[Bug] causing android.hardware.audio.service.mediatek and audioserver crash #2
Description
- audioserver's crash
Here's the log for audioserver:
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Build fingerprint: 'POCO/emerald_p_global/emerald:15/AP3A.240905.015.A2/OS2.0.2.0.VNFMIXM:user/release-keys'
Revision: '0'
ABI: 'arm64'
Timestamp: 2025-03-14 05:47:33.760950514+0700
Process uptime: 0s
Cmdline: /system/bin/audioserver
pid: 27851, tid: 28043, name: binder:27851_5 >>> /system/bin/audioserver <<<
uid: 1041
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
Abort message: 'TimeCheck timeout for IAudioPolicyService::getOutput scheduled 05:47:27.671 on thread 28043
Timeout ms 5000.000000 elapsed steady ms 5000.229004 elapsed system ms 5000.235840
HAL pids [ 27853 ]
now 05:47:33.713
secondChanceCount 2
analysis [ ]
timeout [ { IAudioPolicyService::getOutput scheduled 05:47:27.671 deadline :30.671 tid 28043 } ]
pending [ { IAudioFlinger::setParameters scheduled 05:47:28.498 deadline :31.498 tid 27860 } ]
retired [ { IAudioPolicyService::getDeviceConnectionState scheduled 05:47:32.314 deadline :35.314 tid 28044 } { IAudioPolicyService::getDeviceConnectionState scheduled 05:47:32.314 deadline :35.314 tid 28044 } { IAudioPolicyService::getDeviceConnectionState scheduled 05:47:32.315 deadline :35.315 tid 28044 } { IAudioPolicyService::isStreamActive scheduled 05:47:32.315 deadline :35.315 tid 28044 } ]
timeout(28043) callstack [
#00 pc 0000000000086f40 /apex/com.android.runtime/lib64/bionic/libc.so (syscall+32) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#01 pc 0000000000060460 /apex/com.android.runtime/lib64/bionic/libc.so (__futex_wait_ex(void volatile*, bool, int, bool, timespec const*)+144) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#02 pc 000000000006f8f4 /apex/com.android.runtime/lib64/bionic/libc.so (pthread_cond_timedwait+132) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#03 pc 00000000000b0aec /system/lib64/libc++.so (std::__1::condition_variable::__do_timed_wait(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::time_point<std::__1::chrono::system_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>>>)+96) (BuildId: 53e0091d25a788802d2d3a5324f79b527df4913f)
#04 pc 00000000000599bc /system/lib64/libhidlbase.so (std::__1::cv_status std::__1::condition_variable::wait_for<long long, std::__1::ratio<1l, 1000000000l>>(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>> const&)+156) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#05 pc 00000000000598e8 /system/lib64/libhidlbase.so (void std::__1::condition_variable::__do_timed_wait[abi:nn180000]<std::__1::chrono::steady_clock>(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::time_point<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>>>)+72) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#06 pc 0000000000059874 /system/lib64/libhidlbase.so (std::__1::cv_status std::__1::condition_variable::wait_until<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>>>(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::time_point<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>>> const&)+52) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#07 pc 00000000000597f0 /system/lib64/libhidlbase.so (bool std::__1::condition_variable::wait_for[abi:nn180000]<long long, std::__1::ratio<1l, 1l>, android::hardware::details::Waiter::wait(bool)::'lambda1'()>(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1l>> const&, android::hardware::details::Waiter::wait(bool)::'lambda1'())+96) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#08 pc 000000000004b698 /system/lib64/libhidlbase.so (android::hardware::details::Waiter::wait(bool)+104) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#09 pc 000000000004c150 /system/lib64/libhidlbase.so (android::hardware::details::getRawServiceInternal(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool)+1680) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#10 pc 000000000000f564 /system/lib64/android.hidl.allocator@1.0.so (android::sp<android::hidl::allocator::V1_0::IAllocator> android::hardware::details::getServiceInternal<android::hidl::allocator::V1_0::BpHwAllocator, android::hidl::allocator::V1_0::IAllocator, void, void>(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool)+196) (BuildId: 9d8afd053c5defbe8913580c0b6a9889)
#11 pc 0000000000146be8 /system/lib64/libaudiohal@7.0.so (android::hidl::allocator::V1_0::IAllocator::getService(char const*, bool)+184) (BuildId: 715607bf2a01345b7d1d847ee85e99ab)
#12 pc 00000000001466c0 /system/lib64/libaudiohal@7.0.so (android::effect::EffectBufferHalHidl::init()+64) (BuildId: 715607bf2a01345b7d1d847ee85e99ab)
#13 pc 0000000000146510 /system/lib64/libaudiohal@7.0.so (android::effect::EffectBufferHalHidl::mirror(void*, unsigned long, android::sp<android::EffectBufferHalInterface>*)+256) (BuildId: 715607bf2a01345b7d1d847ee85e99ab)
#14 pc 000000000018de80 /system/bin/audioserver (android::PlaybackThread::addEffectChain_l(android::sp<android::IAfEffectChain> const&)+496) (BuildId: af182590367a25abe24ade65a459fce5)
#15 pc 0000000000170f1c /system/bin/audioserver (android::ThreadBase::createEffect_l(android::sp<android::Client> const&, android::sp<android::media::IEffectClient> const&, int, audio_session_t, effect_descriptor_s*, int*, int*, bool, bool, bool)+1132) (BuildId: af182590367a25abe24ade65a459fce5)
#16 pc 00000000000e0d34 /system/bin/audioserver (android::AudioFlinger::createEffect(android::media::CreateEffectRequest const&, android::media::CreateEffectResponse*)+4340) (BuildId: af182590367a25abe24ade65a459fce5)
#17 pc 00000000000600b4 /system/lib64/libaudioclient.so (android::AudioEffect::set(audio_uuid_s const*, audio_uuid_s const*, int, android::wp<android::AudioEffect::IAudioEffectCallback> const&, audio_session_t, int, android::AudioDeviceTypeAddr const&, bool, bool)+2756) (BuildId: 862add05171efc62cd6320499c75b5dd)
#18 pc 00000000000640a4 /system/lib64/libaudioclient.so (android::AudioEffect::set(audio_uuid_s const*, audio_uuid_s const*, int, void (*)(int, void*, void*), void*, audio_session_t, int, android::AudioDeviceTypeAddr const&, bool, bool)+468) (BuildId: 862add05171efc62cd6320499c75b5dd)
#19 pc 000000000023aed8 /system/bin/audioserver (android::AudioPolicyEffects::createGlobalEffects()+776) (BuildId: af182590367a25abe24ade65a459fce5)
#20 pc 000000000023dcf0 /system/bin/audioserver (android::AudioPolicyService::getOutput(android::media::audio::common::AudioStreamType, int*)+240) (BuildId: af182590367a25abe24ade65a459fce5)
#21 pc 000000000003e138 /system/lib64/audiopolicy-aidl-cpp.so (android::media::BnAudioPolicyService::onTransact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+14616) (BuildId: 22b22950a4344a750d4ff770da257171)
#22 pc 000000000021f984 /system/bin/audioserver (android::AudioPolicyService::onTransact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+1124) (BuildId: af182590367a25abe24ade65a459fce5)
#23 pc 000000000005b024 /system/lib64/libbinder.so (android::IPCThreadState::executeCommand(int)+8276) (BuildId: a685cc33e1708d756cd0dce03e025b4e)
#24 pc 00000000000583d0 /system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+672) (BuildId: a685cc33e1708d756cd0dce03e025b4e)
#25 pc 000000000006fd08 /system/lib64/libbinder.so (android::PoolThread::threadLoop()+24) (BuildId: a685cc33e1708d756cd0dce03e025b4e)
#26 pc 0000000000012000 /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+368) (BuildId: 6b95583a1502170133944ea8fd3f0f65)
#27 pc 0000000000070668 /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+200) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#28 pc 0000000000061a00 /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
]'
x0 fffffffffffffffc x1 0000000000000089 x2 0000000000000000 x3 0000006fd095ab08
x4 0000000000000000 x5 00000000ffffffff x6 00000000ffffffff x7 7f7f7f7f7f7f7f7f
x8 0000000000000062 x9 e81e4f6788bbb1bd x10 0000000000fd9878 x11 000000002a640a80
x12 000000007fffffff x13 000000000006c71a x14 00000002b926be0f x15 000000004cec4ec5
x16 00000072a4943018 x17 00000072a48eaf20 x18 0000006fd0444000 x19 0000000000000000
x20 0000006fd095ab08 x21 b400007056234eb8 x22 0000000000000089 x23 0000006fd095cdf0
x24 0000006fd095ce40 x25 0000000000000000 x26 0000000000000001 x27 b400007186234470
x28 0000006fd095ce40 x29 0000006fd095ab20
lr 00000072a48c4464 sp 0000006fd095ab00 pc 00000072a48eaf40 pst 0000000060001000
29 total frames
backtrace:
#00 pc 0000000000086f40 /apex/com.android.runtime/lib64/bionic/libc.so (syscall+32) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#01 pc 0000000000060460 /apex/com.android.runtime/lib64/bionic/libc.so (__futex_wait_ex(void volatile*, bool, int, bool, timespec const*)+144) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#02 pc 000000000006f8f4 /apex/com.android.runtime/lib64/bionic/libc.so (pthread_cond_timedwait+132) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#03 pc 00000000000b0aec /system/lib64/libc++.so (std::__1::condition_variable::__do_timed_wait(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::time_point<std::__1::chrono::system_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>>>)+96) (BuildId: 53e0091d25a788802d2d3a5324f79b527df4913f)
#04 pc 00000000000599bc /system/lib64/libhidlbase.so (std::__1::cv_status std::__1::condition_variable::wait_for<long long, std::__1::ratio<1l, 1000000000l>>(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>> const&)+156) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#05 pc 00000000000598e8 /system/lib64/libhidlbase.so (void std::__1::condition_variable::__do_timed_wait[abi:nn180000]<std::__1::chrono::steady_clock>(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::time_point<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>>>)+72) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#06 pc 0000000000059874 /system/lib64/libhidlbase.so (std::__1::cv_status std::__1::condition_variable::wait_until<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>>>(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::time_point<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1000000000l>>> const&)+52) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#07 pc 00000000000597f0 /system/lib64/libhidlbase.so (bool std::__1::condition_variable::wait_for[abi:nn180000]<long long, std::__1::ratio<1l, 1l>, android::hardware::details::Waiter::wait(bool)::'lambda1'()>(std::__1::unique_lock<std::__1::mutex>&, std::__1::chrono::duration<long long, std::__1::ratio<1l, 1l>> const&, android::hardware::details::Waiter::wait(bool)::'lambda1'())+96) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#08 pc 000000000004b698 /system/lib64/libhidlbase.so (android::hardware::details::Waiter::wait(bool)+104) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#09 pc 000000000004c150 /system/lib64/libhidlbase.so (android::hardware::details::getRawServiceInternal(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool)+1680) (BuildId: 1aebd400b9609ef1f19b89d35db51ed0)
#10 pc 000000000000f564 /system/lib64/android.hidl.allocator@1.0.so (android::sp<android::hidl::allocator::V1_0::IAllocator> android::hardware::details::getServiceInternal<android::hidl::allocator::V1_0::BpHwAllocator, android::hidl::allocator::V1_0::IAllocator, void, void>(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool)+196) (BuildId: 9d8afd053c5defbe8913580c0b6a9889)
#11 pc 0000000000146be8 /system/lib64/libaudiohal@7.0.so (android::hidl::allocator::V1_0::IAllocator::getService(char const*, bool)+184) (BuildId: 715607bf2a01345b7d1d847ee85e99ab)
#12 pc 00000000001466c0 /system/lib64/libaudiohal@7.0.so (android::effect::EffectBufferHalHidl::init()+64) (BuildId: 715607bf2a01345b7d1d847ee85e99ab)
#13 pc 0000000000146510 /system/lib64/libaudiohal@7.0.so (android::effect::EffectBufferHalHidl::mirror(void*, unsigned long, android::sp<android::EffectBufferHalInterface>*)+256) (BuildId: 715607bf2a01345b7d1d847ee85e99ab)
#14 pc 000000000018de80 /system/bin/audioserver (android::PlaybackThread::addEffectChain_l(android::sp<android::IAfEffectChain> const&)+496) (BuildId: af182590367a25abe24ade65a459fce5)
#15 pc 0000000000170f1c /system/bin/audioserver (android::ThreadBase::createEffect_l(android::sp<android::Client> const&, android::sp<android::media::IEffectClient> const&, int, audio_session_t, effect_descriptor_s*, int*, int*, bool, bool, bool)+1132) (BuildId: af182590367a25abe24ade65a459fce5)
#16 pc 00000000000e0d34 /system/bin/audioserver (android::AudioFlinger::createEffect(android::media::CreateEffectRequest const&, android::media::CreateEffectResponse*)+4340) (BuildId: af182590367a25abe24ade65a459fce5)
#17 pc 00000000000600b4 /system/lib64/libaudioclient.so (android::AudioEffect::set(audio_uuid_s const*, audio_uuid_s const*, int, android::wp<android::AudioEffect::IAudioEffectCallback> const&, audio_session_t, int, android::AudioDeviceTypeAddr const&, bool, bool)+2756) (BuildId: 862add05171efc62cd6320499c75b5dd)
#18 pc 00000000000640a4 /system/lib64/libaudioclient.so (android::AudioEffect::set(audio_uuid_s const*, audio_uuid_s const*, int, void (*)(int, void*, void*), void*, audio_session_t, int, android::AudioDeviceTypeAddr const&, bool, bool)+468) (BuildId: 862add05171efc62cd6320499c75b5dd)
#19 pc 000000000023aed8 /system/bin/audioserver (android::AudioPolicyEffects::createGlobalEffects()+776) (BuildId: af182590367a25abe24ade65a459fce5)
#20 pc 000000000023dcf0 /system/bin/audioserver (android::AudioPolicyService::getOutput(android::media::audio::common::AudioStreamType, int*)+240) (BuildId: af182590367a25abe24ade65a459fce5)
#21 pc 000000000003e138 /system/lib64/audiopolicy-aidl-cpp.so (android::media::BnAudioPolicyService::onTransact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+14616) (BuildId: 22b22950a4344a750d4ff770da257171)
#22 pc 000000000021f984 /system/bin/audioserver (android::AudioPolicyService::onTransact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+1124) (BuildId: af182590367a25abe24ade65a459fce5)
#23 pc 000000000005b024 /system/lib64/libbinder.so (android::IPCThreadState::executeCommand(int)+8276) (BuildId: a685cc33e1708d756cd0dce03e025b4e)
#24 pc 00000000000583d0 /system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+672) (BuildId: a685cc33e1708d756cd0dce03e025b4e)
#25 pc 000000000006fd08 /system/lib64/libbinder.so (android::PoolThread::threadLoop()+24) (BuildId: a685cc33e1708d756cd0dce03e025b4e)
#26 pc 0000000000012000 /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+368) (BuildId: 6b95583a1502170133944ea8fd3f0f65)
#27 pc 0000000000070668 /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+200) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#28 pc 0000000000061a00 /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
failed to read process info: failed to open /proc/27853: No such file or directory
- android.hardware.audio.service.mediatek's crash
And here's the log for android.hardware.audio.service.mediatek
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Build fingerprint: 'POCO/emerald_p_global/emerald:15/AP3A.240905.015.A2/OS2.0.2.0.VNFMIXM:user/release-keys'
Revision: '0'
ABI: 'arm64'
Timestamp: 2025-03-14 05:51:12.352248912+0700
Process uptime: 0s
Cmdline: /vendor/bin/hw/android.hardware.audio.service.mediatek
pid: 29777, tid: 29777, name: audio.service.m >>> /vendor/bin/hw/android.hardware.audio.service.mediatek <<<
uid: 1041
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 35 (<debuggerd signal>), code -1 (SI_QUEUE from pid 29775, uid 1041), fault addr --------
x0 fffffffffffffffc x1 00000000c0306201 x2 0000007fe9643ff8 x3 0000007ae8ff8060
x4 0000000000000001 x5 b400007b0a30c350 x6 0000000000000000 x7 0000000000000000
x8 000000000000001d x9 0000007fe9643f00 x10 0000007fe9643f00 x11 0000007fe9643ed0
x12 ffffff80ffffffd0 x13 00000000000001c4 x14 0000000070742a85 x15 1bc5d5a50200b1d7
x16 0000007d7cde7758 x17 0000007d7e09d110 x18 0000007d7f400000 x19 0000007d7e73e000
x20 b400007b0a30c480 x21 b400007b0a30c3f8 x22 b400007b7a319280 x23 00000000fffffff7
x24 0000007d7e73e000 x25 000000000000000e x26 0000007fe96442d9 x27 00000000746c7561
x28 0000000061666564 x29 0000007fe9643f30
lr 0000007d7e09d1b0 sp 0000007fe9643e50 pc 0000007d7e0fbaa8 pst 0000000080001000
6 total frames
backtrace:
#00 pc 00000000000c9aa8 /apex/com.android.runtime/lib64/bionic/libc.so (__ioctl+8) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#01 pc 000000000006b1ac /apex/com.android.runtime/lib64/bionic/libc.so (ioctl+156) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
#02 pc 000000000006a1c8 /apex/com.android.vndk.v31/lib64/libhidlbase.so (android::hardware::IPCThreadState::getAndExecuteCommand()+176) (BuildId: bd032fb3600bd7da46e4276849c09093)
#03 pc 000000000006a038 /apex/com.android.vndk.v31/lib64/libhidlbase.so (android::hardware::IPCThreadState::joinThreadPool(bool)+96) (BuildId: bd032fb3600bd7da46e4276849c09093)
#04 pc 0000000000002c74 /vendor/bin/hw/android.hardware.audio.service.mediatek (main+3104) (BuildId: c45110b2c310813f7d66842b9b3dbf68)
#05 pc 0000000000057664 /apex/com.android.runtime/lib64/bionic/libc.so (__libc_init+116) (BuildId: 6e6d388a18e01218afe76eed8954f27f)
failed to read process info: failed to open /proc/29775: No such file or directory