Log files:
https://sandbox.google.com/storage/chromeos-image-archive/x86-zgb_he-release/0.16.1035.0-a1-b97

(No comment was entered for this change.)

(No comment was entered for this change.)

David, have you seen this recently? I've seen a couple of CLs go by that may have addressed this and I haven't been able to repro it myself.

Downgrading to P1 for now.

Just happened again in http://chromeos-botmaster.mtv.corp.google.com:8026/builders/x86-zgb_he%20canary/builds/138

Slightly different stack trace but same idea. Since it's a SIGABRT this time, the logs might have something valuable.

Thread 0 (crashed)
 0  linux-gate.so + 0x416
    eip = 0x73bf1416   esp = 0x7f83ab14   ebp = 0x7f83ab20   ebx = 0x00001227
    esi = 0x7f83ad44   edi = 0x72bcbe54   eax = 0x00000000   ecx = 0x00001227
    edx = 0x00000006   efl = 0x00000206
    Found by: given as instruction pointer in context
 1  libc-2.11.1.so + 0x2c414
    eip = 0x72aa2415   esp = 0x7f83ab28   ebp = 0x7f83ac48
    Found by: previous frame's frame pointer
 2  chrome!base::debug::BreakDebugger [debugger_posix.cc : 197 + 0x4]
    eip = 0x749c06a3   esp = 0x7f83ac50   ebp = 0x7f83ac68
    Found by: previous frame's frame pointer
 3  chrome!logging::LogMessage::~LogMessage [logging.cc : 654 + 0x4]
    eip = 0x749dda75   esp = 0x7f83ac70   ebp = 0x7f83ad08   ebx = 0x779f9ff4
    Found by: call frame info
 4  chrome!ProfileImplIOData::Handle::~Handle [profile_impl_io_data.cc : 63 + 0x7]
    eip = 0x74452c2d   esp = 0x7f83ad10   ebp = 0x7f83aee8   ebx = 0x779f9ff4
    esi = 0x785c7090   edi = 0x7f83ad44
    Found by: call frame info
 5  chrome!ProfileImpl::~ProfileImpl [profile_impl.cc : 855 + 0xd]
    eip = 0x7444d712   esp = 0x7f83aef0   ebp = 0x7f83b0c8   ebx = 0x779f9ff4
    esi = 0x78490780   edi = 0x00000000
    Found by: call frame info
 6  chrome!ProfileImpl::~ProfileImpl [profile_impl.cc : 855 + 0x7]
    eip = 0x7444e0fe   esp = 0x7f83b0d0   ebp = 0x7f83b0f8   ebx = 0x779f9ff4
    esi = 0x78490780   edi = 0x785bb640
    Found by: call frame info
 7  chrome!std::_Rb_tree<FilePath, std::pair<const FilePath, linked_ptr<ProfileManager::ProfileInfo> >, std::_Select1st<std::pair<const FilePath, linked_ptr<ProfileManager::ProfileInfo> > >, std::less<FilePath>, std::allocator<std::pair<const FilePath, linked_ptr<ProfileManager::ProfileInfo> > > >::_M_erase [scoped_ptr.h : 75 + 0x7]
    eip = 0x73f4da3c   esp = 0x7f83b100   ebp = 0x7f83b148   ebx = 0x779f9ff4
    esi = 0x785bbbc0   edi = 0x785bb640
    Found by: call frame info
 8  chrome!std::_Rb_tree<FilePath, std::pair<const FilePath, linked_ptr<ProfileManager::ProfileInfo> >, std::_Select1st<std::pair<const FilePath, linked_ptr<ProfileManager::ProfileInfo> > >, std::less<FilePath>, std::allocator<std::pair<const FilePath, linked_ptr<ProfileManager::ProfileInfo> > > >::_M_erase [stl_tree.h : 1010 + 0x11]
    eip = 0x73f4d9c2   esp = 0x7f83b150   ebp = 0x7f83b198   ebx = 0x779f9ff4
    esi = 0x78148d60   edi = 0x00000000
    Found by: call frame info
 9  chrome!ProfileManager::~ProfileManager [stl_tree.h : 654 + 0x11]
    eip = 0x73f4dfc8   esp = 0x7f83b1a0   ebp = 0x7f83b208   ebx = 0x779f9ff4
    esi = 0x780f9dc0   edi = 0x00000000
    Found by: call frame info
10  chrome!ProfileManager::~ProfileManager [profile_manager.cc : 123 + 0x7]
    eip = 0x73f4e0ce   esp = 0x7f83b210   ebp = 0x7f83b238   ebx = 0x779f9ff4
    esi = 0x780f9dc0   edi = 0x7814c450
    Found by: call frame info
11  chrome!BrowserProcessImpl::~BrowserProcessImpl [scoped_ptr.h : 84 + 0x7]
    eip = 0x74675202   esp = 0x7f83b240   ebp = 0x7f83b2b8   ebx = 0x779f9ff4
    esi = 0x780a1b00   edi = 0x7814c450
    Found by: call frame info
12  chrome!BrowserProcessImpl::~BrowserProcessImpl [browser_process_impl.cc : 292 + 0x7]
    eip = 0x7467596e   esp = 0x7f83b2c0   ebp = 0x7f83b2e8   ebx = 0x779f9ff4
    esi = 0x780a1b00   edi = 0x780e57b0
    Found by: call frame info
13  chrome!browser_shutdown::Shutdown [browser_shutdown.cc : 174 + 0x7]
    eip = 0x7417079b   esp = 0x7f83b2f0   ebp = 0x7f83b428   ebx = 0x779f9ff4
    esi = 0x77a0e044   edi = 0x780e57b0
    Found by: call frame info
...

It looks like this is now triggering:
  CHECK(io_data_->predictor_.get() != NULL);
Added by rlp@.

This implies that io_data_->predictor_ is getting reset or never getting set. I don't see anyplace that it is getting reset, however ProfileImpl:io_data_.Init() is not getting called until ProfileImpl::DoFinalInit(). My guess is that this happens when we exit before that gets called. The correct fix would thus be to simply not call io_data_->predictor_->ShutdownOnUIThread() when io_data_->predictor_.get() == NULL.

I'll put together a quick CL to fix that.

CL: http://codereview.chromium.org/8043029/

The fix for this is tiny and causes test flakiness so I suggest that we merge this into R15.

Committed @ 102825

(No comment was entered for this change.)

(No comment was entered for this change.)

Turns out the symptom of the crash is not in the R15 branch (I thought it was), so nevermind.

Closing it considering its fixed.

Claiming work to iteration-39

(No comment was entered for this change.)

(No comment was entered for this change.)