Kernel crash - WhatApp Tainted

asef

TGOS
Ahh then my memory doesn't serve me well, and makes the memory corruption even more intriguing.

asef

argante
I have another system log from the same time if that would help at all.
I am considered a high risk target for this sort of thing but thought that GOS + good sense (hard earned) would make it difficult/expensive enough.

ryrona

asef I was also hoping someone else may give their thoughts

Yeah, no app should be able to cause memory corruption is kernel space, nor crash the kernel. That should be impossible. If it is possible, there is an issue with the OS itself, not the app.

asef I am considered a high risk target for this sort of thing but thought that GOS + good sense (hard earned) would make it difficult/expensive enough.

Using GrapheneOS absolutely helps to protect yourself if you are a high risk target, but as is evident from the logs here, it is not always enough.

asef I stopped using WhatsApp, reinstalled GOS and decided to only use Signal/Molly.

Although this is a good choice in general, I see nothing here that indicates WhatsApp caused the kernel space memory corruption. It was merely detected, by the kernel, while WhatsApp was the process running. There is no reason to suspect WhatsApp has anything to do with this memory corruption from the logs you have provided.

other8026 I'm confused. It's a crash that has only occurred while using WhatsApp, right?

Irrelevant what process it was that was currently running. It is a memory corruption in the kernel, and a kernel crash.

asef Could this be an indication of an exploited vulnerability.

Could be. Possible attack vectors that can have caused this memory corruption are vulnerabilities in Wifi driver, if you had Wifi enabled, 4G/5G drivers, if you had 4G/5G enabled, Bluetooth drivers, if you had Bluetooth enabled, but in that case you were probably quite close to the attacker physically, USB-C drivers, if you at any point connected your phone to a charger or other USB device during the current boot cycle. It could also be a malicious app you have installed, or an app that has been compromised, even WhatsApp, if your attacker likely have exploits against WhatsApp and know your phone number.

It is also quite possible it is just a bug in the kernel that caused some random memory corruption, and that this all is not a sign of an attack at all.

Still, any memory corruption in the kernel is a very serious issue, as it is possibly exploitable.

Unfortunately, the provided logs and information is not enough to find the cause of the memory corruption. MTE should have caught it, so I am confused why it didn't.

asef

argante LRTG looks interesting, but can it be used with GOS?

argante

asef Theoretically yes, but it's a long way off. LRTG works as a kernel module, so ideally it would be part of GOS. LRTG creates a hash database of kernel structures (SipHash). If a system call is activated, LRTG checks the integrity of the hashes in the database with kernel structures and if it detects a difference, it kills the process that made such a change. LRTG takes action when it theoretically managed to break the kernel's security. LRTG is therefore a kind of final line of defense. I can add that Metasploit, if it only detects LRTG, does not even try to test its exploits :) GOS uses SELinux. LRTG has special support for SELinux protection, so it would be a nice complement to GOS.

asef

argante
Maybe [they] will consider it.
Metasploit devs will no doubt work out a way to circumvent LRTG once it becomes worth it.

Personally I'm now worried that my phone has been compromised yet again despite my best efforts.
I stopped using WhatsApp, reinstalled GOS and decided to only use Signal/Molly.
Now I may just not use even sandboxed Google services and just run all my standand Android stuff in Genymotion on a PC.

Initially it was almost fun contending with this issue, now I'm finding it more than a little exhausting.

Mod note: Removed mention of a specific member of the project.

asef

other8026
Hi can you please change the tags for this post to reflect the case that it doesn't just relate to a 3rd party app?

other8026

asef I'm confused. It's a crash that has only occurred while using WhatsApp, right?

asef

other8026

Hi Other8026,

I should have prefaced my previous post with an "if appropriate" however I thought that since it seems that a userspace app had managed to crash the kernel and cause the phone to reboot, that this issue may be worthy of tags other than just the "3rd party app" tag?

I was also hoping someone else may give their thoughts and maybe either augment @argante comments or perhaps present a different perspective and that having the extra tags may get more views?

Thanks Other8026

asef

ryrona
Thank you for your thoughts Ryrona. Everything you say makes sense and is mostly depressing :)
I do however acknowledge that there is a possibility that this whole thing could be benign.

ryrona Possible attack vectors that can have caused this memory corruption are vulnerabilities in Wifi driver, if you had Wifi enabled, 4G/5G drivers

Yes on all counts I'd well imagine, as I can't remember when I had Wifi and BT turn off automatically.
Also if I remember rightly the Baseband is sandboxed, not sure if Wifi and BT are treated to the same sandboxing.

ryrona USB-C drivers, if you at any point connected your phone to a charger or other USB device during the current boot cycle

I only use wireless to charge and have the USB-C port disabled.

ryrona It is also quite possible it is just a bug in the kernel that caused some random memory corruption, and that this all is not a sign of an attack at all.

Yes always a possibility.

ryrona MTE should have caught it

I thought the app crashed with Memory Tagging on so it could've been off.

ryrona , the provided logs and information is not enough

I do have a verbose logcat file from the same time
[https://www.dropbox.com/scl/fi/gbnifkpkbxyecj3z9885c/System-log-43278271226e.txt?rlkey=7da25qkew52njheaokgdfxjrq&st=g7xo78m1&dl=0](https://)

asef

asef
Sorry that link didn't work.
The below link should work now.

https://www.dropbox.com/scl/fi/qfxcsaklxmuw56badvzuu/Pixel-9-System-log-260425.txt?rlkey=k45h2ez8oa9jpmdqkhsvo549o&st=ynkufoq4&dl=0

ryrona

TGOS Next to kernel crash I sent this logcat from whatspp

What do you mean "next to". When is this log from compared to when the crash happened. Because I don't see any signs of any crash in that log file.

asef I do have a verbose logcat file from the same time

asef Sorry that link didn't work.
The below link should work now.

osVersion: google/tokay/tokay:15/BP1A.250405.007.D1/2025041100:user/release-keys
04-25 06:01:46.206

asef Just to let you know that this log is from November last year.

I am confused. From when is the kernel crash log you originally posted, and from when is this log file you sent? There are no signs of any kernel crash in that log file, nor any mentions of WhatsApp. There are plenty of other crashes though, from user space and various apps.

TGOS

On 21. April I had just whatsapp open as well.
Next to kernel crash I sent this logcat from whatspp

type: logcat

osVersion: google/tokay/tokay:15/BP1A.250405.007.D1/2025041100:user/release-keys
package: com.whatsapp:251273010, targetSdk 35
buffers: main,system,crash,events,kernel
level: verbose

--------- beginning of events
04-21 17:53:36.728 3793 3793 I auditd : avc=type=1400 audit(0.0:582): avc: denied { read } for comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=528 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:36.728 3793 3793 I auditd : avc=type=1400 audit(0.0:583): avc: denied { read } for comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=528 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:36.728 3793 3793 I auditd : avc=type=1400 audit(0.0:584): avc: denied { read } for comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=528 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:36.728 3793 3793 I auditd : avc=type=1400 audit(0.0:585): avc: denied { read } for comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=528 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:36.728 3793 3793 I auditd : avc=type=1400 audit(0.0:586): avc: denied { read } for comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=528 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:36.728 3793 3793 I auditd : avc=type=1400 audit(0.0:587): avc: denied { read } for comm="main" name="u:object_r:userdebug_or_eng_prop:s0" dev="tmpfs" ino=811 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:userdebug_or_eng_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:36.836 3793 3793 I auditd : avc=type=1400 audit(0.0:594): avc: denied { read } for comm="binder:3793_2" name="u:object_r:qemu_sf_lcd_density_prop:s0" dev="tmpfs" ino=737 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:qemu_sf_lcd_density_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:36.836 3793 3793 I auditd : avc=type=1400 audit(0.0:595): avc: denied { read } for comm="binder:3793_2" name="u:object_r:qemu_sf_lcd_density_prop:s0" dev="tmpfs" ino=737 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:qemu_sf_lcd_density_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:36.956 3793 3793 I auditd : avc=type=1400 audit(0.0:597): avc: denied { read } for comm="pool-2-thread-1" name="u:object_r:userdebug_or_eng_prop:s0" dev="tmpfs" ino=811 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:userdebug_or_eng_prop:s0 tclass=file permissive=0 app=com.whatsapp
04-21 17:53:37.072 3793 3793 I auditd : avc=type=1400 audit(0.0:600): avc: granted { execute } for comm="com.whatsapp" path="/data/data/com.whatsapp/files/decompressed/libs.spo/libc++shared.so" dev="dm-60" ino=32575 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:37.076 3793 3793 I auditd : avc=type=1400 audit(0.0:601): avc: granted { execute } for comm="com.whatsapp" path="/data/data/com.whatsapp/files/decompressed/libs.spo/libwa_log.so" dev="dm-60" ino=32596 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:37.080 3793 3793 I auditd : avc=type=1400 audit(0.0:602): avc: granted { execute } for comm="com.whatsapp" path="/data/data/com.whatsapp/files/decompressed/libs.spo/libfortify.so" dev="dm-60" ino=64563 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:37.080 3793 3793 I auditd : avc=type=1400 audit(0.0:603): avc: granted { execute } for comm="com.whatsapp" path="/data/data/com.whatsapp/files/decompressed/libs.spo/libessential.so" dev="dm-60" ino=32716 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:37.088 3793 3793 I auditd : avc=type=1400 audit(0.0:608): avc: granted { execute } for comm="com.whatsapp" path="/data/data/com.whatsapp/files/decompressed/libs.spo/libvlc.so" dev="dm-60" ino=32310 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:37.088 3793 3793 I auditd : avc=type=1400 audit(0.0:609): avc: granted { execute } for comm="com.whatsapp" path="/data/data/com.whatsapp/files/decompressed/libs.spo/libnative_utils.so" dev="dm-60" ino=61015 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:37.092 3793 3793 I auditd : avc=type=1400 audit(0.0:610): avc: granted { execute } for comm="com.whatsapp" path="/data/data/com.whatsapp/files/decompressed/libs.spo/libcurve25519.so" dev="dm-60" ino=34018 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:37.096 3793 3793 I auditd : avc=type=1400 audit(0.0:611): avc: granted { execute } for comm=486967682050726920576F726B6572 path="/data/data/com.whatsapp/files/decompressed/libs.spo/libwhatsapp.so" dev="dm-60" ino=32642 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
--------- beginning of main
04-21 17:53:37.902 3793 3793 D WM-RescheduleReceiver: Received intent Intent { act=android.intent.action.BOOT_COMPLETED flg=0x89000010 cmp=com.whatsapp/androidx.work.impl.background.systemalarm.RescheduleReceiver (has extras) }
04-21 17:53:37.943 3793 3793 D WM-PackageManagerHelper: Skipping component enablement for androidx.work.impl.background.systemjob.SystemJobService
04-21 17:53:37.943 3793 3793 D WM-Schedulers: Created SystemJobScheduler and enabled SystemJobService
04-21 17:53:37.957 3793 4141 D WM-ForceStopRunnable: Is default app process = true
04-21 17:53:37.957 3793 4141 D WM-ForceStopRunnable: Performing cleanup operations.
04-21 17:53:37.984 3793 4141 D WM-SystemJobScheduler: Reconciling jobs
04-21 17:53:37.995 3793 4141 D WM-ForceStopRunnable: Found unfinished work, scheduling it.
04-21 17:53:38.018 3793 4141 D WM-SystemJobScheduler: Scheduling work ID f334d00f-edeb-460f-9b16-8dc584fa2214Job ID 6976
04-21 17:53:38.020 3793 4141 D WM-SystemJobScheduler: Scheduling work ID cc392b6c-edba-481c-8fdc-cc97a263d7ecJob ID 6922
04-21 17:53:38.027 3793 4141 D WM-SystemJobScheduler: Scheduling work ID 8be50cd5-0164-49b1-b076-74af6cd0e214Job ID 6997
04-21 17:53:38.035 3793 3793 D WM-SystemJobService: onStartJob for WorkGenerationalId(workSpecId=8be50cd5-0164-49b1-b076-74af6cd0e214, generation=0)
04-21 17:53:38.035 3793 4141 D WM-GreedyScheduler: Starting tracking for 8be50cd5-0164-49b1-b076-74af6cd0e214
04-21 17:53:38.080 3793 4156 D WM-Processor: DD4: processing WorkGenerationalId(workSpecId=8be50cd5-0164-49b1-b076-74af6cd0e214, generation=0)
04-21 17:53:38.097 3793 4151 D WM-GreedyScheduler: Starting tracking for 8be50cd5-0164-49b1-b076-74af6cd0e214
04-21 17:53:38.101 3793 4151 D WM-GreedyScheduler: Starting tracking for 8be50cd5-0164-49b1-b076-74af6cd0e214
04-21 17:53:38.115 3793 3793 D WM-WorkerWrapper: Starting work for com.whatsapp.stickers.stickerpack.FetchDiscoveryPackWorker
04-21 17:53:38.138 3793 4141 D WM-ConstraintTracker: BQE: initial state = NetworkState(isConnected=false, isValidated=true, isMetered=true, isNotRoaming=false)
04-21 17:53:38.138 3793 4141 D WM-NetworkStateTracker: Registering network callback
04-21 17:53:38.143 3793 4167 D WM-NetworkStateTracker: Network capabilities changed: [ Transports: VPN Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED&NOT_BANDWIDTH_CONSTRAINED TransportInfo: <VpnTransportInfo{type=1, sessionId=null, bypassable=false longLivedTcpConnectionsExpensive=false}> UnderlyingNetworks: Null]
04-21 17:53:38.144 3793 4141 I WM-WorkerWrapper: Worker result SUCCESS for Work [ id=8be50cd5-0164-49b1-b076-74af6cd0e214, tags={ com.whatsapp.stickers.stickerpack.FetchDiscoveryPackWorker } ]
04-21 17:53:38.149 3793 3793 D WM-Processor: DD4 8be50cd5-0164-49b1-b076-74af6cd0e214 executed; reschedule = false
04-21 17:53:38.149 3793 3793 D WM-SystemJobService: 8be50cd5-0164-49b1-b076-74af6cd0e214 executed on JobScheduler
04-21 17:53:38.149 3793 3793 D WM-GreedyScheduler: Stopping tracking for WorkGenerationalId(workSpecId=8be50cd5-0164-49b1-b076-74af6cd0e214, generation=0)
04-21 17:53:38.152 3793 4141 D WM-GreedyScheduler: Cancelling work ID 8be50cd5-0164-49b1-b076-74af6cd0e214
04-21 17:53:38.155 3793 4141 D WM-NetworkStateTracker: Unregistering network callback
04-21 17:53:38.158 3793 4156 D WM-PackageManagerHelper: Skipping component enablement for androidx.work.impl.background.systemalarm.RescheduleReceiver
04-21 17:53:45.784 3793 3929 W FirebaseMessaging: Failed to find package android.content.pm.PackageManager$NameNotFoundException: com.google.android.gms
04-21 17:53:45.788 3793 4734 W GooglePlayServicesUtil: com.whatsapp requires the Google Play Store, but it is missing.
04-21 17:53:45.791 3793 3929 W Metadata: Failed to find package android.content.pm.PackageManager$NameNotFoundException: com.google.android.gms
04-21 17:53:45.792 3793 3929 W Metadata: Failed to resolve IID implementation package, falling back
04-21 17:53:46.642 3793 3965 I WindowExtensionsImpl: Initializing Window Extensions, vendor API level=8, activity embedding enabled=true
04-21 17:53:46.647 3793 3965 I SplitController: Initializing Activity Embedding Controller.
04-21 17:53:46.655 3793 3965 I SplitController: Setting embedding rules. Size: 1
04-21 17:53:46.665 3793 3965 W JobInfo : Job 'com.whatsapp/.AlarmService#3' has a deadline with no functional constraints. The deadline won't improve job execution latency. Consider removing the deadline.
04-21 17:53:46.712 3793 3965 W JobInfo : Job 'com.whatsapp/.crash.upload.ExceptionsUploadService#1' has a deadline with no functional constraints. The deadline won't improve job execution latency. Consider removing the deadline.
04-21 17:53:46.732 3793 3965 D SoLoader: libaom.so found on /data/data/com.whatsapp/files/decompressed/libs.spo
04-21 17:53:46.733 3793 3965 D SoLoader: Loading libaom.so's dependencies: [libm.so, libdl.so, libc.so]
--------- switch to events
04-21 17:53:46.728 3793 3793 I auditd : avc=type=1400 audit(0.0:901): avc: granted { execute } for comm=576861747341707020576F726B6572 path="/data/data/com.whatsapp/files/decompressed/libs.spo/libaom.so" dev="dm-60" ino=34049 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
--------- switch to main
04-21 17:53:46.728 3793 3793 W com.whatsapp: type=1400 audit(0.0:901): avc: granted { execute } for comm=576861747341707020576F726B6572 path="/data/data/com.whatsapp/files/decompressed/libs.spo/libaom.so" dev="dm-60" ino=34049 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:46.736 3793 3965 D nativeloader: Load /data/user/0/com.whatsapp/files/decompressed/libs.spo/libaom.so using class loader ns clns-4 (caller=/data/app/2izPp4ob88bHU_BcjdNg3A==/com.whatsapp-og2VJUIYuvVntZEd90fQtg==/base.apk!classes2.dex): ok
04-21 17:53:46.736 3793 3965 D SoLoader: libwzav1.so found on /data/data/com.whatsapp/files/decompressed/libs.spo
04-21 17:53:46.737 3793 3965 D SoLoader: Loading libwzav1.so's dependencies: [libm.so, libdl.so, libc.so]
--------- switch to events
04-21 17:53:46.732 3793 3793 I auditd : avc=type=1400 audit(0.0:902): avc: granted { execute } for comm=576861747341707020576F726B6572 path="/data/data/com.whatsapp/files/decompressed/libs.spo/libwzav1.so" dev="dm-60" ino=33775 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
--------- switch to main
04-21 17:53:46.732 3793 3793 W com.whatsapp: type=1400 audit(0.0:902): avc: granted { execute } for comm=576861747341707020576F726B6572 path="/data/data/com.whatsapp/files/decompressed/libs.spo/libwzav1.so" dev="dm-60" ino=33775 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:53:46.738 3793 3965 D nativeloader: Load /data/user/0/com.whatsapp/files/decompressed/libs.spo/libwzav1.so using class loader ns clns-4 (caller=/data/app/2izPp4ob88bHU_BcjdNg3A==/com.whatsapp-og2VJUIYuvVntZEd90fQtg==/base.apk!classes2.dex): ok
04-21 17:53:46.802 3793 4141 D WM-SystemJobScheduler: Scheduling work ID 631d770e-286f-40fe-a089-2de8de171e0aJob ID 7000
04-21 17:53:46.806 3793 4141 D WM-SystemJobScheduler: Scheduling work ID 3f0c8d4a-8ff6-407c-9131-b27cf22fdc7cJob ID 7001
04-21 17:53:46.881 3793 4006 W JobInfo : Job 'com.whatsapp/.push.RegistrationIntentService#4' has a deadline with no functional constraints. The deadline won't improve job execution latency. Consider removing the deadline.
04-21 17:54:15.797 3793 4740 W Rpc : No response
04-21 17:54:15.800 3793 3929 E FirebaseMessaging: Topic sync or token retrieval failed on hard failure exceptions: java.util.concurrent.ExecutionException: java.io.IOException: TIMEOUT. Won't retry the operation.
04-21 17:55:10.805 3793 4155 D WM-SystemJobScheduler: Scheduling work ID 9e3b138e-b4f3-4119-a41f-9c9519cec4e9Job ID 7002
04-21 17:55:10.833 3793 3793 D WM-SystemJobService: onStartJob for WorkGenerationalId(workSpecId=9e3b138e-b4f3-4119-a41f-9c9519cec4e9, generation=0)
04-21 17:55:10.833 3793 4155 D WM-GreedyScheduler: Starting tracking for 9e3b138e-b4f3-4119-a41f-9c9519cec4e9
04-21 17:55:10.838 3793 4155 D WM-Processor: DD4: processing WorkGenerationalId(workSpecId=9e3b138e-b4f3-4119-a41f-9c9519cec4e9, generation=0)
04-21 17:55:10.849 3793 3793 D WM-WorkerWrapper: Starting work for com.whatsapp.messaging.xmpp.XmppLifecycleWorker
04-21 17:55:10.854 3793 4155 D WM-ConstraintTracker: BQE: initial state = NetworkState(isConnected=true, isValidated=true, isMetered=false, isNotRoaming=true)
04-21 17:55:10.854 3793 4155 D WM-NetworkStateTracker: Registering network callback
04-21 17:55:10.859 3793 4155 D WM-GreedyScheduler: Constraints met: Scheduling work ID WorkGenerationalId(workSpecId=9e3b138e-b4f3-4119-a41f-9c9519cec4e9, generation=0)
04-21 17:55:10.860 3793 4167 D WM-NetworkStateTracker: Network capabilities changed: [ Transports: WIFI|VPN Capabilities: NOT_METERED&INTERNET&NOT_RESTRICTED&TRUSTED&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED&NOT_BANDWIDTH_CONSTRAINED LinkUpBandwidth>=10803Kbps LinkDnBandwidth>=32740Kbps TransportInfo: <VpnTransportInfo{type=1, sessionId=null, bypassable=false longLivedTcpConnectionsExpensive=false}> UnderlyingNetworks: Null]
04-21 17:55:10.862 3793 4155 D WM-Processor: Work WorkGenerationalId(workSpecId=9e3b138e-b4f3-4119-a41f-9c9519cec4e9, generation=0) is already enqueued for processing
04-21 17:55:35.020 3793 3793 W JobService: onNetworkChanged() not implemented in androidx.work.impl.background.systemjob.SystemJobService. Must override in a subclass.
04-21 17:55:35.030 3793 4167 D WM-NetworkStateTracker: Network capabilities changed: [ Transports: VPN Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED&NOT_BANDWIDTH_CONSTRAINED TransportInfo: <VpnTransportInfo{type=1, sessionId=null, bypassable=false longLivedTcpConnectionsExpensive=false}> UnderlyingNetworks: Null]
04-21 17:55:35.525 3793 3973 W GooglePlayServicesUtil: com.whatsapp requires the Google Play Store, but it is missing.
04-21 17:55:45.994 3793 4167 D WM-NetworkStateTracker: Network capabilities changed: [ Transports: WIFI|VPN Capabilities: NOT_METERED&INTERNET&NOT_RESTRICTED&TRUSTED&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED&NOT_BANDWIDTH_CONSTRAINED LinkUpBandwidth>=10803Kbps LinkDnBandwidth>=32740Kbps TransportInfo: <VpnTransportInfo{type=1, sessionId=null, bypassable=false longLivedTcpConnectionsExpensive=false}> UnderlyingNetworks: Null]
04-21 17:55:46.026 3793 3793 W JobService: onNetworkChanged() not implemented in androidx.work.impl.background.systemjob.SystemJobService. Must override in a subclass.
04-21 17:55:46.528 3793 4808 W GooglePlayServicesUtil: com.whatsapp requires the Google Play Store, but it is missing.
04-21 17:55:46.792 3793 3793 D WM-DelayedWorkTracker: Scheduling work 631d770e-286f-40fe-a089-2de8de171e0a
04-21 17:55:46.792 3793 3793 D WM-GreedyScheduler: Starting tracking for 631d770e-286f-40fe-a089-2de8de171e0a
04-21 17:55:46.793 3793 4151 D WM-GreedyScheduler: Constraints met: Scheduling work ID WorkGenerationalId(workSpecId=631d770e-286f-40fe-a089-2de8de171e0a, generation=0)
04-21 17:55:46.795 3793 4151 D WM-Processor: DD4: processing WorkGenerationalId(workSpecId=631d770e-286f-40fe-a089-2de8de171e0a, generation=0)
04-21 17:55:46.800 3793 3793 D WM-WorkerWrapper: Starting work for com.whatsapp.stickers.stickerpack.FetchDownloadableStickerPackWorker
04-21 17:55:47.088 3793 4141 I WM-WorkerWrapper: Worker result SUCCESS for Work [ id=631d770e-286f-40fe-a089-2de8de171e0a, tags={ com.whatsapp.stickers.stickerpack.FetchDownloadableStickerPackWorker } ]
04-21 17:55:47.093 3793 3793 D WM-Processor: DD4 631d770e-286f-40fe-a089-2de8de171e0a executed; reschedule = false
04-21 17:55:47.093 3793 3793 D WM-GreedyScheduler: Stopping tracking for WorkGenerationalId(workSpecId=631d770e-286f-40fe-a089-2de8de171e0a, generation=0)
04-21 17:55:47.094 3793 3793 D WM-SystemJobService: 631d770e-286f-40fe-a089-2de8de171e0a executed on JobScheduler
04-21 17:55:47.103 3793 4141 D WM-GreedyScheduler: Cancelling work ID 631d770e-286f-40fe-a089-2de8de171e0a
04-21 17:55:49.001 3793 4155 I WM-WorkerWrapper: Worker result SUCCESS for Work [ id=9e3b138e-b4f3-4119-a41f-9c9519cec4e9, tags={ com.whatsapp.messaging.xmpp.XmppLifecycleWorker } ]
04-21 17:55:49.006 3793 3793 D WM-Processor: DD4 9e3b138e-b4f3-4119-a41f-9c9519cec4e9 executed; reschedule = false
04-21 17:55:49.006 3793 3793 D WM-GreedyScheduler: Stopping tracking for WorkGenerationalId(workSpecId=9e3b138e-b4f3-4119-a41f-9c9519cec4e9, generation=0)
04-21 17:55:49.007 3793 3793 D WM-SystemJobService: 9e3b138e-b4f3-4119-a41f-9c9519cec4e9 executed on JobScheduler
04-21 17:55:49.012 3793 4155 D WM-GreedyScheduler: Cancelling work ID 9e3b138e-b4f3-4119-a41f-9c9519cec4e9
04-21 17:55:49.014 3793 4155 D WM-NetworkStateTracker: Unregistering network callback
04-21 17:56:07.977 3793 4156 D WM-SystemJobScheduler: Scheduling work ID 13218c0e-fbaf-43ee-bbab-8d763954c84aJob ID 7003
04-21 17:56:07.999 3793 4156 D WM-GreedyScheduler: Starting tracking for 13218c0e-fbaf-43ee-bbab-8d763954c84a
04-21 17:56:08.004 3793 3793 D WM-SystemJobService: onStartJob for WorkGenerationalId(workSpecId=13218c0e-fbaf-43ee-bbab-8d763954c84a, generation=0)
04-21 17:56:08.007 3793 4156 D WM-ConstraintTracker: BQE: initial state = NetworkState(isConnected=true, isValidated=true, isMetered=false, isNotRoaming=true)
04-21 17:56:08.008 3793 4156 D WM-NetworkStateTracker: Registering network callback
04-21 17:56:08.013 3793 4156 D WM-Processor: DD4: processing WorkGenerationalId(workSpecId=13218c0e-fbaf-43ee-bbab-8d763954c84a, generation=0)
04-21 17:56:08.015 3793 4167 D WM-NetworkStateTracker: Network capabilities changed: [ Transports: WIFI|VPN Capabilities: NOT_METERED&INTERNET&NOT_RESTRICTED&TRUSTED&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED&NOT_BANDWIDTH_CONSTRAINED LinkUpBandwidth>=10803Kbps LinkDnBandwidth>=32740Kbps TransportInfo: <VpnTransportInfo{type=1, sessionId=null, bypassable=false longLivedTcpConnectionsExpensive=false}> UnderlyingNetworks: Null]
04-21 17:56:08.021 3793 3793 D WM-WorkerWrapper: Starting work for com.whatsapp.messaging.xmpp.XmppLifecycleWorker
04-21 17:56:08.021 3793 4156 D WM-GreedyScheduler: Constraints met: Scheduling work ID WorkGenerationalId(workSpecId=13218c0e-fbaf-43ee-bbab-8d763954c84a, generation=0)
04-21 17:56:08.023 3793 4156 D WM-Processor: Work WorkGenerationalId(workSpecId=13218c0e-fbaf-43ee-bbab-8d763954c84a, generation=0) is already enqueued for processing
04-21 17:56:08.749 3793 5829 D SoLoader: libkaleidoscope.so found on /data/data/com.whatsapp/files/decompressed/libs.spo
04-21 17:56:08.752 3793 5829 D SoLoader: Loading libkaleidoscope.so's dependencies: [libessential.so, libwhatsapp.so, libfortify.so, libc++shared.so, libm.so, libdl.so, libc.so]
--------- switch to events
04-21 17:56:08.752 3793 3793 I auditd : avc=type=1400 audit(0.0:1299): avc: granted { execute } for comm=4D65646961446F776E6C6F61642023 path="/data/data/com.whatsapp/files/decompressed/libs.spo/libkaleidoscope.so" dev="dm-60" ino=32708 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
--------- switch to main
04-21 17:56:08.752 3793 3793 W com.whatsapp: type=1400 audit(0.0:1299): avc: granted { execute } for comm=4D65646961446F776E6C6F61642023 path="/data/data/com.whatsapp/files/decompressed/libs.spo/libkaleidoscope.so" dev="dm-60" ino=32708 scontext=u:r:untrusted_app:s0:c189,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c189,c256,c512,c768 tclass=file app=com.whatsapp
04-21 17:56:08.759 3793 5829 D nativeloader: Load /data/user/0/com.whatsapp/files/decompressed/libs.spo/libkaleidoscope.so using class loader ns clns-4 (caller=/data/app/~_{2izPp4ob88bHU}_BcjdNg3A==/com.whatsapp-og2VJUIYuvVntZEd90fQtg==/base.apk!classes2.dex): ok
04-21 17:56:08.983 3793 4154 W GooglePlayServicesUtil: com.whatsapp requires the Google Play Store, but it is missing.
04-21 17:56:09.066 3793 4154 W HWUI : Image decoding logging dropped!
04-21 17:56:09.067 3793 4154 D CompatChangeReporter: Compat change id reported: 279646685; UID 10189; state: ENABLED
04-21 17:56:38.138 3793 4151 I WM-WorkerWrapper: Worker result SUCCESS for Work [ id=13218c0e-fbaf-43ee-bbab-8d763954c84a, tags={ com.whatsapp.messaging.xmpp.XmppLifecycleWorker } ]
04-21 17:56:38.141 3793 3793 D WM-Processor: DD4 13218c0e-fbaf-43ee-bbab-8d763954c84a executed; reschedule = false
04-21 17:56:38.141 3793 3793 D WM-GreedyScheduler: Stopping tracking for WorkGenerationalId(workSpecId=13218c0e-fbaf-43ee-bbab-8d763954c84a, generation=0)
04-21 17:56:38.142 3793 3793 D WM-SystemJobService: 13218c0e-fbaf-43ee-bbab-8d763954c84a executed on JobScheduler
04-21 17:56:38.152 3793 4151 D WM-GreedyScheduler: Cancelling work ID 13218c0e-fbaf-43ee-bbab-8d763954c84a
04-21 17:56:38.157 3793 4151 D WM-NetworkStateTracker: Unregistering network callback
04-21 17:58:27.494 3793 3793 D AppCompatDelegate: Checking for metadata for AppLocalesMetadataHolderService : Service not found
04-21 17:58:27.497 3793 3793 I SplitController: Setting embedding rules. Size: 2
04-21 17:58:27.498 3793 3793 I SplitController: Setting embedding rules. Size: 3
04-21 17:58:27.498 3793 3793 I SplitController: Setting embedding rules. Size: 4
04-21 17:58:27.498 3793 3793 I SplitController: Setting embedding rules. Size: 5
04-21 17:58:27.505 3793 3793 D DesktopModeFlagsUtil: Toggle override initialized to: OVERRIDE_UNSET
--------- switch to events
04-21 17:58:27.507 3793 3793 I wm_on_create_called: [Token=153661495,Component Name=com.whatsapp.Main,Reason=performCreate,time=9ms]
04-21 17:58:27.515 3793 3793 I wm_on_start_called: [Token=153661495,Component Name=com.whatsapp.Main,Reason=handleStartActivity,time=1ms]
--------- switch to main
04-21 17:58:27.516 3793 5806 W GooglePlayServicesUtil: com.whatsapp requires the Google Play Store, but it is missing.
--------- switch to events
04-21 17:58:27.522 3793 3793 I wm_on_resume_called: [Token=153661495,Component Name=com.whatsapp.Main,Reason=RESUME_ACTIVITY,time=2ms]
--------- switch to main
04-21 17:58:27.522 3793 3793 D CompatChangeReporter: Compat change id reported: 352594277; UID 10189; state: ENABLED
04-21 17:58:27.525 3793 3793 D CompatChangeReporter: Compat change id reported: 349153669; UID 10189; state: ENABLED
--------- switch to events
04-21 17:58:27.527 3793 3793 I wm_on_top_resumed_gained_called: [Token=153661495,Component Name=com.whatsapp.Main,Reason=topStateChangedWhenResumed]
04-21 17:58:27.542 3793 3793 I viewroot_draw_event: [window=VRI[Main],event=applyTransactionOnDraw applyImmediately]
04-21 17:58:27.542 3793 3793 I viewroot_draw_event: [window=VRI[Main],event=applyTransactionOnDraw applyImmediately]
04-21 17:58:27.547 3793 3793 I viewroot_draw_event: [window=VRI[Main],event=reportDrawFinished seqId=0]
04-21 17:58:27.547 3793 3793 I wm_on_top_resumed_lost_called: [Token=153661495,Component Name=com.whatsapp.Main,Reason=topStateChangedWhenResumed]
04-21 17:58:27.548 3793 3793 I wm_on_paused_called: [Token=153661495,Component Name=com.whatsapp.Main,Reason=performPause,time=0ms]
--------- switch to main
04-21 17:58:27.565 3793 3793 I AppCompatViewInflater: app:theme is now deprecated. Please move to using android:theme instead.
04-21 17:58:27.572 3793 3793 D CompatChangeReporter: Compat change id reported: 63938206; UID 10189; state: ENABLED
--------- switch to events
04-21 17:58:27.574 3793 3793 I wm_on_create_called: [Token=98402184,Component Name=com.whatsapp.home.ui.HomeActivity,Reason=performCreate,time=16ms]
04-21 17:58:27.577 3793 3793 I wm_on_start_called: [Token=98402184,Component Name=com.whatsapp.home.ui.HomeActivity,Reason=handleStartActivity,time=0ms]
04-21 17:58:27.578 3793 3793 I wm_on_resume_called: [Token=98402184,Component Name=com.whatsapp.home.ui.HomeActivity,Reason=RESUME_ACTIVITY,time=1ms]
04-21 17:58:27.583 3793 3793 I wm_on_top_resumed_gained_called: [Token=98402184,Component Name=com.whatsapp.home.ui.HomeActivity,Reason=topStateChangedWhenResumed]
--------- switch to main
04-21 17:58:27.583 3793 3793 D VRI[Main]: visibilityChanged oldVisibility=true newVisibility=false
04-21 17:58:27.601 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.604 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.604 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.610 3793 4808 W GooglePlayServicesUtil: com.whatsapp requires the Google Play Store, but it is missing.
04-21 17:58:27.620 3793 3793 E RecyclerView: No adapter attached; skipping layout
04-21 17:58:27.631 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.634 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.635 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.642 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:27.645 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:27.646 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:27.648 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:27.651 3793 3934 D CompatChangeReporter: Compat change id reported: 270674727; UID 10189; state: ENABLED
04-21 17:58:27.652 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:27.653 3793 3793 E RecyclerView: No adapter attached; skipping layout
04-21 17:58:27.655 3793 5921 W HWUI : Image decoding logging dropped!
--------- switch to events
04-21 17:58:27.673 3793 3793 I viewroot_draw_event: [window=VRI[HomeActivity],event=reportDrawFinished seqId=0]
04-21 17:58:27.676 3793 3793 I viewroot_draw_event: [window=VRI[Main],event=Not drawing due to not visible. Reason=!mAppVisible && !mForceDecorViewVisibility]
--------- switch to main
04-21 17:58:27.679 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.680 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.685 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.686 3793 3793 E RecyclerView: No adapter attached; skipping layout
04-21 17:58:27.687 3793 3793 W View : requestLayout() improperly called by androidx.appcompat.widget.ActionMenuView{a3929e5 V.E...... ......ID 848,0-1080,147} during layout: running second layout pass
04-21 17:58:27.691 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.697 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.698 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.699 3793 5832 W GooglePlayServicesUtil: com.whatsapp requires the Google Play Store, but it is missing.
04-21 17:58:27.716 3793 3793 W View : requestLayout() improperly called by androidx.appcompat.widget.ActionMenuView{a3929e5 V.E...... ......ID 848,0-1080,147} during layout: running second layout pass
04-21 17:58:27.720 3793 3793 D ViewRootImpl: Skipping stats log for color mode
--------- switch to events
04-21 17:58:27.721 3793 3793 I wm_on_stop_called: [Token=153661495,Component Name=com.whatsapp.Main,Reason=LIFECYCLER_STOP_ACTIVITY,time=0ms]
04-21 17:58:27.721 3793 3793 I wm_on_destroy_called: [Token=153661495,Component Name=com.whatsapp.Main,Reason=performDestroy,time=0ms]
--------- switch to main
04-21 17:58:27.721 3793 3793 W WindowOnBackDispatcher: sendCancelIfRunning: isInProgress=false callback=android.view.ViewRootImpl$$ExternalSyntheticLambda13@52c9733
04-21 17:58:27.733 3793 3793 D InsetsController: hide(ime(), fromIme=false)
04-21 17:58:27.733 3793 3793 I ImeTracker: com.whatsapp:c7bf4ae4: onCancelled at PHASE_CLIENT_ALREADY_HIDDEN
04-21 17:58:27.758 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.767 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.768 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.770 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.771 3793 3793 W View : requestLayout() improperly called by androidx.appcompat.widget.ActionMenuView{a3929e5 V.E...... ......ID 848,0-1080,147} during layout: running second layout pass
04-21 17:58:27.775 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.778 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:27.780 3793 5926 W HWUI : Image decoding logging dropped!
04-21 17:58:27.781 3793 3793 W HWUI : Image decoding logging dropped!
04-21 17:58:28.712 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:28.782 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:28.831 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:28.863 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:29.037 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:29.247 3793 5921 W HWUI : Image decoding logging dropped!
04-21 17:58:29.330 3793 5921 W HWUI : Image decoding logging dropped!
--------- switch to events
04-21 17:58:30.396 3793 3793 I view_enqueue_input_event: [eventType=Motion - Cancel,action=com.whatsapp/com.whatsapp.home.ui.HomeActivity]
04-21 17:58:30.403 3793 3793 I wm_on_top_resumed_lost_called: [Token=98402184,Component Name=com.whatsapp.home.ui.HomeActivity,Reason=topStateChangedWhenResumed]
--------- switch to main
04-21 17:58:30.521 3793 3793 D VRI[HomeActivity]: visibilityChanged oldVisibility=true newVisibility=false
--------- switch to events
04-21 17:58:30.539 3793 3793 I viewroot_draw_event: [window=VRI[HomeActivity],event=Not drawing due to not visible. Reason=!mAppVisible && !mForceDecorViewVisibility]
04-21 17:58:30.545 3793 3793 I wm_on_paused_called: [Token=98402184,Component Name=com.whatsapp.home.ui.HomeActivity,Reason=performPause,time=5ms]
04-21 17:58:30.548 3793 3793 I wm_on_stop_called: [Token=98402184,Component Name=com.whatsapp.home.ui.HomeActivity,Reason=STOP_ACTIVITY_ITEM,time=1ms]
--------- switch to main
04-21 17:58:35.653 3793 5832 W com.whatsapp: Cleared Reference was only reachable from finalizer (only reported once)
04-21 17:58:35.719 3793 5832 I com.whatsapp: Explicit concurrent mark compact GC freed 11MB AllocSpace bytes, 26(744KB) LOS objects, 75% free, 14MB/58MB, paused 818us,2.435ms total

157.122ms!<

argante

TGOS It looks like WhatsApp requires Google Play Services. SELinux also doesn't give access to the binder, which is used for IPC.

TGOS

ryrona What do you mean "next to". When is this log from compared to when the crash happened. Because I don't see any signs of any crash in that log file.

Next to ... the Whatsapp log I've uploaded, is a automatic generated kernel crash logfile which I mailed directly to the team.
Idk how much of an issue it represents when such an kernel crash happens, perhaps it was just coincidentally at the same time when whatsapp was only open

« Previous Page