search

sonyxperiadev / bug_tracker

Empty repository that is used as a bugtracker for Open Devices project
52 stars 13 forks source link

[LENA][11][4.19] Camera server crashes when video recording is stopped #761

Open Thaodan opened 2 years ago

Thaodan commented 2 years ago

Platform: lena Device: pdx213 xqbt52 (Xperia 10 III) Kernel version: 4.19.188-g9cb3078663b0-dirty (from common-kernel prebuilts) Android version: AOSP11 android-11.0.0_r46 Software binaries version: SW_binaries_for_Xperia_Android_11_4.19_v9a_lena.img

Previously working on

Description The camera server crashes when the video recording is stopped. The server restarts after and works again. The issue is similar to #756 but for a different reason I think.

Symptoms The camera view turns black until the service is restarted.

How to reproduce

  1. Open Camera app
  2. Start recording
  3. Stop recording

Additional context

Thaodan commented 2 years ago

The crash looks like this:

02-25 11:42:33.389 11401 11401 F libc    : Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 11401 ([provider@2.4-se](mailto:provider@2.4-se)), pid 11401 ([provider@2.4-se](mailto:provider@2.4-se))
02-25 11:42:33.452 18804 18804 I crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstone
02-25 11:42:33.452  3546  3546 I tombstoned: received crash request for pid 11401
02-25 11:42:33.453 18804 18804 I crash_dump64: performing dump of process 11401 (target tid = 11401)
02-25 11:42:33.466 18804 18804 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
02-25 11:42:33.467 18804 18804 F DEBUG   : Build fingerprint: 'Sony/aosp_xqbt52/pdx213:11/RQ3A.211001.001/eng.jolla.20220204.141450:user/test-keys'
02-25 11:42:33.467 18804 18804 F DEBUG   : Revision: '0'
02-25 11:42:33.467 18804 18804 F DEBUG   : ABI: 'arm64'
02-25 11:42:33.467 18804 18804 F DEBUG   : Timestamp: 2022-02-25 11:42:33+0000
02-25 11:42:33.467 18804 18804 F DEBUG   : pid: 11401, tid: 11401, name: [provider@2.4-se](mailto:provider@2.4-se)  >>> /vendor/bin/hw/[android.hardware.camera.provider@2.4-service_64](mailto:android.hardware.camera.provider@2.4-service_64) <<<
02-25 11:42:33.467 18804 18804 F DEBUG   : uid: 1047
02-25 11:42:33.467 18804 18804 F DEBUG   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0
02-25 11:42:33.467 18804 18804 F DEBUG   : Cause: null pointer dereference
02-25 11:42:33.467 18804 18804 F DEBUG   :     x0  0000000000000000  x1  000000752124c350  x2  0000007fe8a0bdb8  x3  0000000000000020
02-25 11:42:33.467 18804 18804 F DEBUG   :     x4  0000000000000010  x5  0000007501257f18  x6  00000077931c0000  x7  00000000007311b8
02-25 11:42:33.467 18804 18804 F DEBUG   :     x8  0000000000000000  x9  92862cf16728cb96  x10 00000000000002e0  x11 0000000000000030
02-25 11:42:33.467 18804 18804 F DEBUG   :     x12 1bd5000000020d02  x13 000000006218c0a9  x14 0017253c2faae4a4  x15 00000cb8442bfd0a
02-25 11:42:33.467 18804 18804 F DEBUG   :     x16 00000074fea535b8  x17 000000779137e474  x18 0000000000000001  x19 0000000000000000
02-25 11:42:33.467 18804 18804 F DEBUG   :     x20 b4000076b1254120  x21 00000074e73a0090  x22 00000074f86e1740  x23 b4000076012570a8
02-25 11:42:33.467 18804 18804 F DEBUG   :     x24 00000074fea42270  x25 00000075009b3918  x26 0000007791fc4000  x27 0000000000000001
02-25 11:42:33.467 18804 18804 F DEBUG   :     x28 0000000000000000  x29 0000007fe8a0ba10
02-25 11:42:33.467 18804 18804 F DEBUG   :     lr  00000074fe7bb9fc  sp  0000007fe8a0ba10  pc  000000779137e47c  pst 0000000080001000
02-25 11:42:33.558  8463   371 D CCodecBuffers: [c2.android.aac.encoder#45:Output[N]] popFromStashAndRegister: output format changed to AMessage(what = 0x00000000) = {
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t aac-sbr-mode = 3
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t bitrate = 128000
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t channel-count = 2
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t level = 0
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t max-bitrate = 128000
02-25 11:42:33.558  8463   371 D CCodecBuffers:   string mime = "audio/mp4a-latm"
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t profile = 2
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t sample-rate = 48000
02-25 11:42:33.558  8463   371 D CCodecBuffers:   Buffer csd-0 = {
02-25 11:42:33.558  8463   371 D CCodecBuffers:     00000000:  11 90                                             ..
02-25 11:42:33.558  8463   371 D CCodecBuffers:   }
02-25 11:42:33.558  8463   371 D CCodecBuffers: }
02-25 11:42:33.571 18804 18804 F DEBUG   : backtrace:
02-25 11:42:33.571 18804 18804 F DEBUG   :       #00 pc 00000000000b047c  /apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_lock+8) (BuildId: b299907c148b70701879a0069c5ab83d)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #01 pc 00000000007349f8  /odm/lib64/hw/camera.qcom.so (CamX::Mutex::Lock()+108) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #02 pc 00000000008cb84c  /odm/lib64/hw/camera.qcom.so (CamX::Node::Destroy()+1868) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #03 pc 0000000000919800  /odm/lib64/hw/camera.qcom.so (CamX::Pipeline::DestroyNodes()+216) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #04 pc 0000000000919460  /odm/lib64/hw/camera.qcom.so (CamX::Pipeline::~Pipeline()+104) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #05 pc 00000000009193e0  /odm/lib64/hw/camera.qcom.so (CamX::Pipeline::~Pipeline()+24) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #06 pc 000000000091bbdc  /odm/lib64/hw/camera.qcom.so (CamX::Pipeline::Destroy()+1388) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #07 pc 000000000083ae2c  /odm/lib64/hw/camera.qcom.so (CamX::ChiContext::DestroyPipelineDescriptor(CamX::PipelineDescriptor*)+844) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #08 pc 0000000000828c38  /odm/lib64/hw/camera.qcom.so (CamX::ChiDestroyPipelineDescriptor(void*, void*) (.cfi)+60) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #09 pc 000000000018308c  /odm/lib64/hw/com.qti.chi.override.bitra.so (ExtensionModule::DestroyPipelineDescriptor(void*)+76) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #10 pc 00000000001a2aa8  /odm/lib64/hw/com.qti.chi.override.bitra.so (Pipeline::Destroy()+36) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #11 pc 00000000000be840  /odm/lib64/hw/com.qti.chi.override.bitra.so (ChiFeature2Base::DestroyFeatureData()+416) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #12 pc 00000000000be658  /odm/lib64/hw/com.qti.chi.override.bitra.so (ChiFeature2Base::~ChiFeature2Base()+92) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #13 pc 0000000000023b0c  /odm/lib64/com.qti.feature2.mfsr.bitra.so (ChiFeature2HWmultiframe::~ChiFeature2HWmultiframe()+20) (BuildId: 82e92359b8ba8413a7510b53db650264)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #14 pc 00000000000211fc  /odm/lib64/com.qti.feature2.mfsr.bitra.so (ChiFeature2HWmultiframe::~ChiFeature2HWmultiframe()+24) (BuildId: 82e92359b8ba8413a7510b53db650264)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #15 pc 000000000001f310  /odm/lib64/com.qti.feature2.mfsr.bitra.so (ChiFeature2HWmultiframe::Destroy()+88) (BuildId: 82e92359b8ba8413a7510b53db650264)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #16 pc 000000000010b174  /odm/lib64/hw/com.qti.chi.override.bitra.so (ChiFeaturePoolManager::Destroy()+472) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #17 pc 000000000012c460  /odm/lib64/hw/com.qti.chi.override.bitra.so (ChiFeature2GraphManager::Destroy()+332) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #18 pc 000000000015861c  /odm/lib64/hw/com.qti.chi.override.bitra.so (Feature2Wrapper::Destroy(int)+64) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #19 pc 00000000001ee290  /odm/lib64/hw/com.qti.chi.override.bitra.so (AdvancedCameraUsecase::Destroy(int)+3232) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #20 pc 00000000001ae3c0  /odm/lib64/hw/com.qti.chi.override.bitra.so (Usecase::DestroyObject(int)+1176) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #21 pc 0000000000180128  /odm/lib64/hw/com.qti.chi.override.bitra.so (ExtensionModule::TeardownOverrideUsecase(camera3_device const*, int)+444) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #22 pc 00000000001811b0  /odm/lib64/hw/com.qti.chi.override.bitra.so (ExtensionModule::TeardownOverrideSession(camera3_device const*, unsigned long, void*)+772) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #23 pc 00000000001726cc  /odm/lib64/hw/com.qti.chi.override.bitra.so (chi_teardown_override_session(camera3_device const*, unsigned long, void*) (.cfi)+52) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #24 pc 00000000003fd8e0  /odm/lib64/hw/camera.qcom.so (CamX::HALDevice::ConfigureStreams(CamX::Camera3StreamConfig*)+380) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #25 pc 00000000003f0b28  /odm/lib64/hw/camera.qcom.so (CamX::configure_streams(camera3_device const*, camera3_stream_configuration*) (.cfi)+3372) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #26 pc 00000000003f4f40  /odm/lib64/hw/camera.qcom.so (CamX::configure_streams(camera3_device const*, camera3_stream_configuration*) (.cfi)+156) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #27 pc 000000000001c26c  /vendor/lib64/[camera.device@3.4-impl.so](mailto:camera.device@3.4-impl.so) (android::hardware::camera::device::V3_4::implementation::CameraDeviceSession::configureStreams_3_4_Impl(android::hardware::camera::device::V3_4::StreamConfiguration const&, std::__1::function<void (android::hardware::camera::common::V1_0::Status, android::hardware::camera::device::V3_4::HalStreamConfiguration const&)>, unsigned int, bool)+716) (BuildId: a17a6462dbc7ed96bf15bc3fd726d284)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #28 pc 00000000000215d8  /vendor/lib64/[camera.device@3.5-impl.so](mailto:camera.device@3.5-impl.so) (android::hardware::camera::device::V3_5::implementation::CameraDeviceSession::configureStreams_3_5(android::hardware::camera::device::V3_5::StreamConfiguration const&, std::__1::function<void (android::hardware::camera::common::V1_0::Status, android::hardware::camera::device::V3_4::HalStreamConfiguration const&)>)+228) (BuildId: 06af62c8fe36525830ec5ff15c451290)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #29 pc 0000000000020d54  /vendor/lib64/[camera.device@3.5-impl.so](mailto:camera.device@3.5-impl.so) (android::hardware::camera::device::V3_5::implementation::CameraDeviceSession::TrampolineSessionInterface_3_5::configureStreams_3_5(android::hardware::camera::device::V3_5::StreamConfiguration const&, std::__1::function<void (android::hardware::camera::common::V1_0::Status, android::hardware::camera::device::V3_4::HalStreamConfiguration const&)>)+192) (BuildId: 06af62c8fe36525830ec5ff15c451290)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #30 pc 000000000002bf0c  /apex/com.android.vndk.v30/lib64/[android.hardware.camera.device@3.5.so](mailto:android.hardware.camera.device@3.5.so) (android::hardware::camera::device::V3_5::BnHwCameraDeviceSession::_hidl_configureStreams_3_5(android::hidl::base::V1_0::BnHwBase*, android::hardware::Parcel const&, android::hardware::Parcel*, std::__1::function<void (android::hardware::Parcel&)>)+340) (BuildId: c4c6eb09608716e590bfb0ceec1c103b)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #31 pc 000000000002ca5c  /apex/com.android.vndk.v30/lib64/[android.hardware.camera.device@3.5.so](mailto:android.hardware.camera.device@3.5.so) (android::hardware::camera::device::V3_5::BnHwCameraDeviceSession::onTransact(unsigned int, android::hardware::Parcel const&, android::hardware::Parcel*, unsigned int, std::__1::function<void (android::hardware::Parcel&)>)+1552) (BuildId: c4c6eb09608716e590bfb0ceec1c103b)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #32 pc 0000000000082678  /apex/com.android.vndk.v30/lib64/libhidlbase.so (android::hardware::BHwBinder::transact(unsigned int, android::hardware::Parcel const&, android::hardware::Parcel*, unsigned int, std::__1::function<void (android::hardware::Parcel&)>)+68) (BuildId: a0821b1c7e70f2994b3c9952ceee63dd)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #33 pc 00000000000865f4  /apex/com.android.vndk.v30/lib64/libhidlbase.so (android::hardware::IPCThreadState::getAndExecuteCommand()+1076) (BuildId: a0821b1c7e70f2994b3c9952ceee63dd)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #34 pc 000000000008783c  /apex/com.android.vndk.v30/lib64/libhidlbase.so (android::hardware::IPCThreadState::joinThreadPool(bool)+96) (BuildId: a0821b1c7e70f2994b3c9952ceee63dd)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #35 pc 0000000000001160  /vendor/bin/hw/[android.hardware.camera.provider@2.4-service_64](mailto:android.hardware.camera.provider@2.4-service_64) (main.cfi+244) (BuildId: 41d868ba74eeb8905061dfc8a1effa6b)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #36 pc 0000000000049718  /apex/com.android.runtime/lib64/bionic/libc.so (__libc_init+108) (BuildId: b299907c148b70701879a0069c5ab83d)
Thaodan commented 2 years ago

cc: @sledges @jusa

Thaodan commented 2 years ago

Can also be triggered by switching away from the camera app while recording a video.

JacekJagosz commented 2 years ago

Sorry, could anyone from Sony take a look at it? This is a very annoying and repeatable bug, and the experience on Lena is otherwise really polished, apart from not being able to record videos, or use camera at all in some apps.

sraase commented 2 years ago

The issue is caused by a missing library. Should be fixed with the next odm update for lena. (note: I verified on Android 13, using Android 12-v3a blobs).

Thaodan commented 2 years ago

The issue is caused by a missing library. Should be fixed with the next odm update for lena. (note: I verified on Android 13, using Android 12-v3a blobs).

Will the go back to the A11 blobs?

Is the camera server crash/freeze on Edo #756 related?

sraase commented 2 years ago

Will the go back to the A11 blobs?

It is possible. I have seen this exact image before, but I don't know which odm images (if any) may have been affected.

Is the camera server crash/freeze on Edo #756 related?

Unlikely, but I was not able to test on edo yesterday.

Thaodan commented 2 years ago

Sebastian Raase @.***> writes:

Will the go back to the A11 blobs?

It is possible. I have seen this exact image before, but I don't know which odm images (if any) may have been affected.

A11 image are affected, we did the initial tests on them.

Is the camera server crash/freeze on Edo #756 related?

Unlikely, but I was not able to test on edo yesterday.

Please do so.

Pranav-Talmale commented 1 year ago

The issue is caused by a missing library. Should be fixed with the next odm update for lena. (note: I verified on Android 13, using Android 12-v3a blobs).

Can you tell what blob was missing ? I am facing the same issue on a custom ROM I built for my poco F4

sraase commented 1 year ago

Don't remember, might have been libswregistrationalgo.so. Crank up verbosity and check the log for load errors; depending on the file, the HAL will obliviously plough through.

Pranav-Talmale commented 1 year ago

Don't remember, might have been libswregistrationalgo.so. Crank up verbosity and check the log for load errors; depending on the file, the HAL will obliviously plough through.

Cool, thanks for the info.

JacekJagosz commented 1 year ago

@sraase Did you include the fix in A11 blobs? Or only A12 blobs. Because both were affected and Sailfish OS works only with A11 blobs.

Thaodan commented 6 months ago

Any updates?