Run with "--enable-prefer-compositing-to-lcd-text --enable-blink-gen-property-trees"
1. Resize for scrollbar appear.
2. Scroll with mouse wheel
3. Crash
Received signal 11 SEGV_MAPERR 000000000094
#0 0x7fb2849301ed base::debug::StackTrace::StackTrace()
#1 0x7fb2846594bc base::debug::StackTrace::StackTrace()
#2 0x7fb28492fc44 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7fb2674d60c0 <unknown>
#4 0x7fb27b66e65c cc::LayerImpl::scroll_tree_index()
#5 0x7fb27b6cd76e cc::Viewport::CanScroll()
#6 0x7fb27b87fd36 cc::LayerTreeHostImpl::ScrollBeginImpl()
#7 0x7fb27b880ede cc::LayerTreeHostImpl::ScrollBegin()
#8 0x7fb27b8814c6 cc::LayerTreeHostImpl::ScrollAnimatedBegin()
#9 0x7fb27dbae266 ui::InputHandlerProxy::HandleGestureScrollBegin()
#10 0x7fb27dbacaaa ui::InputHandlerProxy::HandleInputEvent()
#11 0x7fb27dbabbd5 ui::InputHandlerProxy::DispatchSingleInputEvent()
#12 0x7fb27dbab226 ui::InputHandlerProxy::HandleInputEventWithLatencyInfo()
#13 0x7fb27f908d24 content::WidgetInputHandlerManager::DispatchEvent()
#14 0x7fb27f9029af content::WidgetInputHandlerImpl::DispatchEvent()
#15 0x7fb27d392d52 content::mojom::WidgetInputHandlerStubDispatch::AcceptWithResponder()
#16 0x7fb27f903d70 content::mojom::WidgetInputHandlerStub<>::AcceptWithResponder()
#17 0x7fb282b2f0c5 mojo::InterfaceEndpointClient::HandleValidatedMessage()
#18 0x7fb282b2e691 mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept()
#19 0x7fb282b2cb22 mojo::FilterChain::Accept()
#20 0x7fb282b32875 mojo::InterfaceEndpointClient::HandleIncomingMessage()
#21 0x7fb282b3edab mojo::internal::MultiplexRouter::ProcessIncomingMessage()
#22 0x7fb282b3e2f5 mojo::internal::MultiplexRouter::Accept()
#23 0x7fb282b2cb22 mojo::FilterChain::Accept()
#24 0x7fb282b1e9df mojo::Connector::ReadSingleMessage()
#25 0x7fb282b1fa2a mojo::Connector::ReadAllAvailableMessages()
#26 0x7fb282b1f7f5 mojo::Connector::OnHandleReadyInternal()
#27 0x7fb282b1f6db mojo::Connector::OnWatcherHandleReady()
#28 0x7fb282b232bf _ZN4base8internal13FunctorTraitsIMN4mojo9ConnectorEFvjEvE6InvokeIS5_PS3_JjEEEvT_OT0_DpOT1_
#29 0x7fb282b2321f _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN4mojo9ConnectorEFvjEJPS5_jEEEvOT_DpOT0_
#30 0x7fb282b231b5 _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo9ConnectorEFvjEJNS0_17UnretainedWrapperIS4_EEEEEFvjEE7RunImplIRKS6_RKNSt3__15tupleIJS8_EEEJLm0EEEEvOT_OT0_NSF_16integer_sequenceImJXspT1_EEEEOj
#31 0x7fb282b230eb _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo9ConnectorEFvjEJNS0_17UnretainedWrapperIS4_EEEEEFvjEE3RunEPNS0_13BindStateBaseEj
#32 0x7fb282b1a09e _ZNKR4base17RepeatingCallbackIFvjEE3RunEj
#33 0x7fb282b2232f mojo::SimpleWatcher::DiscardReadyState()
#34 0x7fb282b225af _ZN4base8internal13FunctorTraitsIPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEvE6InvokeIRKSC_JS6_jSA_EEEvOT_DpOT0_
#35 0x7fb282b2254d _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEJS8_jSC_EEEvOT_DpOT0_
#36 0x7fb282b224f0 _ZN4base8internal7InvokerINS0_9BindStateIPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEJS5_EEEFvjSB_EE7RunImplIRKSD_RKNSt3__15tupleIJS5_EEEJLm0EEEEvOT_OT0_NSK_16integer_sequenceImJXspT1_EEEEOjSB_
#37 0x7fb282b22426 _ZN4base8internal7InvokerINS0_9BindStateIPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEJS5_EEEFvjSB_EE3RunEPNS0_13BindStateBaseEjSB_
#38 0x7fb282ab0f4e _ZNKR4base17RepeatingCallbackIFvjRKN4mojo18HandleSignalsStateEEE3RunEjS4_
#39 0x7fb282ab0899 mojo::SimpleWatcher::OnHandleReady()
#40 0x7fb282ab1743 _ZN4base8internal13FunctorTraitsIMN4mojo13SimpleWatcherEFvijRKNS2_18HandleSignalsStateEEvE6InvokeIS8_RKNS_7WeakPtrIS3_EEJRKiRKjS6_EEEvT_OT0_DpOT1_
#41 0x7fb282ab1685 _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMN4mojo13SimpleWatcherEFvijRKNS4_18HandleSignalsStateEERKNS_7WeakPtrIS5_EEJRKiRKjS8_EEEvOT_OT0_DpOT1_
#42 0x7fb282ab15e2 _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo13SimpleWatcherEFvijRKNS3_18HandleSignalsStateEEJNS_7WeakPtrIS4_EEijS5_EEEFvvEE7RunImplIRKS9_RKNSt3__15tupleIJSB_ijS5_EEEJLm0ELm1ELm2ELm3EEEEvOT_OT0_NSI_16integer_sequenceImJXspT1_EEEE
#43 0x7fb282ab145c _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo13SimpleWatcherEFvijRKNS3_18HandleSignalsStateEEJNS_7WeakPtrIS4_EEijS5_EEEFvvEE3RunEPNS0_13BindStateBaseE
#44 0x7fb2846081ee _ZNO4base12OnceCallbackIFvvEE3RunEv
#45 0x7fb28465a982 base::debug::TaskAnnotator::RunTask()
#46 0x7fb26b8cd80d base::sequence_manager::internal::ThreadControllerImpl::DoWork()
#47 0x7fb26b8d04c1 _ZN4base8internal13FunctorTraitsIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS4_8WorkTypeEEvE6InvokeIS7_RKNS_7WeakPtrIS4_EEJRKS5_EEEvT_OT0_DpOT1_
#48 0x7fb26b8d0425 _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMNS_16sequence_manager8internal20ThreadControllerImplEFvNS6_8WorkTypeEERKNS_7WeakPtrIS6_EEJRKS7_EEEvOT_OT0_DpOT1_
#49 0x7fb26b8d039d _ZN4base8internal7InvokerINS0_9BindStateIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS5_8WorkTypeEEJNS_7WeakPtrIS5_EES6_EEEFvvEE7RunImplIRKS8_RKNSt3__15tupleIJSA_S6_EEEJLm0ELm1EEEEvOT_OT0_NSH_16integer_sequenceImJXspT1_EEEE
#50 0x7fb26b8d02ac _ZN4base8internal7InvokerINS0_9BindStateIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS5_8WorkTypeEEJNS_7WeakPtrIS5_EES6_EEEFvvEE3RunEPNS0_13BindStateBaseE
#51 0x7fb2846081ee _ZNO4base12OnceCallbackIFvvEE3RunEv
#52 0x7fb28465a982 base::debug::TaskAnnotator::RunTask()
#53 0x7fb2846e7af9 base::internal::IncomingTaskQueue::RunTask()
#54 0x7fb2846f0bd7 base::MessageLoop::RunTask()
#55 0x7fb2846f0e48 base::MessageLoop::DeferOrRunPendingTask()
#56 0x7fb2846f1179 base::MessageLoop::DoWork()
#57 0x7fb2846f4487 base::MessagePumpDefault::Run()
#58 0x7fb2846f03cb base::MessageLoop::Run()
#59 0x7fb28479a1fd base::RunLoop::Run()
#60 0x7fb2848545e8 base::Thread::Run()
#61 0x7fb2848551a8 base::Thread::ThreadMain()
r8: 00000000000001e0 r9: 0000000000000002 r10: 0019aa59309e9700 r11: 00007fb2633a9e00
r12: 0000000000000000 r13: 00007ffc59edaa6f r14: 0000000000000000 r15: 00007fb284def040
di: 0000000000000000 si: 00007fb2520c7110 bp: 00007fb2520c7290 bx: 0000000000000000
dx: 0000000000000000 ax: 0000000000000000 cx: 0000000000000000 sp: 00007fb2520c7290
ip: 00007fb27b66e65c efl: 0000000000010206 cgf: 002b000000000033 erf: 0000000000000004
trp: 000000000000000e msk: 0000000000000000 cr2: 0000000000000094
[end of stack trace]
Calling _exit(1). Core file will not be generated.
Comment 1 by pdr@chromium.org
, May 25 2018