New issue
Advanced search Search tips

Issue 655655 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 3
Type: Bug



Sign in to add a comment

Chrome browser keeps giving Aww snap error -

Reported by yyefet@chromium.org, Oct 13 2016

Issue description

Version: 53.0.2785.116 (Official Build) (64­bit) 
OS: OS X El Capitan


Issue description: 
Intermittent but frequent issue with Chrome browser tabs crashing and displaying 'Aww snap' page. This happens on several devices and with different Google accounts signed into Chrome browser. Issue occurs when logged into the Chrome Sync profile. 


What steps will reproduce the problem?
(1) *hard to repro since this is only affecting one customer at the moment.

Can the crash ID's expose the root cause?

What is the expected output?
Chrome browser stability

What do you see instead?
Chrome browser tabs won't crash with aww snap error


Troubleshooting steps taken: 
1. Verified issue occurs with all extensions and plugins removed. 
2. Reproduced issue with all other programs but Chrome closed. 
3. Disabled QUIC, no effect. 
4. Debug logs showed lots of Google Docs Offline errors so I asked the customer to remove the app, no effect. 
5. Issue can be reproduced with both Google Apps account and consumer Gmail account. 
6. Unchecked 'Predict network actions to improve load performance,' no effect. 
7. Disabled hardware acceleration, no effect. 



Crash ID's:

Crash ID 121866b0-a2bc-4480-8864-46497750293d (Server ID: a3bf528b00000000)
Automatically reported Thursday, October 6, 2016 at 6:31:11 AM

Crash ID b6d3662e-7d5d-40b5-a876-05593739ef0b (Server ID: 22d7261d00000000)
Automatically reported Wednesday, October 5, 2016 at 1:20:43 PM

Crash ID d4aa63bc-c4a6-482c-a8e7-4b7192a93ede (Server ID: bc2f708b00000000)
Automatically reported Wednesday, October 5, 2016 at 9:05:30 AM

Crash ID a9f356b1-60ab-46e7-af36-50859db68e57 (Server ID: d3255a6d00000000)
Automatically reported Friday, September 30, 2016 at 7:59:54 AM


PII protected chrome logs and screenshots:
https://drive.google.com/drive/folders/0B6fESMmJITTNOUc0Um5NaXhZeUE?usp=sharing
 

Comment 1 by meh...@chromium.org, Oct 13 2016

Cc: rsesek@chromium.org

Comment 2 by rsesek@chromium.org, Oct 14 2016

Components: Blink>JavaScript
A bunch of random crashes in V8/JS. If this is from just one client/computer, this is probably bad RAM in their machine.

Thread 15 CRASHED [EXC_BAD_ACCESS / KERN_INVALID_ADDRESS @ 0x0000080000000000 ] MAGIC SIGNATURE THREAD
0x0000000107838290	(Google Chrome Framework -instruction.h:1363 )	v8::internal::compiler::TopLevelLiveRange::CommitSpillMoves(v8::internal::compiler::InstructionSequence*, v8::internal::compiler::InstructionOperand const&, bool)
0x0000000107841f92	(Google Chrome Framework -register-allocator.cc:3348 )	v8::internal::compiler::OperandAssigner::CommitAssignment()
0x000000010783110d	(Google Chrome Framework -pipeline.cc:1251 )	void v8::internal::compiler::PipelineImpl::Run<v8::internal::compiler::CommitAssignmentPhase>()
0x0000000107830401	(Google Chrome Framework -pipeline.cc:1801 )	v8::internal::compiler::PipelineImpl::AllocateRegisters(v8::internal::RegisterConfiguration const*, v8::internal::compiler::CallDescriptor*, bool)
0x000000010782ea77	(Google Chrome Framework -pipeline.cc:1670 )	v8::internal::compiler::PipelineImpl::ScheduleAndSelectInstructions(v8::internal::compiler::Linkage*)
0x000000010782de1a	(Google Chrome Framework -pipeline.cc:1517 )	v8::internal::compiler::PipelineImpl::OptimizeGraph(v8::internal::compiler::Linkage*)
0x000000010782db16	(Google Chrome Framework -pipeline.cc:621 )	v8::internal::compiler::PipelineCompilationJob::OptimizeGraphImpl()
0x000000010789728d	(Google Chrome Framework -compiler.cc:266 )	<name omitted>
0x0000000107b13b60	(Google Chrome Framework -optimizing-compile-dispatcher.cc:110 )	v8::internal::OptimizingCompileDispatcher::CompileNext(v8::internal::CompilationJob*)
0x0000000107b14620	(Google Chrome Framework -optimizing-compile-dispatcher.cc:62 )	v8::internal::OptimizingCompileDispatcher::CompileTask::Run()
0x0000000105fbf714	(Google Chrome Framework -callback.h:389 )	base::(anonymous namespace)::WorkerThread::ThreadMain()
0x0000000105fb96d6	(Google Chrome Framework -platform_thread_posix.cc:70 )	base::(anonymous namespace)::ThreadFunc(void*)
0x00007fff978eb99c	(libsystem_pthread.dylib + 0x0000399c )	_pthread_body
0x00007fff978eb919	(libsystem_pthread.dylib + 0x00003919 )	_pthread_start
0x00007fff978e9350	(libsystem_pthread.dylib + 0x00001350 )	thread_start
0x0000000105fb967f	(Google Chrome Framework + 0x005e867f )	

Thread 0 CRASHED [EXC_BAD_ACCESS / KERN_INVALID_ADDRESS @ 0x00000cdeb7f00008 ] MAGIC SIGNATURE THREAD
0x0000000103892c2d	(Google Chrome Framework -spaces.h:706 )	v8::internal::StaticMarkingVisitor<v8::internal::IncrementalMarkingMarkingVisitor>::VisitSharedFunctionInfoStrongCode(v8::internal::Heap*, v8::internal::HeapObject*)
0x000000010388eb73	(Google Chrome Framework -objects-visiting.h:354 )	v8::internal::IncrementalMarking::Step(long, v8::internal::IncrementalMarking::CompletionAction, v8::internal::IncrementalMarking::ForceMarkingAction, v8::internal::IncrementalMarking::ForceCompletionAction)
0x000000010388e804	(Google Chrome Framework -incremental-marking.cc:1026 )	v8::internal::IncrementalMarking::AdvanceIncrementalMarking(double, v8::internal::IncrementalMarking::StepActions)
0x000000010388c011	(Google Chrome Framework -incremental-marking-job.cc:121 )	v8::internal::IncrementalMarkingJob::DelayedTask::RunInternal()
0x0000000101de31ba	(Google Chrome Framework -callback.h:389 )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)
0x0000000105725a88	(Google Chrome Framework -task_queue_manager.cc:291 )	scheduler::TaskQueueManager::ProcessTaskFromWorkQueue(scheduler::internal::WorkQueue*, scheduler::internal::TaskQueueImpl::Task*)
0x0000000105724a28	(Google Chrome Framework -task_queue_manager.cc:203 )	scheduler::TaskQueueManager::DoWork(base::TimeTicks, bool)
0x0000000101de31ba	(Google Chrome Framework -callback.h:389 )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)
0x0000000101e0594b	(Google Chrome Framework -message_loop.cc:493 )	base::MessageLoop::RunTask(base::PendingTask const&)
0x0000000101e05c5b	(Google Chrome Framework -message_loop.cc:502 )	base::MessageLoop::DeferOrRunPendingTask(base::PendingTask const&)
0x0000000101e0623a	(Google Chrome Framework -message_loop.cc:662 )	base::MessageLoop::DoDelayedWork(base::TimeTicks*)
0x0000000101dd84d8	(Google Chrome Framework -message_pump_mac.mm:334 )	base::MessagePumpCFRunLoopBase::RunWork()
0x0000000101dfb8b9	(Google Chrome Framework + 0x005a78b9 )	base::mac::CallWithEHFrame(void () block_pointer)
0x0000000101dd7ec3	(Google Chrome Framework -message_pump_mac.mm:306 )	base::MessagePumpCFRunLoopBase::RunWorkSource(void*)
0x00007fff83bdf880	(CoreFoundation + 0x000aa880 )	__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__
0x00007fff83bbefbb	(CoreFoundation + 0x00089fbb )	__CFRunLoopDoSources0
0x00007fff83bbe4de	(CoreFoundation + 0x000894de )	__CFRunLoopRun
0x00007fff83bbded7	(CoreFoundation + 0x00088ed7 )	CFRunLoopRunSpecific
0x00007fff8f89eed8	(Foundation + 0x00024ed8 )	-[NSRunLoop(NSRunLoop) runMode:beforeDate:]
0x0000000101dd8b3d	(Google Chrome Framework -message_pump_mac.mm:608 )	base::MessagePumpNSRunLoop::DoRun(base::MessagePump::Delegate*)
0x0000000101dd8313	(Google Chrome Framework -message_pump_mac.mm:238 )	base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*)
0x0000000101e1d9b0	(Google Chrome Framework -run_loop.cc:35 )	base::RunLoop::Run()
0x0000000101e0500c	(Google Chrome Framework -message_loop.cc:295 )	base::MessageLoop::Run()
0x00000001062b3ec9	(Google Chrome Framework -renderer_main.cc:197 )	content::RendererMain(content::MainFunctionParams const&)
0x0000000101d94e2f	(Google Chrome Framework -content_main_runner.cc:785 )	content::ContentMainRunnerImpl::Run()
0x0000000101d94075	(Google Chrome Framework -content_main.cc:20 )	content::ContentMain(content::ContentMainParams const&)
0x0000000101856de9	(Google Chrome Framework -chrome_main.cc:84 )	ChromeMain
0x00000001015edd51	(Google Chrome Helper -chrome_exe_main_mac.c:87 )	main
0x00000001015edb33	(Google Chrome Helper + 0x00000b33 )	start

Thread 0 CRASHED [EXC_BAD_ACCESS / KERN_INVALID_ADDRESS @ 0x0000091a11200008 ] MAGIC SIGNATURE THREAD
0x000000010a5430be	(Google Chrome Framework -spaces.h:706 )	void v8::internal::BodyDescriptorBase::IteratePointers<v8::internal::IncrementalMarkingMarkingVisitor>(v8::internal::Heap*, v8::internal::HeapObject*, int, int)
0x000000010a540b73	(Google Chrome Framework -objects-visiting.h:354 )	v8::internal::IncrementalMarking::Step(long, v8::internal::IncrementalMarking::CompletionAction, v8::internal::IncrementalMarking::ForceMarkingAction, v8::internal::IncrementalMarking::ForceCompletionAction)
0x000000010a540804	(Google Chrome Framework -incremental-marking.cc:1026 )	v8::internal::IncrementalMarking::AdvanceIncrementalMarking(double, v8::internal::IncrementalMarking::StepActions)
0x000000010a53e011	(Google Chrome Framework -incremental-marking-job.cc:121 )	v8::internal::IncrementalMarkingJob::DelayedTask::RunInternal()
0x0000000108a951ba	(Google Chrome Framework -callback.h:389 )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)
0x000000010c3d7a88	(Google Chrome Framework -task_queue_manager.cc:291 )	scheduler::TaskQueueManager::ProcessTaskFromWorkQueue(scheduler::internal::WorkQueue*, scheduler::internal::TaskQueueImpl::Task*)
0x000000010c3d6a28	(Google Chrome Framework -task_queue_manager.cc:203 )	scheduler::TaskQueueManager::DoWork(base::TimeTicks, bool)
0x0000000108a951ba	(Google Chrome Framework -callback.h:389 )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)
0x0000000108ab794b	(Google Chrome Framework -message_loop.cc:493 )	base::MessageLoop::RunTask(base::PendingTask const&)
0x0000000108ab7c5b	(Google Chrome Framework -message_loop.cc:502 )	base::MessageLoop::DeferOrRunPendingTask(base::PendingTask const&)
0x0000000108ab823a	(Google Chrome Framework -message_loop.cc:662 )	base::MessageLoop::DoDelayedWork(base::TimeTicks*)
0x0000000108a8a4d8	(Google Chrome Framework -message_pump_mac.mm:334 )	base::MessagePumpCFRunLoopBase::RunWork()
0x0000000108aad8b9	(Google Chrome Framework + 0x005a78b9 )	base::mac::CallWithEHFrame(void () block_pointer)
0x0000000108a89ec3	(Google Chrome Framework -message_pump_mac.mm:306 )	base::MessagePumpCFRunLoopBase::RunWorkSource(void*)
0x00007fff83bdf880	(CoreFoundation + 0x000aa880 )	__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__
0x00007fff83bbefbb	(CoreFoundation + 0x00089fbb )	__CFRunLoopDoSources0
0x00007fff83bbe4de	(CoreFoundation + 0x000894de )	__CFRunLoopRun
0x00007fff83bbded7	(CoreFoundation + 0x00088ed7 )	CFRunLoopRunSpecific
0x00007fff8f89eed8	(Foundation + 0x00024ed8 )	-[NSRunLoop(NSRunLoop) runMode:beforeDate:]
0x0000000108a8ab3d	(Google Chrome Framework -message_pump_mac.mm:608 )	base::MessagePumpNSRunLoop::DoRun(base::MessagePump::Delegate*)
0x0000000108a8a313	(Google Chrome Framework -message_pump_mac.mm:238 )	base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*)
0x0000000108acf9b0	(Google Chrome Framework -run_loop.cc:35 )	base::RunLoop::Run()
0x0000000108ab700c	(Google Chrome Framework -message_loop.cc:295 )	base::MessageLoop::Run()
0x000000010cf65ec9	(Google Chrome Framework -renderer_main.cc:197 )	content::RendererMain(content::MainFunctionParams const&)
0x0000000108a46e2f	(Google Chrome Framework -content_main_runner.cc:785 )	content::ContentMainRunnerImpl::Run()
0x0000000108a46075	(Google Chrome Framework -content_main.cc:20 )	content::ContentMain(content::ContentMainParams const&)
0x0000000108508de9	(Google Chrome Framework -chrome_main.cc:84 )	ChromeMain
0x000000010829fd51	(Google Chrome Helper -chrome_exe_main_mac.c:87 )	main
0x000000010829fb33	(Google Chrome Helper + 0x00000b33 )	start

Thread 0 CRASHED [EXC_BAD_ACCESS / EXC_I386_GPFLT @ 0x0000000104298454 ] MAGIC SIGNATURE THREAD
0x0000000104298454	(Google Chrome Framework -GCInfo.h:124 )	blink::NormalPage::sweep()
0x0000000104296c88	(Google Chrome Framework -HeapPage.cpp:300 )	blink::BaseArena::lazySweepWithDeadline(double)
0x000000010429d0a5	(Google Chrome Framework -ThreadState.cpp:761 )	blink::ThreadState::performIdleLazySweep(double)
0x0000000104141ddb	(Google Chrome Framework -callback.h:389 )	blink::(anonymous namespace)::IdleTaskRunner::run(double)
0x0000000106559da7	(Google Chrome Framework -web_scheduler_impl.cc:45 )	scheduler::WebSchedulerImpl::runIdleTask(std::__1::unique_ptr<blink::WebThread::IdleTask, std::__1::default_delete<blink::WebThread::IdleTask> >, base::TimeTicks)
0x000000010655ac8c	(Google Chrome Framework -bind_internal.h:144 )	base::internal::Invoker<base::internal::BindState<base::internal::RunnableAdapter<void (*)(std::__1::unique_ptr<blink::WebThread::IdleTask, std::__1::default_delete<blink::WebThread::IdleTask> >, base::TimeTicks)>, base::internal::PassedWrapper<std::__1::unique_ptr<blink::WebThread::IdleTask, std::__1::default_delete<blink::WebThread::IdleTask> > > >, void (base::TimeTicks)>::Run(base::internal::BindStateBase*, base::TimeTicks&&)
0x00000001065596f1	(Google Chrome Framework -callback.h:389 )	scheduler::SingleThreadIdleTaskRunner::RunTask(base::Callback<void (base::TimeTicks), (base::internal::CopyMode)1>)
0x0000000106559a4c	(Google Chrome Framework -bind_internal.h:171 )	base::internal::Invoker<base::internal::BindState<base::internal::RunnableAdapter<void (scheduler::SingleThreadIdleTaskRunner::*)(base::Callback<void (base::TimeTicks), (base::internal::CopyMode)1>)>, base::WeakPtr<scheduler::SingleThreadIdleTaskRunner>&, base::Callback<void (base::TimeTicks), (base::internal::CopyMode)1> const&>, void ()>::Run(base::internal::BindStateBase*)
0x0000000102c101ba	(Google Chrome Framework -callback.h:389 )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)
0x0000000106552a88	(Google Chrome Framework -task_queue_manager.cc:291 )	scheduler::TaskQueueManager::ProcessTaskFromWorkQueue(scheduler::internal::WorkQueue*, scheduler::internal::TaskQueueImpl::Task*)
0x0000000106551a28	(Google Chrome Framework -task_queue_manager.cc:203 )	scheduler::TaskQueueManager::DoWork(base::TimeTicks, bool)
0x0000000102c101ba	(Google Chrome Framework -callback.h:389 )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)
0x0000000102c3294b	(Google Chrome Framework -message_loop.cc:493 )	base::MessageLoop::RunTask(base::PendingTask const&)
0x0000000102c32c5b	(Google Chrome Framework -message_loop.cc:502 )	base::MessageLoop::DeferOrRunPendingTask(base::PendingTask const&)
0x0000000102c32fba	(Google Chrome Framework -message_loop.cc:624 )	base::MessageLoop::DoWork()
0x0000000102c054bc	(Google Chrome Framework -message_pump_mac.mm:330 )	base::MessagePumpCFRunLoopBase::RunWork()
0x0000000102c288b9	(Google Chrome Framework + 0x005a78b9 )	base::mac::CallWithEHFrame(void () block_pointer)
0x0000000102c04ec3	(Google Chrome Framework -message_pump_mac.mm:306 )	base::MessagePumpCFRunLoopBase::RunWorkSource(void*)
0x00007fff83bdf880	(CoreFoundation + 0x000aa880 )	__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__
0x00007fff83bbefbb	(CoreFoundation + 0x00089fbb )	__CFRunLoopDoSources0
0x00007fff83bbe4de	(CoreFoundation + 0x000894de )	__CFRunLoopRun
0x00007fff83bbded7	(CoreFoundation + 0x00088ed7 )	CFRunLoopRunSpecific
0x00007fff8f89eed8	(Foundation + 0x00024ed8 )	-[NSRunLoop(NSRunLoop) runMode:beforeDate:]
0x0000000102c05b3d	(Google Chrome Framework -message_pump_mac.mm:608 )	base::MessagePumpNSRunLoop::DoRun(base::MessagePump::Delegate*)
0x0000000102c05313	(Google Chrome Framework -message_pump_mac.mm:238 )	base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*)
0x0000000102c4a9b0	(Google Chrome Framework -run_loop.cc:35 )	base::RunLoop::Run()
0x0000000102c3200c	(Google Chrome Framework -message_loop.cc:295 )	base::MessageLoop::Run()
0x00000001070e0ec9	(Google Chrome Framework -renderer_main.cc:197 )	content::RendererMain(content::MainFunctionParams const&)
0x0000000102bc1e2f	(Google Chrome Framework -content_main_runner.cc:785 )	content::ContentMainRunnerImpl::Run()
0x0000000102bc1075	(Google Chrome Framework -content_main.cc:20 )	content::ContentMain(content::ContentMainParams const&)
0x0000000102683de9	(Google Chrome Framework -chrome_main.cc:84 )	ChromeMain
0x000000010241ad51	(Google Chrome Helper -chrome_exe_main_mac.c:87 )	main
0x000000010241ab33	(Google Chrome Helper + 0x00000b33 )	start
Cc: adamk@chromium.org
Status: WontFix (was: Untriaged)
I had a look at the four mentioned crash reports. three of them are memory corruption related. It seems like this is a hardware issue.

Added current stab sheriff for posterity.
Customer confirmed issue has happened on another device. Here are the details provided on it: Apple, iPad Pro, Latest IOS

Customer also provided details regarding his RAM on the Mac device. He is very skeptical about this issue being a hardware RAM issue. As you can see in the screenshots below, the device has 16GBs of RAM and is detecting them correctly.


image.png
93.3 KB View Download
image (1).png
54.3 KB View Download
image (2).png
32.4 KB View Download

Comment 5 by rsesek@chromium.org, Oct 31 2016

Chrome iOS does not use V8 or Blink, so that's not a relevant datapoint.

A RAM issue doesn't mean that it is not detected; it means that there could be a fault in one of the modules that causes one or two bits to flip occasionally. A memtest would detect this.
memtest is not supported by OS X El Capitan. We asked the customer to run Apple Diagnostics and Apple Hardware Test.

Here is the result


2016-11-01 13.54.55.jpg
4.2 MB View Download
That is indicative of faulty RAM.

Sign in to add a comment