Hi, eskimo, I have posted a bug with sysdiagnose logs and crash log. The bug number is FB22904017. By the way, it's my first time to know how to collect sysdiagnose logs 🤦🏻‍♀️. By the way, I learn a lot from yours articles like An Apple Library Primer, Implementing Your Own Crash Reporter and so on. Does has any way to get all your articles like above?

I can reproduce the crash, but it doesn't always happen, the scene of crash has a bit complicated. Here a .ips file from user(for attach it change .ips to .txt), I don't know if the .ips can provide some useful information. Last reply I forget attach it. SomeApp-2026-05-25-165638.txt

Hi, eskimo, I met the same crash. It may RPScreenRecorder inner crash. From crash log, the reason of crash is caused by CFRelease(NULL). Triggered by Thread: 39 Application Specific Information: *** CFRelease() called with NULL *** Thread 39 Crashed: 0 CoreFoundation 0x185cde1f4 CFRelease.cold.1 + 16 1 CoreFoundation 0x185b36dc4 CFRelease + 132 2 ReplayKit 0x23b16f770 __56-[RPScreenRecorder captureHandlerWithSample:timingData:]_block_invoke + 148 3 libdispatch.dylib 0x1bd502adc _dispatch_call_block_and_release + 32 4 libdispatch.dylib 0x1bd51c7ec _dispatch_client_callout + 16 5 libdispatch.dylib 0x1bd50b468 _dispatch_lane_serial_drain + 740 6 libdispatch.dylib 0x1bd50bf44 _dispatch_lane_invoke + 388 7 libdispatch.dylib 0x1bd5163ec _dispatch_root_queue_drain_deferred_wlh + 292 8 libdispatch.dylib 0x1bd515ce4 _dispatch_workloop_worker_thread + 692 9 libsystem_pthread.dylib 0x1e097b3b8 _pthread_wqthread + 292 10 libsystem_pthread.dylib 0x1e097a8c0 start_wqthread + 8 See assembly below, the result of RPSampleBufferUtilities_CreateSampleBufferFromIOSurface is NULL, then CFRelease() called with NULL cause crash.