[radeonsi] After 549ae5f8 commit Firefox Nightly Asan begins crashes

$ git bisect log
git bisect start
# bad: [b2c737cf57382d543002177b6e4810b19ab62c74] virgl: Fixes portal2 binary name in tweak config
git bisect bad b2c737cf57382d543002177b6e4810b19ab62c74
# good: [2015a109ff287cdf04607d5acc540aae2e87daa3] anv,iris: Use the data cache for UBO pulls on Gen12+
git bisect good 2015a109ff287cdf04607d5acc540aae2e87daa3
# good: [da4c4c0e6785d48b6aa053766e73e80df292ce82] gallium/ntt: Add default compiler options for non-native-NIR drivers.
git bisect good da4c4c0e6785d48b6aa053766e73e80df292ce82
# good: [3bb7ebfc7504af0e85596f3ad4b72a2ede10d227] glx: move __glXGetUST into the DRI1 code
git bisect good 3bb7ebfc7504af0e85596f3ad4b72a2ede10d227
# bad: [9d1d3a89c49b4afab3e6ff7fcca2ac14347d4dca] ci: Move test-docs job to deploy stage
git bisect bad 9d1d3a89c49b4afab3e6ff7fcca2ac14347d4dca
# good: [c69849ef803bee8296c961df355499b42c76e973] amd: update addrlib
git bisect good c69849ef803bee8296c961df355499b42c76e973
# good: [1126b5cd2f14776b1554591e5cc238e05882b5ef] Revert "st/mesa: don't pass NIR to draw module if IO is lowered"
git bisect good 1126b5cd2f14776b1554591e5cc238e05882b5ef
# bad: [549ae5f84375dfadb86cfd465f0103acfae3249f] st/mesa: make sure prog->info is up to date for NIR (v2)
git bisect bad 549ae5f84375dfadb86cfd465f0103acfae3249f
# first bad commit: [549ae5f84375dfadb86cfd465f0103acfae3249f] st/mesa: make sure prog->info is up to date for NIR (v2)

How to reproduce:

Download Firefox Nightly Asan https://firefox-ci-tc.services.mozilla.com/api/index/v1/task/gecko.v2.mozilla-central.shippable.latest.firefox.linux64-asan-reporter-opt/artifacts/public/build/target.tar.bz2
Launch Firefox Nightly Asan
Open https://www.youtube.com/
Try to play any video.

AMD Radeon VII
Kernel 5.10

=================================================================
==140755==ERROR: AddressSanitizer: heap-use-after-free on address 0x6060006aaa50 at pc 0x555a1a241ce6 bp 0x7f394ba955d0 sp 0x7f394ba94d90
READ of size 21 at 0x6060006aaa50 thread T99 (Renderer)
    #0 0x555a1a241ce5 in strlen /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors.inc:372:5
    #1 0x7f397a99e245 in blob_write_uint32 /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/util/blob.c:210:1
    #2 0x7f397a99e245 in write_shader_parameters /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/compiler/glsl/serialize.cpp:1038:24
    #3 0x7f397a99e245 in write_shader_metadata /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/compiler/glsl/serialize.cpp:1127:27
    #4 0x7f397a99e245 in serialize_glsl_program.constprop.0 /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/compiler/glsl/serialize.cpp:1264:31
    #5 0x7f3979ce0d08 in blob_init /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/util/blob.c:111:15
    #6 0x7f3979ce0d08 in shader_cache_write_program_metadata(gl_context*, gl_shader_program*) /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/compiler/glsl/shader_cache.cpp:103:13
    #7 0x7f3979ce0d08 in _mesa_glsl_link_shader /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/mesa/program/ir_to_mesa.cpp:3146:42
    #8 0x7f3979dcda8e  /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/mesa/main/shaderapi.c:1898:1
    #9 0x7f3a28ce8978 in webrender::device::gl::Device::link_program::h89ad94e8ddec2c04 /builds/worker/checkouts/gecko/gfx/wr/webrender/src/device/gl.rs:2119:13
    #10 0x7f3a28fd469f in webrender::shade::LazilyCompiledShader::get_internal::ha169541be4784f79 /builds/worker/checkouts/gecko/gfx/wr/webrender/src/shade.rs:239:13
    #11 0x7f3a29000456 in webrender::shade::LazilyCompiledShader::bind::he87992e91639c7f9 /builds/worker/checkouts/gecko/gfx/wr/webrender/src/shade.rs:137:29
    #12 0x7f3a28ff46f3 in webrender::renderer::Renderer::draw_color_target::h588d3c88310ef10e /builds/worker/checkouts/gecko/gfx/wr/webrender/src/renderer.rs:5389:13
    #13 0x7f3a28ff46f3 in webrender::renderer::Renderer::draw_frame::h4ca22cfc0b673ff3 /builds/worker/checkouts/gecko/gfx/wr/webrender/src/renderer.rs:6375:25
    #14 0x7f3a28fd72f1 in webrender::renderer::Renderer::render_impl::h7a88eedb7b4c5461 /builds/worker/checkouts/gecko/gfx/wr/webrender/src/renderer.rs:3690:13
    #15 0x7f3a2902d2bf in webrender::renderer::Renderer::render::hab9bb1ec54fcc622 /builds/worker/checkouts/gecko/gfx/wr/webrender/src/renderer.rs:3447:22
    #16 0x7f3a2902d2bf in wr_renderer_render /builds/worker/checkouts/gecko/gfx/webrender_bindings/src/bindings.rs:614:11
    #17 0x7f3a1c38a94b in mozilla::wr::RendererOGL::UpdateAndRender(mozilla::Maybe<mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> > const&, mozilla::Maybe<mozilla::wr::ImageFormat> const&, mozilla::Maybe<mozilla::Range<unsigned char> > const&, bool*, mozilla::wr::RendererStats*) /builds/worker/checkouts/gecko/gfx/webrender_bindings/RendererOGL.cpp:191:8
    #18 0x7f3a1c3881c8 in mozilla::wr::RenderThread::UpdateAndRender(mozilla::wr::WrWindowId, mozilla::layers::BaseTransactionId<mozilla::VsyncIdType> const&, mozilla::TimeStamp const&, bool, mozilla::Maybe<mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> > const&, mozilla::Maybe<mozilla::wr::ImageFormat> const&, mozilla::Maybe<mozilla::Range<unsigned char> > const&, bool*) /builds/worker/checkouts/gecko/gfx/webrender_bindings/RenderThread.cpp:488:31
    #19 0x7f3a1c387646 in mozilla::wr::RenderThread::HandleFrameOneDoc(mozilla::wr::WrWindowId, bool) /builds/worker/checkouts/gecko/gfx/webrender_bindings/RenderThread.cpp:325:3
    #20 0x7f3a1c39ac7e in applyImpl<mozilla::wr::RenderThread, void (mozilla::wr::RenderThread::*)(mozilla::wr::WrWindowId, bool), StoreCopyPassByConstLRef<mozilla::wr::WrWindowId>, StoreCopyPassByConstLRef<bool> , 0, 1> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1188:12
    #21 0x7f3a1c39ac7e in apply<mozilla::wr::RenderThread, void (mozilla::wr::RenderThread::*)(mozilla::wr::WrWindowId, bool)> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1194:12
    #22 0x7f3a1c39ac7e in mozilla::detail::RunnableMethodImpl<mozilla::wr::RenderThread*, void (mozilla::wr::RenderThread::*)(mozilla::wr::WrWindowId, bool), true, (mozilla::RunnableKind)0, mozilla::wr::WrWindowId, bool>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1240:13
    #23 0x7f3a1a5c3433 in RunTask /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:465:9
    #24 0x7f3a1a5c3433 in MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask&&) /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:473:5
    #25 0x7f3a1a5c4b6b in MessageLoop::DoWork() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:548:13
    #26 0x7f3a1a5c6439 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_pump_default.cc:35:31
    #27 0x7f3a1a5c19c2 in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:334:10
    #28 0x7f3a1a5c19c2 in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:327:3
    #29 0x7f3a1a5c19c2 in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:309:3
    #30 0x7f3a1a5df14b in base::Thread::ThreadMain() /builds/worker/checkouts/gecko/ipc/chromium/src/base/thread.cc:191:16
    #31 0x7f3a1a5d645c in ThreadFunc(void*) /builds/worker/checkouts/gecko/ipc/chromium/src/base/platform_thread_posix.cc:40:13
    #32 0x7f3a30ab03f8 in start_thread (/lib64/libpthread.so.0+0x93f8)
    #33 0x7f3a30680842 in clone (/lib64/libc.so.6+0x101842)

0x6060006aaa60 is located 0 bytes to the right of 64-byte region [0x6060006aaa20,0x6060006aaa60)
freed by thread T99 (Renderer) here:
    #0 0x555a1a2a90ad in free /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cpp:123:3
    #1 0x7f397a00cbc8 in linear_strdup /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/util/ralloc.c:813:1

previously allocated by thread T99 (Renderer) here:
    #0 0x555a1a2a932d in malloc /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3
    #1 0x7f397a008060 in util_queue_thread_func.lto_priv.0 /builddir/build/BUILD/mesa-7e28fbd8bc558ca8c205fdf0e38c876f4b2c496b/x86_64-redhat-linux-gnu/../src/util/u_queue.c:262:10

Thread T99 (Renderer) created by T0 here:
    #0 0x555a1a293d9a in pthread_create /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cpp:214:3
    #1 0x7f3a1a5d0b3c in CreateThread /builds/worker/checkouts/gecko/ipc/chromium/src/base/platform_thread_posix.cc:123:14
    #2 0x7f3a1a5d0b3c in PlatformThread::Create(unsigned long, PlatformThread::Delegate*, unsigned long*) /builds/worker/checkouts/gecko/ipc/chromium/src/base/platform_thread_posix.cc:134:10
    #3 0x7f3a1a5de79e in base::Thread::StartWithOptions(base::Thread::Options const&) /builds/worker/checkouts/gecko/ipc/chromium/src/base/thread.cc:97:8
    #4 0x7f3a1c382440 in mozilla::wr::RenderThread::Start() /builds/worker/checkouts/gecko/gfx/webrender_bindings/RenderThread.cpp:88:16
    #5 0x7f3a1c0df9b1 in gfxPlatform::InitLayersIPC() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:1345:7
    #6 0x7f3a1c0dae32 in gfxPlatform::Init() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:985:3
    #7 0x7f3a1c0d884b in gfxPlatform::GetPlatform() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:510:5
    #8 0x7f3a21f24d6b in GetPlatform /builds/worker/workspace/obj-build/dist/include/gfxPlatformGtk.h:31:29
    #9 0x7f3a21f24d6b in nsWindow::nsWindow() /builds/worker/checkouts/gecko/widget/gtk/nsWindow.cpp:427:19
    #10 0x7f3a21f6384a in nsIWidget::CreateTopLevelWindow() /builds/worker/checkouts/gecko/widget/gtk/nsWindow.cpp:8034:36
    #11 0x7f3a25324569 in mozilla::AppWindow::Initialize(nsIAppWindow*, nsIAppWindow*, int, int, bool, nsWidgetInitData&) /builds/worker/checkouts/gecko/xpfe/appshell/AppWindow.cpp:201:15
    #12 0x7f3a253495ec in nsAppShellService::JustCreateTopWindow(nsIAppWindow*, nsIURI*, unsigned int, int, int, bool, mozilla::AppWindow**) /builds/worker/checkouts/gecko/xpfe/appshell/nsAppShellService.cpp:709:15
    #13 0x7f3a2534a652 in nsAppShellService::CreateTopLevelWindow(nsIAppWindow*, nsIURI*, unsigned int, int, int, nsIAppWindow**) /builds/worker/checkouts/gecko/xpfe/appshell/nsAppShellService.cpp:172:8
    #14 0x7f3a25c1a1f6 in nsAppStartup::CreateChromeWindow(nsIWebBrowserChrome*, unsigned int, nsIOpenWindowInfo*, bool*, nsIWebBrowserChrome**) /builds/worker/checkouts/gecko/toolkit/components/startup/nsAppStartup.cpp:643:15
    #15 0x7f3a25dc5bd0 in nsWindowWatcher::CreateChromeWindow(nsIWebBrowserChrome*, unsigned int, nsIOpenWindowInfo*, nsIWebBrowserChrome**) /builds/worker/checkouts/gecko/toolkit/components/windowwatcher/nsWindowWatcher.cpp:419:33
    #16 0x7f3a25dc040f in nsWindowWatcher::OpenWindowInternal(mozIDOMWindowProxy*, nsTSubstring<char> const&, nsTSubstring<char> const&, nsTSubstring<char> const&, bool, bool, bool, nsIArray*, bool, bool, bool, nsPIWindowWatcher::PrintKind, nsDocShellLoadState*, mozilla::dom::BrowsingContext**) /builds/worker/checkouts/gecko/toolkit/components/windowwatcher/nsWindowWatcher.cpp:947:12
    #17 0x7f3a25dbde18 in nsWindowWatcher::OpenWindow(mozIDOMWindowProxy*, nsTSubstring<char> const&, nsTSubstring<char> const&, nsTSubstring<char> const&, nsISupports*, mozIDOMWindowProxy**) /builds/worker/checkouts/gecko/toolkit/components/windowwatcher/nsWindowWatcher.cpp:293:3
    #18 0x7f3a19434f81 in NS_InvokeByIndex /builds/worker/checkouts/gecko/xpcom/reflect/xptcall/md/unix/xptcinvoke_asm_x86_64_unix.S:101
    #19 0x7f3a1b30bc11 in Invoke /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedNative.cpp:1620:10
    #20 0x7f3a1b30bc11 in Call /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedNative.cpp:1176:19
    #21 0x7f3a1b30bc11 in XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedNative.cpp:1142:23
    #22 0x7f3a1b311a4d in XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedNativeJSOps.cpp:925:10
    #23 0x7f3a2610c5ad in CallJSNative /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:506:13
    #24 0x7f3a2610c5ad in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:598:12
    #25 0x7f3a260f68ae in InternalCall /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:663:10
    #26 0x7f3a260f68ae in CallFromStack /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:667:10
    #27 0x7f3a260f68ae in Interpret(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:3336:16
    #28 0x7f3a260daf9d in js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:476:13
    #29 0x7f3a261124bf in js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, JS::Handle<JS::Value>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:855:13
    #30 0x7f3a261badd8 in ExecuteInExtensibleLexicalEnvironment(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>) /builds/worker/checkouts/gecko/js/src/builtin/Eval.cpp:491:10
    #31 0x7f3a261bbabc in JS::ExecuteInJSMEnvironment(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, JS::Handle<JS::StackGCVector<JSObject*, js::TempAllocPolicy> >) /builds/worker/checkouts/gecko/js/src/builtin/Eval.cpp:598:10
    #32 0x7f3a261bb5a1 in JS::ExecuteInJSMEnvironment(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>) /builds/worker/checkouts/gecko/js/src/builtin/Eval.cpp:553:10
    #33 0x7f3a1b1f509e in mozJSComponentLoader::ObjectForLocation(ComponentLoaderInfo&, nsIFile*, JS::MutableHandle<JSObject*>, JS::MutableHandle<JSScript*>, char**, bool, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/xpconnect/loader/mozJSComponentLoader.cpp:845:19
    #34 0x7f3a1b1fcfea in mozJSComponentLoader::Import(JSContext*, nsTSubstring<char> const&, JS::MutableHandle<JSObject*>, JS::MutableHandle<JSObject*>, bool) /builds/worker/checkouts/gecko/js/xpconnect/loader/mozJSComponentLoader.cpp:1249:12
    #35 0x7f3a1938e62a in mozilla::xpcom::ConstructJSMComponent(nsTSubstring<char> const&, char const*, nsISupports**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:1740:3
    #36 0x7f3a1937d21c in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsISupports*, nsID const&, void**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:11913:7
    #37 0x7f3a193ab495 in CreateInstance /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:176:46
    #38 0x7f3a193ab495 in nsComponentManagerImpl::GetServiceLocked((anonymous namespace)::MutexLock&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1330:17
    #39 0x7f3a193ad980 in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1517:10
    #40 0x7f3a193b3b92 in CallGetService /builds/worker/checkouts/gecko/xpcom/components/nsComponentManagerUtils.cpp:61:43
    #41 0x7f3a193b3b92 in nsGetServiceByContractIDWithError::operator()(nsID const&, void**) const /builds/worker/checkouts/gecko/xpcom/components/nsComponentManagerUtils.cpp:253:21
    #42 0x7f3a1920acce in nsCOMPtr_base::assign_from_gs_contractid_with_error(nsGetServiceByContractIDWithError const&, nsID const&) /builds/worker/checkouts/gecko/xpcom/base/nsCOMPtr.cpp:91:7
    #43 0x7f3a25e90ca1 in operator= /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:1066:5
    #44 0x7f3a25e90ca1 in nsAppStartupNotifier::NotifyObservers(char const*) /builds/worker/checkouts/gecko/toolkit/xre/nsAppStartupNotifier.cpp:42:23
    #45 0x7f3a25e822a3 in XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:4857:3
    #46 0x7f3a25e85181 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5275:8
    #47 0x7f3a25e85d40 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5331:21
    #48 0x555a1a2dc394 in do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:218:22
    #49 0x555a1a2dc394 in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:336:16
    #50 0x7f3a305a6ba1 in __libc_start_main (/lib64/libc.so.6+0x27ba1)

SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors.inc:372:5 in strlen
Shadow bytes around the buggy address:
  0x0c0c800cd4f0: fd fd fd fd fd fd fd fd fa fa fa fa fd fd fd fd
  0x0c0c800cd500: fd fd fd fd fa fa fa fa 00 00 00 00 00 00 00 00
  0x0c0c800cd510: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c800cd520: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c800cd530: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c0c800cd540: fa fa fa fa fd fd fd fd fd fd[fd]fd fa fa fa fa
  0x0c0c800cd550: 00 00 00 00 00 00 00 00 fa fa fa fa 00 00 00 00
  0x0c0c800cd560: 00 00 00 00 fa fa fa fa fd fd fd fd fd fd fd fd
  0x0c0c800cd570: fa fa fa fa 00 00 00 00 00 00 00 00 fa fa fa fa
  0x0c0c800cd580: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
  0x0c0c800cd590: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
==140755==ABORTING

Edited Oct 23, 2020 by Mikhail Gavrilov

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information

Admin message

[radeonsi] After 549ae5f8 commit Firefox Nightly Asan begins crashes