extract的时候出现crash

[ljdang]

context | 编译/运行环境 | バックグラウンド

ncnn版本20230223，vulkan推理，Android单线程调用，extract的时候crash，低概率出现，Monkey跑出来的

error log | 日志或报错信息 | ログ

pid: 27485, tid: 32471
uid: 10050
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
pac_enabled_keys: 000000000000000f (PR_PAC_APIAKEY, PR_PAC_APIBKEY, PR_PAC_APDAKEY, PR_PAC_APDBKEY)
signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0x000000796ddae028
Cause: [GWP-ASan]: Use After Free, 40 bytes into a 336-byte allocation at 0x796ddae000
x0 0000000000400000 x1 000000796ddae000 x2 0000000000000000 x3 0000000000000000
x4 0000000000000000 x5 00000077a505df50 x6 0000000000000001 x7 0000000000000000
x8 0000000000000007 x9 0000000000000251 x10 0000000000000000 x11 0000000000000028
x12 0000000000000000 x13 0000000000000028 x14 0000000000000000 x15 00000074e6c91756
x16 0000000000000038 x17 0000000000000001 x18 000000758fada000 x19 0000000000000040
x20 000000764cc08900 x21 0000000000000000 x22 000000786515bd10 x23 000000796ddae000
x24 0000000000a00000 x25 0000000000000000 x26 00000077a505df50 x27 000000764cc08a80
x28 00000077353b10a0 x29 00000075c44547e0
lr 00000077d505c270 sp 00000075c4454660 pc 00000074e6dc5924 pst 0000000080001000

46 total frames
backtrace:
#00 pc 000000000014b924 /vendor/lib64/hw/vulkan.adreno.so (!!!0000!f025c1437beb64d4d2316540394cd5!1a285a84ae!+4372) (BuildId: 7572082526765cc5e7dd0674eac46749)
#1 pc 00000000000c7518 /vendor/lib64/hw/vulkan.adreno.so (qglinternal::vkCmdPushDescriptorSetWithTemplate(VkCommandBuffer_T*, VkDescriptorUpdateTemplate_T*, VkPipelineLayout_T*, unsigned int, void const*)+184) (BuildId: 7572082526765cc5e7dd0674eac46749)
#2 pc 0000000000370738 /system/lib64/libncnn.so (ncnn::VkCompute::record_pipeline(ncnn::Pipeline const*, std::__ndk1::vector<ncnn::VkMat, std::__ndk1::allocatorncnn::VkMat > const&, std::__ndk1::vector<ncnn::VkImageMat, std::__ndk1::allocatorncnn::VkImageMat > const&, std::__ndk1::vector<ncnn::vk_constant_type, std::__ndk1::allocatorncnn::vk_constant_type > const&, ncnn::Mat const&)+2728) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#3 pc 000000000036faa4 /system/lib64/libncnn.so (ncnn::VkCompute::record_pipeline(ncnn::Pipeline const*, std::__ndk1::vector<ncnn::VkMat, std::__ndk1::allocatorncnn::VkMat > const&, std::__ndk1::vector<ncnn::vk_constant_type, std::__ndk1::allocatorncnn::vk_constant_type > const&, ncnn::VkMat const&)+120) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#4 pc 000000000065ebc0 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#5 pc 00000000003cea9c /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#6 pc 00000000003ce654 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#7 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#8 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#9 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#10 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#11 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#12 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#13 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#14 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#15 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#16 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#17 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#18 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#19 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#20 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#21 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#22 pc 00000000003d8d50 /system/lib64/libncnn.so (ncnn::Extractor::extract(int, ncnn::VkMat&, ncnn::VkCompute&)+300) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#23 pc 00000000003d824c /system/lib64/libncnn.so (ncnn::Extractor::extract(int, ncnn::Mat&, int)+820) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)

deallocated by thread 32471:
#00 pc 0000000000052e7c /apex/com.android.runtime/lib64/bionic/libc.so (gwp_asan::AllocationMetadata::CallSiteInfo::RecordBacktrace(unsigned long ()(unsigned long, unsigned long))+84) (BuildId: 8d50bb81b1be534a6f884e46e06e3b6b)
#1 pc 00000000000536b8 /apex/com.android.runtime/lib64/bionic/libc.so (gwp_asan::GuardedPoolAllocator::deallocate(void*)+412) (BuildId: 8d50bb81b1be534a6f884e46e06e3b6b)
#2 pc 000000000016d5d0 /vendor/lib64/hw/vulkan.adreno.so (!!!0000!34e0622678b649bb08142a419a0db0!1a285a84ae!+144) (BuildId: 7572082526765cc5e7dd0674eac46749)
#3 pc 000000000016c928 /vendor/lib64/hw/vulkan.adreno.so (!!!0000!49287e02ea79329fa2714cf9487b07!1a285a84ae!+264) (BuildId: 7572082526765cc5e7dd0674eac46749)
#4 pc 000000000016c718 /vendor/lib64/hw/vulkan.adreno.so (!!!0000!d11f9a3b92d176fa29d0fe6b6afb1b!1a285a84ae!+56) (BuildId: 7572082526765cc5e7dd0674eac46749)
#5 pc 00000000000e096c /vendor/lib64/hw/vulkan.adreno.so (!!!0000!f19cc0887a02cd839e62c61a6dccb4!1a285a84ae!+60) (BuildId: 7572082526765cc5e7dd0674eac46749)
#6 pc 00000000000c74a4 /vendor/lib64/hw/vulkan.adreno.so (qglinternal::vkCmdPushDescriptorSetWithTemplate(VkCommandBuffer_T*, VkDescriptorUpdateTemplate_T*, VkPipelineLayout_T*, unsigned int, void const*)+68) (BuildId: 7572082526765cc5e7dd0674eac46749)
#7 pc 0000000000370738 /system/lib64/libncnn.so (ncnn::VkCompute::record_pipeline(ncnn::Pipeline const*, std::__ndk1::vector<ncnn::VkMat, std::__ndk1::allocatorncnn::VkMat > const&, std::__ndk1::vector<ncnn::VkImageMat, std::__ndk1::allocatorncnn::VkImageMat > const&, std::__ndk1::vector<ncnn::vk_constant_type, std::__ndk1::allocatorncnn::vk_constant_type > const&, ncnn::Mat const&)+2728) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#8 pc 000000000036faa4 /system/lib64/libncnn.so (ncnn::VkCompute::record_pipeline(ncnn::Pipeline const*, std::__ndk1::vector<ncnn::VkMat, std::__ndk1::allocatorncnn::VkMat > const&, std::__ndk1::vector<ncnn::vk_constant_type, std::__ndk1::allocatorncnn::vk_constant_type > const&, ncnn::VkMat const&)+120) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#9 pc 000000000065ebc0 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#10 pc 00000000003cea9c /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#11 pc 00000000003ce654 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#12 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#13 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#14 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#15 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#16 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#17 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#18 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#19 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#20 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#21 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#22 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#23 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#24 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#25 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#26 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#27 pc 00000000003d8d50 /system/lib64/libncnn.so (ncnn::Extractor::extract(int, ncnn::VkMat&, ncnn::VkCompute&)+300) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#28 pc 00000000003d824c /system/lib64/libncnn.so (ncnn::Extractor::extract(int, ncnn::Mat&, int)+820) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)

allocated by thread 32471:
#00 pc 0000000000052e7c /apex/com.android.runtime/lib64/bionic/libc.so (gwp_asan::AllocationMetadata::CallSiteInfo::RecordBacktrace(unsigned long ()(unsigned long, unsigned long))+84) (BuildId: 8d50bb81b1be534a6f884e46e06e3b6b)
#1 pc 00000000000534f0 /apex/com.android.runtime/lib64/bionic/libc.so (gwp_asan::GuardedPoolAllocator::allocate(unsigned long, unsigned long)+600) (BuildId: 8d50bb81b1be534a6f884e46e06e3b6b)
#2 pc 0000000000044b1c /apex/com.android.runtime/lib64/bionic/libc.so ((anonymous namespace)::gwp_asan_calloc(unsigned long, unsigned long)+192) (BuildId: 8d50bb81b1be534a6f884e46e06e3b6b)
#3 pc 0000000000045488 /apex/com.android.runtime/lib64/bionic/libc.so (calloc+124) (BuildId: 8d50bb81b1be534a6f884e46e06e3b6b)
#4 pc 000000000016d5f0 /vendor/lib64/hw/vulkan.adreno.so (!!!0000!34e0622678b649bb08142a419a0db0!1a285a84ae!+176) (BuildId: 7572082526765cc5e7dd0674eac46749)
#5 pc 000000000016c914 /vendor/lib64/hw/vulkan.adreno.so (!!!0000!49287e02ea79329fa2714cf9487b07!1a285a84ae!+244) (BuildId: 7572082526765cc5e7dd0674eac46749)
#6 pc 000000000016c718 /vendor/lib64/hw/vulkan.adreno.so (!!!0000!d11f9a3b92d176fa29d0fe6b6afb1b!1a285a84ae!+56) (BuildId: 7572082526765cc5e7dd0674eac46749)
#7 pc 00000000000e096c /vendor/lib64/hw/vulkan.adreno.so (!!!0000!f19cc0887a02cd839e62c61a6dccb4!1a285a84ae!+60) (BuildId: 7572082526765cc5e7dd0674eac46749)
#8 pc 00000000000c74a4 /vendor/lib64/hw/vulkan.adreno.so (qglinternal::vkCmdPushDescriptorSetWithTemplate(VkCommandBuffer_T*, VkDescriptorUpdateTemplate_T*, VkPipelineLayout_T*, unsigned int, void const*)+68) (BuildId: 7572082526765cc5e7dd0674eac46749)
#9 pc 0000000000370738 /system/lib64/libncnn.so (ncnn::VkCompute::record_pipeline(ncnn::Pipeline const*, std::__ndk1::vector<ncnn::VkMat, std::__ndk1::allocatorncnn::VkMat > const&, std::__ndk1::vector<ncnn::VkImageMat, std::__ndk1::allocatorncnn::VkImageMat > const&, std::__ndk1::vector<ncnn::vk_constant_type, std::__ndk1::allocatorncnn::vk_constant_type > const&, ncnn::Mat const&)+2728) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#10 pc 000000000036faa4 /system/lib64/libncnn.so (ncnn::VkCompute::record_pipeline(ncnn::Pipeline const*, std::__ndk1::vector<ncnn::VkMat, std::__ndk1::allocatorncnn::VkMat > const&, std::__ndk1::vector<ncnn::vk_constant_type, std::__ndk1::allocatorncnn::vk_constant_type > const&, ncnn::VkMat const&)+120) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#11 pc 000000000065ebc0 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#12 pc 00000000003cea9c /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#13 pc 00000000003ce654 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#14 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#15 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#16 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#17 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#18 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#19 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#20 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#21 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#22 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#23 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#24 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#25 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#26 pc 00000000003ce684 /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#27 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#28 pc 00000000003ce2ac /system/lib64/libncnn.so (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#29 pc 00000000003d8d50 /system/lib64/libncnn.so (ncnn::Extractor::extract(int, ncnn::VkMat&, ncnn::VkCompute&)+300) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)
#30 pc 00000000003d824c /system/lib64/libncnn.so (ncnn::Extractor::extract(int, ncnn::Mat&, int)+820) (BuildId: f51a5f7850bbcdb568d4f5e4057d39c9192c83bc)