firefox 67 keeps crashing on me

[P Touchman]

A system that's been extremely good and stable has all of a sudden become completely unusable after running Software Update.

After the last update, my system won't load firefox properly half of the time. After loading pages like youtube it crashes the tab or just crashes the entire browser. Sometimes it will immediately crash upon launch and either restart the X server or just freeze.

I really don't know if it's firefox to blame or some kernel update.

My good system has become completely and totally unusable. Terribly frustrating.

Ubuntu 18.04.2 LTS, firefox 67.0, core i7-2600, AMD Cedar graphics.

dmesg reports:

[ 139.743013] show_signal_msg: 36 callbacks suppressed
[ 139.743015] Web Content[2569]: segfault at 8021 ip 00003e6b02233b3f sp 00007ffd874d1988 error 4
[ 140.332634] apport[2683]: segfault at 8 ip 0000000000572d98 sp 00007fff0a7db4f0 error 6 in python3.6[400000+3b2000]
[ 140.332651] Process 2683(apport) has RLIMIT_CORE set to 1
[ 140.332652] Aborting core
[ 162.224785] gnome-software[2707]: segfault at 55dca8ef8b68 ip 00007f2ced519038 sp 00007ffde7376160 error 4 in libglib-2.0.so.0.5600.4[7f2ced4c4000+114000]
[ 221.530201] BUG: Bad page map in process IPC Launch #1 pte:696052845 pmd:78bfc6067
[ 221.530205] page:ffffba01da581480 count:0 mapcount:-1 mapping:0000000000000000 index:0x0
[ 221.530208] flags: 0x17ffffc0000010(dirty)
[ 221.530210] raw: 0017ffffc0000010 0000000000000000 0000000000000000 00000000fffffffe
[ 221.530212] raw: ffffba01da5814a0 ffffba01da5814a0 0000000000000000 0000000000000000
[ 221.530213] page dumped because: bad pte
[ 221.530215] addr:00000000b80393c8 vm_flags:08100075 anon_vma:00000000c17218bd mapping: (null) index:8cee1767
[ 221.530216] file: (null) fault: (null) mmap: (null) readpage: (null)
[ 221.530218] CPU: 1 PID: 3113 Comm: IPC Launch #1 Not tainted 4.15.0-50-generic #54-Ubuntu
[ 221.530219] Hardware name: Hewlett-Packard HP Compaq 8200 Elite CMT PC/1494, BIOS J01 v02.01 04/06/2011
[ 221.530220] Call Trace:
[ 221.530226] dump_stack+0x63/0x8b
[ 221.530228] print_bad_pte+0x222/0x2e0
[ 221.530230] unmap_page_range+0x881/0xd00
[ 221.530232] unmap_single_vma+0x7d/0xf0
[ 221.530233] unmap_vmas+0x51/0xb0
[ 221.530235] exit_mmap+0xb5/0x1c0
[ 221.530237] mmput+0x57/0x140
[ 221.530239] do_exit+0x295/0xb40
[ 221.530241] ? __do_page_fault+0x270/0x4d0
[ 221.530243] ? vfs_write+0x166/0x1a0
[ 221.530245] do_group_exit+0x43/0xb0
[ 221.530246] SyS_exit_group+0x14/0x20
[ 221.530248] do_syscall_64+0x73/0x130
[ 221.530257] entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[ 221.530259] RIP: 0033:0x7fd2f674ae06
[ 221.530260] RSP: 002b:00007fd2c8385518 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
[ 221.530261] RAX: ffffffffffffffda RBX: 00007fd2c420a540 RCX: 00007fd2f674ae06
[ 221.530262] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
[ 221.530262] RBP: 00007fd2c838552f R08: 00000000000000e7 R09: ffffffffffffff58
[ 221.530263] R10: 0000000000000058 R11: 0000000000000206 R12: 00000000000003e8
[ 221.530264] R13: 0000000000000000 R14: 00007fd2c83856e0 R15: 00007fd2c420a540
[ 221.530265] Disabling lock debugging due to kernel taint
[ 221.535775] BUG: Bad rss-counter state mm:00000000d3b63ddd idx:0 val:-1
[ 221.535779] BUG: Bad rss-counter state mm:00000000d3b63ddd idx:1 val:1
[ 221.782881] BUG: Bad page map in process JS Helper pte:800000069e0e6025 pmd:78a4ee067
[ 221.782886] page:ffffba01da783980 count:0 mapcount:-1 mapping:0000000000000000 index:0x0
[ 221.782889] flags: 0x17ffffc0000004(referenced)
[ 221.782891] raw: 0017ffffc0000004 0000000000000000 0000000000000000 00000000fffffffe
[ 221.782893] raw: ffffba01da7839a0 ffffba01da7839a0 0000000000000000 0000000000000000
[ 221.782894] page dumped because: bad pte
[ 221.782897] addr:000000009865cc11 vm_flags:08000071 anon_vma: (null) mapping:00000000a5605d93 index:97
[ 221.782903] file:{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi fault:ext4_filemap_fault mmap:ext4_file_mmap readpage:ext4_readpage
[ 221.782906] CPU: 3 PID: 2951 Comm: JS Helper Tainted: G B 4.15.0-50-generic #54-Ubuntu
[ 221.782907] Hardware name: Hewlett-Packard HP Compaq 8200 Elite CMT PC/1494, BIOS J01 v02.01 04/06/2011
[ 221.782908] Call Trace:
[ 221.782914] dump_stack+0x63/0x8b
[ 221.782916] print_bad_pte+0x222/0x2e0
[ 221.782918] unmap_page_range+0x881/0xd00
[ 221.782920] unmap_single_vma+0x7d/0xf0
[ 221.782922] unmap_vmas+0x51/0xb0
[ 221.782924] exit_mmap+0xb5/0x1c0
[ 221.782926] mmput+0x57/0x140
[ 221.782928] do_exit+0x295/0xb40
[ 221.782930] do_group_exit+0x43/0xb0
[ 221.782932] get_signal+0x27b/0x590
[ 221.782935] do_signal+0x37/0x730
[ 221.782939] ? do_futex+0x325/0x500
[ 221.782941] ? SyS_madvise+0x4ac/0x920
[ 221.782943] ? SyS_futex+0x13b/0x180
[ 221.782945] exit_to_usermode_loop+0x73/0xd0
[ 221.782947] do_syscall_64+0x121/0x130
[ 221.782949] entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[ 221.782950] RIP: 0033:0x7fab3de259f3
[ 221.782951] RSP: 002b:00007fab24402520 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 221.782953] RAX: fffffffffffffe00 RBX: 00007fab24d06608 RCX: 00007fab3de259f3
[ 221.782954] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fab24d06634
[ 221.782955] RBP: 00007fab24d0662c R08: 0000000000000001 R09: 0000000000000000
[ 221.782955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab24d06634
[ 221.782956] R13: 0000000000000000 R14: 00007fab24d065b0 R15: 00000000000000d7

I'll also see segfaults in libxul.so

[P Touchman (ptouchman)]

I decided to do a memory test by booting Ubuntu with the shift-key held down and selecting memtest and surprisingly there's some bad memory around the end of the 32GB (there's 4x8GB sticks installed). Booting with the kernel parameter mem=24000M seems to get the system back to stability.

I guess the update may have used the memory space differently or maybe the memory just all of a sudden went bad.

[lotuspsychje (lotuspsychje)]

Thank you for taking your time to report the bug.
Please in the future use: ubuntu-bug affectedpackage so relevant system info and logs
are collected to the bug report and the developers can debug more easy.
You can still use apport-collect BUGID in this stage.

[Launchpad Janitor (janitor)]

[Expired for firefox (Ubuntu) because there has been no activity for 60 days.]