[BUG] Crash

- Device: Pixel Tablet
- OS: GrapheneOS 2025122501
- Version: v17.8.0 ALPHA 1 (tor 0.4.8.21)

Logs 1

```
[...]
12-27 ##:28:05.606 21535 21535 I TorService: Acquired lock
--------- switch to crash
12-27 ##:28:05.609 21535 21624 F libc : Fatal signal 6 (SIGABRT), code -1 (SI_QUEUE) in tid 21624 (tor), pid 21535 (ect.android:tor)
--------- switch to main
12-27 ##:28:05.727 21627 21627 E cutils-trace: Error opening trace file: No such file or directory (2)
12-27 ##:28:05.834 21628 21628 I crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstoneProto
12-27 ##:28:05.836 21628 21628 I crash_dump64: performing dump of process 21535 (target tid = 21624)
--------- switch to crash
12-27 ##:28:05.877 21535 21624 F libc : Crash due to signal: failed to wait for crash_dump helper: No child processes
--------- switch to main
12-27 ##:28:06.008 21628 21628 E cutils-trace: Error opening trace file: No such file or directory (2)
--------- switch to crash
12-27 ##:28:06.397 21628 21628 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
12-27 ##:28:06.397 21628 21628 F DEBUG : Build fingerprint: 'google/tangorpro/tangorpro:16/BP4A.251205.006/2025121701:user/release-keys'
12-27 ##:28:06.397 21628 21628 F DEBUG : Kernel Release: '6.1.158-android14-11-g3571db04225c'
12-27 ##:28:06.397 21628 21628 F DEBUG : Revision: 'MP1.0'
12-27 ##:28:06.397 21628 21628 F DEBUG : ABI: 'arm64'
12-27 ##:28:06.397 21628 21628 F DEBUG : Timestamp: 2025-12-27 ##:28:05.906140534+0000
12-27 ##:28:06.397 21628 21628 F DEBUG : Process uptime: 34s
12-27 ##:28:06.397 21628 21628 F DEBUG : Executable: /system/bin/app_process64
12-27 ##:28:06.397 21628 21628 F DEBUG : Cmdline: org.torproject.android:tor
12-27 ##:28:06.397 21628 21628 F DEBUG : pid: 21535, tid: 21624, name: tor >>> org.torproject.android:tor <<<
12-27 ##:28:06.397 21628 21628 F DEBUG : uid: 2510182
12-27 ##:28:06.397 21628 21628 F DEBUG : tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
12-27 ##:28:06.397 21628 21628 F DEBUG : esr: 0000000092000006 (Data Abort Exception 0x24)
12-27 ##:28:06.398 21628 21628 F DEBUG : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
12-27 ##:28:06.398 21628 21628 F DEBUG : x0 0000000000000000 x1 0000000000005478 x2 0000000000000006 x3 0000cd84cd5f1640
12-27 ##:28:06.398 21628 21628 F DEBUG : x4 6060353137623438 x5 6060353137623438 x6 6060353137623438 x7 7f7f7f7f7f7f7f7f
12-27 ##:28:06.398 21628 21628 F DEBUG : x8 00000000000000f0 x9 df822e8f0f671700 x10 0000000000000001 x11 0000d0b2dbee7df0
12-27 ##:28:06.398 21628 21628 F DEBUG : x12 0000000000000033 x13 0000000000020180 x14 0000000000036229 x15 0000000000282800
12-27 ##:28:06.398 21628 21628 F DEBUG : x16 0000d0b2dbf50358 x17 0000d0b2dbf37e80 x18 0000cd83faed0000 x19 000000000000541f
12-27 ##:28:06.398 21628 21628 F DEBUG : x20 0000000000005478 x21 00000000ffffffff x22 0000000000000017 x23 0000000000000000
12-27 ##:28:06.398 21628 21628 F DEBUG : x24 0000000000000000 x25 0000cd844017ba30 x26 0000cd84cd5fb040 x27 000000000257cfc8
12-27 ##:28:06.398 21628 21628 F DEBUG : x28 000000006f2ef150 x29 0000cd84cd5f16c0
12-27 ##:28:06.398 21628 21628 F DEBUG : lr 0000d0b2dbed0248 sp 0000cd84cd5f1640 pc 0000d0b2dbed026c pst 0000000000001000
12-27 ##:28:06.398 21628 21628 F DEBUG : esr 0000000092000006
12-27 ##:28:06.398 21628 21628 F DEBUG : 16 total frames
12-27 ##:28:06.398 21628 21628 F DEBUG : backtrace:
12-27 ##:28:06.398 21628 21628 F DEBUG : #00 pc 000000000007c26c /apex/com.android.runtime/lib64/bionic/libc.so (abort+156) (BuildId: 6c25e055b49ff5a22aad8884c9172d5b)
12-27 ##:28:06.398 21628 21628 F DEBUG : #01 pc 00000000005724e0 /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (tor_raw_abort_+16)
12-27 ##:28:06.398 21628 21628 F DEBUG : #02 pc 000000000057e41c /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (tor_abort_+16)
12-27 ##:28:06.398 21628 21628 F DEBUG : #03 pc 00000000004a6a8c /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (hs_circuitmap_init+140)
12-27 ##:28:06.398 21628 21628 F DEBUG : #04 pc 00000000004aff10 /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (hs_init+32)
12-27 ##:28:06.398 21628 21628 F DEBUG : #05 pc 000000000040748c /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (tor_init+132)
12-27 ##:28:06.398 21628 21628 F DEBUG : #06 pc 0000000000407cf4 /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (tor_run_main+168)
12-27 ##:28:06.398 21628 21628 F DEBUG : #07 pc 00000000004065dc /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (Java_org_torproject_jni_TorService_runMain+40)
12-27 ##:28:06.398 21628 21628 F DEBUG : #08 pc 00000000002e1a00 /system/framework/arm64/boot.oat (art_jni_trampoline+112) (BuildId: 740692a60e6da686303b9bf9ebfe29fc7bab20cc)
12-27 ##:28:06.398 21628 21628 F DEBUG : #09 pc 000000000181cfc4 /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/oat/arm64/base.odex (org.torproject.jni.TorService$3.run+1924)
12-27 ##:28:06.398 21628 21628 F DEBUG : #10 pc 00000000002fd594 /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 18171138f568afd8f62ab03b00113051)
12-27 ##:28:06.398 21628 21628 F DEBUG : #11 pc 0000000000270dcc /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+220) (BuildId: 18171138f568afd8f62ab03b00113051)
12-27 ##:28:06.398 21628 21628 F DEBUG : #12 pc 000000000048e578 /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1176) (BuildId: 18171138f568afd8f62ab03b00113051)
12-27 ##:28:06.398 21628 21628 F DEBUG : #13 pc 000000000048e0c8 /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallbackWithUffdGc(void*)+8) (BuildId: 18171138f568afd8f62ab03b00113051)
12-27 ##:28:06.398 21628 21628 F DEBUG : #14 pc 000000000008e8bc /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*) (.__uniq.67847048707805468364044055584648682506)+236) (BuildId: 6c25e055b49ff5a22aad8884c9172d5b)
12-27 ##:28:06.398 21628 21628 F DEBUG : #15 pc 000000000007f460 /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 6c25e055b49ff5a22aad8884c9172d5b)
--------- switch to system
12-27 ##:28:09.935 21500 21500 D InsetsController: hide(ime())
--------- switch to main
12-27 ##:28:09.935 21500 21500 I ImeTracker: org.torproject.android:602ece8f: onCancelled at PHASE_CLIENT_ALREADY_HIDDEN
--------- switch to system
12-27 ##:28:13.129 21500 21500 D InsetsController: hide(ime())
--------- switch to main
12-27 ##:28:13.129 21500 21500 I ImeTracker: org.torproject.android:d7e83421: onCancelled at PHASE_CLIENT_ALREADY_HIDDEN
[...]
```

Logs 2

```
[...]
12-27 ##:28:30.144 21777 21830 D Orbot : binding tor service
12-27 ##:28:30.148 21777 21777 I TorService: Acquired lock
--------- switch to crash
12-27 ##:28:30.152 21777 21831 F libc : Fatal signal 6 (SIGABRT), code -1 (SI_QUEUE) in tid 21831 (tor), pid 21777 (ect.android:tor)
--------- switch to main
12-27 ##:28:30.245 21834 21834 E cutils-trace: Error opening trace file: No such file or directory (2)
12-27 ##:28:30.319 21835 21835 I crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstoneProto
12-27 ##:28:30.320 21835 21835 I crash_dump64: performing dump of process 21777 (target tid = 21831)
12-27 ##:28:30.452 21835 21835 E cutils-trace: Error opening trace file: No such file or directory (2)
--------- switch to crash
12-27 ##:28:30.651 21835 21835 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
12-27 ##:28:30.651 21835 21835 F DEBUG : Build fingerprint: 'google/tangorpro/tangorpro:16/BP4A.251205.006/2025121701:user/release-keys'
12-27 ##:28:30.651 21835 21835 F DEBUG : Kernel Release: '6.1.158-android14-11-g3571db04225c'
12-27 ##:28:30.651 21835 21835 F DEBUG : Revision: 'MP1.0'
12-27 ##:28:30.651 21835 21835 F DEBUG : ABI: 'arm64'
12-27 ##:28:30.651 21835 21835 F DEBUG : Timestamp: 2025-12-27 ##:28:30.343128379+0000
12-27 ##:28:30.651 21835 21835 F DEBUG : Process uptime: 11s
12-27 ##:28:30.651 21835 21835 F DEBUG : Executable: /system/bin/app_process64
12-27 ##:28:30.651 21835 21835 F DEBUG : Cmdline: org.torproject.android:tor
12-27 ##:28:30.651 21835 21835 F DEBUG : pid: 21777, tid: 21831, name: tor >>> org.torproject.android:tor <<<
12-27 ##:28:30.651 21835 21835 F DEBUG : uid: 2510182
12-27 ##:28:30.651 21835 21835 F DEBUG : tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
12-27 ##:28:30.651 21835 21835 F DEBUG : esr: 0000000092000006 (Data Abort Exception 0x24)
12-27 ##:28:30.651 21835 21835 F DEBUG : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
12-27 ##:28:30.651 21835 21835 F DEBUG : x0 0000000000000000 x1 0000000000005547 x2 0000000000000006 x3 0000c1f93e9bb610
12-27 ##:28:30.651 21835 21835 F DEBUG : x4 0000000000000000 x5 0000000000000000 x6 0000000000000000 x7 7f7f7f7f7f7f7f7f
12-27 ##:28:30.651 21835 21835 F DEBUG : x8 00000000000000f0 x9 ffe64482dc798000 x10 0000000000000001 x11 0000c5223c497df0
12-27 ##:28:30.651 21835 21835 F DEBUG : x12 0000000000000022 x13 0000000000020180 x14 000000000001ad37 x15 00000000001e9560
12-27 ##:28:30.651 21835 21835 F DEBUG : x16 0000c5223c500358 x17 0000c5223c4e7e80 x18 0000c1f924b10000 x19 0000000000005511
12-27 ##:28:30.651 21835 21835 F DEBUG : x20 0000000000005547 x21 00000000ffffffff x22 0000000000000017 x23 0000000000000000
12-27 ##:28:30.651 21835 21835 F DEBUG : x24 0000000000000000 x25 0000c1f98017ba30 x26 0000c1f93e9fb040 x27 000000000257cfc8
12-27 ##:28:30.651 21835 21835 F DEBUG : x28 000000006f783150 x29 0000c1f93e9bb690
12-27 ##:28:30.651 21835 21835 F DEBUG : lr 0000c5223c480248 sp 0000c1f93e9bb610 pc 0000c5223c48026c pst 0000000000001000
12-27 ##:28:30.651 21835 21835 F DEBUG : esr 0000000092000006
12-27 ##:28:30.651 21835 21835 F DEBUG : 16 total frames
12-27 ##:28:30.651 21835 21835 F DEBUG : backtrace:
12-27 ##:28:30.651 21835 21835 F DEBUG : #00 pc 000000000007c26c /apex/com.android.runtime/lib64/bionic/libc.so (abort+156) (BuildId: 6c25e055b49ff5a22aad8884c9172d5b)
12-27 ##:28:30.651 21835 21835 F DEBUG : #01 pc 00000000005724e0 /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (tor_raw_abort_+16)
12-27 ##:28:30.651 21835 21835 F DEBUG : #02 pc 000000000057e41c /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (tor_abort_+16)
12-27 ##:28:30.651 21835 21835 F DEBUG : #03 pc 00000000004a6a8c /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (hs_circuitmap_init+140)
12-27 ##:28:30.651 21835 21835 F DEBUG : #04 pc 00000000004aff10 /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (hs_init+32)
12-27 ##:28:30.651 21835 21835 F DEBUG : #05 pc 000000000040748c /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (tor_init+132)
12-27 ##:28:30.651 21835 21835 F DEBUG : #06 pc 0000000000407cf4 /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (tor_run_main+168)
12-27 ##:28:30.652 21835 21835 F DEBUG : #07 pc 00000000004065dc /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/base.apk (offset 0x17fc000) (Java_org_torproject_jni_TorService_runMain+40)
12-27 ##:28:30.652 21835 21835 F DEBUG : #08 pc 00000000002e1a00 /system/framework/arm64/boot.oat (art_jni_trampoline+112) (BuildId: 740692a60e6da686303b9bf9ebfe29fc7bab20cc)
12-27 ##:28:30.652 21835 21835 F DEBUG : #09 pc 000000000181cfc4 /data/app/~~FUmntadDE9BNV3_VoAT0tg==/org.torproject.android-qnaB27U4NfMtY5-edG4iBA==/oat/arm64/base.odex (org.torproject.jni.TorService$3.run+1924)
12-27 ##:28:30.652 21835 21835 F DEBUG : #10 pc 00000000002fd594 /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 18171138f568afd8f62ab03b00113051)
12-27 ##:28:30.652 21835 21835 F DEBUG : #11 pc 0000000000270dcc /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+220) (BuildId: 18171138f568afd8f62ab03b00113051)
12-27 ##:28:30.652 21835 21835 F DEBUG : #12 pc 000000000048e578 /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1176) (BuildId: 18171138f568afd8f62ab03b00113051)
12-27 ##:28:30.652 21835 21835 F DEBUG : #13 pc 000000000048e0c8 /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallbackWithUffdGc(void*)+8) (BuildId: 18171138f568afd8f62ab03b00113051)
12-27 ##:28:30.652 21835 21835 F DEBUG : #14 pc 000000000008e8bc /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*) (.__uniq.67847048707805468364044055584648682506)+236) (BuildId: 6c25e055b49ff5a22aad8884c9172d5b)
12-27 ##:28:30.652 21835 21835 F DEBUG : #15 pc 000000000007f460 /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 6c25e055b49ff5a22aad8884c9172d5b)
--------- switch to main
[...]
```