[Bug]: Native crash of /vendor/bin/hw/android.hardware.bluetooth@1.0-service.sim

[AndiAJ]

Firebase Test Run:

verifyNonReaderViewPageMenuNoDetection crashed with this signature
Tracking the intermittent test in #22617
Firebase link

Stacktrace:

11-27 09:30:07.611: A/HidlStatus(1917): --------- beginning of crash
11-27 09:30:07.611: A/libc(1917): Fatal signal 6 (SIGABRT), code -6 (SI_TKILL) in tid 2539 (bluetooth@1.0-s), pid 1917 (bluetooth@1.0-s)
11-27 09:30:07.612: E/android.hardware.bluetooth@1.0.sim(1917): BluetoothDeathRecipient::serviceDied - Bluetooth service died
11-27 09:30:07.612: I/android.hardware.bluetooth@1.0.sim(1917): close
11-27 09:30:07.644: I/ServiceManager(1838): service 'gce' died
11-27 09:30:07.645: I/ServiceManager(1838): service 'simphonebook' died
11-27 09:30:07.645: I/ServiceManager(1838): service 'iphonesubinfo' died
11-27 09:30:07.645: I/ServiceManager(1838): service 'isms' died
11-27 09:30:07.645: I/ServiceManager(1838): service 'phone' died
11-27 09:30:07.645: I/ServiceManager(1838): service 'carrier_config' died
11-27 09:30:07.645: I/ServiceManager(1838): service 'isub' died
11-27 09:30:07.648: I/crash_dump32(7984): obtaining output fd from tombstoned, type: kDebuggerdTombstone
11-27 09:30:07.649: I//system/bin/tombstoned(1945): received crash request for pid 2539
11-27 09:30:07.649: I/crash_dump32(7984): performing dump of process 1917 (target tid = 2539)
11-27 09:30:07.649: A/DEBUG(7984): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-27 09:30:07.649: A/DEBUG(7984): Build fingerprint: 'generic/gce_x86_phone/gce_x86:9/PGR1.190916.001/5877764:userdebug/test-keys'
11-27 09:30:07.649: A/DEBUG(7984): Revision: '0'
11-27 09:30:07.649: A/DEBUG(7984): ABI: 'x86'
11-27 09:30:07.649: A/DEBUG(7984): pid: 1917, tid: 2539, name: bluetooth@1.0-s >>> /vendor/bin/hw/android.hardware.bluetooth@1.0-service.sim <<<
11-27 09:30:07.649: A/DEBUG(7984): signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
11-27 09:30:07.649: A/DEBUG(7984): Abort message: 'Status.cpp:149] Failed HIDL return status not checked: Status(EX_TRANSACTION_FAILED): 'DEAD_OBJECT: ''
11-27 09:30:07.649: A/DEBUG(7984): eax 00000000 ebx 0000077d ecx 000009eb edx 00000006
11-27 09:30:07.649: A/DEBUG(7984): edi 0000077d esi eb2b3048
11-27 09:30:07.649: A/DEBUG(7984): ebp ea95d498 esp ea95d418 eip eb46bbe9
11-27 09:30:07.658: A/DEBUG(7984): backtrace:
11-27 09:30:07.658: A/DEBUG(7984): #0 pc 00000be9 [vdso:eb46b000] (__kernel_vsyscall+9)
11-27 09:30:07.658: A/DEBUG(7984): #1 pc 0001fdf8 /system/lib/libc.so (syscall+40)
11-27 09:30:07.658: A/DEBUG(7984): #2 pc 00022e73 /system/lib/libc.so (abort+115)
11-27 09:30:07.658: A/DEBUG(7984): #3 pc 00006f85 /system/lib/libbase.so (android::base::DefaultAborter(char const*)+37)
11-27 09:30:07.658: A/DEBUG(7984): #4 pc 00008433 /system/lib/libbase.so (ZNSt3__110__function6__funcIPFvPKcENS_9allocatorIS5_EES4_EclEOS3+35)
11-27 09:30:07.658: A/DEBUG(7984): #5 pc 00007ccc /system/lib/libbase.so (android::base::LogMessage::~LogMessage()+828)
11-27 09:30:07.658: A/DEBUG(7984): #6 pc 0001bbf2 /system/lib/libhidlbase.so (android::hardware::details::return_status::~return_status()+290)
11-27 09:30:07.658: A/DEBUG(7984): #7 pc 000073ca /system/vendor/bin/hw/android.hardware.bluetooth@1.0-service.sim (_ZNSt3__110__function6__funcIZN7android8hardware9bluetooth4V1_03sim12BluetoothHci10initializeERKNS2_2spINS5_22IBluetoothHciCallbacksEEEE3$1NS_9allocatorISD_EEFvNS_10unique_ptrIN15test_vendor_lib11EventPacketENS_14default_deleteISI_EEEEEEclEOSL+234)
11-27 09:30:07.658: A/DEBUG(7984): #8 pc 000108ff /system/vendor/bin/hw/android.hardware.bluetooth@1.0-service.sim (test_vendor_lib::DualModeController::LeScan()+2239)
11-27 09:30:07.658: A/DEBUG(7984): #9 pc 0000fbd5 /system/vendor/bin/hw/android.hardware.bluetooth@1.0-service.sim (test_vendor_lib::DualModeController::HandleTimerTick()+85)
11-27 09:30:07.658: A/DEBUG(7984): #10 pc 00018de3 /system/vendor/bin/hw/android.hardware.bluetooth@1.0-service.sim (_ZNSt3__110__function6__funcIZN15test_vendor_lib18DualModeController10StartTimerEvE4$_54NS_9allocatorIS4_EEFvvEEclEv+35)
11-27 09:30:07.658: A/DEBUG(7984): #11 pc 0000c3a6 /system/vendor/bin/hw/android.hardware.bluetooth@1.0-service.sim (test_vendor_lib::AsyncManager::AsyncTaskManager::ThreadRoutine()+918)
11-27 09:30:07.658: A/DEBUG(7984): #12 pc 0000bfd0 /system/vendor/bin/hw/android.hardware.bluetooth@1.0-service.sim (ZNSt3__114__thread_proxyINS_5tupleIJNS_10unique_ptrINS_15__thread_structENS_14default_deleteIS3_EEEEZN15test_vendor_lib12AsyncManager16AsyncTaskManager14tryStartThreadEvEUlvE_EEEEEPvSC+64)
11-27 09:30:07.658: A/DEBUG(7984): #13 pc 0008f005 /system/lib/libc.so (__pthread_start(void*)+53)
11-27 09:30:07.658: A/DEBUG(7984): #14 pc 000247fb /system/lib/libc.so (__start_thread+75)
11-27 09:30:07.716: D/NuPlayerDriver(1937): reset(0xe6519380) at state 6
11-27 09:30:07.717: D/NuPlayerDriver(1937): notifyListener_l(0xe6519380), (8, 0, 0, -1), loop setting(0, 0)
11-27 09:30:07.717: D/NuPlayerDriver(1937): notifyListener_l(0xe6519380), (211, 0, 0, 20), loop setting(0, 0)
11-27 09:30:07.720: D/NuPlayerDriver(1937): notifyResetComplete(0xe6519380)
11-27 09:30:07.724: W/AMessage(1937): failed to post message as target looper for handler 0 is gone.
11-27 09:30:07.728: D/AndroidRuntime(6785): Shutting down VM
11-27 09:30:07.743: E//system/bin/tombstoned(1945): Tombstone written to: /data/tombstones/tombstone_00
11-27 09:30:07.857: I/app_process(6720): System.exit called, status: 0
11-27 09:30:07.857: I/AndroidRuntime(6720): VM exiting with result code 0.
11-27 09:30:08.057: I/ServiceManager(1838): service 'media.audio_flinger' died
11-27 09:30:08.057: I/ServiceManager(1838): service 'media.audio_policy' died
11-27 09:30:08.057: I/ServiceManager(1838): service 'media.sound_trigger_hw' died
11-27 09:30:08.057: W/AudioSystem(1937): AudioPolicyService server died!
11-27 09:30:08.057: W/AudioSystem(1937): AudioFlinger server died!
11-27 09:30:08.080: I/ServiceManager(1838): service 'media.camera' died
11-27 09:30:08.103: I/ServiceManager(1838): service 'media.player' died
11-27 09:30:08.103: I/ServiceManager(1838): service 'media.resource_manager' died
11-27 09:30:08.125: I/ServiceManager(1838): service 'netd' died
11-27 09:30:08.148: I/ServiceManager(1838): service 'wificond' died

Build: 11/27

┆Issue is synchronized with this Jira Task

[kbrosnan]

The Andorid OS bluetooth service is crashing, disabling bluethooth or upgrading the emulator is the thing to fix.

[AndiAJ]

closeTabTest also crashed due to this problem #22749

[sv-ohorvath]

Didn't see the issue in a while I think, I'm closing this but can be reopened if it happens again