Tombstone 实例分析 2

时间:2022-06-01 20:41:55

netd crash Wifi3G进行切换的时候,netd crash,概率 10%,出现这样问题关键是怎么定位问题?solution一般比较简单。

platform: qualcomm 8225 

  

pid: 156, tid: 362, name: netd  >>> /system/bin/netd <<<

thread: netd

signal 11 (SIGSEGV), code 1 (SEGV_MAPERR),fault addr 00000000

   r0 40e96388  r1 00000072  r2 41c4bb4c r3 00000000

   r4 41c4bb28  r5 41c596b0  r6 00000000 r7 41c49808

   r8 41c4bb28  r9 00000000  sl 40e96554 fp 40e96992

   ip 00000030  sp 40e96368  lr 4007bc91 pc 4007dcc0  cpsr 80000030

   d0  6e49746573205d72  d1 516563616672656d

   d2  656b636f6c5f686e  d3 204e524157203a65

    d4 0000000000000000  d5  0000000000000000

   d6  0000000000000000  d7 00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

   d16 41482eeb0020c49c  d173f50624dd2f1a9fc

   d18 41a43c5be2000000  d190000000000000000

   d20 0000000000000000  d210000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

   d26 0000000000000000  d270000000000000000

   d28 0000000000000000  d290000000000000000

   d30 0000000000000000  d310000000000000000

   scr 00000010

 

backtrace:

    #00 pc 00005cc0  /system/bin/netd

   #01  pc 00003c8d  /system/bin/netd (std::string::_M_assign(charconst*, char const*)+74)

 

stack:

        40e96328  00000000 

        40e9632c  00000000 

        40e96330  40e96388  [stack:362]

        40e96334  40e96414  [stack:362]

        40e96338  40e96388  [stack:362]

        40e9633c  00000006 

        40e96340  40e96414  [stack:362]

        40e96344  40e9641a  [stack:362]

        40e96348  41c4bb28  [heap]

        40e9634c  4007bc91  /system/bin/netd (std::string::_M_assign(charconst*, char const*)+78)

        40e96350  40e96454  [stack:362]

        40e96354  41c4bb28  [heap]

        40e96358  41c596b0  [heap]

        40e9635c  00000000 

        40e96360  df0027ad 

        40e96364  00000000 

   #00  40e96368  4033a004 /system/lib/libnetutils.so

        ........  ........

   #01  40e96368  4033a004 /system/lib/libnetutils.so

        40e9636c  401efacc 

        40e96370  ffffffff 

        40e96374  7fffffff 

        40e96378  00000000 

        40e9637c  401efacc 

        40e96380  00000000 

        40e96384  00000000 

        40e96388  656e6d72 

        40e9638c  00003074 

        40e96390  59cf220a 

        40e96394  00000000 

        40e96398  40e9638e  [stack:362]

        40e9639c  40e96388  [stack:362]

        40e963a0  00001000 

        40e963a4  41c58448  [heap]

 

从backtrace上看netd crash在#00  pc00005cc0  /system/bin/netd点上,找到想对应的netd(请注意,这个netd不是system/bin/netd,这个文件不包含debug信息,而应该是system/symbol下面的netd,可能各个platform不太一样)利用gdb进行解析,

输入 b * 0x00005cc0

 

也可以通过arm-eabi-objdump -D -S netd把汇编传出来,确认一下问题。

 

找到BandwidthController.cpp中的675行

这是函数intBandwidthController::setInterfaceQuota(const char *iface, int64_t maxBytes) 中的it->ifaceName==ifaceName

    ifaceName是传进来的一个参数,我们确认是正确的,在这个也没有被修改,而quotaIface是一个全局变量,这才是我们要怀疑的真正的点,同时在多线程中可能被修改。这里实际上有到了多线程保护的问题。接下来是问题的确认,netd模块模块处理的一些命令都是从NetDemondControl传下来的,基于这一点,我们可以在这个模块中加入test commnd然后在BandwidthController进行处理这样就可以缩小问题的范围。

//this test function.

int BandwidthController::BandwidthControllerTest()
{
  ALOGV("func=%s,quotaAddr=0x%p", __func__,&quotaIfaces);
    
    if(quotaIfaces.size()<=0)
    {
         ALOGV("func=%s,size=%d", __func__,NULL);
    }else
    {
         ALOGV("func=%s,size=%d", __func__,quotaIfaces.size());
    }


    return 0;
}
  

最后发现是在函数中

int SoftapController::startDriver(char *iface) {
    int ret;


    ALOGE("%s\n",__func__);
    
    if (mSock < 0) {
        ALOGE("Softap driver start - failed to open socket");
        return -1;
    }
    if (!iface || (iface[0] == '\0')) {
        ALOGD("Softap driver start - wrong interface");
        iface = mIface;
    }


    *mBuf = 0;
    ret = setCommand(iface, "START");
    if (ret < 0) {
        ALOGE("Softap driver start: %d", ret);
        return ret;
    }


    
#ifdef ATH_STA_AP_CONCURRENT
    if(isConcurrentMode()) {


      
        char cmd[32]="p2p_group_remove p2p0";
        char buf[32];
        unsigned int len ;


       
        ret = connect2Supplicant(ATH_P2P_IFACE);
        if (ret < 0) {
            ALOGE("Softap connect to p2p failed: %d", ret);
            return ret;
        }
#if 1
memset(buf,0,32);
        len = sizeof(buf);
        ret = sendSupplicantCommand(ATH_P2P_IFACE, cmd, buf, &len);
        if (ret < 0) {
            ALOGE("Softap send p2p cmd \"%s\" failed: %d",cmd, ret);
            return ret;
        }
        closeSupplicantConnection(ATH_P2P_IFACE);

       把这部分code去掉以后,问题就dispear了,到这里有可以迷茫了,这下层的东西都是common的,问题应该还是处在netd模块。但问题到底在哪里呢?SoftapController这个controller是为athros新加不是google原始。

        最后发现是commandlistener.h中的头文件包含出现问题引起的,这是由于 wifi engineer在porting wifi的时候出现失误导致的问题。

       //#include "SoftapController.h"
       #include "SoftapControllerAtheros.h"

    
        #endif
        ifc_init();
        ret = ifc_down("p2p0");
        ifc_close();
        if (ret < 0) {
            ALOGE("Softap concurrent p2p %s down: %d", iface, ret);
            return ret;
        }


        strncpy(nl_cmd_cfg.iface, "wlan0", 32);


        if ((ret = nl80211_init(&nl_cmd_cfg))) {
            ALOGE("couldn't init nl80211!: %s\n", strerror(errno));
            return ret;
        }


        if ((ret = nl80211_sap_if_add(&nl_cmd_cfg, ATH_CONCURRENT_SAP_IFNAME))) {
            ALOGE("couldn't add sap if: %s\n", strerror(errno));
            nl80211_deinit(&nl_cmd_cfg);
            return ret;
        }


        nl80211_deinit(&nl_cmd_cfg);
    }
#endif


   
    
#ifdef HAVE_HOSTAPD
    ifc_init();
    if(isConcurrentMode())
        ret = ifc_up(ATH_CONCURRENT_SAP_IFNAME);
    else
        ret = ifc_up(iface);
    ifc_close();
#endif
    usleep(AP_DRIVER_START_DELAY);
    ALOGD("Softap driver start: %d", ret);
 
    return ret;
}


 


     下面是TomeStone所有的信息,有兴趣的童鞋也可以研究一下,欢迎提出宝贵意见或建议。

pid: 156, tid: 362, name: netd  >>> /system/bin/netd <<<

thread: netd

signal 11 (SIGSEGV), code 1 (SEGV_MAPERR),fault addr 00000000

   r0 40e96388  r1 00000072  r2 41c4bb4c r3 00000000

   r4 41c4bb28  r5 41c596b0  r6 00000000 r7 41c49808

   r8 41c4bb28  r9 00000000  sl 40e96554 fp 40e96992

   ip 00000030  sp 40e96368  lr 4007bc91 pc 4007dcc0  cpsr 80000030

   d0  6e49746573205d72  d1 516563616672656d

   d2  656b636f6c5f686e  d3 204e524157203a65

   d4  0000000000000000  d5 0000000000000000

   d6  0000000000000000  d7 00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

   d16 41482eeb0020c49c  d17 3f50624dd2f1a9fc

   d18 41a43c5be2000000  d190000000000000000

   d20 0000000000000000  d210000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

   d26 0000000000000000  d270000000000000000

    d280000000000000000  d29 0000000000000000

   d30 0000000000000000  d310000000000000000

   scr 00000010

 

backtrace:

   #00  pc 00005cc0  /system/bin/netd

   #01  pc 00003c8d  /system/bin/netd (std::string::_M_assign(charconst*, char const*)+74)

 

stack:

        40e96328  00000000 

        40e9632c  00000000 

        40e96330  40e96388  [stack:362]

        40e96334  40e96414  [stack:362]

        40e96338  40e96388  [stack:362]

        40e9633c  00000006 

        40e96340  40e96414  [stack:362]

        40e96344  40e9641a  [stack:362]

        40e96348  41c4bb28  [heap]

        40e9634c  4007bc91  /system/bin/netd (std::string::_M_assign(charconst*, char const*)+78)

        40e96350  40e96454  [stack:362]

        40e96354  41c4bb28  [heap]

         40e96358 41c596b0  [heap]

        40e9635c  00000000 

        40e96360  df0027ad 

        40e96364  00000000 

   #00  40e96368  4033a004 /system/lib/libnetutils.so

        ........  ........

   #01  40e96368  4033a004 /system/lib/libnetutils.so

        40e9636c  401efacc 

        40e96370  ffffffff 

        40e96374  7fffffff 

        40e96378  00000000 

        40e9637c  401efacc 

        40e96380  00000000 

        40e96384  00000000 

        40e96388  656e6d72 

        40e9638c  00003074 

        40e96390  59cf220a 

        40e96394  00000000 

        40e96398  40e9638e  [stack:362]

        40e9639c  40e96388  [stack:362]

        40e963a0  00001000 

        40e963a4  41c58448  [heap]

 

memory near r0:

   40e96368 4033a004 401efacc ffffffff 7fffffff  ..3@...@........

   40e96378 00000000 401efacc 00000000 00000000  .......@........

   40e96388 656e6d72 00003074 59cf220a 00000000  rmnet0...".Y....

   40e96398 40e9638e 40e96388 00001000 41c58448  .c.@.c.@....H..A

   40e963a8 00000000 41c58390 40e963a0 40e963a0  .......A.c.@.c.@

 

memory near r2:

   41c4bb2c 00000000 00000000 00000000 00000000  ................

   41c4bb3c 00000000 00200000 00000000 00000000  ...... .........

   41c4bb4c 00000000 41c4bb4c 41c4bb54 41c4bb54  ....L..AT..AT..A

   41c4bb5c 00000000 00000000 00000013 40099a90  ...............@

   41c4bb6c 00000000 00000000 00000013 40099808  ...............@

 

memory near r4:

   41c4bb08 00000030 00000000 00000000 00003f53  0...........S?..

   41c4bb18 00003f55 00000007 6e616c77 00000030  U?......wlan0...

   41c4bb28 00000000 00000000 00000000 00000000  ................

   41c4bb38 00000000 00000000 00200000 00000000  .......... .....

   41c4bb48 00000000 00000000 41c4bb4c 41c4bb54  ........L..AT..A

 

memory near r5:

   41c59690 00002143 00000000 ffffffff 00000000  C!..............

   41c596a0 00000001 00000000 40f96f00 00000013  .........o.@....

   41c596b0 656e6d72 40003074 00000010 00000043  rmnet0.@....C...

   41c596c0 41c59670 41c59d90 00000000 40e97000  p..A...A.....p.@

   41c596d0 00100000 00001000 00000000 00000000  ................

 

memory near r7:

   41c497e8 400998d8 40091c14 00000000 00000013  ...@...@........

   41c497f8 41c497e8 41c497d8 41c49818 00000013  ...A...A...A....

   41c49808 400998a8 400922e3 00000000 00000013  ...@.".@........

   41c49818 41c49808 41c497f8 41c49838 00000013  ...A...A8..A....

   41c49828 400999b0 40092337 00000000 00000013  ...@7#.@........

 

memory near r8:

   41c4bb08 00000030 00000000 00000000 00003f53  0...........S?..

   41c4bb18 00003f55 00000007 6e616c77 00000030  U?......wlan0...

   41c4bb28 00000000 00000000 00000000 00000000  ................

   41c4bb38 00000000 00000000 00200000 00000000  .......... .....

   41c4bb48 00000000 00000000 41c4bb4c 41c4bb54  ........L..AT..A

 

memory near sl:

   40e96534 402a3937 40092341 401e972c 00000000  79*@A#.@,..@....

   40e96544 00000000 40e969ff 401efacc 40e96597  .....i.@...@.e.@

   40e96554 41c592e0 41c59be8 41c596b0 41c59610  ...A...A...A...A

   40e96564 00000000 00000000 00000000 00000000  ................

   40e96574 00000000 00000000 00000000 00000000  ................

 

memory near fp:

   40e96970 00000000 00000000 00000000 00000000  ................

   40e96980 00000000 00000000 00000000 00000000  ................

   40e96990 00000000 36a4d9ec 00000000 401efacc  .......6.......@

   40e969a0 00000032 00000033 40e969cc 41c4f5c0  2...3....i.@...A

   40e969b0 41c49688 00000001 0000001d 402a3a67  ...A........g:*@

 

memory near sp:

   40e96348 41c4bb28 4007bc91 40e96454 41c4bb28  (..A...@Td.@(..A

   40e96358 41c596b0 00000000 df0027ad 00000000  ...A.....'......

   40e96368 4033a004 401efacc ffffffff 7fffffff  ..3@...@........

   40e96378 00000000 401efacc 00000000 00000000  .......@........

   40e96388 656e6d72 00003074 59cf220a 00000000  rmnet0...".Y....

 

code around pc:

   4007dca0 4aab2006 44792340 f7fd447a e11be9c6  . .J@#yDzD......

   4007dcb0 a92ba808 ffeef7fd f8524622 e0013f24  ..+....."FR.$?..

   4007dcc0 3601681b d1fb4293 4aa2b9a6 7810447a  .h.6.B.....JzD.x

   4007dcd0 d5050606 f04f48a0 447831ff e99af7fd  .....HO..1xD....

   4007dce0 1600f3c0 499db136 4a9d2006 447a4479  ....6..I. .JyDzD

 

code around lr:

   4007bc70 6921c005 6123180b b10ae00a ea0cf7ff  ..!i..#a........

   4007bc80 69636920 46201ac2 463a18b1 ff82f7ff   ici.. F..:F....

   4007bc90 bdf84620 4604b538 460d4608 e9eaf7ff   F..8..F.F.F....

   4007bca0 182a4629 e8bd4620 f7ff4038 0000bfca  )F*. F..8@......

   4007bcb0 4370e92d 4615b086 461e4604 890ce9dd  -.pC...F.F.F....

--------- tail end of log /dev/log/main

04-19 21:19:56.310   156  362 D libc    : [NET]getaddrinfo-exit SUCCESS

04-19 21:19:56.490   156  362 D libc    :[NET][SMD]_cache_flush_locked: WARN :fp NULL

04-19 21:19:56.560   156  362 E CommandListener: [NETD] bwctrlcmd: argc=4 bandwidth setiquota ...

04-19 21:19:56.560   156  362 E BandwidthController: [NETD] setInterfaceQuota rmnet0

04-19 21:19:56.560   156  362 F libc    : Fatal signal 11(SIGSEGV) at 0x00000000 (code=1), thread 362 (netd)

--- --- --- --- --- --- --- --- --- --- ------ --- --- --- ---

pid: 156, tid: 156, name: netd

   r0 fffffffc  r1 bed25a80  r2 0a4b24b7 r3 00000000

   r4 41c49688  r5 41c4f340  r6 00000001 r7 00000000

   r8 00000000  r9 00000000  sl 00000000 fp 00000000

   ip 40099e40  sp bed25a78  lr 401b8335 pc 401ab360  cpsr 60000010

   d0  4b434f535f444945  d1 7472617473207254

   d2  bed25fa1bed25f5f  d3 bed25fd4bed25f00

   d4  0000000000000000  d5 0000000000000000

   d6  0000000000000000  d7  00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

   d16 41482eeb0020c49c  d173f50624dd2f1a9fc

    d1841a43c5be2000000  d19 0000000000000000

   d20 0000000000000000  d210000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

   d26 0000000000000000  d270000000000000000

   d28 0000000000000000  d290000000000000000

   d30 0000000000000000  d310000000000000000

   scr 00000010

 

backtrace:

   #00  pc 0000d360  /system/lib/libc.so (nanosleep+12)

   #01  pc 0001a331  /system/lib/libc.so (sleep+20)

   #02  pc 00010d01  /system/bin/netd

 

stack:

        bed25a38  5f44494f 

        bed25a3c  4b434f53 

        bed25a40  6e5f5445 

        bed25a44  00647465 

        bed25a48  00000000 

        bed25a4c  00000000 

        bed25a50  00000000 

        bed25a54  00000000 

        bed25a58  00000000 

        bed25a5c  00000000 

        bed25a60  00000000 

        bed25a64  00000000 

        bed25a68  00000000 

        bed25a6c  00000000 

        bed25a70  00000000 

        bed25a74  36a4d9ec 

   #00  bed25a78  41c49688 [heap]

        bed25a7c  bed25acc  [stack]

   #01  bed25a80  0000029f 

        bed25a84  0989f75b 

        bed25a88  0a4b24b7 

        bed25a8c  40088d05  /system/bin/netd

   #02  bed25a90  00000001 

        bed25a94  00001000 

        bed25a98  bed25acc  [stack]

        bed25a9c  40088b31  /system/bin/netd

        bed25aa0  bed25ac4  [stack]

        bed25aa4  401b5179  /system/lib/libc.so (__libc_init+40)

        bed25aa8  4007b790  /system/bin/netd

        bed25aac  401b5151  /system/lib/libc.so (__libc_init)

        bed25ab0  00000000 

        bed25ab4  00000000 

        bed25ab8  00000000 

        bed25abc  4007b788  /system/bin/netd

        bed25ac0  00000001 

        bed25ac4  bed25bc0  [stack]

        bed25ac8  00000000 

        bed25acc  bed25bd1  [stack]

--- --- --- --- --- --- --- --- --- --- ------ --- --- --- ---

pid: 156, tid: 356, name: netd

   r0 0000000e  r1 4065be2c  r2 00000000 r3 00000000

   r4 00000000  r5 00000000  r6 00000000 r7 0000008e

   r8 402a489c  r9 402a489c  sl 00000001 fp 401f1028

   ip 4065bdf0  sp 4065bde0  lr 402a34d9 pc 401aacf4  cpsr 00000010

   d0  3d48544150564563  d1 7365636976656470

   d2  2f6d657473797375  d3 317570632f757000

   d4  0000000000000000  d5  0000000000000000

   d6  0000000000000000  d7 00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

    d1641482eeb0020c49c  d17 3f50624dd2f1a9fc

   d18 41a43c5be2000000  d190000000000000000

   d20 0000000000000000  d210000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

   d26 0000000000000000  d270000000000000000

   d28 0000000000000000  d290000000000000000

   d30 0000000000000000  d310000000000000000

   scr 00000010

 

backtrace:

   #00  pc 0000ccf4  /system/lib/libc.so (select+16)

   #01  pc 000024d5  /system/lib/libsysutils.so (SocketListener::runListener()+252)

   #02  pc 00002697  /system/lib/libsysutils.so(SocketListener::threadStart(void*)+2)

   #03  pc 00012e44  /system/lib/libc.so (__thread_entry+48)

   #04  pc 0001258c  /system/lib/libc.so (pthread_create+176)

 

stack:

        4065bda0  401f1008 

        4065bda4  401f102d 

        4065bda8  00000008 

        4065bdac  00000069 

        4065bdb0  41c59cf8  [heap]

        4065bdb4  401b4fe9  /system/lib/libc.so (free+12)

        4065bdb8  402a3c19  /system/lib/libsysutils.so(NetlinkEvent::~NetlinkEvent())

        4065bdbc  402a3c27  /system/lib/libsysutils.so(NetlinkEvent::~NetlinkEvent()+14)

        4065bdc0  41c59cf8  [heap]

        4065bdc4  402a3b7b  /system/lib/libsysutils.so(NetlinkListener::onDataAvailable(SocketClient*)+178)

        4065bdc8  401f1008 

        4065bdcc  41c4efa8  [heap]

        4065bdd0  00000000 

        4065bdd4  402a3ac9  /system/lib/libsysutils.so(NetlinkListener::onDataAvailable(SocketClient*))

        4065bdd8  ffffffff 

        4065bddc  401f1008 

   #00  4065bde0  401f1008 

        4065bde4  41c4f028  [heap]

        4065bde8  401f101c 

        4065bdec  0000000d 

   #01  4065bdf0  00000000 

        4065bdf4  00000000 

        4065bdf8  00000000 

        4065bdfc  00000000 

        4065be00  00000000 

        4065be04  401efacc 

        4065be08  0000136a 

        4065be0c  000014aa 

        4065be10  00000000 

        4065be14  00000000 

        4065be18  00000000 

        4065be1c  41c59fc8  [heap]

        4065be20  41c4f038  [heap]

        4065be24  00000000 

        4065be28  00000000 

        4065be2c  00002100 

        ........  ........

   #02  4065bee8  00000040 

        4065beec  401b0e48  /system/lib/libc.so (__thread_entry+52)

   #03  4065bef0  41c4efe8 [heap]

        4065bef4  4065bf00  [stack:356]

        4065bef8  401d8c2c  /system/lib/libc.so

        4065befc  401b0590  /system/lib/libc.so (pthread_create+180)

   #04  4065bf00  4065bf00 [stack:356]

        4065bf04  41c4efe8  [heap]

        4065bf08  00000000 

        4065bf0c  00000000 

        4065bf10  00000000 

        4065bf14  00000000 

        4065bf18  00000000 

        4065bf1c  00000000 

        4065bf20  00000000 

        4065bf24  00000000 

        4065bf28  00000000 

        4065bf2c  00000000 

        4065bf30  00000000 

        4065bf34  00000000 

        4065bf38  00000000 

        4065bf3c  00000000 

--- --- --- --- --- --- --- --- --- --- ------ --- --- --- ---

pid: 156, tid: 357, name: netd

   r0 00000011  r1 4075be2c  r2 00000000 r3 00000000

   r4 00000000  r5 00000000  r6 00000000 r7 0000008e

   r8 402a489c  r9 402a489c  sl 00000001 fp 40014028

   ip 4075bdf0  sp 4075bde0  lr 402a34d9 pc 401aacf4  cpsr 00000010

   d0  74736b6e696c2074  d1 656e6d7220657430

   d2  732d2d2072656e20  d3 78652d74656b6375

   d4  0000000000000000  d5 0000000000000000

   d6  0000000000000000  d7 00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

   d16 41482eeb0020c49c  d173f50624dd2f1a9fc

   d18 41a43c5be2000000  d190000000000000000

   d20 0000000000000000  d21 0000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

   d26 0000000000000000  d270000000000000000

   d28 0000000000000000  d290000000000000000

   d30 0000000000000000  d310000000000000000

    scr00000010

 

backtrace:

   #00  pc 0000ccf4  /system/lib/libc.so (select+16)

   #01  pc 000024d5  /system/lib/libsysutils.so(SocketListener::runListener()+252)

   #02  pc 00002697  /system/lib/libsysutils.so(SocketListener::threadStart(void*)+2)

    #03  pc 00012e44 /system/lib/libc.so (__thread_entry+48)

   #04  pc 0001258c  /system/lib/libc.so (pthread_create+176)

 

stack:

        4075bda0  40014008 

        4075bda4  4001402d 

        4075bda8  0000000f 

        4075bdac  000003ec 

        4075bdb0  41c59cf8 [heap]

        4075bdb4  401b4fe9  /system/lib/libc.so (free+12)

        4075bdb8  402a3c19  /system/lib/libsysutils.so(NetlinkEvent::~NetlinkEvent())

        4075bdbc  402a3c27  /system/lib/libsysutils.so(NetlinkEvent::~NetlinkEvent()+14)

        4075bdc0  41c59cf8  [heap]

        4075bdc4  402a3b7b  /system/lib/libsysutils.so(NetlinkListener::onDataAvailable(SocketClient*)+178)

        4075bdc8  40014008 

        4075bdcc  41c4f068  [heap]

        4075bdd0  00000000 

        4075bdd4  402a3ac9  /system/lib/libsysutils.so(NetlinkListener::onDataAvailable(SocketClient*))

        4075bdd8  ffffffff 

        4075bddc  40014008 

   #00  4075bde0  40014008 

        4075bde4  41c4f0e8  [heap]

        4075bde8  4001401c 

        4075bdec  00000010 

   #01  4075bdf0  00000000 

        4075bdf4  00000000 

        4075bdf8  00000000 

        4075bdfc  00000000 

        4075be00  00000000 

        4075be04  401efacc 

        4075be08  0000136a 

        4075be0c  000014aa 

        4075be10  00000000 

        4075be14  00000000 

        4075be18  00000000 

        4075be1c  41c59fc8  [heap]

        4075be20  41c4f0f8  [heap]

        4075be24  00000000 

        4075be28  00000000 

        4075be2c  00018000 

        ........  ........

   #02  4075bee8  00000040 

        4075beec  401b0e48  /system/lib/libc.so (__thread_entry+52)

   #03  4075bef0  41c4f0a8 [heap]

        4075bef4  4075bf00  [stack:357]

        4075bef8  401d8c2c  /system/lib/libc.so

        4075befc  401b0590  /system/lib/libc.so (pthread_create+180)

   #04  4075bf00  4075bf00 [stack:357]

        4075bf04  41c4f0a8  [heap]

        4075bf08  00000000 

        4075bf0c  00000000 

        4075bf10  00000000 

        4075bf14  00000000 

        4075bf18  00000000 

        4075bf1c  00000000 

        4075bf20  00000000 

        4075bf24  00000000 

        4075bf28  00000000 

        4075bf2c  00000000 

        4075bf30  00000000 

        4075bf34  00000000 

        4075bf38  00000000 

        4075bf3c  00000000 

--- --- --- --- --- --- --- --- --- --- ------ --- --- --- ---

pid: 156, tid: 358, name: netd

   r0 00000014  r1 4085be2c  r2 00000000 r3 00000000

   r4 00000000  r5 00000000  r6 00000000 r7 0000008e

   r8 402a489c  r9 402a489c  sl 00000001 fp 400a9028

   ip 4085bdf0  sp 4085bde0  lr 402a34d9 pc 401aacf4  cpsr 00000010

   d0  6c416c61626f6c67  d1 2e306c7720747265

   d2  732d2d2072656e6d  d3 78652d74656b6369

   d4  0000000000000000  d5 0000000000000000

   d6  0000000000000000  d7 00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

   d16 41482eeb0020c49c  d173f50624dd2f1a9fc

   d18 41a43c5be2000000  d190000000000000000

   d20 0000000000000000  d210000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

    d26 0000000000000000  d27 0000000000000000

   d28 0000000000000000  d290000000000000000

   d30 0000000000000000  d310000000000000000

   scr 00000010

 

backtrace:

   #00  pc 0000ccf4  /system/lib/libc.so (select+16)

   #01  pc 000024d5  /system/lib/libsysutils.so(SocketListener::runListener()+252)

   #02  pc 00002697  /system/lib/libsysutils.so(SocketListener::threadStart(void*)+2)

   #03  pc 00012e44  /system/lib/libc.so (__thread_entry+48)

   #04  pc 0001258c  /system/lib/libc.so (pthread_create+176)

 

stack:

        4085bda0  400a9008 

        4085bda4  400a902d 

        4085bda8  00000012 

        4085bdac  000000b8 

        4085bdb0  41c5c5a8  [heap]

        4085bdb4  401b4fe9  /system/lib/libc.so (free+12)

        4085bdb8  402a3c19  /system/lib/libsysutils.so(NetlinkEvent::~NetlinkEvent())

        4085bdbc  402a3c27  /system/lib/libsysutils.so(NetlinkEvent::~NetlinkEvent()+14)

        4085bdc0  41c5c5a8  [heap]

        4085bdc4  402a3b7b  /system/lib/libsysutils.so (NetlinkListener::onDataAvailable(SocketClient*)+178)

        4085bdc8  400a9008 

        4085bdcc  41c4f128  [heap]

        4085bdd0  00000000 

        4085bdd4  402a3ac9  /system/lib/libsysutils.so(NetlinkListener::onDataAvailable(SocketClient*))

        4085bdd8  ffffffff 

        4085bddc  400a9008 

   #00  4085bde0  400a9008 

        4085bde4  41c4f1a8  [heap]

        4085bde8  400a901c 

        4085bdec  00000013 

   #01  4085bdf0  00000000 

        4085bdf4  00000000 

        4085bdf8  00000000 

        4085bdfc  00000000 

        4085be00  00000000 

        4085be04  401efacc 

        4085be08  0000136a 

        4085be0c  000014aa 

        4085be10  00000000 

        4085be14  00000000 

        4085be18  00000000 

        4085be1c  41c4f680  [heap]

        4085be20  41c4f1b8  [heap]

        4085be24  00000000 

        4085be28  00000000 

        4085be2c  000c0000 

        ........  ........

   #02  4085bee8  00000040 

        4085beec  401b0e48  /system/lib/libc.so (__thread_entry+52)

   #03  4085bef0  41c4f168 [heap]

        4085bef4  4085bf00  [stack:358]

        4085bef8  401d8c2c  /system/lib/libc.so

        4085befc  401b0590  /system/lib/libc.so (pthread_create+180)

   #04  4085bf00  4085bf00 [stack:358]

        4085bf04  41c4f168  [heap]

        4085bf08  00000000 

        4085bf0c  00000000 

        4085bf10  00000000 

        4085bf14  00000000 

        4085bf18  00000000 

        4085bf1c  00000000 

        4085bf20  00000000 

        4085bf24  00000000 

        4085bf28  00000000 

        4085bf2c  00000000 

        4085bf30  00000000 

        4085bf34  00000000 

        4085bf38  00000000 

        4085bf3c  00000000 

--- --- --- --- --- --- --- --- --- --- ------ --- --- --- ---

pid: 156, tid: 359, name: netd

   r0 00000016  r1 40a45e2c  r2 00000000 r3 00000000

   r4 00000000  r5 00000000  r6 00000000 r7 0000008e

   r8 402a489c  r9 402a489c  sl 00000001 fp 0000001f

   ip 40a45df0  sp 40a45de0  lr 402a34d9 pc 401aacf4  cpsr 00000010

   d0  712e656361727471  d1 6d6f632e75686f2e

   d2  bed25fa1bed25f63  d3 bed25fd4bed25f6f

   d4  0000000000000000  d5 0000000000000000

   d6  0000000000000000  d7 00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

   d16 41482eeb0020c49c  d173f50624dd2f1a9fc

   d18 41a43c5be2000000  d190000000000000000

   d20 0000000000000000  d210000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

   d26 0000000000000000  d270000000000000000

   d28 0000000000000000  d290000000000000000

    d30 0000000000000000  d31 0000000000000000

   scr 00000010

 

backtrace:

   #00  pc 0000ccf4  /system/lib/libc.so (select+16)

   #01  pc 000024d5  /system/lib/libsysutils.so(SocketListener::runListener()+252)

   #02  pc 00002697  /system/lib/libsysutils.so(SocketListener::threadStart(void*)+2)

   #03  pc 00012e44  /system/lib/libc.so (__thread_entry+48)

   #04  pc 0001258c  /system/lib/libc.so (pthread_create+176)

 

stack:

        40a45da0  41c59424  [heap]

        40a45da4  00000001 

        40a45da8  41c59408  [heap]

        40a45dac  401b3805  /system/lib/libc.so (dlfree+56)

        40a45db0  401b37cd  /system/lib/libc.so (dlfree)

        40a45db4  41c59408  [heap]

        40a45db8  41c59424  [heap]

        40a45dbc  00000001 

        40a45dc0  41c59408  [heap]

        40a45dc4  402a489c  /system/lib/libsysutils.so

        40a45dc8  41c59408  [heap]

        40a45dcc  401b4fe9  /system/lib/libc.so (free+12)

        40a45dd0  00000001 

        40a45dd4  402a4013  /system/lib/libsysutils.so(SocketClient::~SocketClient()+14)

        40a45dd8  0000000b 

        40a45ddc  41c4f240  [heap]

   #00  40a45de0  41c4f240 [heap]

        40a45de4  41c4f380  [heap]

        40a45de8  41c4f254  [heap]

        40a45dec  00000015 

   #01  40a45df0  00000000 

        40a45df4  00000000 

        40a45df8  00000000 

        40a45dfc  00000000 

        40a45e00  00000000 

        40a45e04  401efacc 

        40a45e08  0000136a 

        40a45e0c  000014aa 

        40a45e10  00000000 

        40a45e14  00000002 

        40a45e18  41c59408  [heap]

        40a45e1c  41c4f680  [heap]

        40a45e20  41c4f390  [heap]

        40a45e24  41c596b0  [heap]

        40a45e28  41c4f290  [heap]

        40a45e2c  00200800 

        ........  ........

   #02  40a45ee8  00000040 

        40a45eec  401b0e48  /system/lib/libc.so (__thread_entry+52)

   #03  40a45ef0  41c4f300 [heap]

        40a45ef4  40a45f00  [stack:359]

        40a45ef8  401d8c2c  /system/lib/libc.so

        40a45efc  401b0590  /system/lib/libc.so (pthread_create+180)

   #04  40a45f00  40a45f00 [stack:359]

        40a45f04  41c4f300  [heap]

        40a45f08  00000016 

        40a45f0c  00000000 

        40a45f10  00000000 

        40a45f14  00000000 

         40a45f18  00000000 

        40a45f1c  00000000 

        40a45f20  00000000 

        40a45f24  00000000 

        40a45f28  00000000 

        40a45f2c  00000000 

        40a45f30  00000000 

        40a45f34  00000000 

        40a45f38  00000000 

        40a45f3c  00000000 

--- --- --- --- --- --- --- --- --- --- ------ --- --- --- ---

pid: 156, tid: 360, name: netd

   r0 fffffffc  r1 00000001  r2 00989680 r3 36a4d9ec

   r4 41c4f3e0  r5 0000000a  r6 00000001 r7 00000000

   r8 4009a09e  r9 00100000  sl 41c4f3e0 fp 40093152

   ip 40099ee0  sp 40c04ea0  lr 40083427 pc 401abb28  cpsr 60000010

   d0  746e756f436c6c6f  d1 702068746977206c

   d2  bed25fa1bed25f69  d3 bed25fd4bed25f6e

   d4  0000000000000000  d5 0000000000000000

   d6  0000000000000000  d7 00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

   d16 41482eeb0020c49c  d173f50624dd2f1a9fc

   d18 41a43c5be2000000  d190000000000000000

   d20 0000000000000000  d210000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

   d26 0000000000000000  d27 0000000000000000

   d28 0000000000000000  d290000000000000000

   d30 0000000000000000  d310000000000000000

   scr 00000010

 

backtrace:

   #00  pc 0000db28  /system/lib/libc.so (poll+12)

   #01  pc 0000b423  /system/bin/netd

 

stack:

        40c04e60  00000000 

        40c04e64  00000000 

        40c04e68  00000000 

        40c04e6c  00000004 

        40c04e70  00000028 

        40c04e74  41c4f468  [heap]

        40c04e78  41c4f4c0  [heap]

        40c04e7c  36a4d9ec 

        40c04e80  00000028 

        40c04e84  41c4f3e0  [heap]

        40c04e88  0000000a 

        40c04e8c  36a4d9ec 

        40c04e90  41c4f3e0  [heap]

        40c04e94  0000000a 

        40c04e98  00000001 

        40c04e9c  4008341d  /system/bin/netd

   #00  40c04ea0  41c4f3e0 [heap]

        40c04ea4  4009a09e  /system/bin/netd

   #01  40c04ea8  00000000 

        40c04eac  00000000 

        40c04eb0  00000000 

        40c04eb4  00000000 

        40c04eb8  00000000 

        40c04ebc  00000000 

        40c04ec0  00000000 

        40c04ec4  40c04f00  [stack:360]

        40c04ec8  40083645  /system/bin/netd

        40c04ecc  41c4f3e0  [heap]

        40c04ed0  00000078 

        40c04ed4  40083645  /system/bin/netd

        40c04ed8  00100000 

        40c04edc  41c4f3e0  [heap]

        40c04ee0  41c4f3f8  [heap]

        40c04ee4  4008364b  /system/bin/netd

--- --- --- --- --- --- --- --- --- --- ------ --- --- --- ---

pid: 156, tid: 361, name: netd

   r0 0000001f  r1 40d76e2c  r2 00000000 r3 00000000

   r4 00000000  r5 00000000  r6 00000000 r7 0000008e

   r8 402a489c  r9 402a489c  sl 00000001 fp 0000001e

   ip 40d76df0  sp 40d76de0  lr 402a34d9 pc 401aacf4  cpsr 00000010

   d0  4b434f535f444945  d1 7472617473207254

    d2  bed25fa1bed25f5f  d3 bed25fd4bed25f00

   d4  0000000000000000  d5 0000000000000000

   d6  0000000000000000  d7 00305dd600000000

   d8  0000000000000000  d9 0000000000000000

   d10 0000000000000000  d110000000000000000

   d12 0000000000000000  d130000000000000000

   d14 0000000000000000  d150000000000000000

   d16 41482eeb0020c49c  d173f50624dd2f1a9fc

   d18 41a43c5be2000000  d190000000000000000

   d20 0000000000000000  d210000000000000000

   d22 0000000000000000  d230000000000000000

   d24 0000000000000000  d250000000000000000

   d26 0000000000000000  d270000000000000000

   d28 0000000000000000  d290000000000000000

   d30 0000000000000000  d310000000000000000

   scr 00000010

 

backtrace:

   #00  pc 0000ccf4  /system/lib/libc.so (select+16)

   #01  pc 000024d5  /system/lib/libsysutils.so(SocketListener::runListener()+252)

   #02  pc 00002697  /system/lib/libsysutils.so(SocketListener::threadStart(void*)+2)

   #03  pc 00012e44  /system/lib/libc.so (__thread_entry+48)

    #04  pc 0001258c /system/lib/libc.so (pthread_create+176)

 

stack:

        40d76da0  00000033 

        40d76da4  401b34ef  /system/lib/libc.so (dlmalloc+5326)

        40d76da8  40d76dcc  [stack:361]

        40d76dac  41c4f3b0  [heap]

        40d76db0  40d76e18  [stack:361]

        40d76db4  41c4f354  [heap]

        40d76db8  41c4f600  [heap]

        40d76dbc  402a489c  /system/lib/libsysutils.so

        40d76dc0  402a489c  /system/lib/libsysutils.so

        40d76dc4  41c4f3a0  [heap]

        40d76dc8  0000001e 

        40d76dcc  401b4fd5  /system/lib/libc.so (malloc+12)

        40d76dd0  000001f0 

        40d76dd4  402848ff  /system/lib/libstdc++.so (operatornew[](unsigned int)+6)

        40d76dd8  0000000a 

        40d76ddc  41c4f340  [heap]

   #00  40d76de0  41c4f340 [heap]

        40d76de4  41c4f540  [heap]

        40d76de8  41c4f354  [heap]

        40d76dec  0000001e 

   #01  40d76df0  00000000 

        40d76df4  00000000 

        40d76df8  00000000 

        40d76dfc  00000000 

        40d76e00  00000000 

        40d76e04  401efacc 

        40d76e08  0000136a 

        40d76e0c  000014aa 

        40d76e10  00000000 

        40d76e14  00000002 

        40d76e18  41c4f600  [heap]

        40d76e1c  00000000 

        40d76e20  00000000 

        40d76e24  00000000 

        40d76e28  00000000 

        40d76e2c  42000400 

        ........  ........

   #02  40d76ee8  00000040 

        40d76eec  401b0e48  /system/lib/libc.so (__thread_entry+52)

   #03  40d76ef0  41c4f500 [heap]

        40d76ef4  40d76f00  [stack:361]

        40d76ef8  401d8c2c  /system/lib/libc.so

        40d76efc  401b0590  /system/lib/libc.so (pthread_create+180)

   #04  40d76f00  40d76f00 [stack:361]

        40d76f04  41c4f500  [heap]

        40d76f08  00000000 

        40d76f0c  00000000 

        40d76f10  00000000 

        40d76f14  00000000 

        40d76f18  00000000 

        40d76f1c  00000000 

        40d76f20  00000000 

        40d76f24  00000000 

        40d76f28  00000000 

        40d76f2c  00000000 

        40d76f30  00000000 

        40d76f34  00000000 

        40d76f38  00000000 

        40d76f3c  00000000 

--------- log /dev/log/main

04-19 21:19:56.260   156   362D libc    : cache size:640,cache_mode=local

04-19 21:19:56.260   156  362 D libc    : [NET]getaddrinfo  hn 11, servname 53,ai_family 0+

04-19 21:19:56.260   156  362 D libc    : [NET] ht0x3231302e32322e

04-19 21:19:56.260   156  362 D libc    : [NET]getaddrinfo-exit SUCCESS

04-19 21:19:56.260   156  362 D libc    : [NET]getaddrinfo  hn 11, servname 53,ai_family 0+

04-19 21:19:56.260   156  362 D libc    : [NET] ht0x3231312e39352e

04-19 21:19:56.260   156  362 D libc    : [NET] getaddrinfo-exitSUCCESS

04-19 21:19:56.300   156  362 D libc    : [NET]getaddrinfo  hn 12, servname NULL,ai_family 0+

04-19 21:19:56.300   156  362 D libc    : [NET] ht0x31302e33342e32

04-19 21:19:56.300   156  362 D libc    : [NET]getaddrinfo-exit SUCCESS

04-19 21:19:56.300   156  362 D libc    : [NET]getaddrinfo  hn 7, servname NULL,ai_family 0+

04-19 21:19:56.300   156  362 D libc    : [NET] ht0x302e302e302e30

04-19 21:19:56.300   156  362 D libc    : [NET]getaddrinfo-exit SUCCESS

04-19 21:19:56.310   156  362 D libc    : [NET]getaddrinfo  hn 7, servname NULL,ai_family 0+

04-19 21:19:56.310   156  362 D libc    : [NET] ht0x302e302e302e30

04-19 21:19:56.310   156  362 D libc    : [NET]getaddrinfo-exit SUCCESS

04-19 21:19:56.310   156  362 D libc    : [NET]getaddrinfo  hn 12, servname NULL,ai_family 0+

04-19 21:19:56.310   156  362 D libc    : [NET] ht0x31302e33342e32

04-19 21:19:56.310   156  362 D libc    : [NET]getaddrinfo-exit SUCCESS

04-19 21:19:56.490   156  362 D libc    : [NET][SMD]_cache_flush_locked:WARN :fp NULL

04-19 21:19:56.560   156  362 E CommandListener: [NETD] bwctrlcmd: argc=4 bandwidth setiquota ...

04-19 21:19:56.560   156  362 E BandwidthController: [NETD] setInterfaceQuota rmnet0

04-19 21:19:56.560   156  362 F libc    : Fatal signal 11(SIGSEGV) at 0x00000000 (code=1), thread 362 (netd)