FP2 randomly crashes after update to FPOpenOS 16.08 - surfaceflinger?

Since the update to FPOpenOS 16.08 I experience random reboots and freezes of the UI. I updated OTA using the Fairphone Updater and recalibrated the proximity sensor right away. My phone is encrypted, but I don’t have Xposed nor microG installed.

At random times, sometimes on it own, sometimes during usage, most of the time right after unlocking the phone, the UI freezes. I then either end up at the lock screen again, or the phone does a soft reboot, without asking for the encryption password. Sometimes also the screen stays frozen and I have to force reboot the phone. During the reboots it also sometimes starts optimizing my apps again.

In order to fix it I already did a complete wipe by reinstalling OpenOD 16.08 using fastboot. And also by downgrading via fastboot to 16.07.1 again. However the problem returns after a short time.

Below is the output of adb logcat after a crash on 16.08:

--------- beginning of crash
F/libc    (  230): Fatal signal 4 (SIGILL), code 1, fault addr 0xb6ea2c98 in tid 230 (surfaceflinger)
I/DEBUG   ( 2037): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   ( 2037): Build fingerprint: 'Fairphone/FP2/FP2:5.1/FP2/fp2-sibon-16.08.0:userdebug/release-keys'
I/DEBUG   ( 2037): Revision: '0'
I/DEBUG   ( 2037): ABI: 'arm'
I/DEBUG   ( 2037): pid: 230, tid: 230, name: surfaceflinger  >>> /system/bin/surfaceflinger <<<
I/DEBUG   ( 2037): signal 4 (SIGILL), code 1 (ILL_ILLOPC), fault addr 0xb6ea2c98
I/DEBUG   ( 2037):     r0 00000001  r1 7edf90fc  r2 ffffffc8  r3 b6e86988
I/DEBUG   ( 2037):     r4 b6482000  r5 00000000  r6 be911af4  r7 00000001
I/DEBUG   ( 2037):     r8 00000014  r9 b6474550  sl ffffffcc  fp b6482000
I/DEBUG   ( 2037):     ip b6ebdc48  sp be911680  lr b6ee5d14  pc b6ea2c98  cpsr 20070830
I/DEBUG   ( 2037): 
I/DEBUG   ( 2037): backtrace:
I/DEBUG   ( 2037):     #00 pc 0001ac98  /system/lib/libsurfaceflinger.so
I/DEBUG   ( 2037):     #01 pc 0001a56d  /system/lib/libsurfaceflinger.so
I/DEBUG   ( 2037):     #02 pc 000195c1  /system/lib/libsurfaceflinger.so
I/DEBUG   ( 2037):     #03 pc 00019329  /system/lib/libsurfaceflinger.so
I/DEBUG   ( 2037):     #04 pc 00011059  /system/lib/libutils.so (_ZN7android6Looper9pollInnerEi+408)
I/DEBUG   ( 2037):     #05 pc 0001114d  /system/lib/libutils.so (_ZN7android6Looper8pollOnceEiPiS1_PPv+92)
I/DEBUG   ( 2037):     #06 pc 00016a25  /system/lib/libsurfaceflinger.so
I/DEBUG   ( 2037):     #07 pc 00018efd  /system/lib/libsurfaceflinger.so (_ZN7android14SurfaceFlinger3runEv+8)
I/DEBUG   ( 2037):     #08 pc 00000b4d  /system/bin/surfaceflinger
I/DEBUG   ( 2037):     #09 pc 0000fec9  /system/lib/libc.so (__libc_init+44)
I/DEBUG   ( 2037):     #10 pc 00000c08  /system/bin/surfaceflinger
F/libc    (15875): Fatal signal 4 (SIGILL), code 1, fault addr 0xac27a71e in tid 15904 (RenderThread)
F/libc    (13427): Fatal signal 4 (SIGILL), code 1, fault addr 0xac27a71e in tid 14159 (RenderThread)
F/libc    (12956): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x80 in tid 12956 (surfaceflinger)
F/libc    (18967): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x80 in tid 19080 (RenderThread)
F/libc    (19229): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x80 in tid 19229 (crime.securesms)
F/libc    (19229): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x80 in tid 19485 (AsyncTask #4)
F/libc    (13188): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x80 in tid 13295 (android.display)
I/DEBUG   (17635): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   (17635): Build fingerprint: 'Fairphone/FP2/FP2:5.1/FP2/fp2-sibon-16.08.0:userdebug/release-keys'
I/DEBUG   (17635): Revision: '0'
I/DEBUG   (17635): ABI: 'arm'
I/DEBUG   (17635): pid: 12956, tid: 12956, name: surfaceflinger  >>> /system/bin/surfaceflinger <<<
I/DEBUG   (17635): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x80
I/DEBUG   (17635):     r0 ffffff2c  r1 00000000  r2 0000000c  r3 00000000
I/DEBUG   (17635):     r4 0000000c  r5 b6f19fd8  r6 00000000  r7 00000008
I/DEBUG   (17635):     r8 b5c3a118  r9 b6f19fd8  sl 0003a118  fp 0000000c
I/DEBUG   (17635):     ip 00000001  sp be866da8  lr b6ef3395  pc b6ef2fae  cpsr 80070030
I/DEBUG   (17635): 
I/DEBUG   (17635): backtrace:
I/DEBUG   (17635):     #00 pc 0003efae  /system/lib/libc.so (je_arena_ralloc_no_move+37)
I/DEBUG   (17635):     #01 pc 0003f391  /system/lib/libc.so (je_arena_ralloc+48)
I/DEBUG   (17635):     #02 pc 00048823  /system/lib/libc.so (je_realloc+426)
I/DEBUG   (17635):     #03 pc 0000fe13  /system/lib/libc.so (realloc+10)
I/DEBUG   (17635):     #04 pc 0001fe6b  /system/lib/libbinder.so (_ZN7android6Parcel13continueWriteEj+362)
I/DEBUG   (17635):     #05 pc 00020699  /system/lib/libbinder.so (_ZN7android6Parcel12writeAlignedIiEEiT_+36)
I/DEBUG   (17635):     #06 pc 000206f5  /system/lib/libbinder.so (_ZN7android6Parcel13writeString16EPKtj+26)
I/DEBUG   (17635):     #07 pc 00030fa1  /system/lib/libgui.so
I/DEBUG   (17635):     #08 pc 000293f5  /system/lib/libgui.so (_ZN7android19BufferQueueConsumer13releaseBufferEiyRKNS_2spINS_5FenceEEEPvS6_+412)
I/DEBUG   (17635):     #09 pc 00028233  /system/lib/libgui.so
I/DEBUG   (17635):     #10 pc 0002c719  /system/lib/libgui.so (_ZN7android12ConsumerBase19releaseBufferLockedEiNS_2spINS_13GraphicBufferEEEPvS4_+84)
I/DEBUG   (17635):     #11 pc 0002df33  /system/lib/libgui.so (_ZN7android10GLConsumer19releaseBufferLockedEiNS_2spINS_13GraphicBufferEEEPvS4_+32)
I/DEBUG   (17635):     #12 pc 0002eec5  /system/lib/libgui.so (_ZN7android10GLConsumer22updateAndReleaseLockedERKNS_22IGraphicBufferConsumer10BufferItemE+348)
I/DEBUG   (17635):     #13 pc 000217cd  /system/lib/libsurfaceflinger.so
I/DEBUG   (17635):     #14 pc 000154bf  /system/lib/libsurfaceflinger.so
I/DEBUG   (17635):     #15 pc 0001998d  /system/lib/libsurfaceflinger.so
I/DEBUG   (17635):     #16 pc 0001948f  /system/lib/libsurfaceflinger.so
I/DEBUG   (17635):     #17 pc 00019339  /system/lib/libsurfaceflinger.so
I/DEBUG   (17635):     #18 pc 00011059  /system/lib/libutils.so (_ZN7android6Looper9pollInnerEi+408)
I/DEBUG   (17635):     #19 pc 0001114d  /system/lib/libutils.so (_ZN7android6Looper8pollOnceEiPiS1_PPv+92)
I/DEBUG   (17635):     #20 pc 00016a25  /system/lib/libsurfaceflinger.so
I/DEBUG   (17635):     #21 pc 00018efd  /system/lib/libsurfaceflinger.so (_ZN7android14SurfaceFlinger3runEv+8)
I/DEBUG   (17635):     #22 pc 00000b4d  /system/bin/surfaceflinger
I/DEBUG   (17635):     #23 pc 0000fec9  /system/lib/libc.so (__libc_init+44)
I/DEBUG   (17635):     #24 pc 00000c08  /system/bin/surfaceflinger
I/DEBUG   (17635): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   (17635): Build fingerprint: 'Fairphone/FP2/FP2:5.1/FP2/fp2-sibon-16.08.0:userdebug/release-keys'
I/DEBUG   (17635): Revision: '0'
I/DEBUG   (17635): ABI: 'arm'
I/DEBUG   (17635): pid: 18967, tid: 19080, name: RenderThread  >>> com.android.systemui <<<
I/DEBUG   (17635): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x80
I/DEBUG   (17635): ptrace attach to 18967 failed: Operation not permitted
I/DEBUG   (17635): ptrace attach to 19072 failed: No such process
I/DEBUG   (17635): ptrace attach to 19075 failed: No such process
I/DEBUG   (17635): ptrace attach to 19076 failed: No such process
I/DEBUG   (17635): ptrace attach to 19077 failed: No such process
I/DEBUG   (17635): ptrace attach to 19078 failed: No such process
F/libc    (19821): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x80 in tid 19923 (android.ui)
F/libc    (20048): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x80 in tid 20744 (RenderThread)
I/DEBUG   (19662): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   (19662): Build fingerprint: 'Fairphone/FP2/FP2:5.1/FP2/fp2-sibon-16.08.0:userdebug/release-keys'
I/DEBUG   (19662): Revision: '0'
I/DEBUG   (19662): ABI: 'arm'
I/DEBUG   (19662): pid: 19821, tid: 19923, name: android.ui  >>> system_server <<<
I/DEBUG   (19662): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x80
I/DEBUG   (19662):     r0 ffffff2c  r1 00000000  r2 0000000c  r3 00000000
I/DEBUG   (19662):     r4 0000000c  r5 b6ebefd8  r6 00000000  r7 00000008
I/DEBUG   (19662):     r8 b00300f8  r9 b6ebefd8  sl 000300f8  fp 0000000c
I/DEBUG   (19662):     ip 00000001  sp a25cca88  lr b6e98395  pc b6e97fae  cpsr 800f0030
I/DEBUG   (19662): 
I/DEBUG   (19662): backtrace:
I/DEBUG   (19662):     #00 pc 0003efae  /system/lib/libc.so (je_arena_ralloc_no_move+37)
I/DEBUG   (19662):     #01 pc 0003f391  /system/lib/libc.so (je_arena_ralloc+48)
I/DEBUG   (19662):     #02 pc 00048823  /system/lib/libc.so (je_realloc+426)
I/DEBUG   (19662):     #03 pc 0000fe13  /system/lib/libc.so (realloc+10)
I/DEBUG   (19662):     #04 pc 0001fe6b  /system/lib/libbinder.so (_ZN7android6Parcel13continueWriteEj+362)
I/DEBUG   (19662):     #05 pc 00020699  /system/lib/libbinder.so (_ZN7android6Parcel12writeAlignedIiEEiT_+36)
I/DEBUG   (19662):     #06 pc 000206f5  /system/lib/libbinder.so (_ZN7android6Parcel13writeString16EPKtj+26)
I/DEBUG   (19662):     #07 pc 00032471  /system/lib/libgui.so
I/DEBUG   (19662):     #08 pc 0003841f  /system/lib/libgui.so (_ZN7android8Composer26closeGlobalTransactionImplEb+194)
I/DEBUG   (19662):     #09 pc 00006c75  /data/dalvik-cache/arm/system@framework@boot.oat
I/DEBUG   (19662): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   (19662): Build fingerprint: 'Fairphone/FP2/FP2:5.1/FP2/fp2-sibon-16.08.0:userdebug/release-keys'
I/DEBUG   (19662): Revision: '0'
I/DEBUG   (19662): ABI: 'arm'
I/DEBUG   (19662): pid: 20048, tid: 20744, name: RenderThread  >>> com.android.systemui <<<
I/DEBUG   (19662): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x80
I/DEBUG   (19662):     r0 ffffff2c  r1 00000000  r2 0000000c  r3 00000000
I/DEBUG   (19662):     r4 0000000c  r5 b6ebefd8  r6 00000000  r7 00000008
I/DEBUG   (19662):     r8 a367f8b0  r9 b6ebefd8  sl 0027f8b0  fp 0000000c
I/DEBUG   (19662):     ip 00000001  sp a22c39c0  lr b6e98395  pc b6e97fae  cpsr 80010030
I/DEBUG   (19662): 
I/DEBUG   (19662): backtrace:
I/DEBUG   (19662):     #00 pc 0003efae  /system/lib/libc.so (je_arena_ralloc_no_move+37)
I/DEBUG   (19662):     #01 pc 0003f391  /system/lib/libc.so (je_arena_ralloc+48)
I/DEBUG   (19662):     #02 pc 00048823  /system/lib/libc.so (je_realloc+426)
I/DEBUG   (19662):     #03 pc 0000fe13  /system/lib/libc.so (realloc+10)
I/DEBUG   (19662):     #04 pc 0001fe6b  /system/lib/libbinder.so (_ZN7android6Parcel13continueWriteEj+362)
I/DEBUG   (19662):     #05 pc 00020699  /system/lib/libbinder.so (_ZN7android6Parcel12writeAlignedIiEEiT_+36)
I/DEBUG   (19662):     #06 pc 000206f5  /system/lib/libbinder.so (_ZN7android6Parcel13writeString16EPKtj+26)
I/DEBUG   (19662):     #07 pc 0002ff07  /system/lib/libgui.so
I/DEBUG   (19662):     #08 pc 000367ed  /system/lib/libgui.so (_ZNK7android7Surface5queryEiPi+180)
I/DEBUG   (19662):     #09 pc 000363a3  /system/lib/libgui.so (_ZN7android7Surface10hook_queryEPK13ANativeWindowiPi+10)
I/DEBUG   (19662):     #10 pc 0003abe7  /system/lib/libhwui.so
I/DEBUG   (19662):     #11 pc 0003b49d  /system/lib/libhwui.so
I/DEBUG   (19662):     #12 pc 0003b539  /system/lib/libhwui.so
I/DEBUG   (19662):     #13 pc 0003d157  /system/lib/libhwui.so (_ZN7android10uirenderer12renderthread12RenderThread10threadLoopEv+66)
I/DEBUG   (19662):     #14 pc 0000ef55  /system/lib/libutils.so (_ZN7android6Thread11_threadLoopEPv+112)
I/DEBUG   (19662):     #15 pc 0005b949  /system/lib/libandroid_runtime.so (_ZN7android14AndroidRuntime15javaThreadShellEPv+72)
I/DEBUG   (19662):     #16 pc 0000eac5  /system/lib/libutils.so
I/DEBUG   (19662):     #17 pc 00013fc3  /system/lib/libc.so (_ZL15__pthread_startPv+30)
I/DEBUG   (19662):     #18 pc 00011f0b  /system/lib/libc.so (__start_thread+6)

And the output after a crash on OpenOS 16.07.1:

--------- beginning of crash
F/libc    ( 3987): Fatal signal 11 (SIGSEGV), code 1, fault addr 0xdff71750 in tid 3987 (ndroid.settings)
I/DEBUG   ( 1969): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   ( 1969): Build fingerprint: 'Fairphone/FP2/FP2:5.1/FP2/fp2-sibon-16.07.1:userdebug/release-keys'
I/DEBUG   ( 1969): Revision: '0'
I/DEBUG   ( 1969): ABI: 'arm'
I/DEBUG   ( 1969): pid: 3987, tid: 3987, name: ndroid.settings  >>> com.android.settings <<<
I/DEBUG   ( 1969): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0xdff71750
I/DEBUG   ( 1969):     r0 6ffb8ba8  r1 22d18f00  r2 22d6a6a0  r3 00000000
I/DEBUG   ( 1969):     r4 00000002  r5 22d20400  r6 22d6a6a0  r7 6ffb8ba8
I/DEBUG   ( 1969):     r8 6ff75138  r9 b4827800  sl 00000041  fp 22d18f00
I/DEBUG   ( 1969):     ip a3879880  sp bef6d8f0  lr 00000000  pc 731a2c9a  cpsr 00010030
I/DEBUG   ( 1969): 
I/DEBUG   ( 1969): backtrace:
I/DEBUG   ( 1969):     #00 pc 00ea7c9a  /data/dalvik-cache/arm/system@framework@boot.oat
I/DEBUG   ( 1969):     #01 pc 00000000  <unknown>
F/libc    ( 1970): Fatal signal 4 (SIGILL), code 1, fault addr 0xb5ff86a0 in tid 2138 (rild)
F/libc    ( 1970): Fatal signal 11 (SIGSEGV), code 2, fault addr 0xb545e1b7 in tid 2138 (rild)
F/libc    (15894): Fatal signal 4 (SIGILL), code 1, fault addr 0xac20e71e in tid 15933 (RenderThread)
F/libc    (  230): Fatal signal 4 (SIGILL), code 1, fault addr 0xb6ed25f0 in tid 303 (DispSync)
F/libc    (  230): Fatal signal 4 (SIGILL), code 1, fault addr 0xb6ed25f0 in tid 3381 (Binder_5)
I/DEBUG   (20821): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   (20821): Build fingerprint: 'Fairphone/FP2/FP2:5.1/FP2/fp2-sibon-16.07.1:userdebug/release-keys'
I/DEBUG   (20821): Revision: '0'
I/DEBUG   (20821): ABI: 'arm'
I/DEBUG   (20821): pid: 230, tid: 3381, name: Binder_5  >>> /system/bin/surfaceflinger <<<
I/DEBUG   (20821): signal 4 (SIGILL), code 1 (ILL_ILLOPC), fault addr 0xb6ed25f0
I/DEBUG   (20821):     r0 b6696298  r1 aee9d624  r2 b66e39f0  r3 00000000
I/DEBUG   (20821):     r4 aee9d624  r5 b6695000  r6 aee9d624  r7 b6688cc0
I/DEBUG   (20821):     r8 b6482000  r9 b6482000  sl b6471560  fp 00000000
I/DEBUG   (20821):     ip 00000001  sp aee9d5e0  lr b6ed3fe1  pc b6ed25f0  cpsr 600e0030
I/DEBUG   (20821): 
I/DEBUG   (20821): backtrace:
I/DEBUG   (20821):     #00 pc 0000c5f0  /system/lib/libsurfaceflinger.so
I/DEBUG   (20821):     #01 pc 0000dfdd  /system/lib/libsurfaceflinger.so
I/DEBUG   (20821):     #02 pc 0000df71  /system/lib/libsurfaceflinger.so
I/DEBUG   (20821):     #03 pc 0001cacf  /system/lib/libsurfaceflinger.so
I/DEBUG   (20821):     #04 pc 0001c795  /system/lib/libsurfaceflinger.so
I/DEBUG   (20821):     #05 pc 000333e9  /system/lib/libgui.so (_ZN7android17BnSurfaceComposer10onTransactEjRKNS_6ParcelEPS1_j+420)
I/DEBUG   (20821):     #06 pc 0001e05d  /system/lib/libsurfaceflinger.so
I/DEBUG   (20821):     #07 pc 00017fad  /system/lib/libbinder.so (_ZN7android7BBinder8transactEjRKNS_6ParcelEPS1_j+60)
I/DEBUG   (20821):     #08 pc 0001cf89  /system/lib/libbinder.so (_ZN7android14IPCThreadState14executeCommandEi+564)
I/DEBUG   (20821):     #09 pc 0001d0bb  /system/lib/libbinder.so (_ZN7android14IPCThreadState20getAndExecuteCommandEv+38)
I/DEBUG   (20821):     #10 pc 0001d0fd  /system/lib/libbinder.so (_ZN7android14IPCThreadState14joinThreadPoolEb+48)
I/DEBUG   (20821):     #11 pc 0002127f  /system/lib/libbinder.so
I/DEBUG   (20821):     #12 pc 0000ef55  /system/lib/libutils.so (_ZN7android6Thread11_threadLoopEPv+112)
I/DEBUG   (20821):     #13 pc 0000eac5  /system/lib/libutils.so
I/DEBUG   (20821):     #14 pc 00013fc3  /system/lib/libc.so (_ZL15__pthread_startPv+30)
I/DEBUG   (20821):     #15 pc 00011f0b  /system/lib/libc.so (__start_thread+6)
F/libc    ( 1973): Fatal signal 13 (SIGPIPE), code 0 in tid 1973 (installd)

Has anybody else experienced something like this? What can I do to fix this?

Yes, yesterday I had the very same issue for the first time on 16.08: the screen froze and I had to push the power button, then the phone did a soft reboot.
I didn’t have the phone connected to the pc, so I couldn’t get the logcat trace but the symptoms are the same as yours, please consider I don’t have an encrypted FS, I DO have XPosed and I flashed 16.08 manually by downloading the ota-userdebug file and flashing with TWRP.
I didn’t install 16.07, so I can’t provide any information about this version, and on 16.06 I suffered the power off problems as many other users in this forum, although after 3 days with 16.08 I didn’t see any reboot or poweroff yet.
Bye! :slight_smile:

This topic was automatically closed 183 days after the last reply. New replies are no longer allowed.