Pixel 8 crash android.hardware.bluetooth-service.bcmbtlinux

[user434245]

What is strange the error appeared when adding eSim (QR scanning) . BT was off

`type: crash osVersion: google/shiba/shiba:14/AP2A.240605.024/2024062000:user/release-keys uid: 1002 (u:r:hal_bluetooth_btlinux:s0) cmdline: /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux processUptime: 0s

abortMessage: hardened_malloc: fatal allocator error: double free (quarantine)

signal: 6 (SIGABRT), code -1 (SI_QUEUE) threadName: binder:980_1 MTE: enabled

backtrace: /apex/com.android.runtime/lib64/bionic/libc.so (abort+168, pc 66ac8) /apex/com.android.runtime/lib64/bionic/libc.so (fatal_error+48, pc 4fe0c) /apex/com.android.runtime/lib64/bionic/libc.so (deallocate_small+1692, pc 4d2ac) /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::hci::H4Protocol::~H4Protocol()+84, pc 3fc34) /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::hci::shim::DeinitializeCallback()+60, pc 3fbbc) /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::hci::HciFlowControl::~HciFlowControl()+20, pc 1c4d4) /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::hci::shim::Deinitialize()+104, pc 3fdc8) /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::aidl::bcmbtlinux::BluetoothHci::signal_handler(int)+116, pc 51594) [vdso] (pc 854) /apex/com.android.runtime/lib64/bionic/libc.so (__ioctl+8, pc d32b8) /apex/com.android.runtime/lib64/bionic/libc.so (ioctl+160, pc 73c80) /system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+296, pc 52888) /system/lib64/libbinder.so (android::PoolThread::threadLoop()+28, pc 5273c) /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+248, pc 126f8) /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204, pc 795dc) /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68, pc 69fa4) `

[crahn]

Same but mine just happened, not even when adding an e-sim.

[thestinger]

@crahn Your screenshot didn't get uploaded.

[crahn]

@thestinger Thanks for the heads up. Fixed.

[canwail]

Also on Pixel 6a, right after system update:

osVersion: google/bluejay/bluejay:14/AP2A.240705.004/2024071600:user/release-keys
osVersion: google/bluejay/bluejay:14/AP2A.240705.004/2024071200:user/release-keys
uid: 1002 (u:r:hal_bluetooth_btlinux:s0)
cmdline: /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux
processUptime: 0s

abortMessage: hardened_malloc: fatal allocator error: double free (quarantine)

signal: 6 (SIGABRT), code -1 (SI_QUEUE)
threadName: binder:938_1

backtrace:
    /apex/com.android.runtime/lib64/bionic/libc.so (abort+164, pc 64a24)
    /apex/com.android.runtime/lib64/bionic/libc.so (fatal_error+44, pc 4e504)
    /apex/com.android.runtime/lib64/bionic/libc.so (deallocate_small+1572, pc 4bbc4)
    /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::hci::H4Protocol::~H4Protocol()+84, pc 3fc34)
    /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::hci::shim::DeinitializeCallback()+60, pc 3fbbc)
    /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::hci::HciFlowControl::~HciFlowControl()+20, pc 1c4d4)
    /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::hci::shim::Deinitialize()+104, pc 3fdc8)
    /vendor/bin/hw/android.hardware.bluetooth-service.bcmbtlinux (android::hardware::bluetooth::aidl::bcmbtlinux::BluetoothHci::signal_handler(int)+116, pc 51594)
    [vdso] (pc 88c)
    /apex/com.android.runtime/lib64/bionic/libc.so (__ioctl+4, pc cde84)
    /apex/com.android.runtime/lib64/bionic/libc.so (ioctl+156, pc 7133c)
    /system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+296, pc 50848)
    /system/lib64/libbinder.so (android::PoolThread::threadLoop()+24, pc 50708)
    /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+244, pc 115d4)
    /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204, pc 7679c)
    /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64, pc 67d50)