[4235:4235:0401/065638.699422:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process. (poc.html:4203): dbind-WARNING **: 06:56:38.841: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/229127/at-spi/bus_20: No such file or directory [4298:4298:0401/065639.409110:ERROR:cc/paint/paint_op_writer.cc:803] ===== POC INJECTOR ARMED: shader_type=2 — sending kInlined+SkSL to GPU process ===== [4235:4235:0401/065639.424466:FATAL:cc/paint/paint_op_reader.cc:819] Check failed: options_.is_privileged. ===== POC: SkSL PRIVILEGE BYPASS PROVEN ===== shader_type=2 (kSkSLCommand=8, kColor=1) effect_id=0x41414141 sksl="// POC-SENTINEL-vuln-31077657 // half4 main(float2 p) { return half4(0.25, 0.5, 0.75, 1.0); }" ===== Unprivileged channel reached SkRuntimeEffect::MakeForShader. Gate at line 690 was bypassed. ===== #0 0x55678b3ca9f6 (/chromium/chromium/src/out/asan/chrome+0x10d819f5) #1 0x5567a35df368 (/chromium/chromium/src/out/asan/chrome+0x28f96367) #2 0x5567a359cbf7 (/chromium/chromium/src/out/asan/chrome+0x28f53bf6) #3 0x5567a32a46a5 (/chromium/chromium/src/out/asan/chrome+0x28c5b6a4) #4 0x5567a32a4210 (/chromium/chromium/src/out/asan/chrome+0x28c5b20f) #5 0x5567a32658fb (/chromium/chromium/src/out/asan/chrome+0x28c1c8fa) #6 0x5567a3264efb (/chromium/chromium/src/out/asan/chrome+0x28c1befa) #7 0x5567a6a5d516 (/chromium/chromium/src/out/asan/chrome+0x2c414515) #8 0x5567a6a0c87a (/chromium/chromium/src/out/asan/chrome+0x2c3c3879) #9 0x5567a69fba57 (/chromium/chromium/src/out/asan/chrome+0x2c3b2a56) #10 0x5567ad1850c3 (/chromium/chromium/src/out/asan/chrome+0x32b3c0c2) #11 0x5567ad16e76f (/chromium/chromium/src/out/asan/chrome+0x32b2576e) #12 0x5567ad1794fc (/chromium/chromium/src/out/asan/chrome+0x32b304fb) #13 0x55679657d815 (/chromium/chromium/src/out/asan/chrome+0x1bf34814) #14 0x5567ac8e353c (/chromium/chromium/src/out/asan/chrome+0x3229a53b) #15 0x5567ac8e27a2 (/chromium/chromium/src/out/asan/chrome+0x322997a1) #16 0x5567ac90588d (/chromium/chromium/src/out/asan/chrome+0x322bc88c) #17 0x5567ac913878 (/chromium/chromium/src/out/asan/chrome+0x322ca877) #18 0x5567ac91365a (/chromium/chromium/src/out/asan/chrome+0x322ca659) #19 0x5567965c0212 (/chromium/chromium/src/out/asan/chrome+0x1bf77211) #20 0x556796594958 (/chromium/chromium/src/out/asan/chrome+0x1bf4b957) #21 0x556796592989 (/chromium/chromium/src/out/asan/chrome+0x1bf49988) #22 0x556796596572 (/chromium/chromium/src/out/asan/chrome+0x1bf4d571) #23 0x5567a3412bf7 (/chromium/chromium/src/out/asan/chrome+0x28dc9bf6) #24 0x5567a348a29a (/chromium/chromium/src/out/asan/chrome+0x28e41299) #25 0x5567a348910b (/chromium/chromium/src/out/asan/chrome+0x28e4010a) #26 0x5567a32d11f8 (/chromium/chromium/src/out/asan/chrome+0x28c881f7) #27 0x5567a348b9a8 (/chromium/chromium/src/out/asan/chrome+0x28e429a7) #28 0x5567a338d571 (/chromium/chromium/src/out/asan/chrome+0x28d44570) #29 0x5567aec7d6f8 (/chromium/chromium/src/out/asan/chrome+0x346346f7) #30 0x55679ef2aa30 (/chromium/chromium/src/out/asan/chrome+0x248e1a2f) #31 0x55679ef2bd60 (/chromium/chromium/src/out/asan/chrome+0x248e2d5f) #32 0x55679ef2ea69 (/chromium/chromium/src/out/asan/chrome+0x248e5a68) #33 0x55679ef28442 (/chromium/chromium/src/out/asan/chrome+0x248df441) #34 0x55679ef28a3d (/chromium/chromium/src/out/asan/chrome+0x248dfa3c) #35 0x55678b45db3a (/chromium/chromium/src/out/asan/chrome+0x10e14b39) #36 0x7fd27922b24a (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27249) #37 0x7fd27922b305 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27304) #38 0x55678b38302a (/chromium/chromium/src/out/asan/chrome+0x10d3a029) Task trace: #0 0x556796592e63 (/chromium/chromium/src/out/asan/chrome+0x1bf49e62) #1 0x556796592e63 (/chromium/chromium/src/out/asan/chrome+0x1bf49e62) #2 0x55679658dbb7 (/chromium/chromium/src/out/asan/chrome+0x1bf44bb6) Crash keys: "gpu-gl-context-is-virtual" = "0" "gpu-url-chunk-chrome" = "chrome://gpu/RenderThreadImpl::CreateOffscreenContext/RendererMainThread" "variations" = "a66dbd64-71c38a98,102166ac-3f4a17df,b13ca3d9-84f6cff8,af00e384-3f4a17df,a4ca7cb1-3f4a17df,ae727645-d13781e7,d6ad7f9a-a9080253,d7af3875-3f4a17df,4dc2f223-3f4a17df,fc1790de-3f4a17df,35c106c9-3f4a17df,f6f5c542-3f4a17df,5e05ef36-3f4a17df,305240ad-3f4a17df,3e15bfc6-3f4a17df,e1d656a5-3f4a17df,d4daab79-3f4a17df,acf2401-ec6cb59a,fc9ceed7-ee2a48b4,4af38a69-3c635604,b0b97cfb-3f4a17df,da493d3c-3f4a17df,72bafd3e-cdb4c186,f3ed486d-3f4a17df,81c84cff-6154888c,4076100b-3f4a17df,5e2ea1a-3f4a17df,f3dbf5bd-faff9ce0,db59f83a-3f4a17df,9cdd2223-3f4a17df,7f8767fe-3f4a17df,2f95a72f-3f4a17df,30cf4980-61673e6,797fe373-3f4a17df,6f27bc8a-3f4a17df,6ddea229-6ddea229,e5c8270a-3f4a17df,c297985a-3f4a17df,6222c570-3f4a17df,a14eecea-3f4a17df,5870a003-3f4a17df,8018a043-3f4a17df,4776ceb-3f4a17df,f4f00e05-ca7d8d80,9481ce98-3d47f4f4,2a426c03-3d47f4f4,70678518-dee66fa8,be338734-dee66fa8,5f9907a9-dee66fa8,8eeccb9a-dee66fa8,2b465683-dee66fa8,52fc7926-dee66fa8,bc9b361d-dee66fa8,a41a7188-dee66fa8,ff71bfdc-dee66fa8,251fc742-dee66fa8,2159dd0c-dee66fa8,e7cc79d5-dee66fa8,4b935545-bb2d3403,9a38bae3-3d47f4f4,2d1e43a3-3d47f4f4,386dc267-3d47f4f4,d69d967d-3695c92e,3c8f75a1-8ff88d47," "num-experiments" = "64" "gr-context-type" = "GaneshGL" "egl-display-type" = "angle:SwANGLE" "gpu-gl-renderer" = "ANGLE (Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver-5.0.0)" "gpu-gl-vendor" = "Google Inc. (Google)" "gpu-generation-intel" = "0" "gpu-vsver" = "3.00" "gpu-psver" = "3.00" "gpu-driver" = "5.0.0" "gpu_count" = "0" "gpu-devid" = "0xffff" "gpu-venid" = "0xffff" "chrome-trace-id" = "3238154956732102361" "reentry_guard_tls_slot" = "unused" "switch-18" = "--trace-process-track-uuid=3190708988185955192" "switch-17" = "--pseudonymization-salt-handle=7,i,6299947397218991345,532618727" "switch-16" = "--variations-seed-version" "switch-15" = "--field-trial-handle=3,i,15989328156392189527,155005205907262380" "switch-14" = "--shared-files" "switch-13" = "--use-gl=angle" "commandline-disabled-feature-1" = "PaintHolding" "commandline-enabled-feature-1" = "OopRasterization" "osarch" = "x86_64" "pid" = "4235" "ptype" = "gpu-process" "switch-12" = "--change-stack-guard-on-fork=enable" "switch-11" = "--disable-breakpad" "switch-10" = "--user-data-dir=/tmp/chrome-poc-profile" "switch-9" = "--noerrdialogs" "switch-8" = "--enable-crash-reporter=," "switch-7" = "--crashpad-handler-pid=4205" "switch-6" = "--use-angle=swiftshader" "switch-5" = "--ozone-platform=headless" "switch-4" = "--headless=new" "switch-3" = "--enable-gpu-rasterization" "switch-2" = "--disable-dev-shm-usage" "switch-1" = "--no-sandbox" "num-switches" = "23" [0401/065639.477732:ERROR:third_party/crashpad/crashpad/util/file/file_io_posix.cc:145] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq: No such file or directory (2) [0401/065639.477931:ERROR:third_party/crashpad/crashpad/util/file/file_io_posix.cc:145] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq: No such file or directory (2) [4203:4233:0401/065639.483498:ERROR:cc/paint/paint_op_writer.cc:803] ===== POC INJECTOR ARMED: shader_type=6 — sending kInlined+SkSL to GPU process ===== [4203:4203:0401/065639.486310:INFO:CONSOLE:81] "POC trigger page running, generating PaintShaders...", source: file:///poc-artifacts/poc.html (81) Received signal 6 #0 0x55678b3ca9f6 (/chromium/chromium/src/out/asan/chrome+0x10d819f5) #1 0x5567a35df368 (/chromium/chromium/src/out/asan/chrome+0x28f96367) #2 0x5567a359cbf7 (/chromium/chromium/src/out/asan/chrome+0x28f53bf6) #3 0x5567a35de76f (/chromium/chromium/src/out/asan/chrome+0x28f9576e) #4 0x7fd279240050 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3c04f) #5 0x7fd27928eeec (/usr/lib/x86_64-linux-gnu/libc.so.6+0x8aeeb) #6 0x7fd27923ffb2 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3bfb1) #7 0x7fd27922a472 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x26471) #8 0x5567a357359a (/chromium/chromium/src/out/asan/chrome+0x28f2a599) #9 0x5567ba27c0ab (/chromium/chromium/src/out/asan/chrome+0x3fc330aa) #10 0x5567a32a607a (/chromium/chromium/src/out/asan/chrome+0x28c5d079) #11 0x5567a32a5cd1 (/chromium/chromium/src/out/asan/chrome+0x28c5ccd0) #12 0x5567a32a529d (/chromium/chromium/src/out/asan/chrome+0x28c5c29c) #13 0x5567a32a4210 (/chromium/chromium/src/out/asan/chrome+0x28c5b20f) #14 0x5567a32658fb (/chromium/chromium/src/out/asan/chrome+0x28c1c8fa) #15 0x5567a3264efb (/chromium/chromium/src/out/asan/chrome+0x28c1befa) #16 0x5567a6a5d516 (/chromium/chromium/src/out/asan/chrome+0x2c414515) #17 0x5567a6a0c87a (/chromium/chromium/src/out/asan/chrome+0x2c3c3879) #18 0x5567a69fba57 (/chromium/chromium/src/out/asan/chrome+0x2c3b2a56) #19 0x5567ad1850c3 (/chromium/chromium/src/out/asan/chrome+0x32b3c0c2) #20 0x5567ad16e76f (/chromium/chromium/src/out/asan/chrome+0x32b2576e) #21 0x5567ad1794fc (/chromium/chromium/src/out/asan/chrome+0x32b304fb) #22 0x55679657d815 (/chromium/chromium/src/out/asan/chrome+0x1bf34814) #23 0x5567ac8e353c (/chromium/chromium/src/out/asan/chrome+0x3229a53b) #24 0x5567ac8e27a2 (/chromium/chromium/src/out/asan/chrome+0x322997a1) #25 0x5567ac90588d (/chromium/chromium/src/out/asan/chrome+0x322bc88c) #26 0x5567ac913878 (/chromium/chromium/src/out/asan/chrome+0x322ca877) #27 0x5567ac91365a (/chromium/chromium/src/out/asan/chrome+0x322ca659) #28 0x5567965c0212 (/chromium/chromium/src/out/asan/chrome+0x1bf77211) #29 0x556796594958 (/chromium/chromium/src/out/asan/chrome+0x1bf4b957) #30 0x556796592989 (/chromium/chromium/src/out/asan/chrome+0x1bf49988) #31 0x556796596572 (/chromium/chromium/src/out/asan/chrome+0x1bf4d571) #32 0x5567a3412bf7 (/chromium/chromium/src/out/asan/chrome+0x28dc9bf6) #33 0x5567a348a29a (/chromium/chromium/src/out/asan/chrome+0x28e41299) #34 0x5567a348910b (/chromium/chromium/src/out/asan/chrome+0x28e4010a) #35 0x5567a32d11f8 (/chromium/chromium/src/out/asan/chrome+0x28c881f7) #36 0x5567a348b9a8 (/chromium/chromium/src/out/asan/chrome+0x28e429a7) #37 0x5567a338d571 (/chromium/chromium/src/out/asan/chrome+0x28d44570) #38 0x5567aec7d6f8 (/chromium/chromium/src/out/asan/chrome+0x346346f7) #39 0x55679ef2aa30 (/chromium/chromium/src/out/asan/chrome+0x248e1a2f) #40 0x55679ef2bd60 (/chromium/chromium/src/out/asan/chrome+0x248e2d5f) #41 0x55679ef2ea69 (/chromium/chromium/src/out/asan/chrome+0x248e5a68) #42 0x55679ef28442 (/chromium/chromium/src/out/asan/chrome+0x248df441) #43 0x55679ef28a3d (/chromium/chromium/src/out/asan/chrome+0x248dfa3c) #44 0x55678b45db3a (/chromium/chromium/src/out/asan/chrome+0x10e14b39) #45 0x7fd27922b24a (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27249) #46 0x7fd27922b305 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27304) #47 0x55678b38302a (/chromium/chromium/src/out/asan/chrome+0x10d3a029) r8: 00005567c4469ff0 r9: 00007fffffffff01 r10: 0000000000000008 r11: 0000000000000246 r12: 0000000000000006 r13: 00007bd276023480 r14: 00000f7a4ec04690 r15: 00007c12773ec230 di: 000000000000108b si: 000000000000108b bp: 00007fd2780ac700 bx: 000000000000108b dx: 0000000000000006 ax: 0000000000000000 cx: 00007fd27928eeec sp: 00007ffe25e9f8a0 ip: 00007fd27928eeec efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000 [end of stack trace] [4203:4203:0401/065639.549374:ERROR:content/browser/gpu/gpu_process_host.cc:999] GPU process exited unexpectedly: exit_code=6 [4203:4203:0401/065639.549440:WARNING:content/browser/gpu/gpu_process_host.cc:1441] The GPU process has crashed 1 time(s) [4318:4318:0401/065639.676104:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process. [4203:4203:0401/065639.691403:WARNING:content/browser/gpu/gpu_process_host.cc:1021] Reinitialized the GPU process after a crash. The reported initialization time was 107 ms [4318:4318:0401/065639.737285:FATAL:cc/paint/paint_op_reader.cc:819] Check failed: options_.is_privileged. ===== POC: SkSL PRIVILEGE BYPASS PROVEN ===== shader_type=2 (kSkSLCommand=8, kColor=1) effect_id=0x41414141 sksl="// POC-SENTINEL-vuln-31077657 // half4 main(float2 p) { return half4(0.25, 0.5, 0.75, 1.0); }" ===== Unprivileged channel reached SkRuntimeEffect::MakeForShader. Gate at line 690 was bypassed. ===== #0 0x55678b3ca9f6 (/chromium/chromium/src/out/asan/chrome+0x10d819f5) #1 0x5567a35df368 (/chromium/chromium/src/out/asan/chrome+0x28f96367) #2 0x5567a359cbf7 (/chromium/chromium/src/out/asan/chrome+0x28f53bf6) #3 0x5567a32a46a5 (/chromium/chromium/src/out/asan/chrome+0x28c5b6a4) #4 0x5567a32a4210 (/chromium/chromium/src/out/asan/chrome+0x28c5b20f) #5 0x5567a32658fb (/chromium/chromium/src/out/asan/chrome+0x28c1c8fa) #6 0x5567a3264efb (/chromium/chromium/src/out/asan/chrome+0x28c1befa) #7 0x5567a6a5d516 (/chromium/chromium/src/out/asan/chrome+0x2c414515) #8 0x5567a6a0c87a (/chromium/chromium/src/out/asan/chrome+0x2c3c3879) #9 0x5567a69fba57 (/chromium/chromium/src/out/asan/chrome+0x2c3b2a56) #10 0x5567ad1850c3 (/chromium/chromium/src/out/asan/chrome+0x32b3c0c2) #11 0x5567ad16e76f (/chromium/chromium/src/out/asan/chrome+0x32b2576e) #12 0x5567ad1794fc (/chromium/chromium/src/out/asan/chrome+0x32b304fb) #13 0x55679657d815 (/chromium/chromium/src/out/asan/chrome+0x1bf34814) #14 0x5567ac8e353c (/chromium/chromium/src/out/asan/chrome+0x3229a53b) #15 0x5567ac8e27a2 (/chromium/chromium/src/out/asan/chrome+0x322997a1) #16 0x5567ac90588d (/chromium/chromium/src/out/asan/chrome+0x322bc88c) #17 0x5567ac913878 (/chromium/chromium/src/out/asan/chrome+0x322ca877) #18 0x5567ac91365a (/chromium/chromium/src/out/asan/chrome+0x322ca659) #19 0x5567965c0212 (/chromium/chromium/src/out/asan/chrome+0x1bf77211) #20 0x556796594958 (/chromium/chromium/src/out/asan/chrome+0x1bf4b957) #21 0x556796592989 (/chromium/chromium/src/out/asan/chrome+0x1bf49988) #22 0x556796596572 (/chromium/chromium/src/out/asan/chrome+0x1bf4d571) #23 0x5567a3412bf7 (/chromium/chromium/src/out/asan/chrome+0x28dc9bf6) #24 0x5567a348a29a (/chromium/chromium/src/out/asan/chrome+0x28e41299) #25 0x5567a348910b (/chromium/chromium/src/out/asan/chrome+0x28e4010a) #26 0x5567a32d11f8 (/chromium/chromium/src/out/asan/chrome+0x28c881f7) #27 0x5567a348b9a8 (/chromium/chromium/src/out/asan/chrome+0x28e429a7) #28 0x5567a338d571 (/chromium/chromium/src/out/asan/chrome+0x28d44570) #29 0x5567aec7d6f8 (/chromium/chromium/src/out/asan/chrome+0x346346f7) #30 0x55679ef2aa30 (/chromium/chromium/src/out/asan/chrome+0x248e1a2f) #31 0x55679ef2bd60 (/chromium/chromium/src/out/asan/chrome+0x248e2d5f) #32 0x55679ef2ea69 (/chromium/chromium/src/out/asan/chrome+0x248e5a68) #33 0x55679ef28442 (/chromium/chromium/src/out/asan/chrome+0x248df441) #34 0x55679ef28a3d (/chromium/chromium/src/out/asan/chrome+0x248dfa3c) #35 0x55678b45db3a (/chromium/chromium/src/out/asan/chrome+0x10e14b39) #36 0x7fd27922b24a (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27249) #37 0x7fd27922b305 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27304) #38 0x55678b38302a (/chromium/chromium/src/out/asan/chrome+0x10d3a029) Task trace: #0 0x556796592e63 (/chromium/chromium/src/out/asan/chrome+0x1bf49e62) #1 0x55679658dbb7 (/chromium/chromium/src/out/asan/chrome+0x1bf44bb6) Crash keys: "gpu-url-chunk" = "file:///poc-artifacts/poc.html" "gpu-gl-context-is-virtual" = "0" "variations" = "1db03297-3f4a17df,b1755f03-e38596b7,6f27bc8a-3f4a17df,c203d55b-3f4a17df,cf16e290-b446100,a66dbd64-71c38a98,e32097a3-3f4a17df,102166ac-3f4a17df,89986dbe-3f01b610,f7adf49b-3f4a17df,b13ca3d9-84f6cff8,f2b6a878-3f4a17df,32806e4f-28ea5088,2468d6e5-3f4a17df,f5a1eb9a-3f4a17df,ac59e11a-3f4a17df,8f6c5cc6-3f4a17df,94e21eca-3f4a17df,d6284ba0-9610fd4e,73551ca1-3f4a17df,d6737162-3f4a17df,e35cc1a-3f4a17df,e5a1483c-3f4a17df,6a68c9a6-3f4a17df,c1531af3-3f4a17df,47a0a3b2-3f4a17df,17f1f5fe-3f4a17df,1b0dc97-3f4a17df,7b46cc51-3f4a17df,af00e384-3f4a17df,8f80c10-78198108,a62c052e-3f4a17df,a4ca7cb1-3f4a17df,da968c94-3f4a17df,ae727645-d13781e7,e435811b-3f4a17df,f1d165c0-3f4a17df,a842add4-3f4a17df,ec937206-3f4a17df,cad2b12b-8ef57898,57d6085b-3f4a17df,fb92da45-3f4a17df,d6ad7f9a-a9080253,9507cc99-f2018abe,a5ecfb95-3f4a17df,797fe373-3f4a17df,ead3e59e-8c7df51c,29936542-3f4a17df,17a43872-3f4a17df,1ffefb1a-3f4a17df,f419bc72-3f4a17df,470d37ba-3f4a17df,f7d06457-e9d42fcd,bcb58f65-3f4a17df,d512da3a-513c429d,54d601a5-3f4a17df,63f121e7-3f4a17df,98ab2bc2-b6dc7ce0,600d2fa6-3f4a17df,c3eea944-28305c10,bca7ba0b-8cb78501,40355e18-3f4a17df,ff1e0777-3f4a17df,b6083631-447a6f32,d7af3875-3f4a17df,4dc2f223-3f4a17df,5133eb43-307b98b1,f314f5b9-a2b13a7f,6e4a21fe-efc28565,531e1626-4513f3bf,820f17d2-e484eeec,40debc11-3f4a17df,44666d99-3d47f4f4,e14ee5ee-c6d6098d,6222c570-3f4a17df,fd051c38-3f4a17df,a98def31-2a5a8f5d,284a13f5-3f4a17df,8f9d758f-3f4a17df,fc1790de-3f4a17df,35c106c9-3f4a17df,639ee5d3-3f4a17df,7dcaa2cd-3f4a17df,57d26b38-3f4a17df,f6f5c542-3f4a17df,5e05ef36-3f4a17df,18324944-3f4a17df,3779be93-3f4a17df,305240ad-3f4a17df,3b02c079-3f4a17df,669a7db8-3f4a17df,a028f288-d24710ce,350559e5-3f4a17df,91cba98-b3b3bb94,6a6ab26-faa329bf,4eb998ce-3f4a17df,9d5ecd8d-ca7d8d80,3e15bfc6-3f4a17df,3d9fe79-3f4a17df,779782d3-3f4a17df,e1d656a5-3f4a17df,e5c8270a-3f4a17df,ef3132a9-3f4a17df,36f4e102-3f4a17df,432d9464-3f4a17df,87bc8a34-3f4a17df,96def758-3f4a17df,2d3e25b-3f4a17df,7ccab089-3f4a17df,f4159b43-3f4a17df,151258bf-3f4a17df,5dfc4774-3f4a17df,13e8c923-3f4a17df,3e672fd9-e109e63f,893cc7a4-3f4a17df,3c978b59-3f4a17df,9cf6c713-7585e9f1,4ab30a87-c9361ef3,78049c75-f7dfe51d,c297985a-3f4a17df,a3ce8da1-3f4a17df,22946be1-22946be1,6ddea229-6ddea229,31f4a8bd-3f4a17df,d4daab79-3f4a17df,acf2401-ec6cb59a,96d006a-c3a49e71,f6264095-c3f8eab0,f42905ff-3f4a17df,2faf225b-3f4a17df,c17129bb-3f4a17df,74be468c-3f4a17df,4146cc26-775f6248,e9844d40-3f4a17df,2b68be8f-3f4a17df,d1ae5bf4-3f4a17df,489bedc0-3d47f4f4,15d1b2d8-3f4a17df,7ca2dd7e-3f4a17df,e1f2626b-3f4a17df,55cc39e1-3f4a17df,ba449693-9e1c16d0,cad46b80-3f4a17df,70404afa-803f8fc4,fecdbadb-3f4a17df,8643cb65-cf4f6ead,e6ed801e-cf4f6ead,ff7d412f-3f4a17df,fc9ceed7-ee2a48b4,89a375de-3f4a17df,4af38a69-3c635604,6ff79bbe-3f4a17df,aaa52086-d50cce67,b0b97cfb-3f4a17df,c823d1e9-3d47f4f4,66657049-3f4a17df,36860c1b-3f4a17df,7262ef2c-140d00b2,f93c9364-3f4a17df,b4c2bd17-23db2647,6ec84df5-3f4a17df,9e5c75f1-30e1b12b,4d625646-3f4a17df,ec3153de-3f4a17df,2394f90f-ecc8f8cf,d5f746a4-39aaf314,3a3c323e-3f4a17df,56aa5797-e5fec5a6,54be7848-3f4a17df,3ee33b62-3f4a17df,e2d38844-3f4a17df,eef5d69a-1dca273f,da493d3c-3f4a17df,72bafd3e-cdb4c186,f659c5ca-3f4a17df,f3ed486d-3f4a17df,81c84cff-6154888c,b3c54bb3-88fcaf7d,4076100b-3f4a17df,8c162025-3d47f4f4,9f8a0fd2-b4a3cd0c,ffdf4988-3f4a17df,3d3963fc-5d65cee9,3ac9fcb9-3f4a17df,80a04e6b-3d47f4f4,b446c562-3f4a17df,63831cab-3f4a17df,d2a642a0-3f4a17df,7ece8311-3f4a17df,7a32e64e-3f4a17df,8579ead7-3f4a17df,f108c955-3f4a17df,10713630-3f4a17df,b76b514f-3ac589b9,8f418b04-299bae22,d3566fbd-c6f74b94,d06639a1-3f4a17df,2e862394-fb669628,ed2195eb-3f4a17df,de028327-70abd7a5,2ca06d17-3f4a17df,a2f28ef8-d7d235fa,5abe5347-3f4a17df,40e3c61f-3f4a17df,d5ce1427-3f4a17df,afeeb5d0-3f4a17df,186d6e2c-36c0e608,1339c0d9-3f4a17df,ab7eb98c-3f4a17df,4fa4e3b8-3f4a17df,44fe0078-3f4a17df,c92d2cc4-3f4a17df,2468be5e-5f6398dc,aa540f4f-3f4a17df,30cf4980-61673e6,19e446cd-3f4a17df,f613598-3f4a17df,bf46f37a-3f4a17df,40de0170-3f4a17df,2d2b187a-3f4a17df,f86bc1e2-3f4a17df,43395eb-3f4a17df,e6ec9393-3f4a17df,ea0d881d-fd860968,3f752d-3f4a17df,25a81d51-3f4a17df,53c64de7-3f4a17df,e3559213-c0f46cd5,89bba52e-174ae9a8,444b9649-3f4a17df,d990c4ac-3f4a17df,a374fdf0-964ff297,bb199083-3f4a17df,5e2ea1a-3f4a17df,5870a003-3f4a17df,c71292e0-3f4a17df,3797f84b-3f4a17df,52a20523-3f4a17df,ef4764d7-88fcaf7d,2bac45ad-3f4a17df,613081e8-3f4a17df,c49d2b35-3f4a17df,377002b7-3f4a17df,b360dba0-3f4a17df,404dfb1f-3f4a17df,94b88ba6-7e2e67c9,f3dbf5bd-faff9ce0,a14eecea-3f4a17df,15607410-b6e8dbb7,ab917364-25c84d73,8018a043-3f4a17df,ad4acdda-3f4a17df,90860314-5ab828e2,b1ceb06f-3f4a17df,a39574eb-3f4a17df,46ca825f-3f4a17df,f8b97b53-3f4a17df,72b751de-3f4a17df,db59f83a-3f4a17df,ec21b181-3f4a17df,80b60e4a-3f4a17df,84b4fc65-3f4a17df,c1e0d32e-3f4a17df,f585af0a-3f4a17df,bea4a9c2-750ef675,74d4bce7-3d47f4f4,5fd6ae8b-3f4a17df,2f6246c2-3f4a17df,51d22fd4-3f4a17df,aa8204ea-3f4a17df,5e19e3dc-f800d222,2a2ebc2c-3f4a17df,6332ffaf-3f4a17df,5910121-3f4a17df,f9a6f6e9-3f4a17df,595f5eb0-f23d1dea,7b4be1f2-3d47f4f4,9cdd2223-3f4a17df,bef5c006-3f4a17df,c5be9d88-3f4a17df,39a2e568-3f4a17df,7f8767fe-3f4a17df,ea6b5a9c-3f4a17df,e0e211ad-e0e211ad,5eaac78e-3f4a17df,2f95a72f-3f4a17df,8abceefd-f7ec9f66,c55491ea-156838e5,d00bdbf9-3f4a17df,c21c2b8b-3d47f4f4,1caa3332-20af8ffe,f4f00e05-ca7d8d80,9481ce98-3d47f4f4,2a426c03-3d47f4f4,70678518-dee66fa8,be338734-dee66fa8,5f9907a9-dee66fa8,8eeccb9a-dee66fa8,2b465683-dee66fa8,52fc7926-dee66fa8,bc9b361d-dee66fa8,a41a7188-dee66fa8,ff71bfdc-dee66fa8,251fc742-dee66fa8,2159dd0c-dee66fa8,e7cc79d5-dee66fa8,4b935545-bb2d3403,9a38bae3-3d47f4f4,2d1e43a3-3d47f4f4,386dc267-3d47f4f4,d69d967d-3695c92e,3c8f75a1-8ff88d47,a4406b35-1657e2d6,408da146-1657e2d6," "num-experiments" = "314" "gr-context-type" = "GaneshGL" "egl-display-type" = "angle:SwANGLE" "gpu-gl-renderer" = "ANGLE (Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver-5.0.0)" "gpu-gl-vendor" = "Google Inc. (Google)" "gpu-generation-intel" = "0" "gpu-vsver" = "3.00" "gpu-psver" = "3.00" "gpu-driver" = "5.0.0" "gpu_count" = "0" "gpu-devid" = "0xffff" "gpu-venid" = "0xffff" "chrome-trace-id" = "4860873880931161183" "reentry_guard_tls_slot" = "unused" "switch-18" = "--trace-process-track-uuid=3190708992871164437" "switch-17" = "--pseudonymization-salt-handle=7,i,6299947397218991345,532618727" "switch-16" = "--variations-seed-version" "switch-15" = "--field-trial-handle=3,i,15989328156392189527,155005205907262380" "switch-14" = "--shared-files" "switch-13" = "--use-gl=angle" "commandline-disabled-feature-1" = "PaintHolding" "commandline-enabled-feature-1" = "OopRasterization" "osarch" = "x86_64" "pid" = "4318" "ptype" = "gpu-process" "switch-12" = "--change-stack-guard-on-fork=enable" "switch-11" = "--disable-breakpad" "switch-10" = "--user-data-dir=/tmp/chrome-poc-profile" "switch-9" = "--noerrdialogs" "switch-8" = "--enable-crash-reporter=," "switch-7" = "--crashpad-handler-pid=4205" "switch-6" = "--use-angle=swiftshader" "switch-5" = "--ozone-platform=headless" "switch-4" = "--headless=new" "switch-3" = "--enable-gpu-rasterization" "switch-2" = "--disable-dev-shm-usage" "switch-1" = "--no-sandbox" "num-switches" = "23" [0401/065639.793039:ERROR:third_party/crashpad/crashpad/util/file/file_io_posix.cc:145] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq: No such file or directory (2) [0401/065639.793120:ERROR:third_party/crashpad/crashpad/util/file/file_io_posix.cc:145] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq: No such file or directory (2) Received signal 6 #0 0x55678b3ca9f6 (/chromium/chromium/src/out/asan/chrome+0x10d819f5) #1 0x5567a35df368 (/chromium/chromium/src/out/asan/chrome+0x28f96367) #2 0x5567a359cbf7 (/chromium/chromium/src/out/asan/chrome+0x28f53bf6) #3 0x5567a35de76f (/chromium/chromium/src/out/asan/chrome+0x28f9576e) #4 0x7fd279240050 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3c04f) #5 0x7fd27928eeec (/usr/lib/x86_64-linux-gnu/libc.so.6+0x8aeeb) #6 0x7fd27923ffb2 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3bfb1) #7 0x7fd27922a472 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x26471) #8 0x5567a357359a (/chromium/chromium/src/out/asan/chrome+0x28f2a599) #9 0x5567ba27c0ab (/chromium/chromium/src/out/asan/chrome+0x3fc330aa) #10 0x5567a32a607a (/chromium/chromium/src/out/asan/chrome+0x28c5d079) #11 0x5567a32a5cd1 (/chromium/chromium/src/out/asan/chrome+0x28c5ccd0) #12 0x5567a32a529d (/chromium/chromium/src/out/asan/chrome+0x28c5c29c) #13 0x5567a32a4210 (/chromium/chromium/src/out/asan/chrome+0x28c5b20f) #14 0x5567a32658fb (/chromium/chromium/src/out/asan/chrome+0x28c1c8fa) #15 0x5567a3264efb (/chromium/chromium/src/out/asan/chrome+0x28c1befa) #16 0x5567a6a5d516 (/chromium/chromium/src/out/asan/chrome+0x2c414515) #17 0x5567a6a0c87a (/chromium/chromium/src/out/asan/chrome+0x2c3c3879) #18 0x5567a69fba57 (/chromium/chromium/src/out/asan/chrome+0x2c3b2a56) #19 0x5567ad1850c3 (/chromium/chromium/src/out/asan/chrome+0x32b3c0c2) #20 0x5567ad16e76f (/chromium/chromium/src/out/asan/chrome+0x32b2576e) #21 0x5567ad1794fc (/chromium/chromium/src/out/asan/chrome+0x32b304fb) #22 0x55679657d815 (/chromium/chromium/src/out/asan/chrome+0x1bf34814) #23 0x5567ac8e353c (/chromium/chromium/src/out/asan/chrome+0x3229a53b) #24 0x5567ac8e27a2 (/chromium/chromium/src/out/asan/chrome+0x322997a1) #25 0x5567ac90588d (/chromium/chromium/src/out/asan/chrome+0x322bc88c) #26 0x5567ac913878 (/chromium/chromium/src/out/asan/chrome+0x322ca877) #27 0x5567ac91365a (/chromium/chromium/src/out/asan/chrome+0x322ca659) #28 0x5567965c0212 (/chromium/chromium/src/out/asan/chrome+0x1bf77211) #29 0x556796594958 (/chromium/chromium/src/out/asan/chrome+0x1bf4b957) #30 0x556796592989 (/chromium/chromium/src/out/asan/chrome+0x1bf49988) #31 0x556796596572 (/chromium/chromium/src/out/asan/chrome+0x1bf4d571) #32 0x5567a3412bf7 (/chromium/chromium/src/out/asan/chrome+0x28dc9bf6) #33 0x5567a348a29a (/chromium/chromium/src/out/asan/chrome+0x28e41299) #34 0x5567a348910b (/chromium/chromium/src/out/asan/chrome+0x28e4010a) #35 0x5567a32d11f8 (/chromium/chromium/src/out/asan/chrome+0x28c881f7) #36 0x5567a348b9a8 (/chromium/chromium/src/out/asan/chrome+0x28e429a7) #37 0x5567a338d571 (/chromium/chromium/src/out/asan/chrome+0x28d44570) #38 0x5567aec7d6f8 (/chromium/chromium/src/out/asan/chrome+0x346346f7) #39 0x55679ef2aa30 (/chromium/chromium/src/out/asan/chrome+0x248e1a2f) #40 0x55679ef2bd60 (/chromium/chromium/src/out/asan/chrome+0x248e2d5f) #41 0x55679ef2ea69 (/chromium/chromium/src/out/asan/chrome+0x248e5a68) #42 0x55679ef28442 (/chromium/chromium/src/out/asan/chrome+0x248df441) #43 0x55679ef28a3d (/chromium/chromium/src/out/asan/chrome+0x248dfa3c) #44 0x55678b45db3a (/chromium/chromium/src/out/asan/chrome+0x10e14b39) #45 0x7fd27922b24a (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27249) #46 0x7fd27922b305 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27304) #47 0x55678b38302a (/chromium/chromium/src/out/asan/chrome+0x10d3a029) r8: 00005567c4469ff0 r9: 00007fffffffff01 r10: 0000000000000008 r11: 0000000000000246 r12: 0000000000000006 r13: 00007bd2760dd480 r14: 00000f7a4ec1ba90 r15: 00007c12773ec230 di: 00000000000010de si: 00000000000010de bp: 00007fd2780ac700 bx: 00000000000010de dx: 0000000000000006 ax: 0000000000000000 cx: 00007fd27928eeec sp: 00007ffe25e9f8a0 ip: 00007fd27928eeec efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000 [end of stack trace] [4203:4203:0401/065639.856997:ERROR:content/browser/gpu/gpu_process_host.cc:999] GPU process exited unexpectedly: exit_code=6 [4203:4203:0401/065639.857051:WARNING:content/browser/gpu/gpu_process_host.cc:1441] The GPU process has crashed 2 time(s) [4358:4358:0401/065639.980874:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process. [4203:4203:0401/065639.995526:WARNING:content/browser/gpu/gpu_process_host.cc:1021] Reinitialized the GPU process after a crash. The reported initialization time was 106 ms [4358:4358:0401/065641.288615:FATAL:cc/paint/paint_op_reader.cc:819] Check failed: options_.is_privileged. ===== POC: SkSL PRIVILEGE BYPASS PROVEN ===== shader_type=2 (kSkSLCommand=8, kColor=1) effect_id=0x41414141 sksl="// POC-SENTINEL-vuln-31077657 // half4 main(float2 p) { return half4(0.25, 0.5, 0.75, 1.0); }" ===== Unprivileged channel reached SkRuntimeEffect::MakeForShader. Gate at line 690 was bypassed. ===== #0 0x55678b3ca9f6 (/chromium/chromium/src/out/asan/chrome+0x10d819f5) #1 0x5567a35df368 (/chromium/chromium/src/out/asan/chrome+0x28f96367) #2 0x5567a359cbf7 (/chromium/chromium/src/out/asan/chrome+0x28f53bf6) #3 0x5567a32a46a5 (/chromium/chromium/src/out/asan/chrome+0x28c5b6a4) #4 0x5567a32a4210 (/chromium/chromium/src/out/asan/chrome+0x28c5b20f) #5 0x5567a32658fb (/chromium/chromium/src/out/asan/chrome+0x28c1c8fa) #6 0x5567a3264efb (/chromium/chromium/src/out/asan/chrome+0x28c1befa) #7 0x5567a6a5d516 (/chromium/chromium/src/out/asan/chrome+0x2c414515) #8 0x5567a6a0c87a (/chromium/chromium/src/out/asan/chrome+0x2c3c3879) #9 0x5567a69fba57 (/chromium/chromium/src/out/asan/chrome+0x2c3b2a56) #10 0x5567ad1850c3 (/chromium/chromium/src/out/asan/chrome+0x32b3c0c2) #11 0x5567ad16e76f (/chromium/chromium/src/out/asan/chrome+0x32b2576e) #12 0x5567ad1794fc (/chromium/chromium/src/out/asan/chrome+0x32b304fb) #13 0x55679657d815 (/chromium/chromium/src/out/asan/chrome+0x1bf34814) #14 0x5567ac8e353c (/chromium/chromium/src/out/asan/chrome+0x3229a53b) #15 0x5567ac8e27a2 (/chromium/chromium/src/out/asan/chrome+0x322997a1) #16 0x5567ac90588d (/chromium/chromium/src/out/asan/chrome+0x322bc88c) #17 0x5567ac913878 (/chromium/chromium/src/out/asan/chrome+0x322ca877) #18 0x5567ac91365a (/chromium/chromium/src/out/asan/chrome+0x322ca659) #19 0x5567965c0212 (/chromium/chromium/src/out/asan/chrome+0x1bf77211) #20 0x556796594958 (/chromium/chromium/src/out/asan/chrome+0x1bf4b957) #21 0x556796592989 (/chromium/chromium/src/out/asan/chrome+0x1bf49988) #22 0x556796596572 (/chromium/chromium/src/out/asan/chrome+0x1bf4d571) #23 0x5567a3412bf7 (/chromium/chromium/src/out/asan/chrome+0x28dc9bf6) #24 0x5567a348a29a (/chromium/chromium/src/out/asan/chrome+0x28e41299) #25 0x5567a348910b (/chromium/chromium/src/out/asan/chrome+0x28e4010a) #26 0x5567a32d11f8 (/chromium/chromium/src/out/asan/chrome+0x28c881f7) #27 0x5567a348b9a8 (/chromium/chromium/src/out/asan/chrome+0x28e429a7) #28 0x5567a338d571 (/chromium/chromium/src/out/asan/chrome+0x28d44570) #29 0x5567aec7d6f8 (/chromium/chromium/src/out/asan/chrome+0x346346f7) #30 0x55679ef2aa30 (/chromium/chromium/src/out/asan/chrome+0x248e1a2f) #31 0x55679ef2bd60 (/chromium/chromium/src/out/asan/chrome+0x248e2d5f) #32 0x55679ef2ea69 (/chromium/chromium/src/out/asan/chrome+0x248e5a68) #33 0x55679ef28442 (/chromium/chromium/src/out/asan/chrome+0x248df441) #34 0x55679ef28a3d (/chromium/chromium/src/out/asan/chrome+0x248dfa3c) #35 0x55678b45db3a (/chromium/chromium/src/out/asan/chrome+0x10e14b39) #36 0x7fd27922b24a (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27249) #37 0x7fd27922b305 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27304) #38 0x55678b38302a (/chromium/chromium/src/out/asan/chrome+0x10d3a029) Task trace: #0 0x556796592e63 (/chromium/chromium/src/out/asan/chrome+0x1bf49e62) #1 0x556796592e63 (/chromium/chromium/src/out/asan/chrome+0x1bf49e62) #2 0x556796592e63 (/chromium/chromium/src/out/asan/chrome+0x1bf49e62) #3 0x556796592e63 (/chromium/chromium/src/out/asan/chrome+0x1bf49e62) #4 0x556796592e63 (/chromium/chromium/src/out/asan/chrome+0x1bf49e62) Task trace buffer limit hit, update PendingTask::kTaskBacktraceLength to increase. Crash keys: "gpu-url-chunk" = "file:///poc-artifacts/poc.html" "gpu-gl-context-is-virtual" = "0" "variations" = "1db03297-3f4a17df,b1755f03-e38596b7,6f27bc8a-3f4a17df,c203d55b-3f4a17df,cf16e290-b446100,a66dbd64-71c38a98,e32097a3-3f4a17df,102166ac-3f4a17df,89986dbe-3f01b610,f7adf49b-3f4a17df,b13ca3d9-84f6cff8,f2b6a878-3f4a17df,32806e4f-28ea5088,2468d6e5-3f4a17df,f5a1eb9a-3f4a17df,ac59e11a-3f4a17df,8f6c5cc6-3f4a17df,94e21eca-3f4a17df,d6284ba0-9610fd4e,73551ca1-3f4a17df,d6737162-3f4a17df,e35cc1a-3f4a17df,e5a1483c-3f4a17df,6a68c9a6-3f4a17df,c1531af3-3f4a17df,47a0a3b2-3f4a17df,17f1f5fe-3f4a17df,1b0dc97-3f4a17df,7b46cc51-3f4a17df,af00e384-3f4a17df,8f80c10-78198108,a62c052e-3f4a17df,a4ca7cb1-3f4a17df,da968c94-3f4a17df,ae727645-d13781e7,e435811b-3f4a17df,f1d165c0-3f4a17df,a842add4-3f4a17df,ec937206-3f4a17df,cad2b12b-8ef57898,57d6085b-3f4a17df,fb92da45-3f4a17df,d6ad7f9a-a9080253,9507cc99-f2018abe,a5ecfb95-3f4a17df,797fe373-3f4a17df,ead3e59e-8c7df51c,29936542-3f4a17df,17a43872-3f4a17df,1ffefb1a-3f4a17df,f419bc72-3f4a17df,470d37ba-3f4a17df,f7d06457-e9d42fcd,bcb58f65-3f4a17df,d512da3a-513c429d,54d601a5-3f4a17df,63f121e7-3f4a17df,98ab2bc2-b6dc7ce0,600d2fa6-3f4a17df,c3eea944-28305c10,bca7ba0b-8cb78501,40355e18-3f4a17df,ff1e0777-3f4a17df,b6083631-447a6f32,d7af3875-3f4a17df,4dc2f223-3f4a17df,5133eb43-307b98b1,e9854fc-2e12b55,f314f5b9-a2b13a7f,6e4a21fe-efc28565,531e1626-4513f3bf,820f17d2-e484eeec,40debc11-3f4a17df,44666d99-3d47f4f4,e14ee5ee-c6d6098d,6222c570-3f4a17df,fd051c38-3f4a17df,a98def31-2a5a8f5d,284a13f5-3f4a17df,8f9d758f-3f4a17df,fc1790de-3f4a17df,35c106c9-3f4a17df,639ee5d3-3f4a17df,7dcaa2cd-3f4a17df,57d26b38-3f4a17df,f6f5c542-3f4a17df,5e05ef36-3f4a17df,18324944-3f4a17df,3779be93-3f4a17df,fbe03f16-3f4a17df,305240ad-3f4a17df,3b02c079-3f4a17df,669a7db8-3f4a17df,a028f288-d24710ce,350559e5-3f4a17df,91cba98-b3b3bb94,6a6ab26-faa329bf,4eb998ce-3f4a17df,9d5ecd8d-ca7d8d80,3e15bfc6-3f4a17df,3d9fe79-3f4a17df,779782d3-3f4a17df,e1d656a5-3f4a17df,e5c8270a-3f4a17df,ef3132a9-3f4a17df,36f4e102-3f4a17df,432d9464-3f4a17df,87bc8a34-3f4a17df,96def758-3f4a17df,2d3e25b-3f4a17df,7ccab089-3f4a17df,f4159b43-3f4a17df,151258bf-3f4a17df,5dfc4774-3f4a17df,13e8c923-3f4a17df,3e672fd9-e109e63f,893cc7a4-3f4a17df,3c978b59-3f4a17df,9cf6c713-7585e9f1,4ab30a87-c9361ef3,78049c75-f7dfe51d,c297985a-3f4a17df,a3ce8da1-3f4a17df,22946be1-22946be1,6ddea229-6ddea229,31f4a8bd-3f4a17df,d4daab79-3f4a17df,acf2401-ec6cb59a,96d006a-c3a49e71,f6264095-c3f8eab0,f42905ff-3f4a17df,2faf225b-3f4a17df,c17129bb-3f4a17df,74be468c-3f4a17df,4146cc26-775f6248,e9844d40-3f4a17df,2b68be8f-3f4a17df,d1ae5bf4-3f4a17df,489bedc0-3d47f4f4,15d1b2d8-3f4a17df,7ca2dd7e-3f4a17df,e1f2626b-3f4a17df,55cc39e1-3f4a17df,ba449693-9e1c16d0,cad46b80-3f4a17df,70404afa-803f8fc4,fecdbadb-3f4a17df,8643cb65-cf4f6ead,e6ed801e-cf4f6ead,ff7d412f-3f4a17df,fc9ceed7-ee2a48b4,89a375de-3f4a17df,4af38a69-3c635604,6ff79bbe-3f4a17df,aaa52086-d50cce67,b0b97cfb-3f4a17df,c823d1e9-3d47f4f4,66657049-3f4a17df,36860c1b-3f4a17df,7262ef2c-140d00b2,f93c9364-3f4a17df,b4c2bd17-23db2647,6ec84df5-3f4a17df,9e5c75f1-30e1b12b,4d625646-3f4a17df,ec3153de-3f4a17df,2394f90f-ecc8f8cf,d5f746a4-39aaf314,3a3c323e-3f4a17df,56aa5797-e5fec5a6,54be7848-3f4a17df,3ee33b62-3f4a17df,e2d38844-3f4a17df,eef5d69a-1dca273f,da493d3c-3f4a17df,72bafd3e-cdb4c186,f659c5ca-3f4a17df,f3ed486d-3f4a17df,81c84cff-6154888c,b3c54bb3-88fcaf7d,4076100b-3f4a17df,8c162025-3d47f4f4,9f8a0fd2-b4a3cd0c,ffdf4988-3f4a17df,3d3963fc-5d65cee9,3ac9fcb9-3f4a17df,80a04e6b-3d47f4f4,b446c562-3f4a17df,63831cab-3f4a17df,d2a642a0-3f4a17df,7ece8311-3f4a17df,7a32e64e-3f4a17df,8579ead7-3f4a17df,f108c955-3f4a17df,10713630-3f4a17df,b76b514f-3ac589b9,8f418b04-299bae22,d3566fbd-c6f74b94,d06639a1-3f4a17df,2e862394-fb669628,ed2195eb-3f4a17df,de028327-70abd7a5,2ca06d17-3f4a17df,a2f28ef8-d7d235fa,5abe5347-3f4a17df,40e3c61f-3f4a17df,d5ce1427-3f4a17df,afeeb5d0-3f4a17df,186d6e2c-36c0e608,1339c0d9-3f4a17df,ab7eb98c-3f4a17df,4fa4e3b8-3f4a17df,44fe0078-3f4a17df,c92d2cc4-3f4a17df,2468be5e-5f6398dc,aa540f4f-3f4a17df,30cf4980-61673e6,19e446cd-3f4a17df,f613598-3f4a17df,bf46f37a-3f4a17df,40de0170-3f4a17df,2d2b187a-3f4a17df,f86bc1e2-3f4a17df,43395eb-3f4a17df,e6ec9393-3f4a17df,ea0d881d-fd860968,3f752d-3f4a17df,25a81d51-3f4a17df,53c64de7-3f4a17df,e3559213-c0f46cd5,89bba52e-174ae9a8,444b9649-3f4a17df,d990c4ac-3f4a17df,a374fdf0-964ff297,bb199083-3f4a17df,5e2ea1a-3f4a17df,5870a003-3f4a17df,c71292e0-3f4a17df,3797f84b-3f4a17df,fe28a636-3f4a17df,52a20523-3f4a17df,ef4764d7-88fcaf7d,2bac45ad-3f4a17df,613081e8-3f4a17df,c49d2b35-3f4a17df,377002b7-3f4a17df,b360dba0-3f4a17df,404dfb1f-3f4a17df,94b88ba6-7e2e67c9,f3dbf5bd-faff9ce0,a14eecea-3f4a17df,15607410-b6e8dbb7,ab917364-25c84d73,8018a043-3f4a17df,ad4acdda-3f4a17df,90860314-5ab828e2,b1ceb06f-3f4a17df,a39574eb-3f4a17df,46ca825f-3f4a17df,f8b97b53-3f4a17df,72b751de-3f4a17df,db59f83a-3f4a17df,ec21b181-3f4a17df,80b60e4a-3f4a17df,84b4fc65-3f4a17df,c1e0d32e-3f4a17df,f585af0a-3f4a17df,bea4a9c2-750ef675,74d4bce7-3d47f4f4,5fd6ae8b-3f4a17df,2f6246c2-3f4a17df,51d22fd4-3f4a17df,aa8204ea-3f4a17df,5e19e3dc-f800d222,2a2ebc2c-3f4a17df,6332ffaf-3f4a17df,5910121-3f4a17df,f9a6f6e9-3f4a17df,595f5eb0-f23d1dea,7b4be1f2-3d47f4f4,9cdd2223-3f4a17df,bef5c006-3f4a17df,c5be9d88-3f4a17df,39a2e568-3f4a17df,7f8767fe-3f4a17df,ea6b5a9c-3f4a17df,e0e211ad-e0e211ad,5eaac78e-3f4a17df,2f95a72f-3f4a17df,8abceefd-f7ec9f66,c55491ea-156838e5,d00bdbf9-3f4a17df,c21c2b8b-3d47f4f4,1caa3332-20af8ffe,951dcd0c-3f4a17df,4776ceb-3f4a17df,f4f00e05-ca7d8d80,9481ce98-3d47f4f4,2a426c03-3d47f4f4,70678518-dee66fa8,be338734-dee66fa8,5f9907a9-dee66fa8,8eeccb9a-dee66fa8,2b465683-dee66fa8,52fc7926-dee66fa8,bc9b361d-dee66fa8,a41a7188-dee66fa8,ff71bfdc-dee66fa8,251fc742-dee66fa8,2159dd0c-dee66fa8,e7cc79d5-dee66fa8,4b935545-bb2d3403,9a38bae3-3d47f4f4,2d1e43a3-3d47f4f4,386dc267-3d47f4f4,d69d967d-3695c92e,3c8f75a1-8ff88d47,a4406b35-1657e2d6,408da146-1657e2d6," "num-experiments" = "319" "gr-context-type" = "GaneshGL" "egl-display-type" = "angle:SwANGLE" "gpu-gl-renderer" = "ANGLE (Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver-5.0.0)" "gpu-gl-vendor" = "Google Inc. (Google)" "gpu-generation-intel" = "0" "gpu-vsver" = "3.00" "gpu-psver" = "3.00" "gpu-driver" = "5.0.0" "gpu_count" = "0" "gpu-devid" = "0xffff" "gpu-venid" = "0xffff" "chrome-trace-id" = "10747873225623195453" "reentry_guard_tls_slot" = "unused" "switch-18" = "--trace-process-track-uuid=3190708994745248135" "switch-17" = "--pseudonymization-salt-handle=7,i,6299947397218991345,532618727" "switch-16" = "--variations-seed-version" "switch-15" = "--field-trial-handle=3,i,15989328156392189527,155005205907262380" "switch-14" = "--shared-files" "switch-13" = "--use-gl=angle" "commandline-disabled-feature-1" = "PaintHolding" "commandline-enabled-feature-1" = "OopRasterization" "osarch" = "x86_64" "pid" = "4358" "ptype" = "gpu-process" "switch-12" = "--change-stack-guard-on-fork=enable" "switch-11" = "--disable-breakpad" "switch-10" = "--user-data-dir=/tmp/chrome-poc-profile" "switch-9" = "--noerrdialogs" "switch-8" = "--enable-crash-reporter=," "switch-7" = "--crashpad-handler-pid=4205" "switch-6" = "--use-angle=swiftshader" "switch-5" = "--ozone-platform=headless" "switch-4" = "--headless=new" "switch-3" = "--enable-gpu-rasterization" "switch-2" = "--disable-dev-shm-usage" "switch-1" = "--no-sandbox" "num-switches" = "23" [0401/065641.344029:ERROR:third_party/crashpad/crashpad/util/file/file_io_posix.cc:145] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq: No such file or directory (2) [0401/065641.344106:ERROR:third_party/crashpad/crashpad/util/file/file_io_posix.cc:145] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq: No such file or directory (2) Received signal 6 #0 0x55678b3ca9f6 (/chromium/chromium/src/out/asan/chrome+0x10d819f5) #1 0x5567a35df368 (/chromium/chromium/src/out/asan/chrome+0x28f96367) #2 0x5567a359cbf7 (/chromium/chromium/src/out/asan/chrome+0x28f53bf6) #3 0x5567a35de76f (/chromium/chromium/src/out/asan/chrome+0x28f9576e) #4 0x7fd279240050 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3c04f) #5 0x7fd27928eeec (/usr/lib/x86_64-linux-gnu/libc.so.6+0x8aeeb) #6 0x7fd27923ffb2 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3bfb1) #7 0x7fd27922a472 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x26471) #8 0x5567a357359a (/chromium/chromium/src/out/asan/chrome+0x28f2a599) #9 0x5567ba27c0ab (/chromium/chromium/src/out/asan/chrome+0x3fc330aa) #10 0x5567a32a607a (/chromium/chromium/src/out/asan/chrome+0x28c5d079) #11 0x5567a32a5cd1 (/chromium/chromium/src/out/asan/chrome+0x28c5ccd0) #12 0x5567a32a529d (/chromium/chromium/src/out/asan/chrome+0x28c5c29c) #13 0x5567a32a4210 (/chromium/chromium/src/out/asan/chrome+0x28c5b20f) #14 0x5567a32658fb (/chromium/chromium/src/out/asan/chrome+0x28c1c8fa) #15 0x5567a3264efb (/chromium/chromium/src/out/asan/chrome+0x28c1befa) #16 0x5567a6a5d516 (/chromium/chromium/src/out/asan/chrome+0x2c414515) #17 0x5567a6a0c87a (/chromium/chromium/src/out/asan/chrome+0x2c3c3879) #18 0x5567a69fba57 (/chromium/chromium/src/out/asan/chrome+0x2c3b2a56) #19 0x5567ad1850c3 (/chromium/chromium/src/out/asan/chrome+0x32b3c0c2) #20 0x5567ad16e76f (/chromium/chromium/src/out/asan/chrome+0x32b2576e) #21 0x5567ad1794fc (/chromium/chromium/src/out/asan/chrome+0x32b304fb) #22 0x55679657d815 (/chromium/chromium/src/out/asan/chrome+0x1bf34814) #23 0x5567ac8e353c (/chromium/chromium/src/out/asan/chrome+0x3229a53b) #24 0x5567ac8e27a2 (/chromium/chromium/src/out/asan/chrome+0x322997a1) #25 0x5567ac90588d (/chromium/chromium/src/out/asan/chrome+0x322bc88c) #26 0x5567ac913878 (/chromium/chromium/src/out/asan/chrome+0x322ca877) #27 0x5567ac91365a (/chromium/chromium/src/out/asan/chrome+0x322ca659) #28 0x5567965c0212 (/chromium/chromium/src/out/asan/chrome+0x1bf77211) #29 0x556796594958 (/chromium/chromium/src/out/asan/chrome+0x1bf4b957) #30 0x556796592989 (/chromium/chromium/src/out/asan/chrome+0x1bf49988) #31 0x556796596572 (/chromium/chromium/src/out/asan/chrome+0x1bf4d571) #32 0x5567a3412bf7 (/chromium/chromium/src/out/asan/chrome+0x28dc9bf6) #33 0x5567a348a29a (/chromium/chromium/src/out/asan/chrome+0x28e41299) #34 0x5567a348910b (/chromium/chromium/src/out/asan/chrome+0x28e4010a) #35 0x5567a32d11f8 (/chromium/chromium/src/out/asan/chrome+0x28c881f7) #36 0x5567a348b9a8 (/chromium/chromium/src/out/asan/chrome+0x28e429a7) #37 0x5567a338d571 (/chromium/chromium/src/out/asan/chrome+0x28d44570) #38 0x5567aec7d6f8 (/chromium/chromium/src/out/asan/chrome+0x346346f7) #39 0x55679ef2aa30 (/chromium/chromium/src/out/asan/chrome+0x248e1a2f) #40 0x55679ef2bd60 (/chromium/chromium/src/out/asan/chrome+0x248e2d5f) #41 0x55679ef2ea69 (/chromium/chromium/src/out/asan/chrome+0x248e5a68) #42 0x55679ef28442 (/chromium/chromium/src/out/asan/chrome+0x248df441) #43 0x55679ef28a3d (/chromium/chromium/src/out/asan/chrome+0x248dfa3c) #44 0x55678b45db3a (/chromium/chromium/src/out/asan/chrome+0x10e14b39) #45 0x7fd27922b24a (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27249) #46 0x7fd27922b305 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27304) #47 0x55678b38302a (/chromium/chromium/src/out/asan/chrome+0x10d3a029) r8: 00005567c4469ff0 r9: 00007fffffffff01 r10: 0000000000000008 r11: 0000000000000246 r12: 0000000000000006 r13: 00007bd276077300 r14: 00000f7a4ec0ee60 r15: 00007c12773ec230 di: 0000000000001106 si: 0000000000001106 bp: 00007fd2780ac700 bx: 0000000000001106 dx: 0000000000000006 ax: 0000000000000000 cx: 00007fd27928eeec sp: 00007ffe25e9f8a0 ip: 00007fd27928eeec efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000 [end of stack trace] [4203:4203:0401/065641.436396:ERROR:content/browser/gpu/gpu_process_host.cc:999] GPU process exited unexpectedly: exit_code=6 [4203:4203:0401/065641.436445:WARNING:content/browser/gpu/gpu_process_host.cc:1441] The GPU process has crashed 3 time(s) [4387:4387:0401/065641.469179:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process. [4203:4203:0401/065641.489250:WARNING:content/browser/gpu/gpu_process_host.cc:1021] Reinitialized the GPU process after a crash. The reported initialization time was 0 ms Created TensorFlow Lite XNNPACK delegate for CPU. Created TensorFlow Lite XNNPACK delegate for CPU.