[android-porting] Android O - BT Service crashing

[kpnovi it]

Hello There

I am trying to bring up the BT USB device on the board and it crashes with
the below error :


01-01 01:16:47.976 19851 19885 I bt_hci : hci_initialize:
IBluetoothHci::getService() returned 0xa63b1ee0 (remote)
01-01 01:16:47.976 2894 2944 I ***@1.0-impl:
BluetoothHci::initialize()
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_init
01-01 01:16:47.977 2894 2944 I bt_vendor: Using interface hci0
01-01 01:16:47.977 2894 2944 D ***@1.0-impl: Open
vendor library loaded
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 0
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 0 retval 0
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 3
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_open
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_open returning 6
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 3 retval 1
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 1
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_fw_cfg
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_wait_hcidev
01-01 01:16:47.977 2894 2944 I bt_vendor: HCI device ready
01-01 01:16:47.977 2894 2944 D ***@1.0-impl:
OnFirmwareConfigured result: 0
01-01 01:16:47.977 2894 2944 I ***@1.0-impl:
Firmware configured in 0.000s
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 5
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 5 retval 0
01-01 01:16:47.977 2894 2944 I ***@1.0-impl:
OnFirmwareConfigured: lpm_timeout_ms 3000
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 6
01-01 01:16:47.977 2894 2944 D ***@1.0-impl:
low_power_mode_cb result: 0
01-01 01:16:47.977 2894 2944 I bt_vendor: bt_vendor_op op 6 retval 0
01-01 01:16:47.977 2894 2944 D ***@1.0-impl:
OnFirmwareConfigured Calling StartLowPowerWatchdog()
01-01 01:16:47.978 2894 2944 I bt_vendor: bt_vendor_op op 1 retval 0
01-01 01:16:47.978 19851 19885 I bt_hci : event_finish_startup
01-01 01:16:47.978 19851 19871 I bt_core_module: module_start_up Started
module "hci_module"
01-01 01:16:47.980 19851 19888 I bt_osi_thread: run_thread: thread id
19888, thread name bt_workqueue started
01-01 01:16:47.980 19851 19888 I bt_btu : btu_task pending for preload
complete event
01-01 01:16:47.980 19851 19888 I bt_btu_task: Bluetooth chip preload is
complete
01-01 01:16:47.980 19851 19888 I bt_btu : btu_task received preload
complete event
01-01 01:16:47.981 19851 19888 E bt_att : gatt_profile_db_init: gatt_if=1
01-01 01:16:47.981 19851 19889 I bt_osi_thread: run_thread: thread id
19889, thread name module_wrapper started
01-01 01:16:47.981 19851 19889 I bt_core_module: module_start_up Starting
module "controller_module"
01-01 01:16:47.982 2894 2944 I bt_vendor: bt_vendor_op op 7
01-01 01:16:47.982 2894 2944 I bt_vendor: bt_vendor_op op 7 retval 0
01-01 01:16:47.982 2894 2944 E
android.hardware.bluetooth-hci-hci_protocol: WriteSafely error writing to
UART (Invalid argument)
01-01 01:16:49.983 19851 19874 E bt_hci : command_timed_out: 1 commands
pending response
01-01 01:16:49.983 19851 19874 E bt_hci : command_timed_out: Waited 2001
ms for a response to opcode: 0xc03 *matches timer*
01-01 01:16:49.983 19851 19874 E bt_hci : command_timed_out: Size 3 Hex 03
0c 00
01-01 01:16:49.983 19851 19874 E bt_hci : command_timed_out: requesting a
firmware dump.
01-01 01:16:49.983 2894 2944 E
android.hardware.bluetooth-hci-hci_protocol: WriteSafely error writing to
UART (Invalid argument)
01-01 01:16:49.983 19851 19874 E bt_hci : command_timed_out restarting the
Bluetooth process.
01-01 01:16:50.484 19851 19874 F libc : Fatal signal 6 (SIGABRT), code
-6 in tid 19874 (alarm_default_c)
01-01 01:16:50.542 19893 19893 I crash_dump32: obtaining output fd from
tombstoned
01-01 01:16:50.543 274 274 I /system/bin/tombstoned: received crash
request for pid 19851
01-01 01:16:50.543 19893 19893 I crash_dump32: performing dump of process
19851 (target tid = 19874)
01-01 01:16:50.544 19893 19893 F DEBUG : *** *** *** *** *** *** *** ***
*** *** *** *** *** *** *** ***
01-01 01:16:50.544 19893 19893 F DEBUG : Build fingerprint:
'TI/full_jacinto6evm/jacinto6evm:8.0.0/OPR6.170623.013/dilpre04261833:userdebug/test-keys'
01-01 01:16:50.544 19893 19893 F DEBUG : Revision: '0'
01-01 01:16:50.544 19893 19893 F DEBUG : ABI: 'arm'
01-01 01:16:50.544 19893 19893 F DEBUG : pid: 19851, tid: 19874, name:
alarm_default_c >>> com.android.bluetooth <<<
01-01 01:16:50.544 19893 19893 F DEBUG : signal 6 (SIGABRT), code -6
(SI_TKILL), fault addr --------
01-01 01:16:50.544 19893 19893 F DEBUG : r0 00000000 r1 00004da2 r2
00000006 r3 00000008
01-01 01:16:50.544 19893 19893 F DEBUG : r4 00004d8b r5 00004da2 r6
95929018 r7 0000010c
01-01 01:16:50.544 19893 19893 F DEBUG : r8 a6692668 r9 95f941d0 sl
a6692668 fp 00000c03
01-01 01:16:50.544 19893 19893 F DEBUG : ip 00000000 sp 95929008 lr
affa13c7 pc affd1a9c cpsr 200f0010
01-01 01:16:50.609 19893 19893 F DEBUG :
01-01 01:16:50.609 19893 19893 F DEBUG : backtrace:
01-01 01:16:50.609 19893 19893 F DEBUG : #00 pc 0004aa9c
/system/lib/libc.so (tgkill+12)
01-01 01:16:50.609 19893 19893 F DEBUG : #01 pc 0001a3c3
/system/lib/libc.so (abort+54)
01-01 01:16:50.609 19893 19893 F DEBUG : #02 pc 000a1157
/system/lib/hw/bluetooth.default.so(_ZL17command_timed_outPv+398)
01-01 01:16:50.609 19893 19893 F DEBUG : #03 pc 00128867
/system/lib/hw/bluetooth.default.so
(_ZL17alarm_queue_readyP13fixed_queue_tPv+134)
01-01 01:16:50.609 19893 19893 F DEBUG : #04 pc 0012b423
/system/lib/hw/bluetooth.default.so(_ZL22internal_dequeue_readyPv+46)
01-01 01:16:50.609 19893 19893 F DEBUG : #05 pc 0012d9b9
/system/lib/hw/bluetooth.default.so(_ZL11run_reactorP9reactor_ti+216)
01-01 01:16:50.609 19893 19893 F DEBUG : #06 pc 0012d8b5
/system/lib/hw/bluetooth.default.so(_Z13reactor_startP9reactor_t+44)
01-01 01:16:50.609 19893 19893 F DEBUG : #07 pc 0012ebb1
/system/lib/hw/bluetooth.default.so(_ZL10run_threadPv+136)
01-01 01:16:50.609 19893 19893 F DEBUG : #08 pc 00047dbf
/system/lib/libc.so (_ZL15__pthread_startPv+22)
01-01 01:16:50.609 19893 19893 F DEBUG : #09 pc 0001af7f
/system/lib/libc.so (__start_thread+32)
01-01 01:16:51.726 274 274 E /system/bin/tombstoned: Tombstone written
to: /data/tombstones//tombstone_08[ 4611.735180] init: Untracked pid 19893
exited with status 0

01-01 01:16:51.731 337 357 I BootReceiver: Copying
/data/tombstones/tombstone_08 to DropBox (SYSTEM_TOMBSTONE)
01-01 01:16:51.811 2894 2944 E ***@1.0-impl:
BluetoothDeathRecipient::serviceDied - Bluetooth service died
01-01 01:16:51.811 2894 2944 I ***@1.0-impl:
BluetoothHci::close()
01-01 01:16:51.811 2894 2944 I ***@1.0-impl:
Skipping unlink call, service died.
01-01 01:16:51.811 2894 2944 I bt_vendor: bt_vendor_op op 6
01-01 01:16:51.811 2894 2944 D ***@1.0-impl:
low_power_mode_cb result: 0
01-01 01:16:51.811 2894 2944 I bt_vendor: bt_vendor_op op 6 retval 0
01-01 01:16:51.811 337 337 D BluetoothManagerService:
BluetoothServiceConnection, disconnected:
com.android.bluetooth.btservice.AdapterService
01-01 01:16:51.811 337 1575 I ActivityManager: Process
com.android.bluetooth (pid 19851) has died: psvc IMPF
01-01 01:16:51.811 337 1575 W ActivityManager: Scheduling restart of
crashed service com.android.bluetooth/.gatt.GattService in 1000ms
01-01 01:16:51.811 337 1575 W ActivityManager: Scheduling restart of
crashed service com.android.bluetooth/.btservice.AdapterService in 1000ms
01-01 01:16:51.811 337 359 E BluetoothManagerService:
MESSAGE_BLUETOOTH_SERVICE_DISCONNECTED(1)
01-01 01:16:51.812 337 359 D BluetoothManagerService: Broadcasting
onBluetoothServiceDown() to 5 receivers.
01-01 01:16:51.812 337 359 D BluetoothAdapter: onBluetoothServiceDown:
android.bluetooth.IBluetooth$Stub$***@6bf4d9c
01-01 01:16:51.812 502 544 D BluetoothAdapter: onBluetoothServiceDown:
android.bluetooth.IBluetooth$Stub$***@6b5cb83
01-01 01:16:51.812 573 1025 D BluetoothAdapter: onBluetoothServiceDown:
android.bluetooth.IBluetooth$Stub$***@311c5d2
01-01 01:16:51.812 1418 1436 D BluetoothAdapter: onBluetoothServiceDown:
android.bluetooth.IBluetooth$Stub$***@b4f4f3b
01-01 01:16:51.812 581 842 D BluetoothAdapter: onBluetoothServiceDown:
android.bluetooth.IBluetooth$Stub$***@fa94c89
01-01 01:16:51.813 2894 2944 I bt_vendor: bt_vendor_op op 4
01-01 01:16:51.813 2894 2944 I bt_vendor: bt_vendor_close
01-01 01:16:51.815 2894 2944 I bt_vendor: bt_vendor_op op 4 retval 0
01-01 01:16:51.815 2894 2944 I bt_vendor: bt_vendor_op op 0
01-01 01:16:51.815 2894 2944 I bt_vendor: bt_vendor_op op 0 retval 0
01-01 01:16:51.815 2894 2944 I bt_vendor: bt_vendor_cleanup

Please let me know if you can recognize the issue here. I can see my Hci0
device and can use the user tools to communicate, However, HAL causing the
BT service crash.