Multiple crashes caused but secondary profile =app failures

Chalmers

Hi. First time on forum. I've been using GOS for about 6 weeks, created a secondary profile yesterday, which caused several complete phone lockups, including complete UI crash. I've had problems getting Duolingo to recognize microphone. After most end reboot, I can no longer log in to Duolingo. No matter what I try, it tells me I have the wrong password, though it is definitely the correct password. A summary of everything that I've tried follows below:

Device: Pixel 8, GrapheneOS, Sandboxed Google Play in Owner profile
Problem: After a secondary profile crash that took down the entire UI multiple times, two issues emerged:
Duolingo speaking exercises fail instantly before microphone input is detected
Duolingo (and possibly other apps) reject login with correct credentials, citing Play Integrity API failure
Diagnostic findings:
Play Services microphone permission had been silently revoked by the crash — granted manually, no improvement
Play Services was showing as offline/unauthenticated — signed back in, no improvement
Google Play Store logs showed repeated SELinux denials: avc: denied { read } for comm="android.vending" name="u:object_r:build_attestation_prop:s0" — the Play Store cannot read build attestation properties, causing Play Integrity to fail
Full uninstall and reinstall of Play Services and Play Store did not resolve the SELinux denial
After reinstall, Duolingo still rejects correct credentials via Play Integrity API
Left device idle for 2+ hours post-reinstall, problem persists
GMS config was not uninstalled and remains present
Google Services Framework status uncertain — may or may not have been fully removed
Current state: Fresh Play Services + Play Store install, signed into Google account, Play Integrity attestation still apparently failing. Suspect SELinux context corruption survived the reinstall, possibly originating in GSF or below.
Question: Is there a way to fully reset the SELinux security context for the sandboxed Play stack short of a factory reset? Is GSF the missing piece?

Johnnyloans

Chalmers Google Play Store logs showed repeated SELinux denials

Lots of apps have this. every successful esim activation on GOS has these.

My play store works flawlessly and here are my own play store logs with denials:

04-28 11:17:10.700 12506 12506 W libc    : Access denied finding property "ro.product.name_for_attestation"
04-28 11:17:10.700 12506 12506 W libc    : Access denied finding property "ro.product.device_for_attestation"
04-28 11:17:10.700 12506 12506 W libc    : Access denied finding property "ro.product.manufacturer_for_attestation"
04-28 11:17:10.701 12506 12506 W libc    : Access denied finding property "ro.product.brand_for_attestation"
04-28 11:17:10.701 12506 12506 W libc    : Access denied finding property "ro.product.model_for_attestation"

04-28 11:17:11.038 12526 12526 I auditd  : avc=type=1400 audit(0.0:14708): avc:  denied  { read } for  comm="ding:background" name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=744 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.038 12526 12526 W ding:background: type=1400 audit(0.0:14708): avc:  denied  { read } for  name="u:object_r:odsign_prop:s0" dev="tmpfs" ino=744 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:odsign_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.043 12526 12526 E cutils-trace: Error opening trace file: No such file or directory (2)
04-28 11:17:11.042 12526 12526 I auditd  : avc=type=1400 audit(0.0:14709): avc:  denied  { getattr } for  comm="ding:background" path="/apex/apex-info-list.xml" dev="tmpfs" ino=88 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:apex_info_file:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.042 12526 12526 W ding:background: type=1400 audit(0.0:14709): avc:  denied  { getattr } for  path="/apex/apex-info-list.xml" dev="tmpfs" ino=88 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:apex_info_file:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 I auditd  : avc=type=1400 audit(0.0:14710): avc:  denied  { read } for  comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 W main    : type=1400 audit(0.0:14710): avc:  denied  { read } for  name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 I auditd  : avc=type=1400 audit(0.0:14711): avc:  denied  { read } for  comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 W main    : type=1400 audit(0.0:14711): avc:  denied  { read } for  name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 I auditd  : avc=type=1400 audit(0.0:14712): avc:  denied  { read } for  comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 W main    : type=1400 audit(0.0:14712): avc:  denied  { read } for  name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 I auditd  : avc=type=1400 audit(0.0:14713): avc:  denied  { read } for  comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 W main    : type=1400 audit(0.0:14713): avc:  denied  { read } for  name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 I auditd  : avc=type=1400 audit(0.0:14714): avc:  denied  { read } for  comm="main" name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending
04-28 11:17:11.182 12526 12526 W main    : type=1400 audit(0.0:14714): avc:  denied  { read } for  name="u:object_r:build_attestation_prop:s0" dev="tmpfs" ino=552 scontext=u:r:untrusted_app:s0:c172,c256,c512,c768 tcontext=u:object_r:build_attestation_prop:s0 tclass=file permissive=0 app=com.android.vending

I've had problems getting Duolingo to recognize microphone.
Duolingo speaking exercises fail instantly before microphone input is detected

You probably need this for speech to text:
Google Speech Recognition & Synthesis
Then make it available for use:
settings > system > language > speech > pick google speech synthesis that you just installed
Without it, duolingo won't offer those lessons. (I think, haven't done this)

play Integrity attestation still apparently failing.

This will probably happens on every GOS device

created a secondary profile yesterday, which caused several complete phone lockups, including complete UI crash.

Not sure what would cause this. Have you changed anything with system apps like disabling or removing permissions, use adb, use developer options, or have developer options currently enabled? (Developer options should be off)