Created attachment 1487355 [details]
File: backtrace

Created attachment 1487356 [details]
File: cgroup

Created attachment 1487357 [details]
File: core_backtrace

Created attachment 1487358 [details]
File: cpuinfo

Created attachment 1487359 [details]
File: dso_list

Created attachment 1487360 [details]
File: environ

Created attachment 1487361 [details]
File: exploitable

Created attachment 1487362 [details]
File: limits

Created attachment 1487363 [details]
File: maps

Created attachment 1487364 [details]
File: open_fds

Created attachment 1487365 [details]
File: proc_pid_status

*** Bug 1635550 has been marked as a duplicate of this bug. ***

Similar problem has been detected:

Trying firefox-wayland using default GNOME (wayland session). Got hung w/o any abrt. Kill it, try using terminal. Same hung. Press CTRL+C.       

reporter:       libreport-2.9.6
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 10871 -schedulerPrefs 0001,2 -parentBuildID 20181009141515 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 13879 true tab
crash_function: mozilla::ipc::MessageChannel::OnChannelErrorFromLink
executable:     /usr/lib64/firefox/firefox
journald_cursor: s=129438ef57ab4b65a57039047feb4005;i=87add;b=1e3931fd2b4b4511b8117174a47defd2;m=2736fbc98;t=57862a69540de;x=68f4e3dc84501803
kernel:         4.18.14-300.fc29.x86_64
mountinfo:      
package:        firefox-62.0.3-4.fc29
reason:         firefox killed by SIGSEGV
rootdir:        /proc/14002/fdinfo
runlevel:       N 5
type:           CCpp
uid:            1000

*** Bug 1644865 has been marked as a duplicate of this bug. ***

*** Bug 1645557 has been marked as a duplicate of this bug. ***

*** Bug 1645791 has been marked as a duplicate of this bug. ***

Similar problem has been detected:

I was running World Of Tanks under Wine + DXVK in full screen (custom Wine build), opened workspace overview and
clicked on Firefox icon, immediately the whole session crashed and I was dropped back to desktop login. I can't 
upload XWayland log since it says that backtrace is unusable, but Firefox's backtrace was generated sucessfully, so I'm
reporting this in hopes that it will be of some help. 

The session is Wayland, obviously.

reporter:       libreport-2.9.6
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 173403 -schedulerPrefs 0001,2 -parentBuildID 20181023080421 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 10675 true tab
crash_function: mozilla::ipc::MessageChannel::OnChannelErrorFromLink
executable:     /usr/lib64/firefox/firefox
journald_cursor: s=49bd52ea8e1d4090b216fd1e0d1c4dca;i=12431;b=bc44359b2c4f49cdb541a4c1a874e264;m=6b59d264;t=579d58eb7b80c;x=1f85f098837e1747
kernel:         4.18.16-300.fc29.x86_64
mountinfo:      
package:        firefox-63.0-2.fc29
reason:         firefox killed by SIGSEGV
rootdir:        /proc/10798/fdinfo
runlevel:       N 5
type:           CCpp
uid:            1000

Does anybody even have at least once firefox-wayland working ? Trying every version, same EGL related bark in terminal, no any window or error box, it stuck in background and must to be killed to open usual firefox.

Similar problem has been detected:

Crash when unlocking desktop. Happens in ~95% of the times.

reporter:       libreport-2.9.6
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/firefox -contentproc -childID 8 -isForBrowser -prefsLen 6133 -prefMapSize 185236 -schedulerPrefs 0001,2 -parentBuildID 20181106091720 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 5458 true tab
crash_function: mozilla::ipc::MessageChannel::OnChannelErrorFromLink
executable:     /usr/lib64/firefox/firefox
journald_cursor: s=da47b8cfb0144adfb7f701b2baf8a9ce;i=944ac;b=b6697ff9c6ad418fba0ed59988950ff9;m=1b90abfb42;t=57a6063aa5eb6;x=d6d1c988ba1894f6
kernel:         4.18.16-300.fc29.x86_64
mountinfo:      
package:        firefox-63.0.1-5.fc29
reason:         firefox killed by SIGSEGV
rootdir:        /proc/7493/fdinfo
runlevel:       N 5
type:           CCpp
uid:            1000

*** Bug 1649021 has been marked as a duplicate of this bug. ***

*** Bug 1649361 has been marked as a duplicate of this bug. ***

*** Bug 1649982 has been marked as a duplicate of this bug. ***

*** Bug 1655073 has been marked as a duplicate of this bug. ***

Similar problem has been detected:

Cat walked on the keyboard while I was watching something on Netflix.   Screen froze, badness ensued.

reporter:       libreport-2.9.6
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 4165 -prefMapSize 525210 -schedulerPrefs 0001,2 -parentBuildID 20181121183716 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 5361 true tab
crash_function: mozilla::ipc::MessageChannel::OnChannelErrorFromLink
executable:     /usr/lib64/firefox/firefox
journald_cursor: s=c27a2afa295d47198afefc356d69de34;i=8764fe;b=d36f325d33514099b511d7f10544e683;m=17ae3d12f2;t=57c20dce763b2;x=a660e8711894192c
kernel:         4.19.4-300.fc29.x86_64
mountinfo:      
package:        firefox-63.0.3-2.fc29
reason:         firefox killed by SIGSEGV
rootdir:        /proc/5631/fdinfo
runlevel:       N 5
type:           CCpp
uid:            500

*** Bug 1656452 has been marked as a duplicate of this bug. ***

FTR. bug with the same backtrace (AFAICT): [bug 1541603].

I've start hitting the same with update to firefox-64.0-4.fc30.x86_64
(from firefox-63.0.3-3.fc30.x86_64 that worked like a charm for me).

Since then, it keeps crashing at the rate about once a day for me,
last few occurrences happened when I was reading something without
any other interaction with Firefox whatsoever, just the crash
dialog popped up at suddenly clear background seemingly all of
a sudden.

#0  mozilla::ipc::MessageChannel::OnChannelErrorFromLink() (this=0x7fbf318c48e0)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/glue/MessageChannel.cpp:2669
#1  mozilla::ipc::ProcessLink::OnChannelError() (this=0x7fbf22048910)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/glue/MessageLink.cpp:397
#2  event_persist_closure (ev=<optimized out>, base=0x7fbf318c4400)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/third_party/libevent/event.c:1580
#3  event_process_active_single_queue (base=base@entry=0x7fbf318c4400, max_to_process=max_to_process@entry=2147483647, endtime=endtime@entry=0x0, activeq=<optimized out>)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/third_party/libevent/event.c:1639
#4  event_process_active (base=0x7fbf318c4400)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/third_party/libevent/event.c:1738
#5  event_base_loop (base=0x7fbf318c4400, flags=flags@entry=1)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/third_party/libevent/event.c:1961
#6  base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) (this=0x7fbf318579c0, delegate=0x7fbf23f69cf0)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/base/message_pump_libevent.cc:381
#7  MessageLoop::RunInternal() (this=0x7fbf23f69cf0)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/objdir/dist/include/mozilla/RefPtr.h:335
#8  MessageLoop::RunHandler() (this=0x7fbf23f69cf0)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/base/message_loop.cc:318
#9  MessageLoop::Run() (this=this@entry=0x7fbf23f69cf0)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/base/message_loop.cc:298
#10 base::Thread::ThreadMain() (this=0x7fbf3185d348)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/base/thread.cc:198
#11 ThreadFunc(void*) (closure=<optimized out>)
    at /usr/src/debug/firefox-64.0-4.fc30.x86_64/ipc/chromium/src/base/platform_thread_posix.cc:40
#12 start_thread ()
    at /lib64/libpthread.so.0
#13 clone ()
    at /lib64/libc.so.6

where #0:

2653│ void
2654│ MessageChannel::OnChannelErrorFromLink()
2655│ {
2656│     AssertLinkThread();
2657│     mMonitor->AssertCurrentThreadOwns();
2658│
2659│     IPC_LOG("OnChannelErrorFromLink");
2660│
2661│     if (InterruptStackDepth() > 0)
2662│         NotifyWorkerThread();
2663│
2664│     if (AwaitingSyncReply() || AwaitingIncomingMessage())
2665│         NotifyWorkerThread();
2666│
2667│     if (ChannelClosing != mChannelState) {
2668│         if (mAbortOnError) {
2669├>            MOZ_CRASH("Aborting on channel error.");
2670│         }
2671│         mChannelState = ChannelError;
2672│         mMonitor->Notify();
2673│     }

Sadly, gdb crashes on attempts to look at mChannelState.
And the closest useful info up the backtrace is for #2:

1570│         // Save our callback before we release the lock
1571│         evcb_callback = ev->ev_callback;
1572│         evcb_fd = ev->ev_fd;
1573│         evcb_res = ev->ev_res;
1574│         evcb_arg = ev->ev_arg;
1575│
1576│         // Release the lock
1577│         EVBASE_RELEASE_LOCK(base, th_base_lock);
1578│
1579│         // Execute the callback
1580├>        (evcb_callback)(evcb_fd, evcb_res, evcb_arg);

where, per "info locals", evcb_res = ev->ev_res = 2,
the respective channel was likely read-bound:

ipc/chromium/src/third_party/libevent/include/event2/event.h:
> /** Wait for a socket or FD to become readable */
> #define EV_READ         0x02

For completeness:

$ rpm -q firefox glibc; uname -r
> firefox-64.0-4.fc30.x86_64
> glibc-2.28.9000-28.fc30.x86_64
> 4.21.0-0.rc0.git1.1.fc30.x86_64

This is in native Wayland mode.

Also I've discovered this message immediately preceding the crash
in the journal:

> [Child 15889, Chrome_ChildThread] WARNING: pipe error (3):
>   Connection reset by peer:
>   file /builddir/build/BUILD/firefox-64.0/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 363

i.e., from

> 335 bool Channel::ChannelImpl::ProcessIncomingMessages() {
> 336   struct msghdr msg = {0};
> 337   struct iovec iov;
> 338 
> 339   msg.msg_iov = &iov;
> 340   msg.msg_iovlen = 1;
> 341   msg.msg_control = input_cmsg_buf_;
> 342 
> 343   for (;;) {
> 344     msg.msg_controllen = sizeof(input_cmsg_buf_);
> 345 
> 346     if (pipe_ == -1)
> 347       return false;
> 348 
> 349     // In some cases the beginning of a message will be stored in input_buf_. We
> 350     // don't want to overwrite that, so we store the new data after it.
> 351     iov.iov_base = input_buf_ + input_buf_offset_;
> 352     iov.iov_len = Channel::kReadBufferSize - input_buf_offset_;
> 353 
> 354     // Read from pipe.
> 355     // recvmsg() returns 0 if the connection has closed or EAGAIN if no data
> 356     // is waiting on the pipe.
> 357     ssize_t bytes_read = HANDLE_EINTR(recvmsg(pipe_, &msg, MSG_DONTWAIT));
> 358 
> 359     if (bytes_read < 0) {
> 360       if (errno == EAGAIN) {
> 361         return true;
> 362       } else {
> 363         CHROMIUM_LOG(ERROR) << "pipe error (" << pipe_ << "): " << strerror(errno);
> 364         return false;
> 365       }
> 366     } else if (bytes_read == 0) {
> 367       // The pipe has closed...
> 368       Close();
> 369       return false;
> 370     }

I wish this could shed some light into the problem.

Happens also with firefox-64.0-5.fc30.x86_64.
Surprisingly, this happened with the browser window not being
worked with at all (in fact, it was defocused on another virtual
desktop).  So one of the suspects is some background javascript
and/or one of the addons.  No media or stuff like that was played.

Will try to survive on --safe-mode for a few days, I guess.

Update is that, sadly, --safe-mode has no bearing on this,
it happened to me again, and again with Firefox defocused on the
background/other virtual desktop.

I've now collected info about "(deleted") files from "info proc mappings"
if that will be of any help:

* process 1815 (Web Content)
  - is listed as crashing last in coredumpctl view
  - was the only process to have any relevance to what has been logged
    prior to the overall crash (process 1653 may be the shell wrapper?):
Jan 10 10:38:56 firefox[1653]: ExceptionHandler::GenerateDump cloned child 4646
Jan 10 10:38:56 firefox[1653]: ExceptionHandler::SendContinueSignalToChild sent continue signal to child
Jan 10 10:38:56 firefox[1653]: ExceptionHandler::WaitForContinueSignal waiting for continue signal...
Jan 10 10:38:56 firefox[1653]: [Child 1815, Chrome_ChildThread] WARNING: pipe error (3): Connection reset by peer: file /builddir/build/BUILD/firefox-64.0/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 363
  - info proc mappings | grep deleted
      0x7f7d30fca000     0x7f7d32365000  0x139b000        0x0 /dev/shm/org.mozilla.ipc.1815.96 (deleted)
      0x7f7d32365000     0x7f7d33700000  0x139b000        0x0 /dev/shm/org.mozilla.ipc.1815.94 (deleted)
      0x7f7d38141000     0x7f7d381cc000    0x8b000        0x0 /dev/shm/org.mozilla.ipc.1815.47 (deleted)
      0x7f7d381cc000     0x7f7d388ff000   0x733000        0x0 /dev/shm/org.mozilla.ipc.1815.19 (deleted)
      0x7f7d388ff000     0x7f7d39032000   0x733000        0x0 /dev/shm/org.mozilla.ipc.1815.13 (deleted)
      0x7f7d3903c000     0x7f7d39048000     0xc000        0x0 /dev/shm/org.mozilla.ipc.1815.80 (deleted)
      0x7f7d39075000     0x7f7d39100000    0x8b000        0x0 /dev/shm/org.mozilla.ipc.1815.45 (deleted)
      0x7f7d3ab01000     0x7f7d3ab0d000     0xc000        0x0 /dev/shm/org.mozilla.ipc.1815.70 (deleted)
      0x7f7d3b291000     0x7f7d3b300000    0x6f000        0x0 /dev/shm/org.chromium.EpMBkw (deleted)
      0x7f7d3b803000     0x7f7d3b804000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.71 (deleted)
      0x7f7d3be20000     0x7f7d3be21000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.48 (deleted)
      0x7f7d3be21000     0x7f7d3be22000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.46 (deleted)
      0x7f7d3c116000     0x7f7d3c121000     0xb000        0x0 /dev/shm/org.mozilla.ipc.1815.204 (deleted)
      0x7f7d3c132000     0x7f7d3c13d000     0xb000        0x0 /dev/shm/org.mozilla.ipc.1815.200 (deleted)
      0x7f7d3c902000     0x7f7d3c90e000     0xc000        0x0 /dev/shm/org.mozilla.ipc.1815.17 (deleted)
      0x7f7d3c9bf000     0x7f7d3c9cb000     0xc000        0x0 /dev/shm/org.mozilla.ipc.1815.9 (deleted)
      0x7f7d3cd04000     0x7f7d3cd05000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.20 (deleted)
      0x7f7d3cd05000     0x7f7d3cd06000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.18 (deleted)
      0x7f7d3cd06000     0x7f7d3cd07000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.10 (deleted)
      0x7f7d3cf51000     0x7f7d3cf52000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.14 (deleted)
      0x7f7d3cf52000     0x7f7d3cf53000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.81 (deleted)
      0x7f7d3cf59000     0x7f7d3cf5a000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.201 (deleted)
      0x7f7d3cf5a000     0x7f7d3cf5b000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.97 (deleted)
      0x7f7d3cf5b000     0x7f7d3cf5c000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.95 (deleted)
      0x7f7d3cf5c000     0x7f7d3cf5d000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.205 (deleted)
      0x7f7d3d100000     0x7f7d3d101000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.6 (deleted)
      0x7f7d3d101000     0x7f7d3d102000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.5 (deleted)
      0x7f7d3d102000     0x7f7d3d103000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.16 (deleted)
      0x7f7d3d103000     0x7f7d3d104000     0x1000        0x0 /dev/shm/org.mozilla.ipc.1815.15 (deleted)
      0x7f7d3d11a000     0x7f7d3d11c000     0x2000        0x0 /dev/shm/org.chromium.SfDSzB (deleted)
      0x7f7d3d16b000     0x7f7d3d16d000     0x2000        0x0 /dev/shm/org.chromium.Ce0ITl (deleted)
      0x7f7d3d1b9000     0x7f7d3d1ba000     0x1000        0x0 /dev/shm/org.chromium.Fy2hst (deleted)
      0x7f7d3ec00000     0x7f7d3ec01000     0x1000        0x0 /dev/shm/org.chromium.HClDBC (deleted)
      0x7f7d3ec03000     0x7f7d3ec04000     0x1000        0x0 /dev/shm/org.chromium.Lvm8A6 (deleted)
      0x7f7d3ecde000     0x7f7d3edfe000   0x120000        0x0 /run/user/1000/wayland-cursor-shared-qbWvMw (deleted)
      0x7f7d3ff27000     0x7f7d3ff2c000     0x5000        0x0 /dev/shm/org.mozilla.ipc.1815.0 (deleted)
      0x7f7d46daa000     0x7f7d46dd7000    0x2d000        0x0 /dev/shm/org.chromium.HWEMzD (deleted)

* process 1950 (Web Content)
  - is listed as crashing first in coredumpctl view
  - info proc mappings | grep deleted
      0x7f7369726000     0x7f736972b000     0x5000        0x0 /dev/shm/org.chromium.uWlGCt (deleted)
      0x7f736ae04000     0x7f736ae11000     0xd000        0x0 /dev/shm/org.chromium.kwjWzI (deleted)
      0x7f736b091000     0x7f736b100000    0x6f000        0x0 /dev/shm/org.chromium.EpMBkw (deleted)
      0x7f736b219000     0x7f736b21b000     0x2000        0x0 /dev/shm/org.chromium.SfDSzB (deleted)
      0x7f736b21c000     0x7f736b21d000     0x1000        0x0 /dev/shm/org.chromium.HClDBC (deleted)
      0x7f736b409000     0x7f736b40a000     0x1000        0x0 /dev/shm/org.chromium.Lvm8A6 (deleted)
      0x7f736cede000     0x7f736cffe000   0x120000        0x0 /run/user/1000/wayland-cursor-shared-ahd3iY (deleted)
      0x7f736e126000     0x7f736e12b000     0x5000        0x0 /dev/shm/org.mozilla.ipc.1950.0 (deleted)
      0x7f7374f2a000     0x7f7374f57000    0x2d000        0x0 /dev/shm/org.chromium.HWEMzD (deleted)

* beside that, there were 3 more firefox processes that crashed
  in the same batch

Doesn't exhibit for me for a few days now (I am keeping up with
Rawhide updates).

Hello, 
 
abrt reported bugs come from various sources/scenarios and usually can't be reproduced. This is automated bug processing which is applied to all abrt reported bugs which are supposed to be non-reproducible. 
 
If you can reproduce the bug (you have a testcase), please reopen it , remove [abrt] from bug summary and assign it directly to me - stransky. 
 
Thanks.