium.org
Cc: srcv@chromium.org

Comment 7 by marcheu@google.com, May 27 2016

@4: I really doubt it's the same problem. You should file a separate bug because:
- the repro is different
- the crash is in chrome not in the mali driver
- your bug happens on nyan which doesn't even have the mali driver
This is still showing up in 51.0.2704.55, but still only on Jerry. 

Is there anything special about Jerry or is this a case of some group using Jerry systems doing something unusual to trigger this (e.g. maybe some educational website is dying)?
Cc: rohi...@chromium.org
Owner: marc...@chromium.org
Status: Available (was: Untriaged)
Rohit, have you seen any graphics crashes unique to Jerry in the latest testing on R51/R52?
Cc: hsiangc@chromium.org
We haven't seen this crash in our testing but Joseph can confirm this. 

Do we know if this is a background GPU crash and not visible to the user?
Since we are not able to reproduce internally we can consider this to not be a stable blocker, so we can go to 1% and see if we get more data back on this, we can block going to higher %s if we see this crash spiking. 
Labels: -ReleaseBlock-Stable
Removing release block stable for M52 as well, unless we've been able to repro this.
Project Member

Comment 13 by sheriffbot@chromium.org, Jun 18 2016

Labels: -M-51 -M-52 M-53 MovedFrom-52
Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 14 by sheriffbot@chromium.org, Jul 9 2016

Labels: -M-53 -Pri-1 M-54 MovedFrom-53 Pri-2
This issue is Pri-1 but has already been moved once. Lowering the priority and moving to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 15 by sheriffbot@chromium.org, Aug 20 2016

Labels: Fracas


If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Status: WontFix (was: Available)
stopped happening

Sign in to add a comment