/system/bin/audioserver crashed

[snrkl]

Pixeltablet
Webpage with security camera stream with sound playing when it crashed.

type: crash
osVersion: google/tangorpro/tangorpro:14/AP1A.240505.004/2024051500:user/release-keys
uid: 1041 (u:r:audioserver:s0)
cmdline: /system/bin/audioserver
processUptime: 0s

abortMessage: terminating with uncaught exception of type NSt3__112system_errorE: thread::join failed: Invalid argument

signal: 6 (SIGABRT), code -1 (SI_QUEUE)
threadName: AudioMmapOut_ED

backtrace:
    /apex/com.android.runtime/lib64/bionic/libc.so (abort+164, pc 64e84)
    /system/lib64/libc++.so (abort_message+276, pc 54b04)
    /system/lib64/libc++.so (demangling_terminate_handler() (.__uniq.205383134706309982814331919004001075825)+272, pc 5c2a0)
    /system/lib64/libc++.so (std::__terminate(void (*)())+8, pc 5cce8)
    /system/lib64/libc++.so (__cxxabiv1::failed_throw(__cxxabiv1::__cxa_exception*) (.__uniq.322141405278763512308061072235179479160)+28, pc 5c4cc)
    /system/lib64/libc++.so (__cxa_throw+116, pc 5c464)
    /system/lib64/libc++.so (std::__1::__throw_system_error(int, char const*)+84, pc 9d9d4)
    /system/lib64/libc++.so (std::__1::thread::join()+64, pc 9db20)
    /system/bin/audioserver (aaudio::AAudioThread::stop()+140, pc a9dcc)
    /system/bin/audioserver (aaudio::AAudioServiceStreamBase::close()+296, pc a26e8)
    /system/bin/audioserver (aaudio::AAudioServiceEndpoint::releaseRegisteredStreams()+348, pc 8ef5c)
    /system/bin/audioserver (void* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__thread_struct, std::__1::default_delete<std::__1::__thread_struct> >, aaudio::AAudioServiceEndpointMMAP::onRoutingChanged(int)::$_0> >(void*) (.cfi)+132, pc 93194)
    /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204, pc cf93c)
    /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64, pc 66730)

[thestinger]

Looks like an upstream bug. Are you able to reproduce it? There's no sign of memory corruption, but it could theoretically be a memory corruption bug uncovered by hardened_malloc.

[snrkl]

The camera stream is running everyday. If its reproducible it will happen again I guess?

I'll update if it re-occurs..

That being said, while it might happen again, if its based on a live camera audio feed, is that actually helpful?

[thestinger]

We'd like to fix it but we'd really need a way to trigger it ourselves. It's near certainly an upstream bug and in this case highly likely it also occurs on stock OS since it doesn't really look like a memory corruption bug uncovered by hardened_malloc, although we'd need to look into it more to figure that out.

[locusus]

Spotify causes a audioserver crash anytime it changes tracks if the app is not in focus. If the phone is locked, the audio becomes super choppy/buffer-y. Happens in wired and wireless audio.

type: crash
osVersion: google/barbet/barbet:14/AP1A.240505.004/2024060500:user/release-keys
uid: 1041 (u:r:audioserver:s0)
cmdline: /system/bin/audioserver
processUptime: 0s

signal: 11 (SIGSEGV), code 1 (SEGV_MAPERR), faultAddr 0
cause: null pointer dereference
threadName: AudioOut_25

backtrace:
    /system/bin/audioserver (android::EffectModule::setVolume(unsigned int*, unsigned int*, bool)+436, pc fd604)
    /system/bin/audioserver (android::EffectChain::setVolume_l(unsigned int*, unsigned int*, bool)+516, pc 1120e4)
    /system/bin/audioserver (android::MixerThread::prepareTracks_l(android::Vector<android::sp<android::IAfTrack> >*)+14888, pc 164818)
    /system/bin/audioserver (android::PlaybackThread::threadLoop()+3268, pc 1556c4)
    /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+368, pc 14280)
    /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204, pc cf93c)
    /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64, pc 66730)

[snrkl]

@locusus what version and handset are you running?

I'm on latest stable builds on p8, p8pro (2024071200) and tablet and I'm not experiencing that with Spotify. Spotify is running for hours a day on each if those devices....

[thestinger]

@locusus Looks like an upstream memory corruption bug. It doesn't look the same as the one above.

[locusus]

i hadn't updated when i last commented, but i have since. i'm on latest stable on a Pixel 5a 5g.

type: crash
osVersion: google/barbet/barbet:14/AP2A.240805.005/2024080600:user/release-keys
uid: 1041 (u:r:audioserver:s0)
cmdline: /system/bin/audioserver
processUptime: 0s

signal: 11 (SIGSEGV), code 1 (SEGV_MAPERR), faultAddr 0
cause: null pointer dereference
threadName: AudioOut_25

backtrace:
    /system/bin/audioserver (android::EffectModule::setVolume(unsigned int*, unsigned int*, bool)+432, pc fe310)
    /system/bin/audioserver (android::EffectChain::setVolume_l(unsigned int*, unsigned int*, bool)+604, pc 1192ec)
    /system/bin/audioserver (android::EffectChain::setVolume(unsigned int*, unsigned int*, bool)+172, pc 112f7c)
    /system/bin/audioserver (android::MixerThread::prepareTracks_l(android::Vector<android::sp<android::IAfTrack> >*)+14584, pc 1651a8)
    /system/bin/audioserver (android::PlaybackThread::threadLoop()+3780, pc 155f24)
    /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+244, pc 115d4)
    /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204, pc 767ac)
    /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64, pc 67d50)

@locusus what version and handset are you running?

I'm on latest stable builds on p8, p8pro (2024071200) and tablet and I'm not experiencing that with Spotify. Spotify is running for hours a day on each if those devices....