Invalid memory writes coming from ld-linux-armhf.so.3 loader

[vladimiroltean]

Hi,
I have an ArchLinuxARM-armv7-latest.tar.gz downloaded a while ago from the "ARMv7 Multi-platform" link at https://archlinuxarm.org/about/downloads, updated using pacman and freshly booted on an NXP LS1021A board.
The board sometimes fails to log in, but succeeds after a few retries:
$this->bbcode_second_pass_code('', '
alarm login: root
Password:
Last login: Mon Aug 8 22:14:37 on ttyS0
double free or corruption (out)

Arch Linux 5.19.0-rc4-00839-gb296f5115ca0-dirty (ttyS0)

alarm login: root
Password:
Last login: Thu Sep 1 14:23:41 on ttyS0
[root@alarm ~]# resize
')
and when inspecting what goes on using valgrind, I see strange behavior in _dl_start coming from /usr/lib/ld-linux-armhf.so.3:
$this->bbcode_second_pass_code('', '
[root@alarm ~]# valgrind ls
==304== Memcheck, a memory error detector
==304== Copyright (C) 2002-2022, and GNU GPL'd, by Julian Seward et al.
==304== Using Valgrind-3.19.0 and LibVEX; rerun with -h for copyright info
==304== Command: ls
==304==
==304== Invalid write of size 4
==304== at 0x401B13C: _dl_start (rtld.c:527)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84bd4 is on thread 1's stack
==304== 120 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x401250C: _dl_setup_hash (dl-setup_hash.c:25)
==304== by 0x401B79F: _dl_start_final (rtld.c:488)
==304== by 0x401B79F: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84be8 is on thread 1's stack
==304== 8 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4019708: _dl_sysdep_start (dl-sysdep.c:85)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84bc4 is on thread 1's stack
==304== 32 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4015A20: __GI___tunables_init (dl-tunables.c:279)
==304== by 0x40198A3: _dl_sysdep_start (dl-sysdep.c:224)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84b4c is on thread 1's stack
==304== 104 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x40126E4: _dl_sort_maps_init (dl-sort-maps.c:281)
==304== by 0x40198A7: _dl_sysdep_start (dl-sysdep.c:227)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84bc4 is on thread 1's stack
==304== 16 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x401FCD4: sbrk (sbrk.c:37)
==304== by 0x40198DB: _dl_sysdep_start (dl-sysdep.c:241)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84bb8 is on thread 1's stack
==304== 16 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x401BC40: dl_main (rtld.c:1320)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda849a4 is on thread 1's stack
==304== 528 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x400C4A8: _dl_new_object (dl-object.c:59)
==304== by 0x401C5D7: dl_main (rtld.c:1625)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84974 is on thread 1's stack
==304== 48 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x400BF80: __minimal_calloc (dl-minimal-malloc.c:78)
==304== by 0x400C503: calloc (rtld-malloc.h:44)
==304== by 0x400C503: _dl_new_object (dl-object.c:92)
==304== by 0x401C5D7: dl_main (rtld.c:1625)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84978 is on thread 1's stack
==304== 16 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x400BE24: __minimal_malloc (dl-minimal-malloc.c:35)
==304== by 0x400C503: calloc (rtld-malloc.h:44)
==304== by 0x400C503: _dl_new_object (dl-object.c:92)
==304== by 0x401C5D7: dl_main (rtld.c:1625)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84974 is on thread 1's stack
==304== 24 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x400C3D8: _dl_add_to_namespace_list (dl-object.c:31)
==304== by 0x401C603: dl_main (rtld.c:1634)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda849a8 is on thread 1's stack
==304== 16 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x401250C: _dl_setup_hash (dl-setup_hash.c:25)
==304== by 0x401CD07: dl_main (rtld.c:1693)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda849b8 is on thread 1's stack
==304== 8 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4019DA0: _dl_discover_osversion (dl-sysdep.c:46)
==304== by 0x401D233: dl_main (rtld.c:1721)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda847b4 is on thread 1's stack
==304== 496 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4007130: _dl_init_paths (dl-load.c:706)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84984 is on thread 1's stack
==304== 40 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x40183B8: _dl_important_hwcaps (dl-hwcaps.c:172)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda8490c is on thread 1's stack
==304== 112 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018E74: _dl_hwcaps_split_masked (dl-hwcaps_split.c:51)
==304== by 0x401846B: update_hwcaps_counts (dl-hwcaps.c:52)
==304== by 0x401846B: _dl_important_hwcaps (dl-hwcaps.c:186)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84920 is on thread 1's stack
==304== 8 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018E74: _dl_hwcaps_split_masked (dl-hwcaps_split.c:51)
==304== by 0x40184B3: update_hwcaps_counts (dl-hwcaps.c:52)
==304== by 0x40184B3: _dl_important_hwcaps (dl-hwcaps.c:187)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84920 is on thread 1's stack
==304== 8 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018D54: _dl_hwcaps_split (dl-hwcaps_split.c:25)
==304== by 0x4018E83: _dl_hwcaps_split_masked (dl-hwcaps_split.c:54)
==304== by 0x40184B3: update_hwcaps_counts (dl-hwcaps.c:52)
==304== by 0x40184B3: _dl_important_hwcaps (dl-hwcaps.c:187)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84908 is on thread 1's stack
==304== 16 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x400BE24: __minimal_malloc (dl-minimal-malloc.c:35)
==304== by 0x40184D7: malloc (rtld-malloc.h:56)
==304== by 0x40184D7: compute_priorities (dl-hwcaps.c:100)
==304== by 0x40184D7: _dl_important_hwcaps (dl-hwcaps.c:189)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda8490c is on thread 1's stack
==304== 24 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018E74: _dl_hwcaps_split_masked (dl-hwcaps_split.c:51)
==304== by 0x401859F: compute_priorities (dl-hwcaps.c:125)
==304== by 0x401859F: _dl_important_hwcaps (dl-hwcaps.c:189)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84920 is on thread 1's stack
==304== 8 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018D54: _dl_hwcaps_split (dl-hwcaps_split.c:25)
==304== by 0x4018E83: _dl_hwcaps_split_masked (dl-hwcaps_split.c:54)
==304== by 0x401859F: compute_priorities (dl-hwcaps.c:125)
==304== by 0x401859F: _dl_important_hwcaps (dl-hwcaps.c:189)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84908 is on thread 1's stack
==304== 16 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x400BE24: __minimal_malloc (dl-minimal-malloc.c:35)
==304== by 0x40188FB: malloc (rtld-malloc.h:56)
==304== by 0x40188FB: _dl_important_hwcaps (dl-hwcaps.c:259)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda848ec is on thread 1's stack
==304== 24 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018300: copy_hwcaps (dl-hwcaps.c:74)
==304== by 0x401892B: _dl_important_hwcaps (dl-hwcaps.c:269)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda848d4 is on thread 1's stack
==304== 40 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018E74: _dl_hwcaps_split_masked (dl-hwcaps_split.c:51)
==304== by 0x401838F: copy_hwcaps (dl-hwcaps.c:77)
==304== by 0x401892B: _dl_important_hwcaps (dl-hwcaps.c:269)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda848d8 is on thread 1's stack
==304== 8 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018300: copy_hwcaps (dl-hwcaps.c:74)
==304== by 0x4018943: _dl_important_hwcaps (dl-hwcaps.c:270)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda848d4 is on thread 1's stack
==304== 40 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018E74: _dl_hwcaps_split_masked (dl-hwcaps_split.c:51)
==304== by 0x401838F: copy_hwcaps (dl-hwcaps.c:77)
==304== by 0x4018943: _dl_important_hwcaps (dl-hwcaps.c:270)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda848d8 is on thread 1's stack
==304== 8 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4018D54: _dl_hwcaps_split (dl-hwcaps_split.c:25)
==304== by 0x4018E83: _dl_hwcaps_split_masked (dl-hwcaps_split.c:54)
==304== by 0x401838F: copy_hwcaps (dl-hwcaps.c:77)
==304== by 0x4018943: _dl_important_hwcaps (dl-hwcaps.c:270)
==304== by 0x4007167: _dl_init_paths (dl-load.c:720)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda848c0 is on thread 1's stack
==304== 16 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x400BE24: __minimal_malloc (dl-minimal-malloc.c:35)
==304== by 0x400717B: malloc (rtld-malloc.h:56)
==304== by 0x400717B: _dl_init_paths (dl-load.c:726)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda8497c is on thread 1's stack
==304== 24 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x400BE24: __minimal_malloc (dl-minimal-malloc.c:35)
==304== by 0x40071B7: malloc (rtld-malloc.h:56)
==304== by 0x40071B7: _dl_init_paths (dl-load.c:739)
==304== by 0x401D277: call_init_paths (dl-main.h:109)
==304== by 0x401D277: dl_main (rtld.c:1726)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda8497c is on thread 1's stack
==304== 24 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x4016650: _dl_audit_activity_map (dl-audit.c:28)
==304== by 0x401D48B: dl_main (rtld.c:1832)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda84978 is on thread 1's stack
==304== 40 bytes below stack pointer
==304==
==304== Invalid write of size 4
==304== at 0x401BB20: handle_preload_list (rtld.c:894)
==304== by 0x401EE3B: dl_main (rtld.c:1845)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== Address 0xbda839a4 is not stack'd, malloc'd or (recently) free'd
==304==
==304==
==304== Process terminating with default action of signal 11 (SIGSEGV): dumping core
==304== Access not within mapped region at address 0xBDA839A4
==304== at 0x401BB20: handle_preload_list (rtld.c:894)
==304== by 0x401EE3B: dl_main (rtld.c:1845)
==304== by 0x401991B: _dl_sysdep_start (dl-sysdep.c:256)
==304== by 0x401B7E3: _dl_start_final (rtld.c:507)
==304== by 0x401B7E3: _dl_start (rtld.c:596)
==304== by 0x401A67F: ??? (in /usr/lib/ld-linux-armhf.so.3)
==304== If you believe this happened as a result of a stack
==304== overflow in your program's main thread (unlikely but
==304== possible), you can try to increase the size of the
==304== main thread stack using the --main-stacksize= flag.
==304== The main thread stack size used in this run was 8388608.
==304==
==304== HEAP SUMMARY:
==304== in use at exit: 0 bytes in 0 blocks
==304== total heap usage: 0 allocs, 0 frees, 0 bytes allocated
==304==
==304== All heap blocks were freed -- no leaks are possible
==304==
==304== For lists of detected and suppressed errors, rerun with: -s
==304== ERROR SUMMARY: 31 errors from 31 contexts (suppressed: 0 from 0)
Segmentation fault (core dumped)
')
Naturally, because of this, the system is pretty unstable.

Any ideas what went wrong? I did not compile anything from source.

[Mettacrawler]

It might be a long shot but have you tried using a memory tester to see if it can find any issues with your system's RAM?

[Mettacrawler]

Another thing to try is installing pacutils and running paccheck

https://wiki.archlinux.org/index.php/Pacman/Tips_and_tricks#Listing_all_changed_files_from_packages
https://github.com/andrewgregory/pacutils/blob/master/doc/paccheck.pod