reporter:ligimole@google.com

Magic Signature: [ThreadWatcher IO hang] base::android::ToJavaIntArray

Crash link: https://crash.corp.google.com/browse?q=expanded_custom_data.ChromeCrashProto.ptype%3D'browser'%20AND%20expanded_custom_data.ChromeCrashProto.magic_signature_1.name%3D'%5BThreadWatcher%20IO%20hang%5D%20base%3A%3Aandroid%3A%3AToJavaIntArray'%20AND%20product.Version%3D'66.0.3356.0'&stbtiq=&reportid=&index=0

-------------------------------------------------------------------------------
Sample Report
-------------------------------------------------------------------------------
Product name: Chrome_Android
Magic Signature : [ThreadWatcher IO hang] base::android::ToJavaIntArray
Product Version: 66.0.3356.0
Process type: browser
Report ID: 5de0d0919de11732
Report Url: https://crash.corp.google.com/5de0d0919de11732
Report Time: 2018-02-27T06:07:05-08:00
Upload Time: 2018-02-27T06:09:34.734-08:00
Uptime: 2267149 ms
CumulativeProductUptime: 0 ms
OS Name: Android
OS Version: 0.0.0 Linux 3.10.72 #1 SMP PREEMPT Mon Mar 27 10:50:45 CST 2017 armv7l
CPU Architecture: arm
CPU Info: ARMv7 ARM part(0x4100c070) features: swp,half,thumb,fastmult,vfpv2,edsp,neon,vfpv3,tls,vfpv4,idiva,idivt

-------------------------------------------------------------------------------
Crashing thread: Thread index: 24. Stack Quality: 0%. Thread id: 25456.
-------------------------------------------------------------------------------
0xb6e09090 (libc.so + 0x0003e090)	
0xb6e4f381 (libbinder.so + 0x0001f381)	
0xb6e4f989 (libbinder.so + 0x0001f989)	
0xb6e52863 (libbinder.so + 0x00022863)	
0xb6e4f4c7 (libbinder.so + 0x0001f4c7)	
0xb4e00b7e (libart.so + 0x002beb7e)	
0x2db3e9bd (dalvik-main space (deleted) + 0x1af3e9bd)	
0x12f55f1e (dalvik-main space (deleted) + 0x00355f1e)	
0xb6e4fb2b (libbinder.so + 0x0001fb2b)	
0xb6df7b6f (libc.so + 0x0002cb6f)	
0x2db3e9bd (dalvik-main space (deleted) + 0x1af3e9bd)	
0xb4e001ea (libart.so + 0x002be1ea)	
0x2db3e9bd (dalvik-main space (deleted) + 0x1af3e9bd)	
0x70230906 (system@framework@boot.art + 0x002a3906)	
0xb6e4ad17 (libbinder.so + 0x0001ad17)	
0xb6e4acef (libbinder.so + 0x0001acef)	
0xb6eee2bb (libandroid_runtime.so + 0x0008e2bb)	
0x6fffbc16 (system@framework@boot.art + 0x0006ec16)	
0x12c7f3fe (dalvik-main space (deleted) + 0x0007f3fe)	
0x12f4803e (dalvik-main space (deleted) + 0x0034803e)	
0x7361af05 (system@framework@boot.oat + 0x02bd1f05)	
0x72a8b3dd (system@framework@boot.oat + 0x020423dd)	
0x709cb09e (system@framework@boot.art + 0x00a3e09e)	
0x12c7f3fe (dalvik-main space (deleted) + 0x0007f3fe)	
0x12f4803e (dalvik-main space (deleted) + 0x0034803e)	
0x12f55f1e (dalvik-main space (deleted) + 0x00355f1e)	
0x708c3d76 (system@framework@boot.art + 0x00936d76)	
0x6fffbc16 (system@framework@boot.art + 0x0006ec16)	
0x12c7f3fe (dalvik-main space (deleted) + 0x0007f3fe)	
0x12f4803e (dalvik-main space (deleted) + 0x0034803e)	
0x70230906 (system@framework@boot.art + 0x002a3906)	
0x12f55f1e (dalvik-main space (deleted) + 0x00355f1e)	
0x7361ae33 (system@framework@boot.oat + 0x02bd1e33)	
0x70230906 (system@framework@boot.art + 0x002a3906)	
0x12c7f3fe (dalvik-main space (deleted) + 0x0007f3fe)	
0x12f4803e (dalvik-main space (deleted) + 0x0034803e)	
0x12f55f1e (dalvik-main space (deleted) + 0x00355f1e)	
0xb4e18622 (libart.so + 0x002d6622)	
0x70206156 (system@framework@boot.art + 0x00279156)	
0x12f4803e (dalvik-main space (deleted) + 0x0034803e)	
0x12f55f1e (dalvik-main space (deleted) + 0x00355f1e)	
0x12c7f3fe (dalvik-main space (deleted) + 0x0007f3fe)	
0x12d2f6de (dalvik-main space (deleted) + 0x0012f6de)	
0x12c650ce (dalvik-main space (deleted) + 0x000650ce)	
0x73229f6f (system@framework@boot.oat + 0x027e0f6f)	
0x70206156 (system@framework@boot.art + 0x00279156)	
0x12d2f6de (dalvik-main space (deleted) + 0x0012f6de)	
0x12c6311e (dalvik-main space (deleted) + 0x0006311e)	
0xb4be3c63 (libart.so + 0x000a1c63)	
0x12f55f1e (dalvik-main space (deleted) + 0x00355f1e)	
... 171 more
0xb4e000d2 (libart.so + 0x002be0d2)	
0xb4e000e6 (libart.so + 0x002be0e6)	
0xb4dffffe (libart.so + 0x002bdffe)	
0xb4d0a0b3 (libart.so + 0x001c80b3)	
0xb4d0a0b3 (libart.so + 0x001c80b3)	
0xa1d6235d (libchrome.so - jni_array.cc: 70)	base::android::ToJavaIntArray(_JNIEnv*, int const*, unsigned int)
0x0000fffe 
0x74781d5e (dalvik-non moving space (deleted) + 0x00075d5e)	
0xa1b64151 (libchrome.so - jni.h: 780)	_JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)
0xa1d30799 (libchrome.so - SafeBrowsingApiBridge_jni.h: 114)	safe_browsing::SafeBrowsingApiHandlerBridge::Core::StartURLCheck(std::__ndk1::unique_ptr<base::OnceCallback<void (safe_browsing::SBThreatType, safe_browsing::ThreatMetadata const&)>, std::__ndk1::default_delete<base::OnceCallback<void (safe_browsing::SBThreatType, safe_browsing::ThreatMetadata const&)> > >, GURL const&, base::internal::flat_tree<safe_browsing::SBThreatType, safe_browsing::SBThreatType, base::internal::GetKeyFromValueIdentity<safe_browsing::SBThreatType>, std::__ndk1::less<void> > const&)
0xa1d2f175 (libchrome.so - safe_browsing_api_handler_bridge.cc: 189)	safe_browsing::SafeBrowsingApiHandlerBridge::StartURLCheck(std::__ndk1::unique_ptr<base::OnceCallback<void (safe_browsing::SBThreatType, safe_browsing::ThreatMetadata const&)>, std::__ndk1::default_delete<base::OnceCallback<void (safe_browsing::SBThreatType, safe_browsing::ThreatMetadata const&)> > >, GURL const&, base::internal::flat_tree<safe_browsing::SBThreatType, safe_browsing::SBThreatType, base::internal::GetKeyFromValueIdentity<safe_browsing::SBThreatType>, std::__ndk1::less<void> > const&)
0xa1d39c05 (libchrome.so - remote_database_manager.cc: 211)	safe_browsing::RemoteSafeBrowsingDatabaseManager::CheckBrowseUrl(GURL const&, base::internal::flat_tree<safe_browsing::SBThreatType, safe_browsing::SBThreatType, base::internal::GetKeyFromValueIdentity<safe_browsing::SBThreatType>, std::__ndk1::less<void> > const&, safe_browsing::SafeBrowsingDatabaseManager::Client*)
0xa1d398cd (libchrome.so - safe_browsing_url_checker_impl.cc: 261)	safe_browsing::SafeBrowsingUrlCheckerImpl::ProcessUrls()
0xa1d395b3 (libchrome.so - safe_browsing_url_checker_impl.cc: 120)	safe_browsing::SafeBrowsingUrlCheckerImpl::CheckUrl(GURL const&, std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&, base::OnceCallback<void (base::OnceCallback<void (bool, bool)>*, bool, bool)>)
0xa1d394d7 (libchrome.so - browser_url_loader_throttle.cc: 63)	safe_browsing::BrowserURLLoaderThrottle::WillStartRequest(network::ResourceRequest*, bool*)
0xa1d3934f (libchrome.so - base_parallel_resource_throttle.cc: 128)	safe_browsing::BaseParallelResourceThrottle::WillStartRequest(bool*)
0xa1d39253 (libchrome.so - throttling_resource_handler.cc: 76)	content::ThrottlingResourceHandler::OnWillStart(GURL const&, std::__ndk1::unique_ptr<content::ResourceController, std::__ndk1::default_delete<content::ResourceController> >)
0xa1d39ca9 (libchrome.so - ServiceWorkerGlobalScopeClient.cpp: 70)	blink::ServiceWorkerGlobalScopeClient::OpenWindowForPaymentHandler(blink::WebURL const&, std::__ndk1::unique_ptr<blink::WebCallbacks<std::__ndk1::unique_ptr<blink::WebServiceWorkerClientInfo, std::__ndk1::default_delete<blink::WebServiceWorkerClientInfo> >, blink::WebServiceWorkerError const&>, std::__ndk1::default_delete<blink::WebCallbacks<std::__ndk1::unique_ptr<blink::WebServiceWorkerClientInfo, std::__ndk1::default_delete<blink::WebServiceWorkerClientInfo> >, blink::WebServiceWorkerError const&> > >)
0xa1d391b1 (libchrome.so - resource_loader.cc: 278)	content::ResourceLoader::StartRequest()
0xa1d3908d (libchrome.so - resource_dispatcher_host_impl.cc: 2283)	content::ResourceDispatcherHostImpl::StartLoading(content::ResourceRequestInfoImpl*, std::__ndk1::unique_ptr<content::ResourceLoader, std::__ndk1::default_delete<content::ResourceLoader> >)
0xa1d38cd3 (libchrome.so - resource_dispatcher_host_impl.cc: 2187)	content::ResourceDispatcherHostImpl::BeginRequestInternal(std::__ndk1::unique_ptr<net::URLRequest, std::__ndk1::default_delete<net::URLRequest> >, std::__ndk1::unique_ptr<content::ResourceHandler, std::__ndk1::default_delete<content::ResourceHandler> >, bool)
0xa1dac9df (libchrome.so - resource_dispatcher_host_impl.cc: 1294)	content::ResourceDispatcherHostImpl::ContinuePendingBeginRequest(scoped_refptr<content::ResourceRequesterInfo>, int, network::ResourceRequest const&, bool, int, net::HttpRequestHeaders const&, mojo::InterfaceRequest<network::mojom::URLLoader>, mojo::InterfacePtr<network::mojom::URLLoaderClient>, std::__ndk1::vector<std::__ndk1::unique_ptr<storage::BlobDataHandle, std::__ndk1::default_delete<storage::BlobDataHandle> >, std::__ndk1::allocator<std::__ndk1::unique_ptr<storage::BlobDataHandle, std::__ndk1::default_delete<storage::BlobDataHandle> > > >, net::NetworkTrafficAnnotationTag const&, content::HeaderInterceptorResult)
0xa1dac0a9 (libchrome.so - resource_dispatcher_host_impl.cc: 1031)	content::ResourceDispatcherHostImpl::BeginRequest(content::ResourceRequesterInfo*, int, network::ResourceRequest const&, bool, int, mojo::InterfaceRequest<network::mojom::URLLoader>, mojo::InterfacePtr<network::mojom::URLLoaderClient>, net::NetworkTrafficAnnotationTag const&)
0xa1dabd7b (libchrome.so - resource_dispatcher_host_impl.cc: 754)	content::ResourceDispatcherHostImpl::OnRequestResourceInternal(content::ResourceRequesterInfo*, int, int, bool, network::ResourceRequest const&, mojo::InterfaceRequest<network::mojom::URLLoader>, mojo::InterfacePtr<network::mojom::URLLoaderClient>, net::NetworkTrafficAnnotationTag const&)
0xa1dabce1 (libchrome.so - resource_dispatcher_host_impl.cc: 2080)	content::ResourceDispatcherHostImpl::OnRequestResourceWithMojo(content::ResourceRequesterInfo*, int, int, unsigned int, network::ResourceRequest const&, mojo::InterfaceRequest<network::mojom::URLLoader>, mojo::InterfacePtr<network::mojom::URLLoaderClient>, net::NetworkTrafficAnnotationTag const&)
0xa1dabc7f (libchrome.so - url_loader_factory_impl.cc: 41)	content::URLLoaderFactoryImpl::CreateLoaderAndStart(mojo::InterfaceRequest<network::mojom::URLLoader>, int, int, unsigned int, network::ResourceRequest const&, mojo::InterfacePtr<network::mojom::URLLoaderClient>, net::MutableNetworkTrafficAnnotationTag const&)
0xa1dabc17 (libchrome.so - resource_message_filter.cc: 130)	content::ResourceMessageFilter::CreateLoaderAndStart(mojo::InterfaceRequest<network::mojom::URLLoader>, int, int, unsigned int, network::ResourceRequest const&, mojo::InterfacePtr<network::mojom::URLLoaderClient>, net::MutableNetworkTrafficAnnotationTag const&)
0xa1dab0d7 (libchrome.so - url_loader_factory.mojom.cc: 385)	network::mojom::URLLoaderFactoryStubDispatch::Accept(network::mojom::URLLoaderFactory*, mojo::Message*)
0xa1cff61f (libchrome.so - ipc_mojo_bootstrap.cc: 773)	IPC::(anonymous namespace)::ChannelAssociatedGroupController::Accept(mojo::Message*)
0xa1c0143b (libchrome.so - connector.cc: 445)	mojo::Connector::ReadSingleMessage(unsigned int*)
0xa1c01365 (libchrome.so - connector.cc: 474)	mojo::Connector::ReadAllAvailableMessages()
0xa1be688b (libchrome.so - bind_internal.h: 604)	void base::internal::Invoker<base::internal::BindState<void (ChromeMetricsServiceClient::*)(OmniboxLog*), base::internal::UnretainedWrapper<ChromeMetricsServiceClient> >, void (OmniboxLog*)>::RunImpl<void (ChromeMetricsServiceClient::* const&)(OmniboxLog*), std::__ndk1::tuple<base::internal::UnretainedWrapper<ChromeMetricsServiceClient> > const&, 0u>(void (ChromeMetricsServiceClient::* const&&&)(OmniboxLog*), std::__ndk1::tuple<base::internal::UnretainedWrapper<ChromeMetricsServiceClient> > const&&&, std::__ndk1::integer_sequence<unsigned int, 0u>, OmniboxLog*&&)
0xa1be687d (libchrome.so - bind_internal.h: 586)	base::internal::Invoker<base::internal::BindState<void (ChromeMetricsServiceClient::*)(OmniboxLog*), base::internal::UnretainedWrapper<ChromeMetricsServiceClient> >, void (OmniboxLog*)>::Run(base::internal::BindStateBase*, OmniboxLog*)
0xa1c0127f (libchrome.so - callback.h: 124)	mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&)
0xa1c011ef (libchrome.so - bind_internal.h: 550)	void base::internal::InvokeHelper<true, void>::MakeItSo<void (android::TabContentManager::* const&)(int, float, SkBitmap const&), base::WeakPtr<android::TabContentManager> const&, int const&, float, SkBitmap const&>(void (android::TabContentManager::* const&&&)(int, float, SkBitmap const&), base::WeakPtr<android::TabContentManager> const&&&, int const&&&, float&&, SkBitmap const&&&)
0xa1c011c9 (libchrome.so - bind_internal.h: 604)	void base::internal::Invoker<base::internal::BindState<void (content::FrameInputHandlerImpl::*)(int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&), base::WeakPtr<content::FrameInputHandlerImpl>, int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > >, void ()>::RunImpl<void (content::FrameInputHandlerImpl::* const&)(int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&), std::__ndk1::tuple<base::WeakPtr<content::FrameInputHandlerImpl>, int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > > const&, 0u, 1u, 2u, 3u>(void (content::FrameInputHandlerImpl::* const&&&)(int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&), std::__ndk1::tuple<base::WeakPtr<content::FrameInputHandlerImpl>, int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > > const&&&, std::__ndk1::integer_sequence<unsigned int, 0u, 1u, 2u, 3u>)
0xa1b9c9eb (libchrome.so - callback.h: 95)	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*)
0xa1b9c53f (libchrome.so - message_loop.cc: 395)	base::MessageLoop::RunTask(base::PendingTask*)
0xa1b9a4f7 (libchrome.so - message_loop.cc: 407)	base::MessageLoop::DoWork()
0xa1b9a331 (libchrome.so - message_pump_libevent.cc: 220)	base::MessagePumpLibevent::Run(base::MessagePump::Delegate*)
0xa1b9a1e9 (libchrome.so - run_loop.cc: 133)	base::RunLoop::Run()
0xa1b9b015 (libchrome.so - browser_thread_impl.cc: 233)	content::BrowserThreadImpl::IOThreadRun(base::RunLoop*)
0xa1b98b3f (libchrome.so - browser_thread_impl.cc: 260)	content::BrowserThreadImpl::Run(base::RunLoop*)
0xa1b97a9b (libchrome.so - thread.cc: 338)	base::Thread::ThreadMain()
0xa1b971bb (libchrome.so - platform_thread_posix.cc: 75)	base::(anonymous namespace)::ThreadFunc(void*)
0xb6de1603 (libc.so + 0x00016603)	
0xb6de15e3 (libc.so + 0x000165e3)	
0xb6de15e3 (libc.so + 0x000165e3)	
0xb6ddf5b7 (libc.so + 0x000145b7)	
0x2db3e9bd (dalvik-main space (deleted) + 0x1af3e9bd)	

-------------------------------------------------------------------------------
Manual regression range finder link
-------------------------------------------------------------------------------
https://crash.corp.google.com/browse?q=expanded_custom_data.ChromeCrashProto.magic_signature_1.name%3D'%5BThreadWatcher%20IO%20hang%5D%20base%3A%3Aandroid%3A%3AToJavaIntArray'%20AND%20expanded_custom_data.ChromeCrashProto.ptype%3D'browser'#-property-selector,-samplereports,+productname,+productversion:1000,+directory,-clientid,+operatingsystem,+url,+simplifiedurl,+extensions