[LENA][11][4.19] Camera server crashes when video recording is stopped #761

Thaodan · 2022-03-04T09:53:16Z

Platform: lena
Device: pdx213 xqbt52 (Xperia 10 III)
Kernel version: 4.19.188-g9cb3078663b0-dirty (from common-kernel prebuilts)
Android version: AOSP11 android-11.0.0_r46
Software binaries version: SW_binaries_for_Xperia_Android_11_4.19_v9a_lena.img

Previously working on

Description
The camera server crashes when the video recording is stopped. The server restarts after and works again.
The issue is similar to #756 but for a different reason I think.

Symptoms
The camera view turns black until the service is restarted.

How to reproduce

Open Camera app
Start recording
Stop recording

Additional context

Logcat: aosp-record.log.gz

Thaodan · 2022-03-04T09:53:39Z

The crash looks like this:

02-25 11:42:33.389 11401 11401 F libc    : Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 11401 ([provider@2.4-se](mailto:provider@2.4-se)), pid 11401 ([provider@2.4-se](mailto:provider@2.4-se))
02-25 11:42:33.452 18804 18804 I crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstone
02-25 11:42:33.452  3546  3546 I tombstoned: received crash request for pid 11401
02-25 11:42:33.453 18804 18804 I crash_dump64: performing dump of process 11401 (target tid = 11401)
02-25 11:42:33.466 18804 18804 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
02-25 11:42:33.467 18804 18804 F DEBUG   : Build fingerprint: 'Sony/aosp_xqbt52/pdx213:11/RQ3A.211001.001/eng.jolla.20220204.141450:user/test-keys'
02-25 11:42:33.467 18804 18804 F DEBUG   : Revision: '0'
02-25 11:42:33.467 18804 18804 F DEBUG   : ABI: 'arm64'
02-25 11:42:33.467 18804 18804 F DEBUG   : Timestamp: 2022-02-25 11:42:33+0000
02-25 11:42:33.467 18804 18804 F DEBUG   : pid: 11401, tid: 11401, name: [provider@2.4-se](mailto:provider@2.4-se)  >>> /vendor/bin/hw/[android.hardware.camera.provider@2.4-service_64](mailto:android.hardware.camera.provider@2.4-service_64) <<<
02-25 11:42:33.467 18804 18804 F DEBUG   : uid: 1047
02-25 11:42:33.467 18804 18804 F DEBUG   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0
02-25 11:42:33.467 18804 18804 F DEBUG   : Cause: null pointer dereference
02-25 11:42:33.467 18804 18804 F DEBUG   :     x0  0000000000000000  x1  000000752124c350  x2  0000007fe8a0bdb8  x3  0000000000000020
02-25 11:42:33.467 18804 18804 F DEBUG   :     x4  0000000000000010  x5  0000007501257f18  x6  00000077931c0000  x7  00000000007311b8
02-25 11:42:33.467 18804 18804 F DEBUG   :     x8  0000000000000000  x9  92862cf16728cb96  x10 00000000000002e0  x11 0000000000000030
02-25 11:42:33.467 18804 18804 F DEBUG   :     x12 1bd5000000020d02  x13 000000006218c0a9  x14 0017253c2faae4a4  x15 00000cb8442bfd0a
02-25 11:42:33.467 18804 18804 F DEBUG   :     x16 00000074fea535b8  x17 000000779137e474  x18 0000000000000001  x19 0000000000000000
02-25 11:42:33.467 18804 18804 F DEBUG   :     x20 b4000076b1254120  x21 00000074e73a0090  x22 00000074f86e1740  x23 b4000076012570a8
02-25 11:42:33.467 18804 18804 F DEBUG   :     x24 00000074fea42270  x25 00000075009b3918  x26 0000007791fc4000  x27 0000000000000001
02-25 11:42:33.467 18804 18804 F DEBUG   :     x28 0000000000000000  x29 0000007fe8a0ba10
02-25 11:42:33.467 18804 18804 F DEBUG   :     lr  00000074fe7bb9fc  sp  0000007fe8a0ba10  pc  000000779137e47c  pst 0000000080001000
02-25 11:42:33.558  8463   371 D CCodecBuffers: [c2.android.aac.encoder#45:Output[N]] popFromStashAndRegister: output format changed to AMessage(what = 0x00000000) = {
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t aac-sbr-mode = 3
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t bitrate = 128000
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t channel-count = 2
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t level = 0
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t max-bitrate = 128000
02-25 11:42:33.558  8463   371 D CCodecBuffers:   string mime = "audio/mp4a-latm"
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t profile = 2
02-25 11:42:33.558  8463   371 D CCodecBuffers:   int32_t sample-rate = 48000
02-25 11:42:33.558  8463   371 D CCodecBuffers:   Buffer csd-0 = {
02-25 11:42:33.558  8463   371 D CCodecBuffers:     00000000:  11 90                                             ..
02-25 11:42:33.558  8463   371 D CCodecBuffers:   }
02-25 11:42:33.558  8463   371 D CCodecBuffers: }
02-25 11:42:33.571 18804 18804 F DEBUG   : backtrace:
02-25 11:42:33.571 18804 18804 F DEBUG   :       #00 pc 00000000000b047c  /apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_lock+8) (BuildId: b299907c148b70701879a0069c5ab83d)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #01 pc 00000000007349f8  /odm/lib64/hw/camera.qcom.so (CamX::Mutex::Lock()+108) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #02 pc 00000000008cb84c  /odm/lib64/hw/camera.qcom.so (CamX::Node::Destroy()+1868) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #03 pc 0000000000919800  /odm/lib64/hw/camera.qcom.so (CamX::Pipeline::DestroyNodes()+216) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #04 pc 0000000000919460  /odm/lib64/hw/camera.qcom.so (CamX::Pipeline::~Pipeline()+104) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #05 pc 00000000009193e0  /odm/lib64/hw/camera.qcom.so (CamX::Pipeline::~Pipeline()+24) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #06 pc 000000000091bbdc  /odm/lib64/hw/camera.qcom.so (CamX::Pipeline::Destroy()+1388) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #07 pc 000000000083ae2c  /odm/lib64/hw/camera.qcom.so (CamX::ChiContext::DestroyPipelineDescriptor(CamX::PipelineDescriptor*)+844) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #08 pc 0000000000828c38  /odm/lib64/hw/camera.qcom.so (CamX::ChiDestroyPipelineDescriptor(void*, void*) (.cfi)+60) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #09 pc 000000000018308c  /odm/lib64/hw/com.qti.chi.override.bitra.so (ExtensionModule::DestroyPipelineDescriptor(void*)+76) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #10 pc 00000000001a2aa8  /odm/lib64/hw/com.qti.chi.override.bitra.so (Pipeline::Destroy()+36) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #11 pc 00000000000be840  /odm/lib64/hw/com.qti.chi.override.bitra.so (ChiFeature2Base::DestroyFeatureData()+416) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #12 pc 00000000000be658  /odm/lib64/hw/com.qti.chi.override.bitra.so (ChiFeature2Base::~ChiFeature2Base()+92) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #13 pc 0000000000023b0c  /odm/lib64/com.qti.feature2.mfsr.bitra.so (ChiFeature2HWmultiframe::~ChiFeature2HWmultiframe()+20) (BuildId: 82e92359b8ba8413a7510b53db650264)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #14 pc 00000000000211fc  /odm/lib64/com.qti.feature2.mfsr.bitra.so (ChiFeature2HWmultiframe::~ChiFeature2HWmultiframe()+24) (BuildId: 82e92359b8ba8413a7510b53db650264)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #15 pc 000000000001f310  /odm/lib64/com.qti.feature2.mfsr.bitra.so (ChiFeature2HWmultiframe::Destroy()+88) (BuildId: 82e92359b8ba8413a7510b53db650264)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #16 pc 000000000010b174  /odm/lib64/hw/com.qti.chi.override.bitra.so (ChiFeaturePoolManager::Destroy()+472) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #17 pc 000000000012c460  /odm/lib64/hw/com.qti.chi.override.bitra.so (ChiFeature2GraphManager::Destroy()+332) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #18 pc 000000000015861c  /odm/lib64/hw/com.qti.chi.override.bitra.so (Feature2Wrapper::Destroy(int)+64) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #19 pc 00000000001ee290  /odm/lib64/hw/com.qti.chi.override.bitra.so (AdvancedCameraUsecase::Destroy(int)+3232) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #20 pc 00000000001ae3c0  /odm/lib64/hw/com.qti.chi.override.bitra.so (Usecase::DestroyObject(int)+1176) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #21 pc 0000000000180128  /odm/lib64/hw/com.qti.chi.override.bitra.so (ExtensionModule::TeardownOverrideUsecase(camera3_device const*, int)+444) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #22 pc 00000000001811b0  /odm/lib64/hw/com.qti.chi.override.bitra.so (ExtensionModule::TeardownOverrideSession(camera3_device const*, unsigned long, void*)+772) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #23 pc 00000000001726cc  /odm/lib64/hw/com.qti.chi.override.bitra.so (chi_teardown_override_session(camera3_device const*, unsigned long, void*) (.cfi)+52) (BuildId: 690b7b70edbb8f58bbf7ffa94b7dbf92)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #24 pc 00000000003fd8e0  /odm/lib64/hw/camera.qcom.so (CamX::HALDevice::ConfigureStreams(CamX::Camera3StreamConfig*)+380) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #25 pc 00000000003f0b28  /odm/lib64/hw/camera.qcom.so (CamX::configure_streams(camera3_device const*, camera3_stream_configuration*) (.cfi)+3372) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #26 pc 00000000003f4f40  /odm/lib64/hw/camera.qcom.so (CamX::configure_streams(camera3_device const*, camera3_stream_configuration*) (.cfi)+156) (BuildId: d54d738bb6352882977367309c24c611)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #27 pc 000000000001c26c  /vendor/lib64/[camera.device@3.4-impl.so](mailto:camera.device@3.4-impl.so) (android::hardware::camera::device::V3_4::implementation::CameraDeviceSession::configureStreams_3_4_Impl(android::hardware::camera::device::V3_4::StreamConfiguration const&, std::__1::function<void (android::hardware::camera::common::V1_0::Status, android::hardware::camera::device::V3_4::HalStreamConfiguration const&)>, unsigned int, bool)+716) (BuildId: a17a6462dbc7ed96bf15bc3fd726d284)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #28 pc 00000000000215d8  /vendor/lib64/[camera.device@3.5-impl.so](mailto:camera.device@3.5-impl.so) (android::hardware::camera::device::V3_5::implementation::CameraDeviceSession::configureStreams_3_5(android::hardware::camera::device::V3_5::StreamConfiguration const&, std::__1::function<void (android::hardware::camera::common::V1_0::Status, android::hardware::camera::device::V3_4::HalStreamConfiguration const&)>)+228) (BuildId: 06af62c8fe36525830ec5ff15c451290)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #29 pc 0000000000020d54  /vendor/lib64/[camera.device@3.5-impl.so](mailto:camera.device@3.5-impl.so) (android::hardware::camera::device::V3_5::implementation::CameraDeviceSession::TrampolineSessionInterface_3_5::configureStreams_3_5(android::hardware::camera::device::V3_5::StreamConfiguration const&, std::__1::function<void (android::hardware::camera::common::V1_0::Status, android::hardware::camera::device::V3_4::HalStreamConfiguration const&)>)+192) (BuildId: 06af62c8fe36525830ec5ff15c451290)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #30 pc 000000000002bf0c  /apex/com.android.vndk.v30/lib64/[android.hardware.camera.device@3.5.so](mailto:android.hardware.camera.device@3.5.so) (android::hardware::camera::device::V3_5::BnHwCameraDeviceSession::_hidl_configureStreams_3_5(android::hidl::base::V1_0::BnHwBase*, android::hardware::Parcel const&, android::hardware::Parcel*, std::__1::function<void (android::hardware::Parcel&)>)+340) (BuildId: c4c6eb09608716e590bfb0ceec1c103b)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #31 pc 000000000002ca5c  /apex/com.android.vndk.v30/lib64/[android.hardware.camera.device@3.5.so](mailto:android.hardware.camera.device@3.5.so) (android::hardware::camera::device::V3_5::BnHwCameraDeviceSession::onTransact(unsigned int, android::hardware::Parcel const&, android::hardware::Parcel*, unsigned int, std::__1::function<void (android::hardware::Parcel&)>)+1552) (BuildId: c4c6eb09608716e590bfb0ceec1c103b)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #32 pc 0000000000082678  /apex/com.android.vndk.v30/lib64/libhidlbase.so (android::hardware::BHwBinder::transact(unsigned int, android::hardware::Parcel const&, android::hardware::Parcel*, unsigned int, std::__1::function<void (android::hardware::Parcel&)>)+68) (BuildId: a0821b1c7e70f2994b3c9952ceee63dd)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #33 pc 00000000000865f4  /apex/com.android.vndk.v30/lib64/libhidlbase.so (android::hardware::IPCThreadState::getAndExecuteCommand()+1076) (BuildId: a0821b1c7e70f2994b3c9952ceee63dd)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #34 pc 000000000008783c  /apex/com.android.vndk.v30/lib64/libhidlbase.so (android::hardware::IPCThreadState::joinThreadPool(bool)+96) (BuildId: a0821b1c7e70f2994b3c9952ceee63dd)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #35 pc 0000000000001160  /vendor/bin/hw/[android.hardware.camera.provider@2.4-service_64](mailto:android.hardware.camera.provider@2.4-service_64) (main.cfi+244) (BuildId: 41d868ba74eeb8905061dfc8a1effa6b)
02-25 11:42:33.571 18804 18804 F DEBUG   :       #36 pc 0000000000049718  /apex/com.android.runtime/lib64/bionic/libc.so (__libc_init+108) (BuildId: b299907c148b70701879a0069c5ab83d)

Thaodan · 2022-03-04T09:54:14Z

cc: @sledges @jusa

Thaodan · 2022-04-12T11:16:48Z

Can also be triggered by switching away from the camera app while recording a video.

JacekJagosz · 2022-10-27T21:39:17Z

Sorry, could anyone from Sony take a look at it? This is a very annoying and repeatable bug, and the experience on Lena is otherwise really polished, apart from not being able to record videos, or use camera at all in some apps.

sraase · 2022-11-07T17:46:47Z

The issue is caused by a missing library. Should be fixed with the next odm update for lena.
(note: I verified on Android 13, using Android 12-v3a blobs).

Thaodan · 2022-11-08T05:28:23Z

The issue is caused by a missing library. Should be fixed with the next odm update for lena. (note: I verified on Android 13, using Android 12-v3a blobs).

Will the go back to the A11 blobs?

Is the camera server crash/freeze on Edo #756 related?

sraase · 2022-11-08T09:20:03Z

Will the go back to the A11 blobs?

It is possible. I have seen this exact image before, but I don't know which odm images (if any) may have been affected.

Is the camera server crash/freeze on Edo #756 related?

Unlikely, but I was not able to test on edo yesterday.

Thaodan · 2022-11-09T06:00:48Z

Sebastian Raase ***@***.***> writes:

> Will the go back to the A11 blobs? It is possible. I have seen this exact image before, but I don't know which odm images (if any) may have been affected.

A11 image are affected, we did the initial tests on them.

> Is the camera server crash/freeze on Edo #756 related? Unlikely, but I was not able to test on edo yesterday.

Please do so.

Pranav-Talmale · 2022-11-25T10:21:54Z

The issue is caused by a missing library. Should be fixed with the next odm update for lena. (note: I verified on Android 13, using Android 12-v3a blobs).

Can you tell what blob was missing ? I am facing the same issue on a custom ROM I built for my poco F4

sraase · 2022-11-25T14:09:08Z

Don't remember, might have been libswregistrationalgo.so. Crank up verbosity and check the log for load errors; depending on the file, the HAL will obliviously plough through.

Pranav-Talmale · 2022-11-27T11:39:34Z

Don't remember, might have been libswregistrationalgo.so. Crank up verbosity and check the log for load errors; depending on the file, the HAL will obliviously plough through.

Cool, thanks for the info.

JacekJagosz · 2023-01-19T14:36:24Z

@sraase Did you include the fix in A11 blobs? Or only A12 blobs. Because both were affected and Sailfish OS works only with A11 blobs.

Thaodan · 2024-05-15T11:57:56Z

Any updates?

Thaodan added the bug label Mar 4, 2022

sraase mentioned this issue Nov 9, 2022

[EDO]]PDX203][11][4.19] Video recording freezes when trying to record video #756

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[LENA][11][4.19] Camera server crashes when video recording is stopped #761

[LENA][11][4.19] Camera server crashes when video recording is stopped #761

Thaodan commented Mar 4, 2022 •

edited

Thaodan commented Mar 4, 2022

Thaodan commented Mar 4, 2022

Thaodan commented Apr 12, 2022 •

edited

JacekJagosz commented Oct 27, 2022

sraase commented Nov 7, 2022 •

edited

Thaodan commented Nov 8, 2022

sraase commented Nov 8, 2022

Thaodan commented Nov 9, 2022 via email

Pranav-Talmale commented Nov 25, 2022

sraase commented Nov 25, 2022

Pranav-Talmale commented Nov 27, 2022

JacekJagosz commented Jan 19, 2023

Thaodan commented May 15, 2024

[LENA][11][4.19] Camera server crashes when video recording is stopped #761

[LENA][11][4.19] Camera server crashes when video recording is stopped #761

Comments

Thaodan commented Mar 4, 2022 • edited

Previously working on

Thaodan commented Mar 4, 2022

Thaodan commented Mar 4, 2022

Thaodan commented Apr 12, 2022 • edited

JacekJagosz commented Oct 27, 2022

sraase commented Nov 7, 2022 • edited

Thaodan commented Nov 8, 2022

sraase commented Nov 8, 2022

Thaodan commented Nov 9, 2022 via email

Pranav-Talmale commented Nov 25, 2022

sraase commented Nov 25, 2022

Pranav-Talmale commented Nov 27, 2022

JacekJagosz commented Jan 19, 2023

Thaodan commented May 15, 2024

Thaodan commented Mar 4, 2022 •

edited

Thaodan commented Apr 12, 2022 •

edited

sraase commented Nov 7, 2022 •

edited