type: crash
osVersion: google/husky/husky:14/AP2A.240705.005/2024071600:user/release-keys
uid: 10154 (u:r:untrusted_app:s0:c154,c256,c512,c768)
cmdline: com.irobot.home
processUptime: 1175s

signal: 11 (SIGSEGV), code 8 (SEGV_MTEAERR)
threadName: com.irobot.home
MTE: enabled

backtrace:
    /apex/com.android.runtime/lib64/bionic/libc.so (write+8, pc d2fb8)
    /system/lib64/libutils.so (android::Looper::wake()+56, pc 11c38)
    /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderProxy::notifyFramePending()+404, pc 4f7074)
    /system/framework/arm64/boot-framework.oat (art_jni_trampoline+108, pc 1dac6c)
    /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl.scheduleTraversals+188, pc 6eee8c)
    /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl.onDescendantInvalidated+104, pc 6edca8)
    /system/framework/arm64/boot-framework.oat (android.view.ViewGroup.onDescendantInvalidated+156, pc 73c14c)
    /system/framework/arm64/boot-framework.oat (android.view.ViewGroup.invalidateChild+1076, pc 73ad24)
    /system/framework/arm64/boot-framework.oat (android.view.View.invalidateInternal+640, pc 6bd920)
    /system/framework/arm64/boot-framework.oat (android.view.View.invalidate+76, pc 6bd5cc)
    /system/framework/arm64/boot-framework.oat (android.view.View.invalidate+40, pc 6bd478)
    /data/app/~~JI3ZeJtLMGp8l7BdCnclbg==/com.irobot.home-IsTYb34uPkdfUut_Klsf2A==/oat/arm64/base.odex (com.google.ar.sceneform.rendering.RenderViewToExternalTexture.dispatchDraw+360, pc 233e7d8)
    /system/framework/arm64/boot-framework.oat (android.view.View.updateDisplayListIfDirty+792, pc 6d1578)
    /system/framework/arm64/boot-framework.oat (android.view.ViewGroup.dispatchGetDisplayList+180, pc 736664)
    /system/framework/arm64/boot-framework.oat (android.view.View.updateDisplayListIfDirty+248, pc 6d1358)
    /system/framework/arm64/boot-framework.oat (android.view.ThreadedRenderer.updateViewTreeDisplayList+84, pc 6a4f64)
    /system/framework/arm64/boot-framework.oat (android.view.ThreadedRenderer.updateRootDisplayList+152, pc 6a4b08)
    /system/framework/arm64/boot-framework.oat (android.view.ThreadedRenderer.draw+104, pc 6a51a8)
    /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl.draw+2868, pc 6ddce4)
    /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl.performDraw+468, pc 6e2ca4)
    /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl.performTraversals+13264, pc 6e6b40)
    /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl.doTraversal+192, pc 6ebbf0)
    /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl$TraversalRunnable.run+52, pc 6375f4)
    /system/framework/arm64/boot-framework.oat (android.view.Choreographer.doCallbacks+944, pc 61c690)
    /system/framework/arm64/boot-framework.oat (android.view.Choreographer.doFrame+2204, pc 61d15c)
    /system/framework/arm64/boot-framework.oat (android.view.Choreographer$FrameDisplayEventReceiver.run+72, pc 6874e8)
    /system/framework/arm64/boot-framework.oat (android.os.Handler.dispatchMessage+68, pc 4f3904)
    /system/framework/arm64/boot-framework.oat (android.os.Looper.loopOnce+980, pc 4f6934)
    /system/framework/arm64/boot-framework.oat (android.os.Looper.loop+244, pc 4f64e4)
    /system/framework/arm64/boot-framework.oat (android.app.ActivityThread.main+1560, pc 2de2e8)
    /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640, pc 3a9440)
    /apex/com.android.art/lib64/libart.so (_jobject* art::InvokeMethod<(art::PointerSize)8>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jobject*, _jobject*, unsigned long)+856, pc 3633e8)
    /apex/com.android.art/lib64/libart.so (art::Method_invoke(_JNIEnv*, _jobject*, _jobject*, _jobjectArray*) (.__uniq.165753521025965369065708152063621506277)+36, pc 363074)
    /system/framework/arm64/boot.oat (art_jni_trampoline+116, pc 9a114)
    /system/framework/arm64/boot-framework.oat (com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run+116, pc 7b63e4)
    /apex/com.android.art/lib64/libart.so (nterp_helper+7636, pc 6d2814)
    /system/framework/framework.jar (com.android.internal.os.ExecInit.main+88, pc c5324)
    /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640, pc 3a9440)
    /apex/com.android.art/lib64/libart.so (art::JNI<false>::CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, std::__va_list)+896, pc 68fb10)
    /system/lib64/libandroid_runtime.so (_JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)+108, pc e5b0c)
    /system/lib64/libandroid_runtime.so (android::AndroidRuntime::callMain(android::String8 const&, _jclass*, android::Vector<android::String8> const&)+340, pc ee074)
    /system/bin/app_process64 (android::AppRuntime::onStarted()+72, pc 29f8)
    /system/framework/arm64/boot-framework.oat (art_jni_trampoline+104, pc 1db198)
    /apex/com.android.art/lib64/libart.so (nterp_helper+152, pc 6d0ad8)
    /system/framework/framework.jar (com.android.internal.os.RuntimeInit.main+48, pc d3d30)
    /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640, pc 3a9440)
    /apex/com.android.art/lib64/libart.so (art::JNI<false>::CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, std::__va_list)+896, pc 68fb10)
    /system/lib64/libandroid_runtime.so (_JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)+108, pc e5b0c)
    /system/lib64/libandroid_runtime.so (android::AndroidRuntime::start(char const*, android::Vector<android::String8> const&, bool)+844, pc f1b4c)
    /system/bin/app_process64 (main+1232, pc 25b0)
    /apex/com.android.runtime/lib64/bionic/libc.so (__libc_init+120, pc 5f0a8)

--- 

```
type: crash
package: com.irobot.home:1607150599, targetSdk 35
osVersion: google/husky/husky:15/AP4A.250105.002/2025010700:user/release-keys
uid: 10154 (u:r:untrusted_app:s0:c154,c256,c512,c768)
cmdline: com.irobot.home
processUptime: 10885s

signal: 11 (SIGSEGV), code 9 (SEGV_MTESERR), faultAddr 500d12de86ed368
threadName: com.irobot.home
MTE: enabled

backtrace:
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libc++_shared.so (std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char>>::basic_string(std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char>> const&)+20, pc c8178)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_jni.so (core::ObstacleReviewViewModelImpl::viewStateForCurrentObstacle() const+156, pc 5be8998)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_jni.so (core::ObstacleReviewViewModelImpl::updateViewState()+240, pc 5beb04c)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_jni.so (core::ObstacleReviewViewModelImpl::showObstacleWithFinish(core::StateEventWithPayload const&, std::__ndk1::shared_ptr<core::ObstacleReviewViewModelImpl> const&)+124, pc 5bea6f4)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_jni.so (core::SynchronousStateMachineWithPayloadContext<void, core::ObstacleReviewViewModelImpl>::process(void (*)(core::StateEventWithPayload const&, std::__ndk1::shared_ptr<core::ObstacleReviewViewModelImpl> const&), core::StateEventWithPayload const&)+220, pc 5bf2c64)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_jni.so (core::ObstacleReviewViewModelImpl::showObstacleWithFinish(core::StateEventWithPayload const&, std::__ndk1::shared_ptr<core::ObstacleReviewViewModelImpl> const&)+508, pc 5bea874)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_jni.so (core::SynchronousStateMachineWithPayloadContext<void, core::ObstacleReviewViewModelImpl>::process(void (*)(core::StateEventWithPayload const&, std::__ndk1::shared_ptr<core::ObstacleReviewViewModelImpl> const&), core::StateEventWithPayload const&)+220, pc 5bf2c64)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_jni.so (core::SynchronousStateMachineWithPayloadContext<void, core::ObstacleReviewViewModelImpl>::processEvent(core::StateEventWithPayload const&)+300, pc 5bf286c)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_jni.so (core::BaseViewModel<core::ObstacleReviewViewModelImpl, core::ObstacleReviewViewModel, core::ObstacleReviewViewState>::dispatch(core::StateEventWithPayload const&)::'lambda'()::operator()() const+132, pc 5bf25fc)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/split_config.arm64_v8a.apk!libcore_base.so (Java_com_irobot_core_ThreadRunner_00024CppProxy_native_1run+32, pc 8f26e4)
    /system/framework/arm64/boot.oat (art_jni_trampoline+112, pc 9cab0)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/oat/arm64/base.odex (com.irobot.core.ThreadRunner$CppProxy.run+40, pc 230d878)
    /data/app/~~eWW4yvTw3qoWtxO4t3wfQg==/com.irobot.home-TKASK-PA809_gsWSdOaQnA==/oat/arm64/base.odex ([DEDUPED] ?.run+56, pc 212d348)
    /system/framework/arm64/boot-framework.oat (android.os.Handler.dispatchMessage+68, pc 51a4f4)
    /system/framework/arm64/boot-framework.oat (android.os.Looper.loopOnce+980, pc 541094)
    /system/framework/arm64/boot-framework.oat (android.os.Looper.loop+244, pc 540c44)
    /system/framework/arm64/boot-framework.oat (android.app.ActivityThread.main+1572, pc 2722a4)
    /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640, pc 41e860)
    /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+212, pc 26e0d4)
    /apex/com.android.art/lib64/libart.so (_jobject* art::InvokeMethod<(art::PointerSize)8>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jobject*, _jobject*, unsigned long)+464, pc 26ef70)
    /apex/com.android.art/lib64/libart.so (art::Method_invoke(_JNIEnv*, _jobject*, _jobject*, _jobjectArray*) (.__uniq.165753521025965369065708152063621506277)+36, pc 66b444)
    /system/framework/arm64/boot.oat (art_jni_trampoline+116, pc 9db34)
    /system/framework/arm64/boot-framework.oat (com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run+116, pc 804824)
    /apex/com.android.art/lib64/libart.so (nterp_helper+7636, pc 7415c4)
    /system/framework/framework.jar (com.android.internal.os.ExecInit.main+88, pc 1cc0c4)
    /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640, pc 41e860)
    /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+212, pc 26e0d4)
    /apex/com.android.art/lib64/libart.so (art::JValue art::InvokeWithVarArgs<_jmethodID*>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+568, pc 26e468)
    /apex/com.android.art/lib64/libart.so (art::JNI<false>::CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, std::__va_list)+144, pc 6d5610)
    /system/lib64/libandroid_runtime.so (_JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)+108, pc dd7ac)
    /system/lib64/libandroid_runtime.so (android::AndroidRuntime::callMain(android::String8 const&, _jclass*, android::Vector<android::String8> const&)+340, pc f06e4)
    /system/bin/app_process64 (android::AppRuntime::onStarted()+72, pc 49e8)
    /system/framework/arm64/boot-framework.oat (art_jni_trampoline+104, pc 1ed258)
    /apex/com.android.art/lib64/libart.so (nterp_helper+152, pc 73f888)
    /system/framework/framework.jar (com.android.internal.os.RuntimeInit.main+48, pc 1db9e0)
    /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640, pc 41e860)
    /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+212, pc 26e0d4)
    /apex/com.android.art/lib64/libart.so (art::JValue art::InvokeWithVarArgs<_jmethodID*>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+568, pc 26e468)
    /apex/com.android.art/lib64/libart.so (art::JNI<false>::CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, std::__va_list)+144, pc 6d5610)
    /system/lib64/libandroid_runtime.so (_JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)+108, pc dd7ac)
    /system/lib64/libandroid_runtime.so (android::AndroidRuntime::start(char const*, android::Vector<android::String8> const&, bool)+844, pc f42bc)
    /system/bin/app_process64 (main+1232, pc 45b0)
    /apex/com.android.runtime/lib64/bionic/libc.so (__libc_init+120, pc 60398)
```