signal 11 (SIGSEGV), code 9 (SEGV_MTESERR), fault addr 0xb000076029ba8d0 in tid 6296 (chromium.chrome), pid 6296 (chromium.chrome) Build fingerprint: 'google/akita/akita:16/CP1A.260305.018/14887507:user/release-keys' Revision: 'MP1.0' pid: 6296, tid: 6296, name: chromium.chrome >>> org.chromium.chrome <<< signal 11 (SIGSEGV), code 9 (SEGV_MTESERR), fault addr 0x0b000076029ba8d0 (write) Stack Trace: RELADDR FUNCTION FILE:LINE v------> ipcz::DriverObject::reset() ../../third_party/ipcz/src/ipcz/driver_object.cc:44:13 0000000003184a44 ipcz::DriverObject::~DriverObject() ../../third_party/ipcz/src/ipcz/driver_object.cc:36:3 v------> decltype(auto) std::__Cr::__variant_detail::__visitation::__base::__visit_alt>, (std::__Cr::__variant_detail::_Trait)1>::__destroy()::'lambda'(auto&), std::__Cr::__variant_detail::__dtor>, (std::__Cr::__variant_detail::_Trait)1>&>(auto&&, std::__Cr::__variant_detail::__dtor>, (std::__Cr::__variant_detail::_Trait)1>&) gen/third_party/libc++/src/include/variant:501:12 v------> std::__Cr::__variant_detail::__dtor>, (std::__Cr::__variant_detail::_Trait)1>::__destroy() gen/third_party/libc++/src/include/variant:784:9 v------> auto& std::__Cr::__variant_detail::__assignment>>::__emplace<0ul, std::__Cr::monostate>(std::__Cr::monostate&&) gen/third_party/libc++/src/include/variant:909:11 v------> void std::__Cr::__variant_detail::__assignment>>::__assign_alt<0ul, std::__Cr::monostate, std::__Cr::monostate>(std::__Cr::__variant_detail::__alt<0ul, std::__Cr::monostate>&, std::__Cr::monostate&&)::'unnamed'::operator()(std::__Cr::integral_constant) const gen/third_party/libc++/src/include/variant:923:19 v------> void std::__Cr::__variant_detail::__assignment>>::__assign_alt<0ul, std::__Cr::monostate, std::__Cr::monostate>(std::__Cr::__variant_detail::__alt<0ul, std::__Cr::monostate>&, std::__Cr::monostate&&) gen/third_party/libc++/src/include/variant:931:7 v------> void std::__Cr::__variant_detail::__impl>::__assign<0ul, std::__Cr::monostate>(std::__Cr::monostate&&) gen/third_party/libc++/src/include/variant:1042:11 v------> std::__Cr::variant>& std::__Cr::variant>::operator=(std::__Cr::monostate&&) gen/third_party/libc++/src/include/variant:1245:22 0000000003182888 ipcz::Box::Close() ../../third_party/ipcz/src/ipcz/box.cc:33:13 0000000003180564 Close ../../third_party/ipcz/src/api.cc:33:25 v------> mojo::Handle::Close() ../../mojo/public/cpp/system/handle.h:179:42 v------> mojo::ScopedHandleBase::CloseIfNecessary() ../../mojo/public/cpp/system/handle.h:140:15 v------> mojo::ScopedHandleBase::~ScopedHandleBase() ../../mojo/public/cpp/system/handle.h:83:25 000000000780fda8 mojo::SimpleWatcher::~SimpleWatcher() ../../mojo/public/cpp/system/simple_watcher.cc:134:1 v------> mojo::android::(anonymous namespace)::WatcherImpl::~WatcherImpl() ../../mojo/public/java/system/watcher_impl.cc:35:26 v------> mojo::android::JNI_WatcherImpl_Delete(_JNIEnv*, long) ../../mojo/public/java/system/watcher_impl.cc:100:3 v------> _ZZZ54Muxed_org_chromium_mojo_system_impl_WatcherImpl_deleteENK3$_0clIiEEDaT_ENKUlDpOT_E_clIJRP7_JNIEnvRlEEEDTcl22JNI_WatcherImpl_Deletespclsr3stdE7forwardIDtfp_EEfp_EEES4_ ../../mojo/public/java/system/watcher_impl.cc:106:1 v------> _ZZ54Muxed_org_chromium_mojo_system_impl_WatcherImpl_deleteENK3$_0clIiEEDaT_ ../../mojo/public/java/system/watcher_impl.cc:106:1 00000000070b518c Muxed_org_chromium_mojo_system_impl_WatcherImpl_delete ../../mojo/public/java/system/watcher_impl.cc:106:1 00000000002e5100 art_quick_generic_jni_trampoline+144) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002ce060 art_quick_invoke_static_stub+640) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000057f2f8 bool art::interpreter::DoCall(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1984) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000048b230 void art::interpreter::ExecuteSwitchImplCpp(art::interpreter::SwitchImplContext*)+468) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c49a8 ExecuteSwitchImplAsm+8) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 0000000000031f84 offset 0x4a56000) (r72.close+0 /data/app/~~BeoIEtoKjzsC3ZwLv6Hlew==/org.chromium.chrome--nq0GaSSe_7O5awvF4UgzQ==/base.apk/libmonochrome.so 00000000003c5574 art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+448) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000057f9a8 bool art::interpreter::DoCall(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+3696) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000048b628 void art::interpreter::ExecuteSwitchImplCpp(art::interpreter::SwitchImplContext*)+1484) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c49a8 ExecuteSwitchImplAsm+8) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 0000000000031d74 offset 0x4a56000) (q72.a+0 /data/app/~~BeoIEtoKjzsC3ZwLv6Hlew==/org.chromium.chrome--nq0GaSSe_7O5awvF4UgzQ==/base.apk/libmonochrome.so 00000000003c5574 art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+448) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000057f9a8 bool art::interpreter::DoCall(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+3696) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000048b7f0 void art::interpreter::ExecuteSwitchImplCpp(art::interpreter::SwitchImplContext*)+1940) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c49a8 ExecuteSwitchImplAsm+8) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000006e9d4 offset 0x4a56000) (org.chromium.mojo.system.impl.WatcherImpl.onHandleReady+0 /data/app/~~BeoIEtoKjzsC3ZwLv6Hlew==/org.chromium.chrome--nq0GaSSe_7O5awvF4UgzQ==/base.apk/libmonochrome.so 00000000003c45fc art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.15926011731833139376)+364) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c3d30 artQuickToInterpreterBridge+1020) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002e5238 art_quick_to_interpreter_bridge+88) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002cdd94 art_quick_invoke_stub+612) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002cbd50 art::JValue art::InvokeVirtualOrInterfaceWithVarArgs<_jmethodID*>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+904) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000061e188 art::JNI::CallVoidMethodV(_JNIEnv*, _jobject*, _jmethodID*, std::__va_list)+116) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003454cc art::(anonymous namespace)::CheckJNI::CallMethodV(char const*, _JNIEnv*, _jobject*, _jclass*, _jmethodID*, std::__va_list, art::Primitive::Type, art::InvokeType) (.__uniq.99033978352804627313491551960229047428)+356) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 0000000000345190 art::(anonymous namespace)::CheckJNI::CallVoidMethodV(_JNIEnv*, _jobject*, _jmethodID*, std::__va_list) (.__uniq.99033978352804627313491551960229047428.llvm.14895045140914427511)+72) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000033a2ba8 _JNIEnv::CallVoidMethod(_jobject*, _jmethodID*, ...) ../../third_party/android_toolchain/ndk/toolchains/llvm/prebuilt/linux-x86_64/sysroot/usr/include/jni.h:631:9 v------> mojo::android::Java_WatcherImpl_onHandleReady(_JNIEnv*, jni_zero::JavaRef<_jobject*> const&, int) gen/jni_headers/mojo/public/java/system/system_impl_java_jni_headers/WatcherImpl_jni.h:167:8 00000000070b5390 mojo::android::(anonymous namespace)::WatcherImpl::OnHandleReady(unsigned int) ../../mojo/public/java/system/watcher_impl.cc:70:5 00000000033a9188 base::RepeatingCallback::Run(media::MediaStatus::State) const & ../../base/functional/callback.h:346:12 00000000033e7854 base::RepeatingCallback::Run(int, network::URLLoaderCompletionStatus const&) const & ../../base/functional/callback.h:346:12 0000000007810604 mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&) ../../mojo/public/cpp/system/simple_watcher.cc:286:14 v------> base::OnceCallback::Run() && ../../base/functional/callback.h:155:12 0000000007129f28 base::TaskAnnotator::RunTaskImpl(base::PendingTask&) ../../base/task/common/task_annotator.cc:229:34 v------> void base::TaskAnnotator::RunTask(perfetto::StaticString, base::PendingTask&, base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*)::$_3&&) ../../base/task/common/task_annotator.h:112:5 0000000007146258 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) ../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:475:23 0000000007145e5c base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() ../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:346:40 000000000719d998 base::MessagePumpAndroid::DoNonDelayedLooperWork(bool) ../../base/message_loop/message_pump_android.cc:484:33 000000000719d934 base::MessagePumpAndroid::OnNonDelayedLooperCallback() ../../base/message_loop/message_pump_android.cc:469:3 000000000719d560 base::(anonymous namespace)::NonDelayedLooperCallback(int, int, void*) ../../base/message_loop/message_pump_android.cc:68:9 00000000000163f4 android::Looper::pollOnce(int, int*, int*, void**)+1268) (BuildId: 1df2ced4b0e58d9c06fdf86886397554 /system/lib64/libutils.so 00000000001bfd60 android::android_os_MessageQueue_nativePollOnce(_JNIEnv*, _jobject*, long, int) (.__uniq.190462215528616872930035678816392364378)+48) (BuildId: 83302318da3878f15b1f609b3f2fe03a /system/lib64/libandroid_runtime.so 0000000002184c5c deleted) (offset 0x2000000) (art_jni_trampoline+140 /memfd:jit-cache 000000000205e6d0 deleted) (offset 0x2000000) (android.os.MessageQueue.nextDeliQueue+336 /memfd:jit-cache 000000000205e49c deleted) (offset 0x2000000) (android.os.MessageQueue.next+236 /memfd:jit-cache 000000000205d4c4 deleted) (offset 0x2000000) (android.os.Looper.loopOnce+164 /memfd:jit-cache 00000000002ce060 art_quick_invoke_static_stub+640) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000057f2f8 bool art::interpreter::DoCall(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1984) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000048b230 void art::interpreter::ExecuteSwitchImplCpp(art::interpreter::SwitchImplContext*)+468) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c49a8 ExecuteSwitchImplAsm+8) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002a7a38 offset 0x123e000) (android.os.Looper.loop+0 /system/framework/framework.jar 00000000003c5574 art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+448) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000057f9a8 bool art::interpreter::DoCall(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+3696) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000048b230 void art::interpreter::ExecuteSwitchImplCpp(art::interpreter::SwitchImplContext*)+468) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c49a8 ExecuteSwitchImplAsm+8) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000001d7d18 offset 0x6000) (android.app.ActivityThread.main+0 /system/framework/framework.jar 00000000003c45fc art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.15926011731833139376)+364) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c3d30 artQuickToInterpreterBridge+1020) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002e5238 art_quick_to_interpreter_bridge+88) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002ce060 art_quick_invoke_static_stub+640) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002c40f0 _jobject* art::InvokeMethod<(art::PointerSize)8>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jobject*, _jobject*, unsigned long)+552) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000005a56a8 art::Method_invoke(_JNIEnv*, _jobject*, _jobject*, _jobjectArray*) (.__uniq.165753521025965369065708152063621506277)+32) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002e5100 art_quick_generic_jni_trampoline+144) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002cdd94 art_quick_invoke_stub+612) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000057f5b8 bool art::interpreter::DoCall(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+2688) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000048b628 void art::interpreter::ExecuteSwitchImplCpp(art::interpreter::SwitchImplContext*)+1484) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c49a8 ExecuteSwitchImplAsm+8) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000031e328 offset 0x2448000) (com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run+0 /system/framework/framework.jar 00000000003c45fc art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.15926011731833139376)+364) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000003c3d30 artQuickToInterpreterBridge+1020) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002e5238 art_quick_to_interpreter_bridge+88) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 0000000000c19560 com.android.internal.os.ZygoteInit.main+3200 /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat 00000000002ce060 art_quick_invoke_static_stub+640) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 00000000002ccc9c art::JValue art::InvokeWithVarArgs<_jmethodID*>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+876) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 000000000060ae14 art::JNI::CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, std::__va_list)+184) (BuildId: be34fbe63ff357beb403f9cb39923ea7 /apex/com.android.art/lib64/libart.so 0000000000115eec _JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)+108) (BuildId: 83302318da3878f15b1f609b3f2fe03a /system/lib64/libandroid_runtime.so 000000000013ba9c android::AndroidRuntime::start(char const*, android::Vector const&, bool)+908) (BuildId: 83302318da3878f15b1f609b3f2fe03a /system/lib64/libandroid_runtime.so 00000000000045b8 main+1240) (BuildId: bf44ea70f221d41465c88629ddfe1e21 /system/bin/app_process64 000000000006b25c __libc_init+124) (BuildId: 91811ea70d610cb58de95ac6d0978282 /apex/com.android.runtime/lib64/bionic/libc.so