crash signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), apparently in platform VOIP?

JoeS2018

I just observed a crash in my game, and promptly dumped the log.  The game is written in Unity (2018.2.8), but the crash appears to be very low-level.  I'll post the full log here, but the highlights seem to be:

02-06 14:36:01.365  4012  4103 I OVRPlatform: [CurlHttpClient] Executing HTTP request: https://graph.oculus.com//v1.20//networking_send_blob?app_version=1004&blob=%7B%22ack%22%3A38%2C%22connection_epoch%22%3A1549488952387%2C%22connection_seq%22%3A1%2C%22connection_type%22%3A2%2C%22expected_id_epoch%22%3A1549488629574%2C%22expected_id_seq%22%3A5%2C%22message_type%22%3A2%7D&user_id=2913641695328074
02-06 14:36:01.365  4012  4103 I OVRPlatform: [FBNSNotificationHandler] Notification received: {"unread_count":0,"target_uid":192459034721597,"time":1549488959,"type":"oculus_networking_send_blob","message":"","params":{"extra_data":"{\"blob\":\"{\\\"connection_epoch\\\":1549487569800,\\\"connection_seq\\\":5,\\\"connection_type\\\":2,\\\"expected_id_epoch\\\":1549488658622,\\\"expected_id_seq\\\":3,\\\"id\\\":283,\\\"message_type\\\":1,\\\"payload\\\":\\\"{\\\\n   \\\\\\\"candidate\\\\\\\" : \\\\\\\"candidate:2341895444 2 udp 25108478 157.240.22.48 43244 typ relay raddr 2601:647:4802:2b93:59bf:3a10:c4e3:f17e rport 33642 generation 0 ufrag ZvnaTBH\\/HMlDuj9m\\\\\\\",\\\\n   \\\\\\\"sdpMLineIndex\\\\\\\" : 1,\\\\n   \\\\\\\"sdpMid\\\\\\\" : \\\\\\\"video\\\\\\\"\\\\n}\\\\n\\\",\\\"peer\\\":1897632457030131,\\\"webrtc_type\\\":3}\",\"sender_id\":\"1849186795189868\"}","PushNotifID":"9093b530-dfd3-0eb6-1b2d-8e97662627ba","persisted_id":""},"is_logged_out_push":false}
02-06 14:36:01.366  4012  4103 I OVRPlatform: [BaseConnection] Peer 1849186795189868:voice: Received SDP (ICE_CANDIDATE): {
02-06 14:36:01.366  4012  4103 I OVRPlatform:    "candidate" : "candidate:2341895444 2 udp 25108478 157.240.22.48 43244 typ relay raddr 2601:647:4802:2b93:59bf:3a10:c4e3:f17e rport 33642 generation 0 ufrag ZvnaTBH/HMlDuj9m",
02-06 14:36:01.366  4012  4103 I OVRPlatform:    "sdpMLineIndex" : 1,
02-06 14:36:01.366  4012  4103 I OVRPlatform:    "sdpMid" : "video"
02-06 14:36:01.366  4012  4103 I OVRPlatform: }
02-06 14:36:01.366  4012  4103 I OVRPlatform: [BaseConnection] Peer 1849186795189868:voice: Flush(): connection not fully initialized
02-06 14:36:01.367  4012  4126 I libjingle: [008:934] [4126] (webrtcsession.cc:1115): Enabled BUNDLE for data on audio.
02-06 14:36:01.368  4012  4127 I libjingle: [008:934] [4127] (port.cc:1296): Jingle:Conn[0x4c678500:audio:rcADNmcS:1:0:local:udp:10.0.1.x:54169->iwzfZXou:1:25043711:relay:udp:31.13.93.x:46377|C--W|107561923959995902|-]: Sent STUN ping, id=47415551324d5a6144646c67, use_candidate=0
02-06 14:36:01.369  4012  4097 I OVRPlatform: [CurlHttpClient] Executing HTTP request: https://graph.oculus.com//v1.20//networking_send_blob?app_version=1004&blob=%7B%22ack%22%3A42%2C%22connection_epoch%22%3A1549488952387%2C%22connection_seq%22%3A1%2C%22connection_type%22%3A2%2C%22expected_id_epoch%22%3A1549488629574%2C%22expected_id_seq%22%3A5%2C%22message_type%22%3A2%7D&user_id=2913641695328074
02-06 14:36:01.370  4012  4097 E CRASH   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00000008
02-06 14:36:01.370  4012  4097 E CRASH   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
02-06 14:36:01.370  4012  4097 E CRASH   : Build fingerprint: 'oculus/vr_pacific/pacific:7.1.2/N2G48H/223630.5280.0:user/release-keys'
02-06 14:36:01.370  4012  4097 E CRASH   : Revision: '0'
02-06 14:36:01.370  4012  4097 E CRASH   : pid: 4012, tid: 4097, name: UnityMain  >>> com.alvios.quivr <<<
02-06 14:36:01.370  4012  4097 E CRASH   :     r0 c11fb5e0  r1 c570fde0  r2 00000000  r3 00000000
02-06 14:36:01.370  4012  4097 E CRASH   :     r4 615c58c0  r5 c57b6604  r6 618da32f  r7 618da385
02-06 14:36:01.370  4012  4097 E CRASH   :     r8 618da32f  r9 618da419  sl 618da32f  fp 618da3d2
02-06 14:36:01.370  4012  4097 E CRASH   :     ip 6193dd2c  sp 615c58b8  lr 6171b289  pc 6175de50  cpsr cc083c90
02-06 14:36:01.370  4012  4097 E CRASH   : 
02-06 14:36:01.370  4012  4097 E CRASH   : backtrace:
02-06 14:36:01.372  4012  4102 I OVRPlatform: [CurlHttpClient] Executing HTTP request: https://graph.oculus.com//v1.20//networking_send_blob?app_version=1004&blob=%7B%22ack%22%3A39%2C%22connection_epoch%22%3A1549488952387%2C%22connection_seq%22%3A1%2C%22connection_type%22%3A2%2C%22expected_id_epoch%22%3A1549488629574%2C%22expected_id_seq%22%3A5%2C%22message_type%22%3A2%7D&user_id=2913641695328074
02-06 14:36:01.373  4012  4127 I libjingle: [008:940] [4127] (dtlstransportchannel.cc:293): Jingle:Channel[audio|1|__]: DTLS setup complete.
02-06 14:36:01.373  4012  4127 I libjingle: [008:941] [4127] (dtlstransportchannel.cc:293): Jingle:Channel[audio|2|__]: DTLS setup complete.

Note that no backtrace actually appears in the log.  But a little while later:

02-06 14:36:01.408  4012  4127 I libjingle: [008:976] [4127] (turnport.cc:1229): Jingle:Port[0x4e17bd80:audio:2:0:relay:Net[wlan0:10.0.1.x/24:Unknown]]: TURN refresh request sent, id=4d306537776e494e73356c62
02-06 14:36:01.412  4012  4097 E CRASH   :     #00  pc 00098e50  /system/app/Horizon/Horizon.apk
02-06 14:36:01.412  4012  4097 E CRASH   :     #01  pc 00056285  /system/app/Horizon/Horizon.apk
02-06 14:36:01.412  4012  4097 F mono    : * Assertion: should not be reached at mini.c:2215
02-06 14:36:01.434  1583  1593 I art     : Background partial concurrent mark sweep GC freed 73886(5MB) AllocSpace objects, 0(0B) LOS objects, 40% free, 10MB/17MB, paused 61.927ms total 273.326ms
02-06 14:36:01.461  1339  1779 I [CT]    : [ORIENTATION:SensorCalibration-H-M]: Confirmed mag offset (-0.277, -1.594, 1.849), radius 0.432
02-06 14:36:01.595   564  4261 W AudioFlinger: pause because of UNDERRUN, framesReady = 0,minFrames = 1, mFormat = 0x1

So Horizon itself crashed, and we reached an assertion inside mono.

I'd think this sort of crash shouldn't be possible (i.e. it's not a bug in my code), but I need to figure out how to avoid it all the same.  Any idea what would cause this, and what I can do about it?

JoeS2018

A user sent me a similar log he got when it crashed for him... well, some similarities, and some differences.  Perhaps there's more of a clue here?  (This one actually got a backtrace, though it doesn't seem terribly useful.)

02-06 17:23:00.945  7204  7247 W Adreno-GSL: <sharedmem_gpuobj_alloc:2633>: sharedmem_gpumem_alloc: mmap failed errno 12 Out of memory
02-06 17:23:00.946  7204  7247 E Adreno-GSL: <gsl_memory_alloc_pure:2265>: GSL MEM ERROR: kgsl_sharedmem_alloc ioctl failed.
02-06 17:23:00.954  7204  7227 E CRASH   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00011940
02-06 17:23:00.954  7204  7227 E CRASH   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
02-06 17:23:00.954  7204  7227 E CRASH   : Build fingerprint: 'oculus/vr_pacific/pacific:7.1.2/N2G48H/223630.5280.0:user/release-keys'
02-06 17:23:00.954  7204  7227 E CRASH   : Revision: '0'
02-06 17:23:00.954  7204  7227 E CRASH   : pid: 7204, tid: 7227, name: Worker Thread  >>> com.alvios.quivr <<<
02-06 17:23:00.954  7204  7227 E CRASH   :     r0 420a4bf0  r1 00000001  r2 00011940  r3 00000000
02-06 17:23:00.955  7204  7227 E CRASH   :     r4 cac7f2c0  r5 cac7f290  r6 cac7f290  r7 cac7ed60
02-06 17:23:00.955  7204  7227 E CRASH   :     r8 cac7f738  r9 00000000  sl cac7f600  fp cac7ee78
02-06 17:23:00.955  7204  7227 E CRASH   :     ip 00000000  sp cac7ece0  lr 97bb1700  pc cd751490  cpsr e6f62c90
02-06 17:23:00.955  7204  7227 E CRASH   : 
02-06 17:23:00.955  7204  7227 E CRASH   : backtrace:
02-06 17:23:00.961  7204  7226 E CRASH   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00012000
02-06 17:23:00.961  7204  7226 E CRASH   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
02-06 17:23:00.961  7204  7226 E CRASH   : Build fingerprint: 'oculus/vr_pacific/pacific:7.1.2/N2G48H/223630.5280.0:user/release-keys'
02-06 17:23:00.961  7204  7226 E CRASH   : Revision: '0'
02-06 17:23:00.961  7204  7226 E CRASH   : pid: 7204, tid: 7226, name: Worker Thread  >>> com.alvios.quivr <<<
02-06 17:23:00.961  7204  7226 E CRASH   :     r0 422e6b18  r1 00000001  r2 00012000  r3 00000000
02-06 17:23:00.962  7204  7226 E CRASH   :     r4 cadff2c0  r5 cadff290  r6 cadff290  r7 cadfed60
02-06 17:23:00.962  7204  7226 E CRASH   :     r8 cadff738  r9 00000000  sl cadff600  fp cadfee78
02-06 17:23:00.962  7204  7226 E CRASH   :     ip 00000000  sp cadfece0  lr 97bb17b0  pc cd751490  cpsr e6f65c90
02-06 17:23:00.962  7204  7226 E CRASH   : 
02-06 17:23:00.962  7204  7226 E CRASH   : backtrace:
02-06 17:23:00.986  7204  7227 E CRASH   :     #00  pc 009c1490  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.986  7204  7227 E CRASH   :     #01  pc 009cf39c  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.986  7204  7227 E CRASH   :     #02  pc 009aaaf4  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.986  7204  7227 E CRASH   :     #03  pc 009aa40c  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.986  7204  7227 E CRASH   :     #04  pc 007ec65c  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.986  7204  7227 E CRASH   :     #05  pc 007eca74  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.986  7204  7227 E CRASH   :     #06  pc 007ecbf0  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.986  7204  7227 E CRASH   :     #07  pc 007ec040  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.986  7204  7227 E CRASH   :     #08  pc 00a73f74  /data/app/com.alvios.quivr-1/lib/arm/libunity.so
02-06 17:23:00.987  7204  7227 E CRASH   :     #09  pc 00047a93  /system/lib/libc.so (__pthread_start(void*)+22)
02-06 17:23:00.987  7204  7227 E CRASH   :     #10  pc 0001a1a5  /system/lib/libc.so (__start_thread+6)
02-06 17:23:00.987  7204  7227 F mono    : * Assertion: should not be reached at mini.c:2215
02-06 17:23:01.427   981  1364 I WindowManager: WIN DEATH: Window{d50c2f3 u0 com.alvios.quivr/com.unity3d.player.UnityPlayerActivity}
02-06 17:23:01.427   981  1364 W WindowManager: Force-removing child win Window{506a283 u0 SurfaceView - com.alvios.quivr/com.unity3d.player.UnityPlayerActivity} from container Window{d50c2f3 u0 com.alvios.quivr/com.unity3d.player.UnityPlayerActivity}
02-06 17:23:01.427  1310  1781 I TrackingService: Unregistering client 'pid 7204' by binder death
02-06 17:23:01.427  1310  1781 I TrackingService: TrackingServiceHost Unregistering client: pid 7204
02-06 17:23:01.431   981  1265 I ActivityManager: Process com.alvios.quivr (pid 7204) has died

JoeS2018

No ideas? 

Nekto2

Is it "not enough memory" ?
You could try to delete big objects with big and detailed texture for a test?

ps. this forum has "Developer" section. You could switch from "Community" to "Developer" and ask there.