AddressSanitizer:DEADLYSIGNAL
=================================================================
==1927==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000044 (pc 0x70b9f392b3a0 bp 0x7ffce2f9ced0 sp 0x7ffce2f9ce40 T0)
==1927==The signal is caused by a READ memory access.
==1927==Hint: address points to the zero page.
    #0 0x70b9f392b3a0 in sh::CreateBuiltInFunctionCallNode(char const*, sh::TVector<sh::TIntermNode*>*, sh::TSymbolTable const&, int) third_party/angle/src/compiler/translator/Symbol.h:330:45
    #1 0x70b9f392b6c1 in sh::CreateBuiltInFunctionCallNode(char const*, std::initializer_list<sh::TIntermNode*> const&, sh::TSymbolTable const&, int) third_party/angle/src/compiler/translator/tree_util/IntermNode_util.cpp:522:12
    #2 0x70b9f38efe7e in sh::(anonymous namespace)::RewritePLSToImagesTraverser::visitPLSLoad(sh::TIntermSymbol*) third_party/angle/src/compiler/translator/tree_ops/RewritePixelLocalStorage.cpp:437:29
    #3 0x70b9f38ee9c6 in sh::(anonymous namespace)::RewritePLSTraverser::visitAggregate(sh::Visit, sh::TIntermAggregate*) third_party/angle/src/compiler/translator/tree_ops/RewritePixelLocalStorage.cpp:145:13
    #4 0x70b9f393105a in void sh::TIntermTraverser::traverse<sh::TIntermAggregate>(sh::TIntermAggregate*) third_party/angle/src/compiler/translator/tree_util/IntermTraverse.cpp:165:16
    #5 0x70b9f392c599 in void sh::TIntermTraverser::traverse<sh::TIntermNode>(sh::TIntermNode*) third_party/angle/src/compiler/translator/tree_util/IntermTraverse.cpp:43:45
    #6 0x70b9f3930861 in sh::TIntermTraverser::traverseBlock(sh::TIntermBlock*) third_party/angle/src/compiler/translator/tree_util/IntermTraverse.cpp:477:24
    #7 0x70b9f3930145 in sh::TIntermTraverser::traverseFunctionDefinition(sh::TIntermFunctionDefinition*) third_party/angle/src/compiler/translator/tree_util/IntermTraverse.cpp:102:9
    #8 0x70b9f3930861 in sh::TIntermTraverser::traverseBlock(sh::TIntermBlock*) third_party/angle/src/compiler/translator/tree_util/IntermTraverse.cpp:477:24
    #9 0x70b9f38edfc4 in sh::RewritePixelLocalStorage(sh::TCompiler*, sh::TIntermBlock*, sh::TSymbolTable&, ShCompileOptions const&, int) third_party/angle/src/compiler/translator/tree_ops/RewritePixelLocalStorage.cpp:908:11
    #10 0x70b9f377cb40 in sh::TCompiler::checkAndSimplifyAST(sh::TIntermBlock*, sh::TParseContext const&, ShCompileOptions const&) third_party/angle/src/compiler/translator/Compiler.cpp:947:14
    #11 0x70b9f3779ff6 in sh::TCompiler::compileTreeImpl(angle::Span<char const* const, 18446744073709551615ul, char const* const*>, ShCompileOptions const&) third_party/angle/src/compiler/translator/Compiler.cpp:563:14
    #12 0x70b9f377dcb5 in sh::TCompiler::compile(angle::Span<char const* const, 18446744073709551615ul, char const* const*>, ShCompileOptions const&) third_party/angle/src/compiler/translator/Compiler.cpp:1296:26
    #13 0x70b9f2345c5e in rx::ShaderTranslateTask::translate(void*, ShCompileOptions const&, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&) third_party/angle/src/libANGLE/renderer/ShaderImpl.cpp:22:12
    #14 0x70b9f22161b4 in gl::(anonymous namespace)::CompileTask::operator()() third_party/angle/src/libANGLE/Shader.cpp:204:39
    #15 0x70b9f36d8c23 in angle::SingleThreadedWorkerPool::postWorkerTask(std::__Cr::shared_ptr<angle::Closure> const&) third_party/angle/src/common/WorkerThread.cpp:83:5
    #16 0x70b9f20a0f28 in gl::Context::postCompileLinkTask(std::__Cr::shared_ptr<angle::Closure> const&, angle::JobThreadSafety, angle::JobResultExpectancy) const third_party/angle/src/libANGLE/Context.cpp:9472:24
    #17 0x70b9f2212264 in gl::Shader::compile(gl::Context const*, angle::JobResultExpectancy) third_party/angle/src/libANGLE/Shader.cpp:742:18
    #18 0x70b9f1b109b9 in GL_CompileShader third_party/angle/src/libGLESv2/entry_points_gles_2_0_autogen.cpp:921:22
    #19 0x5a0b3b3d677e in gpu::gles2::GLES2DecoderPassthroughImpl::DoCompileShader(unsigned int) gpu/command_buffer/service/gles2_cmd_decoder_passthrough_doers.cc:738:10
    #20 0x5a0b3b38c7d5 in gpu::error::Error gpu::gles2::GLES2DecoderPassthroughImpl::DoCommandsImpl<false>(unsigned int, void const volatile*, int, int*) gpu/command_buffer/service/gles2_cmd_decoder_passthrough.cc:899:20
    #21 0x5a0b249d0774 in gpu::CommandBufferService::Flush(int, gpu::AsyncAPIInterface*) gpu/command_buffer/service/command_buffer_service.cc:267:35
    #22 0x5a0b3b9b3e59 in gpu::CommandBufferStub::OnAsyncFlush(int, unsigned int, std::__Cr::vector<gpu::SyncToken, std::__Cr::allocator<gpu::SyncToken>> const&) gpu/ipc/service/command_buffer_stub.cc:504:22
    #23 0x5a0b3b9b30d3 in gpu::CommandBufferStub::ExecuteDeferredRequest(gpu::mojom::DeferredCommandBufferRequestParams&, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/command_buffer_stub.cc:173:7
    #24 0x5a0b3b9c85bc in gpu::GpuChannel::ExecuteDeferredRequest(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/gpu_channel.cc:854:13
    #25 0x5a0b3b9d70c7 in void base::internal::DecayedFunctorTraits<void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>&&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&>::Invoke<void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel> const&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*>(void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel> const&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&, gpu::FenceSyncReleaseDelegate*&&) base/functional/bind_internal.h:740:12
    #26 0x5a0b3b9d6ea9 in base::internal::Invoker<base::internal::FunctorTraits<void (gpu::GpuChannel::*&&)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>&&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&>, base::internal::BindState<true, true, false, void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>, mojo::StructPtr<gpu::mojom::DeferredRequestParams>>, void (gpu::FenceSyncReleaseDelegate*)>::RunOnce(base::internal::BindStateBase*, gpu::FenceSyncReleaseDelegate*) base/functional/bind_internal.h:956:5
    #27 0x5a0b24a150b1 in void base::internal::Invoker<base::internal::FunctorTraits<base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>&&, gpu::FenceSyncReleaseDelegate*>, base::internal::BindState<false, true, true, base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>, base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunImpl<base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>, std::__Cr::tuple<base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, 0ul>(base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>&&, std::__Cr::tuple<base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>&&, std::__Cr::integer_sequence<unsigned long, 0ul>) base/functional/callback.h:155:12
    #28 0x5a0b249e881f in gpu::Scheduler::ExecuteSequence(base::IdType<gpu::SyncPointOrderData, unsigned int, 0u, 1u>) base/functional/callback.h:155:12
    #29 0x5a0b249e6198 in gpu::Scheduler::RunNextTask() gpu/command_buffer/service/scheduler.cc:628:3
    #30 0x5a0b249ea6d1 in base::internal::Invoker<base::internal::FunctorTraits<void (gpu::Scheduler::*&&)(), gpu::Scheduler*>, base::internal::BindState<true, true, false, void (gpu::Scheduler::*)(), base::internal::UnretainedWrapper<gpu::Scheduler, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #31 0x5a0b31a754c3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #32 0x5a0b31ae44ec in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #33 0x5a0b31ae338a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:336:40
    #34 0x5a0b31c8f828 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46
    #35 0x5a0b31c92de8 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43
    #36 0x74b9ffbe9718 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x54718) (BuildId: 42c28e95f24a721d8e8e159f42dbc541f0ff353d)

==1927==Register values:
rax = 0x0000000000000000  rbx = 0x00007ffce2f9ce40  rcx = 0x0000000000000008  rdx = 0x0000000000000000  
rdi = 0x0000000000000044  rsi = 0x00007309fc8b2338  rbp = 0x00007ffce2f9ced0  rsp = 0x00007ffce2f9ce40  
 r8 = 0x01000000f9f9f900   r9 = 0x00005a0b53158498  r10 = 0x0000000000000005  r11 = 0x00000e17be2e66f0  
r12 = 0x000070b9fb388b00  r13 = 0x00000e173f671160  r14 = 0x000070b9f1755cc0  r15 = 0x000070b9fb388b00  
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV third_party/angle/src/compiler/translator/Symbol.h:330:45 in sh::CreateBuiltInFunctionCallNode(char const*, sh::TVector<sh::TIntermNode*>*, sh::TSymbolTable const&, int)

==1927==ADDITIONAL INFO

==1927==Note: Please include this section with the ASan report.
Task trace:
    #0 0x5a0b249e1376 in gpu::Scheduler::TryScheduleSequence(gpu::Scheduler::Sequence*) gpu/command_buffer/service/scheduler.cc:435:29


Command line: `/proc/self/exe --type=gpu-process --disable-gpu-sandbox --no-sandbox --disable-breakpad --ozone-platform=x11 --crashpad-handler-pid=1897 --enable-crash-reporter=, --user-data-dir=/tmp/chrome-poc-profile --change-stack-guard-on-fork=enable --gpu-preferences=UAAAAAAAAAAgAQAMAAAAAAAAAAAAAMAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAYAAAAAAAAABgAAAAAAAAAAQAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --disable-in-process-stack-traces --shared-files --metrics-shmem-handle=4,i,3948116348607640911,2695058942887695337,262144 --field-trial-handle=3,i,7844398434050750099,6298178505587362840,262144 --variations-seed-version --pseudonymization-salt-handle=7,i,2583603844165692185,3170616980862673854,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=stderr --v=0`


==1927==END OF ADDITIONAL INFO

==1927==ABORTING
[2043:2043:0514/101413.683050:ERROR:gpu/ipc/client/command_buffer_proxy_impl.cc:488] GPU state invalid after WaitForGetOffsetInRange.