Bug 1941527

Summary:	Chromium crashes seemingly trying to access the TPM
Product:	[Fedora] Fedora	Reporter:	Peter Robinson <pbrobinson>
Component:	chromium	Assignee:	Tom "spot" Callaway <spotrh>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	34	CC:	pkliczew, spotrh, tpopela, yaneti
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-03-25 15:02:37 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Peter Robinson 2021-03-22 10:30:07 UTC

I thought it was crashing when trying to access the webstore, I was trying to install Bitwarden, but actually it just crashes when running after a few seconds with just the default page. It seems it's not caught by abrt.

chromium-89.0.4389.82-1.fc34.x86_64
chromium-common-89.0.4389.82-1.fc34.x86_64

Running it from the cli I get the following crash, it seems it's trying to access the TPMv2 (Lenovo X1 Carbon gen 6):

$ chromium-browser 
ATTENTION: default value of option allow_rgb10_configs overridden by environment.
[175346:175346:0322/102527.254055:ERROR:sandbox_linux.cc(374)] InitializeSandbox() called with multiple threads in process gpu-process.
ERROR:tcti:src/tss2-tcti/tcti-device.c:440:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpmrm0: Permission denied 
WARNING:tcti:src/tss2-tcti/tctildr.c:79:tcti_from_init() TCTI init for function 0x7f76c97bd940 failed with a000a 
WARNING:tcti:src/tss2-tcti/tctildr.c:109:tcti_from_info() Could not initialize TCTI named: tcti-device 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0 
ERROR:tcti:src/tss2-tcti/tcti-device.c:440:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpm0: Permission denied 
WARNING:tcti:src/tss2-tcti/tctildr.c:79:tcti_from_init() TCTI init for function 0x7f76c97bd940 failed with a000a 
WARNING:tcti:src/tss2-tcti/tctildr.c:109:tcti_from_info() Could not initialize TCTI named: tcti-device 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0 
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused 
ERROR:tcti:src/tss2-tcti/tcti-swtpm.c:592:Tss2_Tcti_Swtpm_Init() Cannot connect to swtpm TPM socket 
WARNING:tcti:src/tss2-tcti/tctildr.c:79:tcti_from_init() TCTI init for function 0x7f76c97bf200 failed with a000a 
WARNING:tcti:src/tss2-tcti/tctildr.c:109:tcti_from_info() Could not initialize TCTI named: tcti-swtpm 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-swtpm.so.0 
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused 
WARNING:tcti:src/tss2-tcti/tctildr.c:79:tcti_from_init() TCTI init for function 0x7f76c97bf0a0 failed with a000a 
WARNING:tcti:src/tss2-tcti/tctildr.c:109:tcti_from_info() Could not initialize TCTI named: tcti-socket 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-mssim.so.0 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:254:tctildr_get_default() No standard TCTI could be loaded 
ERROR:tcti:src/tss2-tcti/tctildr.c:416:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI 
ERROR:fapi:src/tss2-fapi/api/Fapi_Initialize.c:227:Fapi_Initialize_Finish() Initializing TCTI. ErrorCode (0x000a000a) 
ERROR:tcti:src/tss2-tcti/tcti-device.c:440:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpmrm0: Permission denied 
WARNING:tcti:src/tss2-tcti/tctildr.c:79:tcti_from_init() TCTI init for function 0x7f76c97bd940 failed with a000a 
WARNING:tcti:src/tss2-tcti/tctildr.c:109:tcti_from_info() Could not initialize TCTI named: tcti-device 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0 
ERROR:tcti:src/tss2-tcti/tcti-device.c:440:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpm0: Permission denied 
WARNING:tcti:src/tss2-tcti/tctildr.c:79:tcti_from_init() TCTI init for function 0x7f76c97bd940 failed with a000a 
WARNING:tcti:src/tss2-tcti/tctildr.c:109:tcti_from_info() Could not initialize TCTI named: tcti-device 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0 
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused 
ERROR:tcti:src/tss2-tcti/tcti-swtpm.c:592:Tss2_Tcti_Swtpm_Init() Cannot connect to swtpm TPM socket 
WARNING:tcti:src/tss2-tcti/tctildr.c:79:tcti_from_init() TCTI init for function 0x7f76c97bf200 failed with a000a 
WARNING:tcti:src/tss2-tcti/tctildr.c:109:tcti_from_info() Could not initialize TCTI named: tcti-swtpm 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-swtpm.so.0 
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused 
WARNING:tcti:src/tss2-tcti/tctildr.c:79:tcti_from_init() TCTI init for function 0x7f76c97bf0a0 failed with a000a 
WARNING:tcti:src/tss2-tcti/tctildr.c:109:tcti_from_info() Could not initialize TCTI named: tcti-socket 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-mssim.so.0 
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:254:tctildr_get_default() No standard TCTI could be loaded 
ERROR:tcti:src/tss2-tcti/tctildr.c:416:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI 
ERROR: Could not initialize tpm ctx: 0x5
Received signal 11 SEGV_MAPERR 000000000054
#0 0x5645ee8c8f69 base::debug::CollectStackTrace()
#1 0x5645ee82c596 base::debug::StackTrace::StackTrace()
#2 0x5645ee8c89e5 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7f76ed3d2a00 (/usr/lib64/libpthread-2.33.so+0x139ff)
#4 0x7f76eb6b7a45 __strlen_avx2
#5 0x5645f11a19ea cast_channel::KeepAliveHandler::HandleMessage()
#6 0x5645f11a11bc cast_channel::KeepAliveDelegate::OnMessage()
#7 0x5645f11a055f cast_channel::CastTransportImpl::DoReadCallback()
#8 0x5645f11a096e cast_channel::CastTransportImpl::OnReadResult()
#9 0x5645f11a277c cast_channel::MojoDataPump::ReceiveMore()
#10 0x5645ef1d778d mojo::SimpleWatcher::OnHandleReady()
#11 0x5645ee88dfd2 base::TaskAnnotator::RunTask()
#12 0x5645ee8a2eec base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl()
#13 0x5645ee8a3bc6 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork()
#14 0x5645ee8f2899 base::MessagePumpLibevent::Run()
#15 0x5645ee8a21b0 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run()
#16 0x5645ee870086 base::RunLoop::Run()
#17 0x5645ec64f3da content::BrowserProcessSubThread::IOThreadRun()
#18 0x5645ee8b3898 base::Thread::ThreadMain()
#19 0x5645ee8db486 base::(anonymous namespace)::ThreadFunc()
#20 0x7f76ed3c8299 start_thread
#21 0x7f76eb6576a3 __GI___clone
  r8: 0000000000000000  r9: 0000000000000000 r10: 00007ffcfe430080 r11: 00007ffcfe430090
 r12: 000023992942b210 r13: 0000000000000054 r14: 00007f76d847e1d0 r15: 00007f76d847e1a8
  di: 0000000000000054  si: 00005645f5948367  bp: 00007f76d847dcb0  bx: 000023992b799af0
  dx: 0000000000000054  ax: 0000000000000100  cx: 0000000000000014  sp: 00007f76d847dc78
  ip: 00007f76eb6b7a45 efl: 0000000000010283 cgf: 002b000000000033 erf: 0000000000000004
 trp: 000000000000000e msk: 0000000000000000 cr2: 0000000000000054
[end of stack trace]
Calling _exit(1). Core file will not be generated.
[175348:175363:0322/102534.731331:ERROR:broker_posix.cc(40)] Recvmsg error: Connection reset by peer (104)

Comment 1 Peter Robinson 2021-03-22 10:30:48 UTC

Also first time I've run Chromium post upgrade to F-34.

Comment 2 Piotr Kliczewski 2021-03-25 12:19:39 UTC

I have just updated chromium 89.0.4389.82-1 (in chromium update) on fedora32 and it is crashing in the same way:

Received signal 11 SEGV_MAPERR 000000000054
#0 0x561d99fd1529 base::debug::CollectStackTrace()
#1 0x561d99f34986 base::debug::StackTrace::StackTrace()
#2 0x561d99fd0f69 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7fc17b243a90 (/usr/lib64/libpthread-2.31.so+0x14a8f)
#4 0x7fc17950f285 __strlen_avx2
#5 0x561d9c8b0eca cast_channel::KeepAliveHandler::HandleMessage()
#6 0x561d9c8b06ac cast_channel::KeepAliveDelegate::OnMessage()
#7 0x561d9c8afa4c cast_channel::CastTransportImpl::DoReadCallback()
#8 0x561d9c8afe5f cast_channel::CastTransportImpl::OnReadResult()
#9 0x561d9c8b1c5e cast_channel::MojoDataPump::ReceiveMore()
#10 0x561d9a8e192d mojo::SimpleWatcher::OnHandleReady()
#11 0x561d99f95f72 base::TaskAnnotator::RunTask()
#12 0x561d99fab12b base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl()
#13 0x561d99fabe16 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork()
#14 0x561d99ffb5a1 base::MessagePumpLibevent::Run()
#15 0x561d99faa410 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run()
#16 0x561d99f7856c base::RunLoop::Run()
#17 0x561d97d56c4a content::BrowserProcessSubThread::IOThreadRun()
#18 0x561d99fbbdb8 base::Thread::ThreadMain()
#19 0x561d99fe41e6 base::(anonymous namespace)::ThreadFunc()
#20 0x7fc17b238432 start_thread
#21 0x7fc1794ae6d3 __GI___clone
  r8: 0000000000000000  r9: 0000000000000000 r10: 00007fffc51f8080 r11: 00007fffc51f8090
 r12: 00002e9c38590810 r13: 0000000000000054 r14: 00007fc165944fd0 r15: 00007fc165945238
  di: 0000000000000054  si: 0000561da1079387  bp: 00007fc165944d60  bx: 00002e9c36cf2500
  dx: 0000000000000054  ax: 0000000000000100  cx: 0000000000000014  sp: 00007fc165944d28
  ip: 00007fc17950f285 efl: 0000000000010283 cgf: 002b000000000033 erf: 0000000000000004
 trp: 000000000000000e msk: 0000000000000000 cr2: 0000000000000054
[end of stack trace]
Calling _exit(1). Core file will not be generated.

Comment 3 Tom "spot" Callaway 2021-03-25 15:02:37 UTC


*** This bug has been marked as a duplicate of bug 1938962 ***