Closed Bug 1746546 Opened 2 years ago Closed 1 year ago

ThreadSanitizer: data race [@ mmap] vs. [@ pthread_mutex_init]

Categories

(Core :: Graphics: WebGPU, defect)

Product:
Core
Component:
Graphics: WebGPU
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox97 --- disabled

People

(Reporter: tsmith, Unassigned)

References

(Blocks 3 open bugs)

Details

(Keywords: csectype-race)

Found while fuzzing m-c 20211215-66b5b425d27f (--enable-thread-sanitizer --enable-fuzzing)

Unfortunately a reproducible testcase is not available.

WARNING: ThreadSanitizer: data race (pid=1597)
  Write of size 1 at 0x7f70b754c2c0 by thread T47 (mutexes: write M370561191237739136):
    #0 pthread_mutex_init /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:1270:3 (firefox+0x5f3df)
    #1 pthread_once /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:1492:5 (firefox+0x60e44)
    #2 <null> <null> (libVkLayer_MESA_device_select.so+0x3560)
    #3 ash::entry::EntryCustom$LT$L$GT$::create_instance::hc41a58b13572c320 /builds/worker/checkouts/gecko/third_party/rust/ash/src/entry.rs:112:9 (libxul.so+0x8dc7160)
    #4 wgpu_hal::vulkan::instance::_$LT$impl$u20$wgpu_hal..Instance$LT$wgpu_hal..vulkan..Api$GT$$u20$for$u20$wgpu_hal..vulkan..Instance$GT$::init::h27c2f1ab0c1006ac /builds/worker/checkouts/gecko/third_party/rust/wgpu-hal/src/vulkan/instance.rs:511:13 (libxul.so+0x8dc7160)
    #5 wgpu_core::instance::Instance::new::init::he642b23252808b24 /builds/worker/checkouts/gecko/third_party/rust/wgpu-core/src/instance.rs:108:26 (libxul.so+0x8dc7160)
    #6 wgpu_core::instance::Instance::new::hf99d6796774c3477 /builds/worker/checkouts/gecko/third_party/rust/wgpu-core/src/instance.rs:117:21 (libxul.so+0x8dc7160)
    #7 wgpu_core::hub::Global$LT$G$GT$::new::h63df0e129f15e923 /builds/worker/checkouts/gecko/third_party/rust/wgpu-core/src/hub.rs:828:23 (libxul.so+0x8c2cf11)
    #8 wgpu_server_new /builds/worker/checkouts/gecko/gfx/wgpu_bindings/src/server.rs:62:25 (libxul.so+0x8c2cf11)
    #9 wgpu_core::hub::Global$LT$G$GT$::new::h63df0e129f15e923 /builds/worker/checkouts/gecko/third_party/rust/wgpu-core/src/hub.rs:828:23 (libxul.so+0x8c2cf11)
    #10 wgpu_server_new /builds/worker/checkouts/gecko/gfx/wgpu_bindings/src/server.rs:62:25 (libxul.so+0x8c2cf11)
    #11 mozilla::webgpu::WebGPUParent::WebGPUParent() /builds/worker/checkouts/gecko/dom/webgpu/ipc/WebGPUParent.cpp:194:16 (libxul.so+0x3aad35f)
    #12 mozilla::layers::ContentCompositorBridgeParent::AllocPWebGPUParent() /builds/worker/checkouts/gecko/gfx/layers/ipc/ContentCompositorBridgeParent.cpp:209:38 (libxul.so+0x22cdc9f)
    #13 mozilla::layers::PCompositorBridgeParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCompositorBridgeParent.cpp:914:86 (libxul.so+0x1947d11)
    #14 mozilla::layers::PCompositorManagerParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCompositorManagerParent.cpp:204:32 (libxul.so+0x194f05e)
    #15 mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:2043:25 (libxul.so+0x188199e)
    #16 mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1968:9 (libxul.so+0x1880035)
    #17 mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1827:3 (libxul.so+0x1880c2a)
    #18 mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1855:14 (libxul.so+0x18810a5)
    #19 nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1177:16 (libxul.so+0xf5b3a3)
    #20 NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:467:10 (libxul.so+0xf61de2)
    #21 mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:330:5 (libxul.so+0x18861f8)
    #22 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:331:10 (libxul.so+0x1807fdc)
    #23 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:324:3 (libxul.so+0x1807fdc)
    #24 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:306:3 (libxul.so+0x1807fdc)
    #25 nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:391:10 (libxul.so+0xf57485)
    #26 _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5 (libnspr4.so+0x4407d)

  Previous write of size 8 at 0x7f70b754c2c0 by main thread:
    #0 mmap /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/tsan/../sanitizer_common/sanitizer_common_interceptors.inc:7385:3 (firefox+0x8c513)
    #1 base::SharedMemory::Map(unsigned long, void*) /builds/worker/checkouts/gecko/ipc/chromium/src/base/shared_memory_posix.cc:505:7 (libxul.so+0x1811ae9)
    #2 mozilla::ipc::SharedPreferenceSerializer::SerializeToSharedMemory() /builds/worker/checkouts/gecko/ipc/glue/ProcessUtils_common.cpp:52:12 (libxul.so+0x189b1b9)
    #3 mozilla::RDDProcessHost::Launch(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >) /builds/worker/checkouts/gecko/dom/media/ipc/RDDProcessHost.cpp:49:25 (libxul.so+0x40664b0)
    #4 mozilla::RDDProcessManager::LaunchRDDProcess() /builds/worker/checkouts/gecko/dom/media/ipc/RDDProcessManager.cpp:137:18 (libxul.so+0x4068fc8)
    #5 operator() /builds/worker/checkouts/gecko/dom/media/ipc/RDDProcessManager.cpp:194:16 (libxul.so+0x406ae79)
    #6 mozilla::detail::ProxyFunctionRunnable<mozilla::RDDProcessManager::EnsureRDDProcessAndCreateBridge(int)::$_2, mozilla::MozPromise<mozilla::ipc::Endpoint<mozilla::PRemoteDecoderManagerChild>, nsresult, true> >::Run() /builds/worker/workspace/obj-build/dist/include/mozilla/MozPromise.h:1643:29 (libxul.so+0x406ae79)
    #7 mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:468:16 (libxul.so+0xf6ba77)
    #8 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:771:26 (libxul.so+0xf48f0d)
    #9 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:607:15 (libxul.so+0xf475e6)
    #10 mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:391:36 (libxul.so+0xf478c2)
    #11 operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:124:37 (libxul.so+0xf6f3d7)
    #12 mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.h:531:5 (libxul.so+0xf6f3d7)
    #13 nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1183:16 (libxul.so+0xf5b183)
    #14 NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:467:10 (libxul.so+0xf61de2)
    #15 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21 (libxul.so+0x188589d)
    #16 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:331:10 (libxul.so+0x1807fdc)
    #17 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:324:3 (libxul.so+0x1807fdc)
    #18 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:306:3 (libxul.so+0x1807fdc)
    #19 nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:137:27 (libxul.so+0x4c91026)
    #20 nsAppStartup::Run() /builds/worker/checkouts/gecko/toolkit/components/startup/nsAppStartup.cpp:295:30 (libxul.so+0x6a8f7f8)
    #21 XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5362:22 (libxul.so+0x6b97c83)
    #22 XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5547:8 (libxul.so+0x6b98b09)
    #23 XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5606:21 (libxul.so+0x6b990d4)
    #24 mozilla::BootstrapImpl::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:45:12 (libxul.so+0x6ba3832)
    #25 do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:225:22 (firefox+0xce72c)
    #26 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:395:16 (firefox+0xce72c)

  Location is global '??' at 0x7f70b7541000 (libVkLayer_MESA_device_select.so+0x00000000b2c0)

  Mutex M370561191237739136 is already destroyed.

  Thread T47 'Compositor' (tid=1669, running) created by main thread at:
    #0 pthread_create /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:977:3 (firefox+0x5dc6d)
    #1 _PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:458:14 (libnspr4.so+0x3b295)
    #2 PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:533:12 (libnspr4.so+0x2fe55)
    #3 nsThread::Init(nsTSubstring<char> const&) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:615:18 (libxul.so+0xf58ae5)
    #4 nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadManager.cpp:581:12 (libxul.so+0xf60f58)
    #5 NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:163:57 (libxul.so+0xf67db4)
    #6 NS_NewNamedThread<11UL> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:74:10 (libxul.so+0x22cb455)
    #7 mozilla::layers::CompositorThreadHolder::CreateCompositorThread() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:62:17 (libxul.so+0x22cb455)
    #8 CompositorThreadHolder /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:39:25 (libxul.so+0x22cb50a)
    #9 mozilla::layers::CompositorThreadHolder::Start() /builds/worker/checkouts/gecko/gfx/layers/ipc/CompositorThread.cpp:103:33 (libxul.so+0x22cb50a)
    #10 InitLayersIPC /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:1294:5 (libxul.so+0x2396335)
    #11 gfxPlatform::Init() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:956:3 (libxul.so+0x2396335)
    #12 GetPlatform /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:466:5 (libxul.so+0x2397817)
    #13 gfxPlatform::InitializeCMS() /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatform.cpp:2083:9 (libxul.so+0x2397817)
    #14 EnsureCMSInitialized /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:952:7 (libxul.so+0x4cbd792)
    #15 GetCMSMode /builds/worker/workspace/obj-build/dist/include/gfxPlatform.h:521:5 (libxul.so+0x4cbd792)
    #16 nsXPLookAndFeel::GetColorValue(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins, unsigned int&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:866:9 (libxul.so+0x4cbd792)
    #17 mozilla::LookAndFeel::GetColor(mozilla::StyleSystemColor, mozilla::ColorScheme, mozilla::LookAndFeel::UseStandins) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1201:47 (libxul.so+0x4cbeff6)
    #18 Color /builds/worker/workspace/obj-build/dist/include/mozilla/LookAndFeel.h:447:12 (libxul.so+0x4c891d8)
    #19 ThemedAccentColor /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:89:37 (libxul.so+0x4c891d8)
    #20 mozilla::widget::ThemeColors::RecomputeAccentColors() /builds/worker/checkouts/gecko/widget/ThemeColors.cpp:170:20 (libxul.so+0x4c891d8)
    #21 LookAndFeelChanged /builds/worker/checkouts/gecko/widget/nsNativeBasicTheme.cpp:123:3 (libxul.so+0x4c9b6d2)
    #22 nsNativeBasicTheme::Init() /builds/worker/checkouts/gecko/widget/nsNativeBasicTheme.cpp:112:3 (libxul.so+0x4c9b6d2)
    #23 nsXPLookAndFeel::GetInstance() /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:358:3 (libxul.so+0x4cbc87c)
    #24 mozilla::LookAndFeel::GetThemeInfo(nsTSubstring<char>&) /builds/worker/checkouts/gecko/widget/nsXPLookAndFeel.cpp:1318:3 (libxul.so+0x4cbf4e8)
    #25 nsSystemInfo::Init() /builds/worker/checkouts/gecko/xpcom/base/nsSystemInfo.cpp:1047:5 (libxul.so+0xe9ee3a)
    #26 mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsISupports*, nsID const&, void**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:9175:7 (libxul.so+0xf23032)
    #27 mozilla::xpcom::StaticModule::CreateInstance(nsISupports*, nsID const&, void**) const /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:12163:10 (libxul.so+0xf1b533)
    #28 CreateInstance /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:177:46 (libxul.so+0xf32476)
    #29 nsComponentManagerImpl::GetServiceLocked(mozilla::Maybe<mozilla::MonitorAutoLock>&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1276:17 (libxul.so+0xf32476)
    #30 nsComponentManagerImpl::GetService(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1366:10 (libxul.so+0xf32a20)
    #31 mozilla::xpcom::GetServiceHelper::operator()(nsID const&, void**) const /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:12282:50 (libxul.so+0xf2563a)
    #32 nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&, nsID const&) /builds/worker/checkouts/gecko/xpcom/base/nsCOMPtr.cpp:109:7 (libxul.so+0xe7758f)
    #33 nsCOMPtr /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:999:5 (libxul.so+0x1e21175)
    #34 GetServiceImpl /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:84:32 (libxul.so+0x1e21175)
    #35 GetService /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:131:8 (libxul.so+0x1e21175)
    #36 xpc::Services_Resolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, bool*) /builds/worker/checkouts/gecko/js/xpconnect/src/JSServices.cpp:154:25 (libxul.so+0x1e21175)
    #37 CallResolveOp /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:634:8 (libxul.so+0x6f6673a)
    #38 NativeLookupOwnPropertyInline<js::CanGC, js::LookupResolveMode::CheckResolve> /builds/worker/checkouts/gecko/js/src/vm/NativeObject-inl.h:751:14 (libxul.so+0x6f6673a)
    #39 NativeGetPropertyInline<js::CanGC> /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2116:10 (libxul.so+0x6f6673a)
    #40 js::NativeGetProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::Value>, JS::Handle<JS::PropertyKey>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:2164:10 (libxul.so+0x6f6673a)
    #41 GetProperty /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:115:10 (libxul.so+0x6cdc6bf)
    #42 GetProperty /builds/worker/checkouts/gecko/js/src/vm/ObjectOperations-inl.h:122:10 (libxul.so+0x6cdc6bf)
    #43 js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:4552:10 (libxul.so+0x6cdc6bf)
    #44 GetPropertyOperation /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:204:10 (libxul.so+0x6cca1a5)
    #45 Interpret(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:2907:12 (libxul.so+0x6cca1a5)
    #46 js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:357:13 (libxul.so+0x6cc1226)
    #47 js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:507:13 (libxul.so+0x6cd7c19)
    #48 InternalCall(JSContext*, js::AnyInvokeArgs const&, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:535:10 (libxul.so+0x6cd8ace)
    #49 js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:552:8 (libxul.so+0x6cd8baa)
    #50 JS_CallFunctionValue(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/CallAndConstruct.cpp:53:10 (libxul.so+0x6e13471)
    #51 nsXPCWrappedJS::CallMethod(unsigned short, nsXPTMethodInfo const*, nsXPTCMiniVariant*) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCWrappedJSClass.cpp:973:17 (libxul.so+0x1e3d6ca)
    #52 PrepareAndDispatch /builds/worker/checkouts/gecko/xpcom/reflect/xptcall/md/unix/xptcstubs_x86_64_linux.cpp:115:37 (libxul.so+0xf86cb3)
    #53 SharedStub xptcstubs_x86_64_linux.cpp (libxul.so+0xf85ff2)
    #54 nsXREDirProvider::DoStartup() /builds/worker/checkouts/gecko/toolkit/xre/nsXREDirProvider.cpp:978:11 (libxul.so+0x6ba90be)
    #55 XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5097:18 (libxul.so+0x6b976d5)
    #56 XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5547:8 (libxul.so+0x6b98b09)
    #57 XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5606:21 (libxul.so+0x6b990d4)
    #58 mozilla::BootstrapImpl::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:45:12 (libxul.so+0x6ba3832)
    #59 do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:225:22 (firefox+0xce72c)
    #60 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:395:16 (firefox+0xce72c)

The severity field is not set for this bug.
:kvark, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(dmalyshau)

Tyson, is there a way to get a pernosco session with this?

Severity: -- → S3
Flags: needinfo?(dmalyshau) → needinfo?(twsmith)

No sorry, TSan does not like to run under rr. I've tried fighting with it for a bit but no luck.

Best I can offer is to test patches if you have any ideas.

Flags: needinfo?(twsmith)
Blocks: fuzzing-webgpu

Jason, are the fuzzers still finding this?

Flags: needinfo?(jkratzer)

This was only seen once on 2021/12/16. I'll close this and if we see it again file a new issue.

Status: NEW → RESOLVED
Closed: 1 year ago
Flags: needinfo?(jkratzer)
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.