Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Native crash in the libiperf v3.17.1.so #41

Open
RkShaRkz opened this issue Nov 8, 2024 · 12 comments
Open

Native crash in the libiperf v3.17.1.so #41

RkShaRkz opened this issue Nov 8, 2024 · 12 comments
Labels
bug Something isn't working

Comments

@RkShaRkz
Copy link

RkShaRkz commented Nov 8, 2024

Bug Report

Run iperf3 tests one after another long enough and it's bound to happen

Context

  • Device:
  • Carrier Privileges (Y/N):
  • Android Version:
  • App Version:
  • Git Hash:

Description

DEBUG                   pid-3402                             A  Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
DEBUG                   pid-3402                             A  pid: 21477, tid: 22043, name: androidx.work-4  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
DEBUG                   pid-3402                             A        #04 pc 000000000002537c  /data/app/~~6s5X8_Vj5GtlXECj438SZw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-ryEfpmJixp4Wtw047C_ksQ==/base.apk!libiperf3.17.1.so (pthread_cancel+96) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
DEBUG                   pid-3402                             A        #05 pc 0000000000021fb8  /data/app/~~6s5X8_Vj5GtlXECj438SZw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-ryEfpmJixp4Wtw047C_ksQ==/base.apk!libiperf3.17.1.so (iperf_run_client+1876) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
DEBUG                   pid-3402                             A        #06 pc 0000000000015214  /data/app/~~6s5X8_Vj5GtlXECj438SZw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-ryEfpmJixp4Wtw047C_ksQ==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
DEBUG                   pid-3402                             A        #07 pc 0000000000015034  /data/app/~~6s5X8_Vj5GtlXECj438SZw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-ryEfpmJixp4Wtw047C_ksQ==/base.apk!libiperf3.17.1.so (main+100) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
DEBUG                   pid-3402                             A        #08 pc 0000000000028300  /data/app/~~6s5X8_Vj5GtlXECj438SZw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-ryEfpmJixp4Wtw047C_ksQ==/base.apk!libiperf3.17.1.so (Java_de_fraunhofer_fokus_OpenMobileNetworkToolkit_Iperf3_Iperf3Worker_iperf3Wrapper+500) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
DEBUG                   pid-3402                             A        #14 pc 000000000000d250  /data/app/~~6s5X8_Vj5GtlXECj438SZw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-ryEfpmJixp4Wtw047C_ksQ==/base.apk (de.fraunhofer.fokus.OpenMobileNetworkToolkit.Iperf3.Iperf3Worker.doWork+0)
DEBUG                   pid-3402                             A        #19 pc 000000000034edf4  /data/app/~~6s5X8_Vj5GtlXECj438SZw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-ryEfpmJixp4Wtw047C_ksQ==/base.apk (androidx.work.Worker$1.run+0)

How to Reproduce

Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '...'
  3. Scroll down to '...'
  4. See error

Expected Behavior

It'd be great if the libraries could survive 1000+ 15second tests in a row

Actual Behavior

More often than not, they can't, and either suffer a native library crash or some other defect which crashes the app.

Screenshots

Additional Context

You can take a look at this branch and see what's there to see, if the repo is visible to you
Cloud-City-RS#25

Possible Fix
@RkShaRkz RkShaRkz added the bug Something isn't working label Nov 8, 2024
@RkShaRkz
Copy link
Author

RkShaRkz commented Nov 10, 2024 •
edited
Loading

I made a few small changes and... for now, it's been pretty stable. We'll see if it'll survive the whole night. Biggest change was not enqueuing onto the WM in main thread, because the way I'm enforcing that thing to run on the main thread is also somewhat... dodgy.

@RkShaRkz
Copy link
Author

Lets let this one sit for a while, but I may have had it working fine during the whole night; if I don't see many more of these crashes I'll consider the issue resolved from my side and close the issue.

@RkShaRkz
Copy link
Author

If the issue is resolved on my side - this commit might have completely resolved it: Cloud-City-RS@e9b40b3

moving WorkManager enqueuing from main thread to whatever this other thing is.

@hajoha
Copy link
Contributor

hajoha commented Nov 11, 2024

I will have a look, thank you!

@RkShaRkz
Copy link
Author

Nope, the issue is still there:

2024-11-12 15:52:29.012  3598-3966  libc                    de....okus.OpenMobileNetworkToolkit  A  invalid pthread_t 0x7912db1cb0 passed to pthread_kill
2024-11-12 15:52:29.348  3598-3966  libc                    de....okus.OpenMobileNetworkToolkit  A  Fatal signal 6 (SIGABRT), code -1 (SI_QUEUE) in tid 3966 (androidx.work-1), pid 3598 (eNetworkToolkit)

2024-11-12 15:52:30.604   614-614   DEBUG                   crash_dump64                         A  Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
2024-11-12 15:52:30.604   614-614   DEBUG                   crash_dump64                         A  pid: 3598, tid: 3966, name: androidx.work-1  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
2024-11-12 15:52:30.605   614-614   DEBUG                   crash_dump64                         A        #04 pc 000000000002537c  /data/app/~~6QXePCXRlu_8vs_B2itbMA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-NKKrAG1H-wfzP0U1FHNtTA==/base.apk!libiperf3.17.1.so (pthread_cancel+96) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
2024-11-12 15:52:30.605   614-614   DEBUG                   crash_dump64                         A        #05 pc 0000000000021fb8  /data/app/~~6QXePCXRlu_8vs_B2itbMA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-NKKrAG1H-wfzP0U1FHNtTA==/base.apk!libiperf3.17.1.so (iperf_run_client+1876) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
2024-11-12 15:52:30.605   614-614   DEBUG                   crash_dump64                         A        #06 pc 0000000000015214  /data/app/~~6QXePCXRlu_8vs_B2itbMA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-NKKrAG1H-wfzP0U1FHNtTA==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
2024-11-12 15:52:30.605   614-614   DEBUG                   crash_dump64                         A        #07 pc 0000000000015034  /data/app/~~6QXePCXRlu_8vs_B2itbMA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-NKKrAG1H-wfzP0U1FHNtTA==/base.apk!libiperf3.17.1.so (main+100) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
2024-11-12 15:52:30.605   614-614   DEBUG                   crash_dump64                         A        #08 pc 0000000000028300  /data/app/~~6QXePCXRlu_8vs_B2itbMA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-NKKrAG1H-wfzP0U1FHNtTA==/base.apk!libiperf3.17.1.so (Java_de_fraunhofer_fokus_OpenMobileNetworkToolkit_Iperf3_Iperf3Worker_iperf3Wrapper+500) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
2024-11-12 15:52:30.606   614-614   DEBUG                   crash_dump64                         A        #14 pc 000000000000d12c  /data/app/~~6QXePCXRlu_8vs_B2itbMA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-NKKrAG1H-wfzP0U1FHNtTA==/base.apk (de.fraunhofer.fokus.OpenMobileNetworkToolkit.Iperf3.Iperf3Worker.doWork+0)
2024-11-12 15:52:30.606   614-614   DEBUG                   crash_dump64                         A        #19 pc 000000000034f570  /data/app/~~6QXePCXRlu_8vs_B2itbMA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-NKKrAG1H-wfzP0U1FHNtTA==/base.apk (androidx.work.Worker$1.run+0)

and it might have happened after my internet died.
i'm not saying the two are related but my phone crashed, and soon after that my desktop "realized" it had no internet and coundn't reconnect back to the router.

this happened after the crash that seemingly resolved (or significantly reduced) the number of these native crashes so - it's still present.

@RkShaRkz
Copy link
Author

Another one - apparently calling lock() or destroy() on destroyed mutex.

First case:

11-14 09:54:13.889 28668 28668 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-14 09:54:13.889 28668 28668 F DEBUG   : Build fingerprint: 'samsung/a51nsxx/a51:13/TP1A.220624.014/A515FXXU8HWI1:user/release-keys'
11-14 09:54:13.889 28668 28668 F DEBUG   : Revision: '8'
11-14 09:54:13.889 28668 28668 F DEBUG   : ABI: 'arm64'
11-14 09:54:13.889 28668 28668 F DEBUG   : Processor: '4'
11-14 09:54:13.889 28668 28668 F DEBUG   : Timestamp: 2024-11-14 09:54:13.012934287+0100
11-14 09:54:13.889 28668 28668 F DEBUG   : Process uptime: 78s
11-14 09:54:13.889 28668 28668 F DEBUG   : Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
11-14 09:54:13.889 28668 28668 F DEBUG   : pid: 28216, tid: 28392, name: androidx.work-2  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
11-14 09:54:13.889 28668 28668 F DEBUG   : uid: 10539
11-14 09:54:13.889 28668 28668 F DEBUG   : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
11-14 09:54:13.889 28668 28668 F DEBUG   : Abort message: 'FORTIFY: pthread_mutex_lock called on a destroyed mutex (0x7cf70f0400)'
11-14 09:54:13.889 28668 28668 F DEBUG   :     x0  0000000000000000  x1  0000000000006ee8  x2  0000000000000006  x3  0000007c40377990
11-14 09:54:13.889 28668 28668 F DEBUG   :     x4  0000000000008080  x5  0000000000008080  x6  0000000000008080  x7  8080000000000000
11-14 09:54:13.889 28668 28668 F DEBUG   :     x8  00000000000000f0  x9  0000007dad86ab70  x10 0000000000000001  x11 0000007dad8dc004
11-14 09:54:13.889 28668 28668 F DEBUG   :     x12 0101010101010101  x13 0000000000000030  x14 0000000000000057  x15 0000000000000078
11-14 09:54:13.889 28668 28668 F DEBUG   :     x16 0000007dad943a48  x17 0000007dad91df30  x18 0000007c3f724000  x19 0000000000006e38
11-14 09:54:13.889 28668 28668 F DEBUG   :     x20 0000000000006ee8  x21 00000000ffffffff  x22 0000007ce29d3b32  x23 0000007ce29e9e14
11-14 09:54:13.889 28668 28668 F DEBUG   :     x24 0000007ce29f66b4  x25 0000007ce29d65d4  x26 0000000000000000  x27 0000007c4037a000
11-14 09:54:13.889 28668 28668 F DEBUG   :     x28 0000000007270e00  x29 0000007c40377a10
11-14 09:54:13.890 28668 28668 F DEBUG   :     lr  0000007dad8cdbbc  sp  0000007c40377970  pc  0000007dad8cdbe8  pst 0000000000000000
11-14 09:54:13.890 28668 28668 F DEBUG   : backtrace:
11-14 09:54:13.890 28668 28668 F DEBUG   :       #00 pc 000000000008abe8  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #01 pc 000000000008c890  /apex/com.android.runtime/lib64/bionic/libc.so (__fortify_fatal(char const*, ...)+124) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #02 pc 00000000000f07f0  /apex/com.android.runtime/lib64/bionic/libc.so (HandleUsingDestroyedMutex(pthread_mutex_t*, char const*)+60) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #03 pc 00000000000f0680  /apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_lock+280) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #04 pc 000000000001a234  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #05 pc 00000000000208b0  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (iperf_json_finish+168) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #06 pc 00000000000220f0  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (iperf_run_client+2188) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #07 pc 0000000000015214  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #08 pc 0000000000015034  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (main+100) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #09 pc 0000000000028300  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (Java_de_fraunhofer_fokus_OpenMobileNetworkToolkit_Iperf3_Iperf3Worker_iperf3Wrapper+500) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #10 pc 0000000000384370  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #11 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #12 pc 00000000003671e4  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1928) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #13 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #14 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #15 pc 000000000000d12c  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk (de.fraunhofer.fokus.OpenMobileNetworkToolkit.Iperf3.Iperf3Worker.doWork+0)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #16 pc 0000000000359650  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.4560577758463694485)+428) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.890 28668 28668 F DEBUG   :       #17 pc 0000000000367a78  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+4124) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #18 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #19 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #20 pc 000000000034f570  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk (androidx.work.Worker$1.run+0)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #21 pc 00000000003589dc  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+1932) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #22 pc 0000000000384498  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #23 pc 0000000002175710  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor.runWorker+464)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #24 pc 0000000002175464  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor$Worker.run+132)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #25 pc 000000000200c27c  /memfd:jit-cache (deleted) (java.lang.Thread.run+140)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #26 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #27 pc 0000000000359324  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+132) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #28 pc 0000000000944438  /apex/com.android.art/lib64/libart.so (_ZN3art9ArtMethod14InvokeInstanceILc86ETpTncJEEENS_6detail12ShortyTraitsIXT_EE4TypeEPNS_6ThreadENS_6ObjPtrINS_6mirror6ObjectEEEDpNS3_IXT0_EE4TypeE+60) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #29 pc 00000000006209f4  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1344) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #30 pc 00000000000ef678  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:13.891 28668 28668 F DEBUG   :       #31 pc 000000000008c30c  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)

Second case:

11-14 09:54:44.338 28849 28849 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-14 09:54:44.339 28849 28849 F DEBUG   : Build fingerprint: 'samsung/a51nsxx/a51:13/TP1A.220624.014/A515FXXU8HWI1:user/release-keys'
11-14 09:54:44.339 28849 28849 F DEBUG   : Revision: '8'
11-14 09:54:44.339 28849 28849 F DEBUG   : ABI: 'arm64'
11-14 09:54:44.339 28849 28849 F DEBUG   : Processor: '1'
11-14 09:54:44.339 28849 28849 F DEBUG   : Timestamp: 2024-11-14 09:54:43.297480727+0100
11-14 09:54:44.339 28849 28849 F DEBUG   : Process uptime: 19s
11-14 09:54:44.340 28849 28849 F DEBUG   : Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
11-14 09:54:44.340 28849 28849 F DEBUG   : pid: 28759, tid: 28805, name: androidx.work-1  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
11-14 09:54:44.340 28849 28849 F DEBUG   : uid: 10539
11-14 09:54:44.340 28849 28849 F DEBUG   : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
11-14 09:54:44.340 28849 28849 F DEBUG   : Abort message: 'FORTIFY: pthread_mutex_lock called on a destroyed mutex (0x7ce2586800)'
11-14 09:54:44.340 28849 28849 F DEBUG   :     x0  0000000000000000  x1  0000000000007085  x2  0000000000000006  x3  0000007c8409b990
11-14 09:54:44.341 28849 28849 F DEBUG   :     x4  0000000000008080  x5  0000000000008080  x6  0000000000008080  x7  8080000000000000
11-14 09:54:44.341 28849 28849 F DEBUG   :     x8  00000000000000f0  x9  0000007dad86ab70  x10 0000000000000001  x11 0000007dad8dc004
11-14 09:54:44.341 28849 28849 F DEBUG   :     x12 0101010101010101  x13 0000000000000030  x14 0000000000000057  x15 0000000000000078
11-14 09:54:44.341 28849 28849 F DEBUG   :     x16 0000007dad943a48  x17 0000007dad91df30  x18 0000007c83b54000  x19 0000000000007057
11-14 09:54:44.342 28849 28849 F DEBUG   :     x20 0000000000007085  x21 00000000ffffffff  x22 0000007d0144eb32  x23 0000007d01464e14
11-14 09:54:44.342 28849 28849 F DEBUG   :     x24 0000007d014716b4  x25 0000007d014515d4  x26 0000000000000000  x27 0000007c8409e000
11-14 09:54:44.342 28849 28849 F DEBUG   :     x28 0000000007270e00  x29 0000007c8409ba10
11-14 09:54:44.342 28849 28849 F DEBUG   :     lr  0000007dad8cdbbc  sp  0000007c8409b970  pc  0000007dad8cdbe8  pst 0000000000000000
11-14 09:54:44.342 28849 28849 F DEBUG   : backtrace:
11-14 09:54:44.342 28849 28849 F DEBUG   :       #00 pc 000000000008abe8  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:44.343 28849 28849 F DEBUG   :       #01 pc 000000000008c890  /apex/com.android.runtime/lib64/bionic/libc.so (__fortify_fatal(char const*, ...)+124) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:44.343 28849 28849 F DEBUG   :       #02 pc 00000000000f07f0  /apex/com.android.runtime/lib64/bionic/libc.so (HandleUsingDestroyedMutex(pthread_mutex_t*, char const*)+60) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:44.343 28849 28849 F DEBUG   :       #03 pc 00000000000f0680  /apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_lock+280) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:44.343 28849 28849 F DEBUG   :       #04 pc 000000000001a234  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:44.343 28849 28849 F DEBUG   :       #05 pc 00000000000208b0  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (iperf_json_finish+168) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:44.343 28849 28849 F DEBUG   :       #06 pc 00000000000220f0  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (iperf_run_client+2188) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:44.344 28849 28849 F DEBUG   :       #07 pc 0000000000015214  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:44.344 28849 28849 F DEBUG   :       #08 pc 0000000000015034  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (main+100) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:44.344 28849 28849 F DEBUG   :       #09 pc 0000000000028300  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk!libiperf3.17.1.so (Java_de_fraunhofer_fokus_OpenMobileNetworkToolkit_Iperf3_Iperf3Worker_iperf3Wrapper+500) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 09:54:44.344 28849 28849 F DEBUG   :       #10 pc 0000000000384370  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.344 28849 28849 F DEBUG   :       #11 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.345 28849 28849 F DEBUG   :       #12 pc 00000000003671e4  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1928) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.345 28849 28849 F DEBUG   :       #13 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.345 28849 28849 F DEBUG   :       #14 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.346 28849 28849 F DEBUG   :       #15 pc 000000000000d12c  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk (de.fraunhofer.fokus.OpenMobileNetworkToolkit.Iperf3.Iperf3Worker.doWork+0)
11-14 09:54:44.346 28849 28849 F DEBUG   :       #16 pc 0000000000359650  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.4560577758463694485)+428) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.346 28849 28849 F DEBUG   :       #17 pc 0000000000367a78  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+4124) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.346 28849 28849 F DEBUG   :       #18 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.347 28849 28849 F DEBUG   :       #19 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.347 28849 28849 F DEBUG   :       #20 pc 000000000034f570  /data/app/~~nzg-Itzg0KpPXAbOxiNCHw==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-mBPeQutO87UnIBdOoLxyQQ==/base.apk (androidx.work.Worker$1.run+0)
11-14 09:54:44.347 28849 28849 F DEBUG   :       #21 pc 00000000003589dc  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+1932) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.347 28849 28849 F DEBUG   :       #22 pc 0000000000384498  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.348 28849 28849 F DEBUG   :       #23 pc 0000000002174680  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor.runWorker+464)
11-14 09:54:44.348 28849 28849 F DEBUG   :       #24 pc 00000000021743d4  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor$Worker.run+132)
11-14 09:54:44.348 28849 28849 F DEBUG   :       #25 pc 000000000200c27c  /memfd:jit-cache (deleted) (java.lang.Thread.run+140)
11-14 09:54:44.348 28849 28849 F DEBUG   :       #26 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.348 28849 28849 F DEBUG   :       #27 pc 0000000000359324  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+132) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.348 28849 28849 F DEBUG   :       #28 pc 0000000000944438  /apex/com.android.art/lib64/libart.so (_ZN3art9ArtMethod14InvokeInstanceILc86ETpTncJEEENS_6detail12ShortyTraitsIXT_EE4TypeEPNS_6ThreadENS_6ObjPtrINS_6mirror6ObjectEEEDpNS3_IXT0_EE4TypeE+60) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.349 28849 28849 F DEBUG   :       #29 pc 00000000006209f4  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1344) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 09:54:44.349 28849 28849 F DEBUG   :       #30 pc 00000000000ef678  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 09:54:44.349 28849 28849 F DEBUG   :       #31 pc 000000000008c30c  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)

@RkShaRkz
Copy link
Author

It just seems it's always calling lock() on a destroyed mutex

--------- beginning of crash
11-14 11:06:46.713  7269  7269 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-14 11:06:46.714  7269  7269 F DEBUG   : Build fingerprint: 'samsung/a51nsxx/a51:13/TP1A.220624.014/A515FXXU8HWI1:user/release-keys'
11-14 11:06:46.714  7269  7269 F DEBUG   : Revision: '8'
11-14 11:06:46.714  7269  7269 F DEBUG   : ABI: 'arm64'
11-14 11:06:46.714  7269  7269 F DEBUG   : Processor: '4'
11-14 11:06:46.714  7269  7269 F DEBUG   : Timestamp: 2024-11-14 11:06:45.726082366+0100
11-14 11:06:46.714  7269  7269 F DEBUG   : Process uptime: 64s
11-14 11:06:46.714  7269  7269 F DEBUG   : Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
11-14 11:06:46.714  7269  7269 F DEBUG   : pid: 6947, tid: 7160, name: androidx.work-2  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
11-14 11:06:46.714  7269  7269 F DEBUG   : uid: 10540
11-14 11:06:46.714  7269  7269 F DEBUG   : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
11-14 11:06:46.714  7269  7269 F DEBUG   : Abort message: 'FORTIFY: pthread_mutex_lock called on a destroyed mutex (0x7cf6a47000)'
11-14 11:06:46.714  7269  7269 F DEBUG   :     x0  0000000000000000  x1  0000000000001bf8  x2  0000000000000006  x3  0000007c617e5990
11-14 11:06:46.714  7269  7269 F DEBUG   :     x4  0000000000008080  x5  0000000000008080  x6  0000000000008080  x7  8080000000000000
11-14 11:06:46.714  7269  7269 F DEBUG   :     x8  00000000000000f0  x9  0000007dad86ab70  x10 0000000000000001  x11 0000007dad8dc004
11-14 11:06:46.714  7269  7269 F DEBUG   :     x12 0101010101010101  x13 0000000000000030  x14 0000000000000057  x15 0000000000000078
11-14 11:06:46.714  7269  7269 F DEBUG   :     x16 0000007dad943a48  x17 0000007dad91df30  x18 0000007c4bc00000  x19 0000000000001b23
11-14 11:06:46.714  7269  7269 F DEBUG   :     x20 0000000000001bf8  x21 00000000ffffffff  x22 0000007d0184db32  x23 0000007d01863e14
11-14 11:06:46.714  7269  7269 F DEBUG   :     x24 0000007d018706b4  x25 0000007d018505d4  x26 0000000000000000  x27 0000007c617e8000
11-14 11:06:46.715  7269  7269 F DEBUG   :     x28 0000000007270e00  x29 0000007c617e5a10
11-14 11:06:46.715  7269  7269 F DEBUG   :     lr  0000007dad8cdbbc  sp  0000007c617e5970  pc  0000007dad8cdbe8  pst 0000000000000000
11-14 11:06:46.715  7269  7269 F DEBUG   : backtrace:
11-14 11:06:46.715  7269  7269 F DEBUG   :       #00 pc 000000000008abe8  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #01 pc 000000000008c890  /apex/com.android.runtime/lib64/bionic/libc.so (__fortify_fatal(char const*, ...)+124) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #02 pc 00000000000f07f0  /apex/com.android.runtime/lib64/bionic/libc.so (HandleUsingDestroyedMutex(pthread_mutex_t*, char const*)+60) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #03 pc 00000000000f0680  /apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_lock+280) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #04 pc 000000000001a234  /data/app/~~aD-cgOjF7DSSoDv9u_vbGg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-JRPG5LlrDJAEhZKLNWGYtg==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #05 pc 00000000000208b0  /data/app/~~aD-cgOjF7DSSoDv9u_vbGg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-JRPG5LlrDJAEhZKLNWGYtg==/base.apk!libiperf3.17.1.so (iperf_json_finish+168) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #06 pc 00000000000220f0  /data/app/~~aD-cgOjF7DSSoDv9u_vbGg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-JRPG5LlrDJAEhZKLNWGYtg==/base.apk!libiperf3.17.1.so (iperf_run_client+2188) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #07 pc 0000000000015214  /data/app/~~aD-cgOjF7DSSoDv9u_vbGg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-JRPG5LlrDJAEhZKLNWGYtg==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #08 pc 0000000000015034  /data/app/~~aD-cgOjF7DSSoDv9u_vbGg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-JRPG5LlrDJAEhZKLNWGYtg==/base.apk!libiperf3.17.1.so (main+100) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #09 pc 0000000000028300  /data/app/~~aD-cgOjF7DSSoDv9u_vbGg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-JRPG5LlrDJAEhZKLNWGYtg==/base.apk!libiperf3.17.1.so (Java_de_fraunhofer_fokus_OpenMobileNetworkToolkit_Iperf3_Iperf3Worker_iperf3Wrapper+500) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #10 pc 0000000000384370  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #11 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.715  7269  7269 F DEBUG   :       #12 pc 00000000003671e4  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1928) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #13 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #14 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #15 pc 000000000000d228  /data/app/~~aD-cgOjF7DSSoDv9u_vbGg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-JRPG5LlrDJAEhZKLNWGYtg==/base.apk (de.fraunhofer.fokus.OpenMobileNetworkToolkit.Iperf3.Iperf3Worker.doWork+0)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #16 pc 0000000000359650  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.4560577758463694485)+428) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #17 pc 0000000000367a78  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+4124) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #18 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #19 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #20 pc 000000000034f570  /data/app/~~aD-cgOjF7DSSoDv9u_vbGg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-JRPG5LlrDJAEhZKLNWGYtg==/base.apk (androidx.work.Worker$1.run+0)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #21 pc 00000000003589dc  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+1932) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #22 pc 0000000000384498  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #23 pc 0000000002178810  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor.runWorker+464)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #24 pc 0000000002178564  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor$Worker.run+132)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #25 pc 000000000202a74c  /memfd:jit-cache (deleted) (java.lang.Thread.run+140)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #26 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #27 pc 0000000000359324  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+132) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.716  7269  7269 F DEBUG   :       #28 pc 0000000000944438  /apex/com.android.art/lib64/libart.so (_ZN3art9ArtMethod14InvokeInstanceILc86ETpTncJEEENS_6detail12ShortyTraitsIXT_EE4TypeEPNS_6ThreadENS_6ObjPtrINS_6mirror6ObjectEEEDpNS3_IXT0_EE4TypeE+60) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.717  7269  7269 F DEBUG   :       #29 pc 00000000006209f4  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1344) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 11:06:46.717  7269  7269 F DEBUG   :       #30 pc 00000000000ef678  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 11:06:46.717  7269  7269 F DEBUG   :       #31 pc 000000000008c30c  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)

and by "always" i mean "whenever it crashes, that seems to always be the reason"

@RkShaRkz
Copy link
Author

Invalid thread passed to pthread_kill

11-14 12:23:35.818  9653  9653 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-14 12:23:35.818  9653  9653 F DEBUG   : Build fingerprint: 'samsung/a51nsxx/a51:13/TP1A.220624.014/A515FXXU8HWI1:user/release-keys'
11-14 12:23:35.818  9653  9653 F DEBUG   : Revision: '8'
11-14 12:23:35.818  9653  9653 F DEBUG   : ABI: 'arm64'
11-14 12:23:35.818  9653  9653 F DEBUG   : Processor: '4'
11-14 12:23:35.818  9653  9653 F DEBUG   : Timestamp: 2024-11-14 12:23:35.359123631+0100
11-14 12:23:35.818  9653  9653 F DEBUG   : Process uptime: 49s
11-14 12:23:35.818  9653  9653 F DEBUG   : Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
11-14 12:23:35.818  9653  9653 F DEBUG   : pid: 9425, tid: 9474, name: androidx.work-2  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
11-14 12:23:35.818  9653  9653 F DEBUG   : uid: 10145
11-14 12:23:35.818  9653  9653 F DEBUG   : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
11-14 12:23:35.818  9653  9653 F DEBUG   : Abort message: 'invalid pthread_t 0x798c5d5cb0 passed to pthread_kill'
11-14 12:23:35.818  9653  9653 F DEBUG   :     x0  0000000000000000  x1  0000000000002502  x2  0000000000000006  x3  0000007a397f9aa0
11-14 12:23:35.819  9653  9653 F DEBUG   :     x4  0000000000808080  x5  0000000000808080  x6  0000000000808080  x7  8080800000000000
11-14 12:23:35.819  9653  9653 F DEBUG   :     x8  00000000000000f0  x9  0000007b10e6eb70  x10 0000000000000001  x11 0000007b10ee0004
11-14 12:23:35.819  9653  9653 F DEBUG   :     x12 0101010101010101  x13 0000000000000023  x14 0000007b10e6ea66  x15 0000000000000070
11-14 12:23:35.819  9653  9653 F DEBUG   :     x16 0000007b10f47a48  x17 0000007b10f21f30  x18 00000079dc192000  x19 00000000000024d1
11-14 12:23:35.819  9653  9653 F DEBUG   :     x20 0000000000002502  x21 00000000ffffffff  x22 0000000000000000  x23 0000007a578e8e14
11-14 12:23:35.819  9653  9653 F DEBUG   :     x24 0000007a578f56b4  x25 0000000000000098  x26 0000007a500d5400  x27 0000000000000097
11-14 12:23:35.819  9653  9653 F DEBUG   :     x28 0000000000000001  x29 0000007a397f9b20
11-14 12:23:35.819  9653  9653 F DEBUG   :     lr  0000007b10ed1bbc  sp  0000007a397f9a80  pc  0000007b10ed1be8  pst 0000000000001000
11-14 12:23:35.819  9653  9653 F DEBUG   : backtrace:
11-14 12:23:35.819  9653  9653 F DEBUG   :       #00 pc 000000000008abe8  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 12:23:35.819  9653  9653 F DEBUG   :       #01 pc 00000000000efbf0  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_internal_find(long, char const*)+192) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 12:23:35.819  9653  9653 F DEBUG   :       #02 pc 00000000000efb10  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_internal_gettid(long, char const*)+8) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 12:23:35.819  9653  9653 F DEBUG   :       #03 pc 00000000000f0354  /apex/com.android.runtime/lib64/bionic/libc.so (pthread_kill+48) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-14 12:23:35.819  9653  9653 F DEBUG   :       #04 pc 000000000002537c  /data/app/~~EIL4OTU0gnN6ERYQZytmeg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-1i-eafGJ3_ry9WgDiIv8oA==/base.apk!libiperf3.17.1.so (pthread_cancel+96) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 12:23:35.819  9653  9653 F DEBUG   :       #05 pc 0000000000021fb8  /data/app/~~EIL4OTU0gnN6ERYQZytmeg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-1i-eafGJ3_ry9WgDiIv8oA==/base.apk!libiperf3.17.1.so (iperf_run_client+1876) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 12:23:35.819  9653  9653 F DEBUG   :       #06 pc 0000000000015214  /data/app/~~EIL4OTU0gnN6ERYQZytmeg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-1i-eafGJ3_ry9WgDiIv8oA==/base.apk!libiperf3.17.1.so (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 12:23:35.819  9653  9653 F DEBUG   :       #07 pc 0000000000015034  /data/app/~~EIL4OTU0gnN6ERYQZytmeg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-1i-eafGJ3_ry9WgDiIv8oA==/base.apk!libiperf3.17.1.so (main+100) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #08 pc 0000000000028300  /data/app/~~EIL4OTU0gnN6ERYQZytmeg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-1i-eafGJ3_ry9WgDiIv8oA==/base.apk!libiperf3.17.1.so (Java_de_fraunhofer_fokus_OpenMobileNetworkToolkit_Iperf3_Iperf3Worker_iperf3Wrapper+500) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #09 pc 0000000000384370  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #10 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #11 pc 00000000003671e4  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1928) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #12 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #13 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #14 pc 000000000000d228  /data/app/~~EIL4OTU0gnN6ERYQZytmeg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-1i-eafGJ3_ry9WgDiIv8oA==/base.apk (de.fraunhofer.fokus.OpenMobileNetworkToolkit.Iperf3.Iperf3Worker.doWork+0)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #15 pc 0000000000359650  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.4560577758463694485)+428) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #16 pc 0000000000367a78  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+4124) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #17 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #18 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #19 pc 000000000034f570  /data/app/~~EIL4OTU0gnN6ERYQZytmeg==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-1i-eafGJ3_ry9WgDiIv8oA==/base.apk (androidx.work.Worker$1.run+0)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #20 pc 00000000003589dc  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+1932) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #21 pc 0000000000384498  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #22 pc 00000000021740b0  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor.runWorker+464)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #23 pc 0000000002173e04  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor$Worker.run+132)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #24 pc 000000000200c27c  /memfd:jit-cache (deleted) (java.lang.Thread.run+140)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #25 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-14 12:23:35.820  9653  9653 F DEBUG   :       #26 pc 0000000000359324  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+132) (BuildId: 3f7d5a016e08d528f129bdd336d81168)

@RkShaRkz
Copy link
Author

RkShaRkz commented Nov 15, 2024 •
edited
Loading

And one more, looks like it tried doing a double-destroy.
mutex_destroy called on a destroyed mutex.

11-15 16:10:19.235 22235 22235 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-15 16:10:19.235 22235 22235 F DEBUG   : Build fingerprint: 'samsung/a51nsxx/a51:13/TP1A.220624.014/A515FXXU8HWI1:user/release-keys'
11-15 16:10:19.235 22235 22235 F DEBUG   : Revision: '8'
11-15 16:10:19.235 22235 22235 F DEBUG   : ABI: 'arm64'
11-15 16:10:19.235 22235 22235 F DEBUG   : Processor: '7'
11-15 16:10:19.235 22235 22235 F DEBUG   : Timestamp: 2024-11-15 16:10:18.363066105+0100
11-15 16:10:19.235 22235 22235 F DEBUG   : Process uptime: 46s
11-15 16:10:19.235 22235 22235 F DEBUG   : Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
11-15 16:10:19.235 22235 22235 F DEBUG   : pid: 21508, tid: 22128, name: androidx.work-1  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
11-15 16:10:19.235 22235 22235 F DEBUG   : uid: 10364
11-15 16:10:19.235 22235 22235 F DEBUG   : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
11-15 16:10:19.235 22235 22235 F DEBUG   : Abort message: 'FORTIFY: pthread_mutex_destroy called on a destroyed mutex (0x6fcbe07c00)'
11-15 16:10:19.235 22235 22235 F DEBUG   :     x0  0000000000000000  x1  0000000000005670  x2  0000000000000006  x3  0000006f354efbe0
11-15 16:10:19.235 22235 22235 F DEBUG   :     x4  0080808080808080  x5  0080808080808080  x6  0080808080808080  x7  8080808080808080
11-15 16:10:19.235 22235 22235 F DEBUG   :     x8  00000000000000f0  x9  0000007090ee7b70  x10 0000000000000001  x11 0000007090f59004
11-15 16:10:19.235 22235 22235 F DEBUG   :     x12 0101010101010101  x13 0000000000000030  x14 0000000000000057  x15 0000000000000010
11-15 16:10:19.235 22235 22235 F DEBUG   :     x16 0000007090fc0a48  x17 0000007090f9af30  x18 0000006f1e768000  x19 0000000000005404
11-15 16:10:19.235 22235 22235 F DEBUG   :     x20 0000000000005670  x21 00000000ffffffff  x22 000000000000000c  x23 000000000000000d
11-15 16:10:19.236 22235 22235 F DEBUG   :     x24 0000006f6f04c9c0  x25 0000006f354f0fdc  x26 000000000000000c  x27 0000006f5e9cf5ed
11-15 16:10:19.236 22235 22235 F DEBUG   :     x28 0000006f6f04c9f8  x29 0000006f354efc60
11-15 16:10:19.236 22235 22235 F DEBUG   :     lr  0000007090f4abbc  sp  0000006f354efbc0  pc  0000007090f4abe8  pst 0000000000000000
11-15 16:10:19.236 22235 22235 F DEBUG   : backtrace:
11-15 16:10:19.236 22235 22235 F DEBUG   :       #00 pc 000000000008abe8  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #01 pc 000000000008c890  /apex/com.android.runtime/lib64/bionic/libc.so (__fortify_fatal(char const*, ...)+124) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #02 pc 00000000000f07f0  /apex/com.android.runtime/lib64/bionic/libc.so (HandleUsingDestroyedMutex(pthread_mutex_t*, char const*)+60) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #03 pc 00000000000f12a0  /apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_destroy+128) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #04 pc 000000000001ec84  /data/app/~~PjSKtS-zwfZQN3HIV1wKrQ==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-OG2kxHzNRaLx4UqyTSAYUQ==/base.apk!libiperf3.17.1.so (iperf_free_test+316) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #05 pc 00000000000150c0  /data/app/~~PjSKtS-zwfZQN3HIV1wKrQ==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-OG2kxHzNRaLx4UqyTSAYUQ==/base.apk!libiperf3.17.1.so (main+240) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #06 pc 0000000000028300  /data/app/~~PjSKtS-zwfZQN3HIV1wKrQ==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-OG2kxHzNRaLx4UqyTSAYUQ==/base.apk!libiperf3.17.1.so (Java_de_fraunhofer_fokus_OpenMobileNetworkToolkit_Iperf3_Iperf3Worker_iperf3Wrapper+500) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #07 pc 0000000000384370  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #08 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #09 pc 00000000003671e4  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1928) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #10 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #11 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.236 22235 22235 F DEBUG   :       #12 pc 000000000000d01c  /data/app/~~PjSKtS-zwfZQN3HIV1wKrQ==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-OG2kxHzNRaLx4UqyTSAYUQ==/base.apk (de.fraunhofer.fokus.OpenMobileNetworkToolkit.Iperf3.Iperf3Worker.doWork+0)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #13 pc 0000000000359650  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.4560577758463694485)+428) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #14 pc 0000000000367a78  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+4124) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #15 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #16 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #17 pc 000000000034f0d0  /data/app/~~PjSKtS-zwfZQN3HIV1wKrQ==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-OG2kxHzNRaLx4UqyTSAYUQ==/base.apk (androidx.work.Worker$1.run+0)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #18 pc 00000000003589dc  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+1932) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #19 pc 0000000000384498  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #20 pc 0000000002188080  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor.runWorker+464)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #21 pc 0000000002187dd4  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor$Worker.run+132)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #22 pc 000000000200d13c  /memfd:jit-cache (deleted) (java.lang.Thread.run+140)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #23 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #24 pc 0000000000359324  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+132) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #25 pc 0000000000944438  /apex/com.android.art/lib64/libart.so (_ZN3art9ArtMethod14InvokeInstanceILc86ETpTncJEEENS_6detail12ShortyTraitsIXT_EE4TypeEPNS_6ThreadENS_6ObjPtrINS_6mirror6ObjectEEEDpNS3_IXT0_EE4TypeE+60) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #26 pc 00000000006209f4  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1344) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #27 pc 00000000000ef678  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-15 16:10:19.237 22235 22235 F DEBUG   :       #28 pc 000000000008c30c  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)

@RkShaRkz
Copy link
Author

A few more

DEBUG   : Build fingerprint: 'samsung/a51nsxx/a51:13/TP1A.220624.014/A515FXXU8HWI1:user/release-keys'
DEBUG   : Revision: '8'
DEBUG   : ABI: 'arm64'
DEBUG   : Processor: '4'
DEBUG   : Timestamp: 2024-11-19 15:04:41.424862284+0100
DEBUG   : Process uptime: 35s
DEBUG   : Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
DEBUG   : pid: 11346, tid: 11400, name: androidx.work-1  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
DEBUG   : uid: 10366
DEBUG   : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
DEBUG   : Abort message: 'FORTIFY: pthread_mutex_destroy called on a destroyed mutex (0x70b2bffc00)'
DEBUG   :     x0  0000000000000000  x1  0000000000002c88  x2  0000000000000006  x3  000000704553bbe0
DEBUG   :     x4  0080808080808080  x5  0080808080808080  x6  0080808080808080  x7  8080808080808080
DEBUG   :     x8  00000000000000f0  x9  0000007159cb4b70  x10 0000000000000001  x11 0000007159d26004
DEBUG   :     x12 0101010101010101  x13 0000000000000030  x14 0000000000000057  x15 0000000000000010
DEBUG   :     x16 0000007159d8da48  x17 0000007159d67f30  x18 00000070447c8000  x19 0000000000002c52
DEBUG   :     x20 0000000000002c88  x21 00000000ffffffff  x22 000000000000000c  x23 000000000000000d
DEBUG   :     x24 00000070ba621498  x25 000000704553cfdc  x26 000000000000000c  x27 00000070c6f1a5ed
DEBUG   :     x28 00000070ba6214d0  x29 000000704553bc60
DEBUG   :     lr  0000007159d17bbc  sp  000000704553bbc0  pc  0000007159d17be8  pst 0000000000000000
DEBUG   : backtrace:
DEBUG   :       #00 pc 000000000008abe8  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
DEBUG   :       #01 pc 000000000008c890  /apex/com.android.runtime/lib64/bionic/libc.so (__fortify_fatal(char const*, ...)+124) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
DEBUG   :       #02 pc 00000000000f07f0  /apex/com.android.runtime/lib64/bionic/libc.so (HandleUsingDestroyedMutex(pthread_mutex_t*, char const*)+60) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
DEBUG   :       #03 pc 00000000000f12a0  /apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_destroy+128) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
DEBUG   :       #04 pc 000000000001ec84  /data/app/~~pSlZ1mPR-NSnVB7W-81-CA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-c4tgGIQu3WMPiBnKzNfs6A==/base.apk!libiperf3.17.1.so (iperf_free_test+316) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
DEBUG   :       #05 pc 00000000000150c0  /data/app/~~pSlZ1mPR-NSnVB7W-81-CA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-c4tgGIQu3WMPiBnKzNfs6A==/base.apk!libiperf3.17.1.so (main+240) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
DEBUG   :       #06 pc 0000000000028300  /data/app/~~pSlZ1mPR-NSnVB7W-81-CA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-c4tgGIQu3WMPiBnKzNfs6A==/base.apk!libiperf3.17.1.so (Java_de_fraunhofer_fokus_OpenMobileNetworkToolkit_Iperf3_Iperf3Worker_iperf3Wrapper+500) (BuildId: 80354c06e36ce2f3a94ce46d0c93dee520384ee1)
DEBUG   :       #07 pc 0000000000384370  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #08 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #09 pc 00000000003671e4  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1928) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #10 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #11 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #12 pc 000000000000d130  /data/app/~~pSlZ1mPR-NSnVB7W-81-CA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-c4tgGIQu3WMPiBnKzNfs6A==/base.apk (de.fraunhofer.fokus.OpenMobileNetworkToolkit.Iperf3.Iperf3Worker.doWork+0)
DEBUG   :       #13 pc 0000000000359650  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.4560577758463694485)+428) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #14 pc 0000000000367a78  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+4124) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #15 pc 000000000076e170  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+12208) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #16 pc 00000000003869d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #17 pc 000000000034f570  /data/app/~~pSlZ1mPR-NSnVB7W-81-CA==/de.fraunhofer.fokus.OpenMobileNetworkToolkit-c4tgGIQu3WMPiBnKzNfs6A==/base.apk (androidx.work.Worker$1.run+0)
DEBUG   :       #18 pc 00000000003589dc  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+1932) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #19 pc 0000000000384498  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #20 pc 0000000002176270  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor.runWorker+464)
DEBUG   :       #21 pc 0000000002175fc4  /memfd:jit-cache (deleted) (java.util.concurrent.ThreadPoolExecutor$Worker.run+132)
DEBUG   :       #22 pc 000000000200c27c  /memfd:jit-cache (deleted) (java.lang.Thread.run+140)
DEBUG   :       #23 pc 000000000036db74  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #24 pc 0000000000359324  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+132) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #25 pc 0000000000944438  /apex/com.android.art/lib64/libart.so (_ZN3art9ArtMethod14InvokeInstanceILc86ETpTncJEEENS_6detail12ShortyTraitsIXT_EE4TypeEPNS_6ThreadENS_6ObjPtrINS_6mirror6ObjectEEEDpNS3_IXT0_EE4TypeE+60) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #26 pc 00000000006209f4  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1344) (BuildId: 3f7d5a016e08d528f129bdd336d81168)
DEBUG   :       #27 pc 00000000000ef678  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
DEBUG   :       #28 pc 000000000008c30c  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)

@RkShaRkz
Copy link
Author

Here is a different, more interesting one. Corrupted stack.

--------- beginning of crash
11-19 15:02:17.721 10778 10778 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-19 15:02:17.721 10778 10778 F DEBUG   : Build fingerprint: 'samsung/a51nsxx/a51:13/TP1A.220624.014/A515FXXU8HWI1:user/release-keys'
11-19 15:02:17.721 10778 10778 F DEBUG   : Revision: '8'
11-19 15:02:17.721 10778 10778 F DEBUG   : ABI: 'arm64'
11-19 15:02:17.721 10778 10778 F DEBUG   : Processor: '6'
11-19 15:02:17.721 10778 10778 F DEBUG   : Timestamp: 2024-11-19 15:02:17.042168695+0100
11-19 15:02:17.721 10778 10778 F DEBUG   : Process uptime: 28s
11-19 15:02:17.721 10778 10778 F DEBUG   : Cmdline: de.fraunhofer.fokus.OpenMobileNetworkToolkit
11-19 15:02:17.721 10778 10778 F DEBUG   : pid: 10486, tid: 10573, name: androidx.work-2  >>> de.fraunhofer.fokus.OpenMobileNetworkToolkit <<<
11-19 15:02:17.721 10778 10778 F DEBUG   : uid: 10366
11-19 15:02:17.721 10778 10778 F DEBUG   : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
11-19 15:02:17.721 10778 10778 F DEBUG   : Abort message: 'stack corruption detected (-fstack-protector)'
11-19 15:02:17.721 10778 10778 F DEBUG   :     x0  0000000000000000  x1  000000000000294d  x2  0000000000000006  x3  00000070214ef610
11-19 15:02:17.722 10778 10778 F DEBUG   :     x4  0000000000808080  x5  0000000000808080  x6  0000000000808080  x7  8080808080808080
11-19 15:02:17.722 10778 10778 F DEBUG   :     x8  00000000000000f0  x9  0000007159cb4b70  x10 0000000000000001  x11 0000007159d26004
11-19 15:02:17.722 10778 10778 F DEBUG   :     x12 0101010101010101  x13 29726f746365746f  x14 0000000000000000  x15 0000000000000030
11-19 15:02:17.722 10778 10778 F DEBUG   :     x16 0000007159d8da48  x17 0000007159d67f30  x18 00000070206e2000  x19 00000000000028f6
11-19 15:02:17.722 10778 10778 F DEBUG   :     x20 000000000000294d  x21 00000000ffffffff  x22 00000070c6f2b358  x23 00000070aa0a4f40
11-19 15:02:17.722 10778 10778 F DEBUG   :     x24 0000000000000060  x25 000000716590f000  x26 00000070214f2000  x27 00000070c6f2b2c8
11-19 15:02:17.722 10778 10778 F DEBUG   :     x28 0000000000000010  x29 00000070214ef690
11-19 15:02:17.722 10778 10778 F DEBUG   :     lr  0000007159d17bbc  sp  00000070214ef5f0  pc  0000007159d17be8  pst 0000000000000000
11-19 15:02:17.722 10778 10778 F DEBUG   : backtrace:
11-19 15:02:17.722 10778 10778 F DEBUG   :       #00 pc 000000000008abe8  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: ae97b4676db8ce3f620ba6bf7932eba6)
11-19 15:02:17.722 10778 10778 F DEBUG   :       #01 pc 0000000000103ffc  [anon:stack_and_tls:10575]
11-19 15:02:54.223 10958 10958 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***

@derpeter
Copy link
Contributor

@RkShaRkz thanks for all the input. We will look into it ASAP

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@derpeter @RkShaRkz @hajoha