Pixel 8 crashing constantly after latest update

cbroe

Managed to get one log out. Difficult as it breaks wifi/cell internet connectivity when crashing.

`
type: crash
flags: dev options enabled
osVersion: google/shiba/shiba:16/BP2A.250705.008/2025070800:user/release-keys
uid: 10110 (u:r:systemui_app:s0:c110,c256,c512,c768)
cmdline: com.android.systemui
processUptime: 7353s

signal: 11 (SIGSEGV), code 8 (SEGV_MTEAERR)
threadName: RenderThread
MTE: enabled

backtrace:
/apex/com.android.runtime/lib64/bionic/libc.so (syscall+32, pc a4a60)
/apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_unlock+108, pc 8ffbc)
/system/lib64/libft2.so (TT_Vary_Apply_Glyph_Deltas+1012, pc 957e4)
/system/lib64/libft2.so (TT_Process_Simple_Glyph+232, pc 967b8)
/system/lib64/libft2.so (load_truetype_glyph+772, pc 94104)
/system/lib64/libft2.so (load_truetype_glyph+1956, pc 945a4)
/system/lib64/libft2.so (tt_glyph_load.llvm.8637272388931141111+1164, pc 88d1c)
/system/lib64/libft2.so (FT_Load_Glyph+868, pc 363a4)
/system/lib64/libhwui.so (SkScalerContext_FreeType::generateMetrics(SkGlyph const&, SkArenaAlloc)+296, pc 76b748)
/system/lib64/libhwui.so (SkScalerContext::internalMakeGlyph(SkPackedGlyphID, SkMask::Format, SkArenaAlloc)+92, pc 2f3b5c)
/system/lib64/libhwui.so (SkStrike::digestFor(skglyph::ActionType, SkPackedGlyphID)+276, pc 4e5ef4)
/system/lib64/libhwui.so (sktext::gpu::SubRunContainer::MakeInAlloc(sktext::GlyphRunList const&, SkMatrix const&, SkPaint const&, SkStrikeDeviceInfo, sktext::StrikeForGPUCacheInterface, sktext::gpu::SubRunAllocator, sktext::gpu::SubRunContainer::SubRunCreationBehavior, char const)+4012, pc 5182bc)
/system/lib64/libhwui.so (sktext::gpu::TextBlobRedrawCoordinator::drawGlyphRunList(SkCanvas, SkMatrix const&, sktext::GlyphRunList const&, SkPaint const&, SkStrikeDeviceInfo, std::1::function<void (sktext::gpu::AtlasSubRun const, SkPoint, SkPaint const&, sk_sp<SkRefCnt>, sktext::gpu::RendererData)> const&)+4084, pc 288fc4)
/system/lib64/libhwui.so (skgpu::ganesh::Device::onDrawGlyphRunList(SkCanvas, sktext::GlyphRunList const&, SkPaint const&)+344, pc 51e728)
/system/lib64/libhwui.so (SkCanvas::onDrawGlyphRunList(sktext::GlyphRunList const&, SkPaint const&)+392, pc 4dbdc8)
/system/lib64/libhwui.so (SkCanvas::onDrawTextBlob(SkTextBlob const, float, float, SkPaint const&)+96, pc 56d1b0)
/system/lib64/libhwui.so (SkCanvas::drawTextBlob(SkTextBlob const, float, float, SkPaint const&)+216, pc 2be588)
/system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::drawContent(SkCanvas) const+3332, pc 222f54)
/system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::onDraw(SkCanvas)+348, pc 67249c)
/system/lib64/libhwui.so (SkDrawable::draw(SkCanvas, SkMatrix const)+120, pc 360618)
/system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::drawContent(SkCanvas) const+3332, pc 222f54)
/system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::forceDraw(SkCanvas) const+244, pc 2b3374)
/system/lib64/libhwui.so (android::uirenderer::skiapipeline::SkiaPipeline::renderLayerImpl(android::uirenderer::RenderNode, android::uirenderer::Rect const&)+448, pc 2ac7c0)
/system/lib64/libhwui.so (android::uirenderer::skiapipeline::SkiaGpuPipeline::renderLayersImpl(android::uirenderer::LayerUpdateQueue const&, bool)+128, pc 696f60)
/system/lib64/libhwui.so (android::uirenderer::skiapipeline::SkiaPipeline::renderFrame(android::uirenderer::LayerUpdateQueue const&, SkRect const&, std::1::vector<android::sp<android::uirenderer::RenderNode>, std::1::allocator<android::sp<android::uirenderer::RenderNode>>> const&, bool, android::uirenderer::Rect const&, sk_sp<SkSurface>, SkMatrix const&)+124, pc 2a8a2c)
/system/lib64/libhwui.so (android::uirenderer::skiapipeline::SkiaVulkanPipeline::draw(android::uirenderer::renderthread::Frame const&, SkRect const&, SkRect const&, android::uirenderer::LightGeometry const&, android::uirenderer::LayerUpdateQueue, android::uirenderer::Rect const&, bool, android::uirenderer::LightInfo const&,std::1::vector<android::sp<android::uirenderer::RenderNode>, std::1::allocator<android::sp<android::uirenderer::RenderNode>>> const&, android::uirenderer::FrameInfoVisualizer, android::uirenderer::renderthread::HardwareBufferRenderParams const&, std::1::mutex&)+320, pc 5f14e0)
/system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::draw(bool)+812, pc 28db1c)
/system/lib64/libhwui.so (android::uirenderer::renderthread::DrawFrameTask::run()+1536, pc 28c300)
/system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+788, pc 54d8f4)
/system/lib64/libutils.so (android::Thread::_threadLoop(void)+252, pc 1956c)
/system/lib64/libutils.so (libutil_thread_trampoline(void) (.uniq.226528677032898775202282855395389835431)+24, pc 1bdb8)
/apex/com.android.runtime/lib64/bionic/libc.so (pthread_start(void)+180, pc 8e254)
/apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68, pc 7f9f4)
`

Byteang3l

cbroe I would try clearing the cache partition in the recovery menu, if that doesn't work I would try safe mode and see if the crashes stop there. If so then it's definitely a user app causing trouble.

cbroe

Here's another. These occur constantly when interacting with the UI in any way.

`
type: crash
flags: dev options enabled
osVersion: google/shiba/shiba:16/BP2A.250705.008/2025070800:user/release-keys
uid: 10119 (u:r:priv_app:s0:c512,c768)
cmdline: com.android.launcher3
processUptime: 173s

signal: 11 (SIGSEGV), code 9 (SEGV_MTESERR), faultAddr 900bd3e1709dc50
threadName: RenderThread
MTE: enabled

backtrace:
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+3140, pc 204474)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00) /system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTree(android::uirenderer::TreeInfo&)+1532, pc 215c5c)
/system/lib64/libhwui.so (android::uirenderer::RootRenderNode::prepareTree(android::uirenderer::TreeInfo&)+164, pc 5b8054)
/system/lib64/libhwui.so (android::uirenderer::renderthread::DrawFrameTask::run()+1116, pc 28c15c)
/system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+788, pc 54d8f4)
/system/lib64/libutils.so (android::Thread::_threadLoop(void)+252, pc 1956c)
/system/lib64/libutils.so (libutil_thread_trampoline(void) (.uniq.226528677032898775202282855395389835431)+24, pc 1bdb8)
/apex/com.android.runtime/lib64/bionic/libc.so (pthread_start(void*)+180, pc 8e254)
/apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68, pc 7f9f4)
`

de0u

cbroe First suggestion: can you turn developer options off?

cbroe

Developer options off - no change.

Clear cache in recovery menu is not an available option.

Safe mode - still crashing the launcher multiple times just poking around in the system settings menu.

other8026

cbroe Developer options off

Do you recall if you ever changed any of those settings? If you did, can you remember which ones?

cbroe

other8026 Never changed any. Was enabled only to use USB tethering (easytether) which requires usb debugging to function.

other8026

cbroe strange. We're not getting a lot of reports about this, so it could be a result of some really rare bug triggered by your setup or maybe something to do with the hardware somehow. Unless the developers have a way of reproducing the crash, they won't be able to figure out what's causing it.

Kaves I will attach logs asap.

This would be helpful in determining whether you have the same problem or not.

Kaves

Pixel 7a, same problem here. After the latest update device optimization has been a lot worse. Putting the passcode or going into the notification bar makes the device a lot slower, like incredibly slower. I will attach logs asap. After the reboot device is (most of the times) usable again until 3 or 4 times where it returns back to the slow state with constant app & system UI crashes.

de0u

cbroe Well... since both of those crash logs are in UI code, can you guess at anything that might have been changed? What is the system language set to? Were any adjustments made to, maybe, font-size or other accessibility settings?

I am shooting in the dark here, because as other8026 says, this doesn't seem to be common.

Also, so far there are two crash dumps that are different, so more crash dumps might well help.

cbroe

So I guess i'll just not have a working phone until the next update pushes out and hopefully unbreaks whatever ruined it.

cbroe

de0u Nothing changed. Phone worked fine. Update happened - crashes constantly. No setting changes to accessibility or anything else.

de0u

cbroe I'm sorry to hear that. If some of the newer crashes look obviously different from the two you posted, and if it's feasible, can you post some of them?

I realize that "look different" may not be clear, so here's what I mean. The first stack trace started off with:

[...]
signal: 11 (SIGSEGV), code 8 (SEGV_MTEAERR)
[...]
/apex/com.android.runtime/lib64/bionic/libc.so (syscall+32, pc a4a60)
/apex/com.android.runtime/lib64/bionic/libc.so (pthread_mutex_unlock+108, pc 8ffbc)
/system/lib64/libft2.so (TT_Vary_Apply_Glyph_Deltas+1012, pc 957e4)
/system/lib64/libft2.so (TT_Process_Simple_Glyph+232, pc 967b8)

In simple terms, somebody was trying to draw something, and then unlocked a mutex, and the kernel noticed that there had been an MTE trip.

Here's the start of the second trace:

[...]
signal: 11 (SIGSEGV), code 9 (SEGV_MTESERR), faultAddr 900bd3e1709dc50
[...]
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+3140, pc 204474)
[...]

Again, somebody was trying to draw something, but it wasn't the same drawing code [Edit: I mis-read the crash reason; this one is MTE also.]

So a couple more crash dumps might shed light on what's going wrong.

cbroe

Updated to latest version, 2025071900. Still crashy af. Here's some more dumps.

`
type: crash
osVersion: google/shiba/shiba:16/BP2A.250705.008/2025071900:user/release-keys
uid: 1000 (u:r:system_server:s0)
cmdline: system_server
processUptime: 2099s

signal: 11 (SIGSEGV), code 1 (SEGV_MAPERR), faultAddr 458
cause: null pointer dereference
threadName: RenderThread
MTE: enabled

backtrace:
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0, std::1::allocator<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0>, void (android::uirenderer::RenderNode)>::operator()(android::uirenderer::RenderNode&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+20, pc 68c8c4)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::destroyHardwareResources(android::uirenderer::TreeInfo)+304, pc 3a3fe0)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0, std::1::allocator<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0>, void (android::uirenderer::RenderNode)>::operator()(android::uirenderer::RenderNode&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+76, pc 68c8fc)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::destroyHardwareResources(android::uirenderer::TreeInfo)+304, pc 3a3fe0)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0, std::1::allocator<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0>, void (android::uirenderer::RenderNode)>::operator()(android::uirenderer::RenderNode&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+76, pc 68c8fc)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::destroyHardwareResources(android::uirenderer::TreeInfo)+304, pc 3a3fe0)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0, std::1::allocator<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0>, void (android::uirenderer::RenderNode)>::operator()(android::uirenderer::RenderNode&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+76, pc 68c8fc)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::destroyHardwareResources(android::uirenderer::TreeInfo)+304, pc 3a3fe0)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0, std::1::allocator<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0>, void (android::uirenderer::RenderNode)>::operator()(android::uirenderer::RenderNode&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+76, pc 68c8fc)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::destroyHardwareResources(android::uirenderer::TreeInfo)+304, pc 3a3fe0)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0, std::1::allocator<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0>, void (android::uirenderer::RenderNode)>::operator()(android::uirenderer::RenderNode&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+76, pc 68c8fc)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::destroyHardwareResources(android::uirenderer::TreeInfo)+304, pc 3a3fe0)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0, std::1::allocator<android::uirenderer::RenderNode::deleteDisplayList(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo)::$0>, void (android::uirenderer::RenderNode)>::operator()(android::uirenderer::RenderNode&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+76, pc 68c8fc)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::destroyHardwareResources(android::uirenderer::TreeInfo)+304, pc 3a3fe0)
/system/lib64/libhwui.so (std::1::packaged_task_func<android::uirenderer::renderthread::RenderProxy::destroyHardwareResources()::$0, std::1::allocator<android::uirenderer::renderthread::RenderProxy::destroyHardwareResources()::$0>, void ()>::operator()() (.uniq.110435125376433984577876079601927332169.a8d0c9963c929235b0b15fb6b3583501)+120, pc 567a78)
/system/lib64/libhwui.so (std::1::function::func<std::1::future<decltype(fp())> android::uirenderer::CommonPool::async<android::android_view_ThreadedRenderer_preInitBufferAllocator(_JNIEnv, jclass)::$0>(android::android_view_ThreadedRenderer_preInitBufferAllocator(_JNIEnv, jclass)::$0&&)::'lambda'(), std::1::allocator<std::1::future<decltype(fp())> android::uirenderer::CommonPool::async<android::android_view_ThreadedRenderer_preInitBufferAllocator(_JNIEnv, jclass)::$0>(android::android_view_ThreadedRenderer_preInitBufferAllocator(_JNIEnv, jclass)::$0&&)::'lambda'()>, void ()>::operator()() (.uniq.98142604362848954914070330402921370559.78790a34cc3fbcbe13dc6089df1d560d)+92, pc 46404c)
/system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+788, pc 54d8f4)
/system/lib64/libutils.so (android::Thread::_threadLoop(void)+252, pc 1956c)
/system/lib64/libutils.so (libutil_thread_trampoline(void) (.uniq.226528677032898775202282855395389835431)+24, pc 1bdb8)
/apex/com.android.runtime/lib64/bionic/libc.so (pthread_start(void)+180, pc 8e254)
/apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68, pc 7f9f4)
`

`
type: crash
osVersion: google/shiba/shiba:16/BP2A.250705.008/2025071900:user/release-keys
uid: 10110 (u:r:systemui_app:s0:c110,c256,c512,c768)
cmdline: com.android.systemui
processUptime: 343s

signal: 11 (SIGSEGV), code 9 (SEGV_MTESERR), faultAddr a00c9f8cebad570
threadName: RenderThread
MTE: enabled

`
type: crash
osVersion: google/shiba/shiba:16/BP2A.250705.008/2025071900:user/release-keys
uid: 10119 (u:r:priv_app:s0:c512,c768)
cmdline: com.android.launcher3
processUptime: 403s

signal: 11 (SIGSEGV), code 9 (SEGV_MTESERR), faultAddr 500d29f6d125910
threadName: RenderThread
MTE: enabled

backtrace:
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+2424, pc 2041a8)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)+1488, pc 203e00)
/system/lib64/libhwui.so (std::1::function::func<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0, std::1::allocator<android::uirenderer::RenderNode::prepareTreeImpl(android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)::$0>, void (android::uirenderer::RenderNode, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool)>::operator()(android::uirenderer::RenderNode&&, android::uirenderer::TreeObserver&, android::uirenderer::TreeInfo&, bool&&) (.uniq.10397782060659495822194741288103189803.203475ed07c5ffb5392ca8a2a4b019a1)+44, pc 57584c)
/system/lib64/libhwui.so (android::uirenderer::RenderNode::prepareTree(android::uirenderer::TreeInfo&)+1532, pc 215c5c)
/system/lib64/libhwui.so (android::uirenderer::RootRenderNode::prepareTree(android::uirenderer::TreeInfo&)+164, pc 5b8054)
/system/lib64/libhwui.so (android::uirenderer::renderthread::DrawFrameTask::run()+1116, pc 28c15c)
/system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+788, pc 54d8f4)
/system/lib64/libutils.so (android::Thread::_threadLoop(void)+252, pc 1956c)
/system/lib64/libutils.so (libutil_thread_trampoline(void) (.uniq.226528677032898775202282855395389835431)+24, pc 1bdb8)
/apex/com.android.runtime/lib64/bionic/libc.so (pthread_start(void*)+180, pc 8e254)
/apex/com.android.runtime/lib64/bionic/libc.so (start_thread+68, pc 7f9f4)
`

de0u

cbroe The common element I see in the crashes is that something was trying to draw something.

I took a look at the GrapheneOS issue tracker, and plugged in what seem to me to be key terms from your crash dumps, including RenderThread, without finding any open issues. There are some closed issues that seem a little similar, e.g.:

This leads me to suspect -- though with low confidence -- that you may be experiencing a GPU hardware failure.

In terms of what to do about it, you might try:

Wiping all user data via a "factory reset" from Recovery,
Using the device for a few days under GrapheneOS,
If crashes continue, flashing back to the stock OS,
If crashes continue under the stock OS, look into warranty service, repair, or replacement.

Please understand that I am not an expert on the relevant code. Perhaps others will chime in.

But overall I suspect the hardware is bad.

cbroe

de0u

Thanks for chiming in.

Tried the factory reset. Crashing continued as before.

Reverted to stock OS. Played around with it for about 20 minutes, did not crash.

I would have leaned toward your analysis as per it being a hardware issue, but working fine stock seems to throw a wrench in that theory.

de0u

cbroe I would have leaned toward your analysis as per it being a hardware issue, but working fine stock seems to throw a wrench in that theory.

Personally I would be nervous about making a decision based on 20 minutes, but you know how often the device was crashing under GrapheneOS.

Here are some suggestions I just made in another thread: https://discuss.grapheneos.org/d/24475-google-pixel-9-with-grapheneos-periodically-crashes-and-restarts/8

Then... I realize this question is poorly formed, but might there be something atypical about your UI setup? Maybe:

Non-default launcher
Something atypical about wallpaper
Large, or small, fonts selected
Unusual system language setting, esp. with a non-Roman alphabet
Alternate color profile, Night Light, etc.

If it seems like I am grasping at straws, I am.

If you reinstall GrapheneOS, does the crashing start right away, or only after a bunch of apps are installed?

cbroe

de0u

Given that the crashing occurred every 3-10 seconds under GrapheneOS with any UI interaction, 20 minutes without one crash was relatively amazing.

Zero modification of the UI setup, completely stock everything. Note that same issue persisted even after factory reset, zero apps installed. That should be identical to a reinstall, no?

de0u

cbroe Note that same issue persisted even after factory reset, zero apps installed. That should be identical to a reinstall, no?

Probably!

To some extent what to do depends on your goals. If the goal is to get GrapheneOS running on that device, it may be useful to try some things that don't clearly "make sense". And collecting and posting information (de0u) might also be productive.

Or, in theory perhaps you could mail that specific device to a GrapheneOS developer for investigation (but probably only in theory).

Part of the problem is that so far I am aware of one report of a Pixel 8 with GPU-related crashes every 30 seconds immediately after a fresh install. Meanwhile, many many many people are running GrapheneOS on Pixel 8's without that issue.