gum-js-loop (20): EXC_BAD_ACCESS (code=1, address=0x0)

[Picasso-r]

I'm trying to use frida to fuzz, but when the target function has executed 440 times, it will always crash and report
"gum-js-loop (20): EXC_BAD_ACCESS (code=1, address=0x0)".

Actually, the program's rip register jumps out of the target process and goes to an unknown memory address.

If I tries to use Stalker.garbageCollect(); more often, the executed time before crashing will reduce, and the unknown memory address will also reduce.

I think there must be something wrong with my frida scripts. What is the thread 'gum-js-loop' used for?

I'm really a beginner. Thanks.