Nexus one device. 
Do a few search on google.com and switch among "all" "images" "shopping".  
Not hard to repo.


OutputBuffer::ProcessMessage <BlimpMessage type=PROTOCOL_CONTROL subtype=CHECKPOINT_ACK checkpoint_id=10209 byte_size=14>
04-08 16:06:32.686 13811 13848 V chromium: [VERBOSE1:blimp_connection.cc(66)] Sending <BlimpMessage type=PROTOCOL_CONTROL subtype=CHECKPOINT_ACK checkpoint_id=10209 byte_size=17>
04-08 16:06:32.686 13811 13848 V chromium: [VERBOSE2:blimp_connection.cc(92)] OnWritePacketComplete, result=0
04-08 16:06:32.686 13811 13848 V chromium: [VERBOSE2:blimp_message_output_buffer.cc(148)] Write complete, result=0
04-08 16:06:32.688   154   154 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
04-08 16:06:32.689   154   154 F DEBUG   : Build fingerprint: 'google/4560MMX_b/4560MMX_b_sprout:6.0.1/MOB30D/2704746:userdebug/dev-keys'
04-08 16:06:32.689   154   154 F DEBUG   : Revision: '0'
04-08 16:06:32.689   154   154 F DEBUG   : ABI: 'arm'
04-08 16:06:32.689   154   154 F DEBUG   : pid: 13811, tid: 13917, name: Thread-967  >>> org.chromium.blimp <<<
04-08 16:06:32.689   154   154 F DEBUG   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x58
04-08 16:06:32.723   154   154 F DEBUG   :     r0 00000058  r1 00000099  r2 000000c5  r3 000000c5
04-08 16:06:32.723   154   154 F DEBUG   :     r4 b7e71b38  r5 0000015e  r6 b7d45a18  r7 b7e71be0
04-08 16:06:32.723   154   154 F DEBUG   :     r8 b7e71bc4  r9 a081ab5c  sl b7e71b38  fp a47756c6
04-08 16:06:32.723   154   154 F DEBUG   :     ip a3617b00  sp a081aa68  lr a3525a99  pc a35c015c  cpsr 00030030
04-08 16:06:32.735   154   154 F DEBUG   : 
04-08 16:06:32.735   154   154 F DEBUG   : backtrace:
04-08 16:06:32.735   154   154 F DEBUG   :     #00 pc 0013115c  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::LayerTreeImpl::DidUpdateScrollState(int)+103)
04-08 16:06:32.736   154   154 F DEBUG   :     #01 pc 00130fef  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::LayerTreeImpl::DidUpdateScrollOffset(int, int)+10)
04-08 16:06:32.736   154   154 F DEBUG   :     #02 pc 0013d921  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::ScrollTree::UpdateScrollOffsetMap(std::__1::unordered_map<int, scoped_refptr<cc::SyncedProperty<cc::AdditionGroup<gfx::ScrollOffset> > >, std::__1::hash<int>, std::__1::equal_to<int>, std::__1::allocator<std::__1::pair<int const, scoped_refptr<cc::SyncedProperty<cc::AdditionGroup<gfx::ScrollOffset> > > > > >*, cc::LayerTreeImpl*)+108)
04-08 16:06:32.736   154   154 F DEBUG   :     #03 pc 00131a91  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::LayerTreeImpl::PushPropertiesTo(cc::LayerTreeImpl*)+168)
04-08 16:06:32.736   154   154 F DEBUG   :     #04 pc 0012ca95  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::LayerTreeHostImpl::ActivateSyncTree()+136)
04-08 16:06:32.736   154   154 F DEBUG   :     #05 pc 001456bb  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::ProxyImpl::ScheduledActionActivateSyncTree()+82)
04-08 16:06:32.736   154   154 F DEBUG   :     #06 pc 001086b1  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::Scheduler::ProcessScheduledActions()+408)
04-08 16:06:32.736   154   154 F DEBUG   :     #07 pc 0014417f  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::ProxyImpl::NotifyReadyToActivate()+74)
04-08 16:06:32.736   154   154 F DEBUG   :     #08 pc 00116c4d  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so (cc::TileManager::CheckAndIssueSignals()+116)
04-08 16:06:32.736   154   154 F DEBUG   :     #09 pc 000a9599  /data/app/org.chromium.blimp-1/lib/arm/libcc.cr.so
04-08 16:06:32.736   154   154 F DEBUG   :     #10 pc 0006b5a9  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)+104)
04-08 16:06:32.737   154   154 F DEBUG   :     #11 pc 00080895  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::MessageLoop::RunTask(base::PendingTask const&)+172)
04-08 16:06:32.737   154   154 F DEBUG   :     #12 pc 00080a63  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::MessageLoop::DeferOrRunPendingTask(base::PendingTask const&)+18)
04-08 16:06:32.737   154   154 F DEBUG   :     #13 pc 00080b49  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::MessageLoop::DoWork()+138)
04-08 16:06:32.737   154   154 F DEBUG   :     #14 pc 00082351  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::MessagePumpDefault::Run(base::MessagePump::Delegate*)+208)
04-08 16:06:32.737   154   154 F DEBUG   :     #15 pc 000806c9  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::MessageLoop::RunHandler()+80)
04-08 16:06:32.737   154   154 F DEBUG   :     #16 pc 000962f7  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::RunLoop::Run()+28)
04-08 16:06:32.737   154   154 F DEBUG   :     #17 pc 000800f1  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::MessageLoop::Run()+52)
04-08 16:06:32.737   154   154 F DEBUG   :     #18 pc 000b093f  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so (base::Thread::ThreadMain()+274)
04-08 16:06:32.737   154   154 F DEBUG   :     #19 pc 000ad1d9  /data/app/org.chromium.blimp-1/lib/arm/libbase.cr.so
04-08 16:06:32.737   154   154 F DEBUG   :     #20 pc 00041653  /system/lib/libc.so (__pthread_start(void*)+30)
04-08 16:06:32.738   154   154 F DEBUG   :     #21 pc 00019235  /system/lib/libc.so (__start_thread+6)