Browser always returns Aww Snap with Error Code 11 when media is involved

[punishm...@gmail.com]

I have been experiencing a very reproducible issue in my Chromium builds starting from 94.0.4603.0, 95.0.4608.0, 95.0.4618.0, 95.0.4626.0 and onwards. While it occurs randomly in various websites, there is a 100% chance of triggering it in https://www.onlinemictest.com/ and in Microsoft Teams, where the page will crash with an Aww Snap and the following messages printed on the console:

[5329:5329:0830/203034.919409:ERROR:power_monitor_device_source_stub.cc(11)] Not implemented reached in virtual bool base::PowerMonitorDeviceSource::IsOnBatteryPower()
[5329:5329:0830/203035.279303:ERROR:wayland_connection.cc(557)] Not implemented reached in static void ui::WaylandConnection::Global(void *, wl_registry *, uint32_t, const char *, uint32_t)
[5329:5329:0830/203035.280148:ERROR:wayland_connection.cc(553)] Not implemented reached in static void ui::WaylandConnection::Global(void *, wl_registry *, uint32_t, const char *, uint32_t)
[5363:5363:0830/203038.319089:ERROR:gpu_init.cc(453)] Passthrough is not supported, GL is swiftshader, ANGLE is
[5363:5363:0830/203038.525415:ERROR:sandbox_linux.cc(374)] InitializeSandbox() called with multiple threads in process gpu-process.
[5329:5329:0830/203039.829871:ERROR:cursor_loader.cc(115)] Failed to load a platform cursor of type kNull
[5329:5329:0830/203039.832659:ERROR:wayland_window.cc(357)] Not implemented reached in virtual bool ui::WaylandWindow::ShouldWindowContentsBeTransparent() const
[5329:5329:0830/203040.379484:ERROR:wayland_window.cc(367)] Not implemented reached in virtual void ui::WaylandWindow::SetWindowIcons(const gfx::ImageSkia &, const gfx::ImageSkia &)
[5329:5329:0830/203040.379990:ERROR:wayland_toplevel_window.cc(252)] Not implemented reached in virtual bool ui::WaylandToplevelWindow::CanSetDecorationInsets() const
[5329:5329:0830/203040.389647:ERROR:wayland_toplevel_window.cc(263)] Not implemented reached in virtual void ui::WaylandToplevelWindow::SetOpaqueRegion(std::vector<gfx::Rect>)
[5329:5329:0830/203040.795117:ERROR:wayland_surface.cc(278)] Not implemented reached in zwp_linux_surface_synchronization_v1 *ui::WaylandSurface::GetSurfaceSync()
[5363:5381:0830/203041.021745:ERROR:wayland_canvas_surface.cc(241)] Not implemented reached in virtual std::unique_ptr<gfx::VSyncProvider> ui::WaylandCanvasSurface::CreateVSyncProvider()
[5363:5381:0830/203041.939391:ERROR:wayland_canvas_surface.cc(312)] Not implemented reached in virtual void ui::WaylandCanvasSurface::OnPresentation(uint32_t, const gfx::PresentationFeedback &)
[5329:5329:0830/203044.981263:ERROR:gtk_ui_platform_wayland.cc(31)] Not implemented reached in virtual GdkKeymap *gtk::GtkUiPlatformWayland::GetGdkKeymap()
[5329:5345:0830/203055.402275:ERROR:chrome_browser_main_extra_parts_metrics.cc(228)] crbug.com/1216328: Checking Bluetooth availability started. Please report if there is no report that this ends.
[5329:5345:0830/203055.402360:ERROR:chrome_browser_main_extra_parts_metrics.cc(231)] crbug.com/1216328: Checking Bluetooth availability ended.
[5329:5345:0830/203055.402388:ERROR:chrome_browser_main_extra_parts_metrics.cc(234)] crbug.com/1216328: Checking default browser status started. Please report if there is no report that this ends.
[5329:5345:0830/203055.429521:ERROR:chrome_browser_main_extra_parts_metrics.cc(238)] crbug.com/1216328: Checking default browser status ended.
[5438:1:0830/203100.206534:FATAL:feature_list.cc(548)] Check failed: CheckFeatureIdentity(feature). ConversionMeasurementAPIAlternativeUsage
#0 0x564536adfde9 base::debug::CollectStackTrace()
#1 0x564536a080b3 base::debug::StackTrace::StackTrace()
#2 0x564536a21ca0 logging::LogMessage::~LogMessage()
#3 0x564536a226de logging::LogMessage::~LogMessage()
#4 0x564536a0bf41 base::FeatureList::GetOverrideState()
#5 0x564536a0b70e base::FeatureList::IsEnabled()
#6 0x564533729ce5 embedder_support::OriginTrialPolicyImpl::IsFeatureDisabledForUser()
#7 0x5645334adf26 blink::TrialTokenValidator::ValidateToken()
#8 0x56453b401b94 blink::OriginTrialContext::EnableTrialFromToken()
#9 0x56453b4019fb blink::OriginTrialContext::AddTokenFromExternalScript()
#10 0x56453b3b6e6f blink::HttpEquiv::ProcessHttpEquivOriginTrial()
#11 0x56453b3b633d blink::HttpEquiv::Process()
#12 0x56453ae5367b blink::HTMLMetaElement::ProcessHttpEquiv()
#13 0x56453a8b3d10 blink::Element::AttributeChanged()
#14 0x56453ae33ff5 blink::HTMLElement::AttributeChanged()
#15 0x56453a8bd08f blink::Element::DidAddAttribute()
#16 0x56453a8bcf55 blink::Element::AppendAttributeInternal()
#17 0x56453bb6cbf1 blink::Element::setAttribute()
#18 0x56453aa93ff0 blink::bindings::PerformAttributeSetCEReactionsReflect<>()
#19 0x564534b93607 v8::internal::FunctionCallbackArguments::Call()
#20 0x564534b917c2 v8::internal::(anonymous namespace)::HandleApiCallHelper<>()
#21 0x564534b8fbd4 v8::internal::Builtins::InvokeApiFunction()
#22 0x56453515f101 v8::internal::Object::SetPropertyWithAccessor()
#23 0x564535163ff4 v8::internal::Object::SetPropertyInternal()
#24 0x564535163cba v8::internal::Object::SetProperty()
#25 0x564534ea0e8f v8::internal::StoreIC::Store()
#26 0x564534eacb0a v8::internal::__RT_impl_Runtime_StoreIC_Miss()
#27 0x1d560008fa58 <unknown>
Task trace:
#0 0x56453b5be56e blink::ScriptRunner::NotifyScriptReady()
#1 0x56453ac24ff1 blink::ScriptStreamer::StreamingCompleteOnBackgroundThread()
#2 0x56453ac2618f blink::ScriptStreamer::TryStartStreamingTask()
#3 0x564536ea296f mojo::SimpleWatcher::Context::Notify()

Received signal 6
#0 0x564536adfde9 base::debug::CollectStackTrace()
#1 0x564536a080b3 base::debug::StackTrace::StackTrace()
#2 0x564536adf871 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7f9bb1834140 (/usr/lib/x86_64-linux-gnu/libpthread-2.31.so+0x1413f)
#4 0x7f9bb058fce1 gsignal
#5 0x7f9bb0579537 abort
#6 0x564536ade9f5 base::debug::BreakDebugger()
#7 0x564536a220ed logging::LogMessage::~LogMessage()
#8 0x564536a226de logging::LogMessage::~LogMessage()
#9 0x564536a0bf41 base::FeatureList::GetOverrideState()
#10 0x564536a0b70e base::FeatureList::IsEnabled()
#11 0x564533729ce5 embedder_support::OriginTrialPolicyImpl::IsFeatureDisabledForUser()
#12 0x5645334adf26 blink::TrialTokenValidator::ValidateToken()
#13 0x56453b401b94 blink::OriginTrialContext::EnableTrialFromToken()
#14 0x56453b4019fb blink::OriginTrialContext::AddTokenFromExternalScript()
#15 0x56453b3b6e6f blink::HttpEquiv::ProcessHttpEquivOriginTrial()
#16 0x56453b3b633d blink::HttpEquiv::Process()
#17 0x56453ae5367b blink::HTMLMetaElement::ProcessHttpEquiv()
#18 0x56453a8b3d10 blink::Element::AttributeChanged()
#19 0x56453ae33ff5 blink::HTMLElement::AttributeChanged()
#20 0x56453a8bd08f blink::Element::DidAddAttribute()
#21 0x56453a8bcf55 blink::Element::AppendAttributeInternal()
#22 0x56453bb6cbf1 blink::Element::setAttribute()
#23 0x56453aa93ff0 blink::bindings::PerformAttributeSetCEReactionsReflect<>()
#24 0x564534b93607 v8::internal::FunctionCallbackArguments::Call()
#25 0x564534b917c2 v8::internal::(anonymous namespace)::HandleApiCallHelper<>()
#26 0x564534b8fbd4 v8::internal::Builtins::InvokeApiFunction()
#27 0x56453515f101 v8::internal::Object::SetPropertyWithAccessor()
#28 0x564535163ff4 v8::internal::Object::SetPropertyInternal()
#29 0x564535163cba v8::internal::Object::SetProperty()
#30 0x564534ea0e8f v8::internal::StoreIC::Store()
#31 0x564534eacb0a v8::internal::__RT_impl_Runtime_StoreIC_Miss()
#32 0x1d560008fa58 <unknown>
r8: 0000000000000000 r9: 00007ffc268147f0 r10: 0000000000000008 r11: 0000000000000246
r12: 00000eb202fdf690 r13: 000000000000008c r14: aaaaaaaaaaaaaaaa r15: 00007ffc26815270
di: 0000000000000002 si: 00007ffc268147f0 bp: 00007ffc26814a40 bx: 00007f9baf064e00
dx: 0000000000000000 ax: 0000000000000000 cx: 00007f9bb058fce1 sp: 00007ffc268147f0
ip: 00007f9bb058fce1 efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000
trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
Received signal 11 <unknown> 03e800000001
#0 0x564536adfde9 base::debug::CollectStackTrace()
#1 0x564536a080b3 base::debug::StackTrace::StackTrace()
#2 0x564536adf871 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7f9bb1834140 (/usr/lib/x86_64-linux-gnu/libpthread-2.31.so+0x1413f)
#4 0x7f9bb0579602 abort
#5 0x564536ade9f5 base::debug::BreakDebugger()
#6 0x564536a220ed logging::LogMessage::~LogMessage()
#7 0x564536a226de logging::LogMessage::~LogMessage()
#8 0x564536a0bf41 base::FeatureList::GetOverrideState()
#9 0x564536a0b70e base::FeatureList::IsEnabled()
#10 0x564533729ce5 embedder_support::OriginTrialPolicyImpl::IsFeatureDisabledForUser()
#11 0x5645334adf26 blink::TrialTokenValidator::ValidateToken()
#12 0x56453b401b94 blink::OriginTrialContext::EnableTrialFromToken()
#13 0x56453b4019fb blink::OriginTrialContext::AddTokenFromExternalScript()
#14 0x56453b3b6e6f blink::HttpEquiv::ProcessHttpEquivOriginTrial()
#15 0x56453b3b633d blink::HttpEquiv::Process()
#16 0x56453ae5367b blink::HTMLMetaElement::ProcessHttpEquiv()
#17 0x56453a8b3d10 blink::Element::AttributeChanged()
#18 0x56453ae33ff5 blink::HTMLElement::AttributeChanged()
#19 0x56453a8bd08f blink::Element::DidAddAttribute()
#20 0x56453a8bcf55 blink::Element::AppendAttributeInternal()
#21 0x56453bb6cbf1 blink::Element::setAttribute()
#22 0x56453aa93ff0 blink::bindings::PerformAttributeSetCEReactionsReflect<>()
#23 0x564534b93607 v8::internal::FunctionCallbackArguments::Call()
#24 0x564534b917c2 v8::internal::(anonymous namespace)::HandleApiCallHelper<>()
#25 0x564534b8fbd4 v8::internal::Builtins::InvokeApiFunction()
#26 0x56453515f101 v8::internal::Object::SetPropertyWithAccessor()
#27 0x564535163ff4 v8::internal::Object::SetPropertyInternal()
#28 0x564535163cba v8::internal::Object::SetProperty()
#29 0x564534ea0e8f v8::internal::StoreIC::Store()
#30 0x564534eacb0a v8::internal::__RT_impl_Runtime_StoreIC_Miss()
#31 0x1d560008fa58 <unknown>
r8: 0000000000000000 r9: 00007ffc268147f0 r10: 0000000000000008 r11: 0000000000000246
r12: 00000eb202fdf690 r13: 000000000000008c r14: aaaaaaaaaaaaaaaa r15: 00007ffc26815270
di: 0000000000000002 si: 00007ffc268147f0 bp: 00007ffc26814a40 bx: 00007f9baf064e00
dx: 0000000000000000 ax: 0000000000000000 cx: 00007f9bb058fce1 sp: 00007ffc26814910
ip: 00007f9bb0579602 efl: 0000000000010246 cgf: 002b000000000033 erf: 0000000000000000
trp: 000000000000000d msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
[5329:5329:0830/203106.477458:ERROR:background_mode_manager_aura.cc(12)] Not implemented reached in virtual void BackgroundModeManager::EnableLaunchOnStartup(bool)
[5329:5362:0830/203106.526583:ERROR:process_posix.cc(330)] Unable to terminate process 5367: No such process (3)

Dmesg also returns the following:

[ 2747.332417] traps: chrome[2246] general protection fault ip:7f93e25b7602 sp:7ffd13296260 error:0 in libc-2.31.so[7f93e25b7000+14b000]
[ 2816.826876] traps: chrome[2838] general protection fault ip:7f5cce005602 sp:7ffde2d84370 error:0 in libc-2.31.so[7f5cce005000+14b000]
[ 2878.186946] traps: chrome[3145] general protection fault ip:7f4fa1b17602 sp:7ffe7b0830b0 error:0 in libc-2.31.so[7f4fa1b17000+14b000]
[ 2924.879524] traps: chrome[3601] general protection fault ip:7f8a5cf0d602 sp:7ffde0152590 error:0 in libc-2.31.so[7f8a5cf0d000+14b000]
[ 2932.335279] traps: chrome[3696] general protection fault ip:7f8a5cf0d602 sp:7ffde01525a0 error:0 in libc-2.31.so[7f8a5cf0d000+14b000]
[ 3371.930969] traps: chrome[5438] general protection fault ip:7f9bb0579602 sp:7ffc26814910 error:0 in libc-2.31.so[7f9bb0579000+14b000]
[ 3461.089928] traps: chrome[5838] general protection fault ip:7f9977743602 sp:7ffd8791f440 error:0 in libc-2.31.so[7f9977743000+14b000]

This can always be reprocued by doing the following:

- In Microsoft Teams, just join a meeting. Once the meeting room is entered, the page instantly crashes with Aww Snap

- In https://www.onlinemictest.com/ just click on the Mic test button and grant Chromium access to the microphone. The page will immediately crash with the Aww Snap message

A bug report has been submitted at https://bugs.chromium.org/p/chromium/issues/detail?id=1244566

Any ideas on what could be the cause, and whether this can be worked around?

Thanks.

[Avi Drissman]

Investigation is proceeding on the bug.

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/d027cc2d-2c61-4144-b1ec-d2871ab6ae82n%40chromium.org.

[Ian Clelland]

I have a fix landing for this now.

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/CACWgwAZw2SVt-FV9a3pG77d%3D8pDDADkQ%3DovLTFugMGqf%2BgT8HQ%40mail.gmail.com.