Crash in blink::LayoutView::AddChild(blink::LayoutObject*, blink::LayoutObject*)

Similar reports
An owning problem doesn't exist yet.
Component
chromium
Last affected version
0:119.0.6045.199-1.fc37
Executable
/usr/lib64/chromium-browser/chromium-browser
Error name
SIGILL 4
First occurrence
2026-09-06
Last occurrence
2026-09-06
Unique reports
1
Quality
-104

Statistics

Operating system Unique / Total count
Fedora 37 1 / 1
Operating system Count
Fedora 37 1
Architecture Count
x86_64 1
Related packages Count
chromium 1
 0:119.0.6045.199-1.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

History

Daily:

Weekly:

Monthly:


Backtrace

Frame # Function Binary Source or offset Line
1
blink::LayoutView::AddChild(blink::LayoutObject*, blink::LayoutObject*)
/usr/lib64/chromium-browser/chromium-browser 0x9f772a1
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
2
blink::LayoutBoxModelObject::MoveChildrenTo(blink::LayoutBoxModelObject*, blink::LayoutObject*, blink::LayoutObject*, blink::LayoutObject*, bool)
/usr/lib64/chromium-browser/chromium-browser 0x9f2ec23
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
3
blink::LayoutBlockFlow::CollapseAnonymousBlockChild(blink::LayoutBlockFlow*)
/usr/lib64/chromium-browser/chromium-browser 0x9f0ff6d
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
4
blink::LayoutBlockFlow::RemoveChild(blink::LayoutObject*)
/usr/lib64/chromium-browser/chromium-browser 0x9f0f9f8
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
5
blink::LayoutObject::WillBeDestroyed()
/usr/lib64/chromium-browser/chromium-browser 0x9f56283
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
6
blink::LayoutBoxModelObject::WillBeDestroyed()
/usr/lib64/chromium-browser/chromium-browser 0x9f2b232
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
7
blink::LayoutBox::WillBeDestroyed()
/usr/lib64/chromium-browser/chromium-browser 0x9f11cb4
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
8
blink::LayoutBlock::WillBeDestroyed()
/usr/lib64/chromium-browser/chromium-browser 0x9f09ef4
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
9
blink::Node::DetachLayoutTree(bool)
/usr/lib64/chromium-browser/chromium-browser 0x9a79fd9
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
10
blink::Element::DetachLayoutTree(bool)
/usr/lib64/chromium-browser/chromium-browser 0xa6e157b
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
11
blink::Node::ReattachLayoutTree(blink::Node::AttachContext&)
/usr/lib64/chromium-browser/chromium-browser 0x9a79f06
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
12
blink::Element::RebuildLayoutTree(blink::WhitespaceAttacher&)
/usr/lib64/chromium-browser/chromium-browser 0xa6e48be
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
13
blink::StyleEngine::RebuildLayoutTree(blink::Element*)
/usr/lib64/chromium-browser/chromium-browser 0x99d5077
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
14
blink::StyleEngine::UpdateStyleAndLayoutTree()
/usr/lib64/chromium-browser/chromium-browser 0x99d5770
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
15
blink::Document::UpdateStyle()
/usr/lib64/chromium-browser/chromium-browser 0xa6480a8
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
16
blink::Document::UpdateStyleAndLayoutTreeForThisDocument()
/usr/lib64/chromium-browser/chromium-browser 0xa6478f3
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
17
blink::LocalFrameView::UpdateStyleAndLayoutInternal()
/usr/lib64/chromium-browser/chromium-browser 0x9c6016e
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
18
blink::LocalFrameView::UpdateStyleAndLayout()
/usr/lib64/chromium-browser/chromium-browser 0x9c5b5f7
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
19
blink::LocalFrameView::UpdateStyleAndLayoutIfNeededRecursive()
/usr/lib64/chromium-browser/chromium-browser 0x9c5e994
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
20
blink::LocalFrameView::RunStyleAndLayoutLifecyclePhases(blink::DocumentLifecycle::LifecycleState)
/usr/lib64/chromium-browser/chromium-browser 0x9c5df2f
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
21
blink::LocalFrameView::UpdateLifecyclePhasesInternal(blink::DocumentLifecycle::LifecycleState)
/usr/lib64/chromium-browser/chromium-browser 0x9c5db33
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
22
blink::LocalFrameView::UpdateLifecyclePhases(blink::DocumentLifecycle::LifecycleState, blink::DocumentUpdateReason)
/usr/lib64/chromium-browser/chromium-browser 0x9c5d3f7
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
23
blink::PageAnimator::UpdateLifecycleToLayoutClean(blink::LocalFrame&, blink::DocumentUpdateReason)
/usr/lib64/chromium-browser/chromium-browser 0xa198b6e
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
24
blink::WebFrameWidgetImpl::UpdateLifecycle(blink::WebLifecycleUpdate, blink::DocumentUpdateReason)
/usr/lib64/chromium-browser/chromium-browser 0x9cac5b1
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
25
blink::WebViewImpl::ResizeViewWhileAnchored(cc::BrowserControlsParams, gfx::Size const&)
/usr/lib64/chromium-browser/chromium-browser 0xa88cb0a
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
26
blink::WebViewImpl::ResizeWithBrowserControls(gfx::Size const&, gfx::Size const&, cc::BrowserControlsParams)
/usr/lib64/chromium-browser/chromium-browser 0xa88ced7
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
27
blink::WebFrameWidgetImpl::ApplyVisualPropertiesSizing(blink::VisualProperties const&)
/usr/lib64/chromium-browser/chromium-browser 0x9cad4d2
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
28
blink::WebFrameWidgetImpl::UpdateVisualProperties(blink::VisualProperties const&)
/usr/lib64/chromium-browser/chromium-browser 0x9cace4e
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
29
blink::WidgetBase::UpdateVisualProperties(blink::VisualProperties const&)
/usr/lib64/chromium-browser/chromium-browser 0xa592242
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
30
blink::mojom::blink::WidgetStubDispatch::Accept(blink::mojom::blink::Widget*, mojo::Message*)
/usr/lib64/chromium-browser/chromium-browser 0x57d38ad
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
31
mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*)
/usr/lib64/chromium-browser/chromium-browser 0x6f90490
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
32
mojo::MessageDispatcher::Accept(mojo::Message*)
/usr/lib64/chromium-browser/chromium-browser 0x6f9643d
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
33
mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*)
/usr/lib64/chromium-browser/chromium-browser 0x6f9191d
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
34
IPC::(anonymous namespace)::ChannelAssociatedGroupController::AcceptOnEndpointThread(mojo::Message)
/usr/lib64/chromium-browser/chromium-browser 0x71d57b3
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
35
base::internal::Invoker<base::internal::BindState<void (mojo::(anonymous namespace)::ThreadSafeInterfaceEndpointClientProxy::*)(mojo::Message), scoped_refptr<mojo::(anonymous namespace)::ThreadSafeInterfaceEndpointClientProxy>, mojo::Message>, void ()>::RunOnce(base::internal::BindStateBase*)
/usr/lib64/chromium-browser/chromium-browser 0x6f93c89
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
36
base::TaskAnnotator::RunTaskImpl(base::PendingTask&)
/usr/lib64/chromium-browser/chromium-browser 0x666f9a3
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
37
base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*)
/usr/lib64/chromium-browser/chromium-browser 0x66866ae
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
38
base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork()
/usr/lib64/chromium-browser/chromium-browser 0x66861bb
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
39
non-virtual thunk to base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork()
/usr/lib64/chromium-browser/chromium-browser 0x6686b45
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
40
base::MessagePumpDefault::Run(base::MessagePump::Delegate*)
/usr/lib64/chromium-browser/chromium-browser 0x662b1ba
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
41
base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta)
/usr/lib64/chromium-browser/chromium-browser 0x6686e95
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
42
base::RunLoop::Run(base::Location const&)
/usr/lib64/chromium-browser/chromium-browser 0x665033b
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
43
content::RendererMain(content::MainFunctionParams)
/usr/lib64/chromium-browser/chromium-browser 0xc2ea2ac
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
44
content::RunZygote(content::ContentMainDelegate*)
/usr/lib64/chromium-browser/chromium-browser 0x5ad2021
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
45
content::RunOtherNamedProcessTypeMain(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, content::MainFunctionParams, content::ContentMainDelegate*)
/usr/lib64/chromium-browser/chromium-browser 0x5ad291a
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
46
content::ContentMainRunnerImpl::Run()
/usr/lib64/chromium-browser/chromium-browser 0x5ad3aee
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
47
content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*)
/usr/lib64/chromium-browser/chromium-browser 0x5ad116a
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
48
content::ContentMain(content::ContentMainParams)
/usr/lib64/chromium-browser/chromium-browser 0x5ad1648
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
49
ChromeMain
/usr/lib64/chromium-browser/chromium-browser 0x2109305
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-
50
__libc_start_call_main
/lib64/libc.so.6 0x27550
Build id: 0dc6d3e329f8bf5e8c1de63c4c9d560fb9953ade 		-
51
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x27609
Build id: 0dc6d3e329f8bf5e8c1de63c4c9d560fb9953ade 		-
52
_start
/usr/lib64/chromium-browser/chromium-browser 0x2109025
Build id: 241756522291cf3ac88354452749e9d82cec7f48 		-