AddressSanitizer:DEADLYSIGNAL
=================================================================
==913017==ERROR: AddressSanitizer: SEGV on unknown address 0x000041414141 (pc 0x700fc8388aa1 bp 0x7ffe4be20200 sp 0x7ffe4be1f9a8 T0)
==913017==The signal is caused by a WRITE memory access.
    #0 0x700fc8388aa1 in __memcpy_avx_unaligned_erms string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:271
    #1 0x6c0ba8fb443d  (/lib/x86_64-linux-gnu/libgallium-25.2.8-0ubuntu0.24.04.1.so+0x3b443d) (BuildId: 41d9433a3221d052272f240fe8df030e13de4a05)
    #2 0x6c0ba900cc9a  (/lib/x86_64-linux-gnu/libgallium-25.2.8-0ubuntu0.24.04.1.so+0x40cc9a) (BuildId: 41d9433a3221d052272f240fe8df030e13de4a05)
    #3 0x6c0ba8fb4d39  (/lib/x86_64-linux-gnu/libgallium-25.2.8-0ubuntu0.24.04.1.so+0x3b4d39) (BuildId: 41d9433a3221d052272f240fe8df030e13de4a05)
    #4 0x6c0ba8fb50d4  (/lib/x86_64-linux-gnu/libgallium-25.2.8-0ubuntu0.24.04.1.so+0x3b50d4) (BuildId: 41d9433a3221d052272f240fe8df030e13de4a05)
    #5 0x6c0bbb8ca37f in rx::FramebufferGL::readPixelsAllAtOnce(gl::Context const*, gl::RectangleImpl<int> const&, unsigned int, unsigned int, unsigned int, gl::PixelPackState const&, unsigned char*, bool) const third_party/angle/src/libANGLE/renderer/gl/FramebufferGL.cpp:1684:31
    #6 0x6c0bbb8c9441 in rx::FramebufferGL::readPixels(gl::Context const*, gl::RectangleImpl<int> const&, unsigned int, unsigned int, gl::PixelPackState const&, gl::Buffer*, void*) third_party/angle/src/libANGLE/renderer/gl/FramebufferGL.cpp:816:12
    #7 0x6c0bbb516c0e in gl::Framebuffer::readPixels(gl::Context const*, gl::RectangleImpl<int> const&, unsigned int, unsigned int, gl::PixelPackState const&, gl::Buffer*, void*) third_party/angle/src/libANGLE/Framebuffer.cpp:1819:22
    #8 0x6c0bbb48a4be in gl::Context::readPixelsRobust(int, int, int, int, unsigned int, unsigned int, int, int*, int*, int*, void*) third_party/angle/src/libANGLE/Context.cpp:5127:32
    #9 0x6c0bbaf53a52 in GL_ReadPixelsRobustANGLE third_party/angle/src/libGLESv2/entry_points_gles_ext_autogen.cpp:3199:22
    #10 0x56e38b621cb9 in gl::GLApiBase::glReadPixelsRobustANGLEFn(int, int, int, int, unsigned int, unsigned int, int, int*, int*, int*, void*) ui/gl/gl_bindings_autogen_gl.cc:3891:3
    #11 0x56e39135c8c4 in gpu::gles2::GLES2DecoderPassthroughImpl::DoReadPixels(int, int, int, int, unsigned int, unsigned int, int, int*, int*, int*, void*, int*) gpu/command_buffer/service/gles2_cmd_decoder_passthrough_doers.cc:2657:10
    #12 0x56e391503e34 in gpu::gles2::GLES2DecoderPassthroughImpl::HandleReadPixels(unsigned int, void const volatile*) gpu/command_buffer/service/gles2_cmd_decoder_passthrough_handlers.cc:976:13
    #13 0x56e3912fa865 in gpu::error::Error gpu::gles2::GLES2DecoderPassthroughImpl::DoCommandsImpl<false>(unsigned int, void const volatile*, int, int*) gpu/command_buffer/service/gles2_cmd_decoder_passthrough.cc:745:20
    #14 0x56e37aa5b814 in gpu::CommandBufferService::Flush(int, gpu::AsyncAPIInterface*) gpu/command_buffer/service/command_buffer_service.cc:267:35
    #15 0x56e390dc720b in gpu::CommandBufferStub::OnAsyncFlush(int, unsigned int, std::__Cr::vector<gpu::SyncToken, std::__Cr::allocator<gpu::SyncToken>> const&) gpu/ipc/service/command_buffer_stub.cc:504:22
    #16 0x56e390dc6471 in gpu::CommandBufferStub::ExecuteDeferredRequest(gpu::mojom::DeferredCommandBufferRequestParams&, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/command_buffer_stub.cc:173:7
    #17 0x56e390de955c in gpu::GpuChannel::ExecuteDeferredRequest(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/gpu_channel.cc:833:13
    #18 0x56e390df7547 in void base::internal::DecayedFunctorTraits<void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>&&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&>::Invoke<void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel> const&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*>(void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel> const&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&, gpu::FenceSyncReleaseDelegate*&&) base/functional/bind_internal.h:740:12
    #19 0x56e390df7329 in base::internal::Invoker<base::internal::FunctorTraits<void (gpu::GpuChannel::*&&)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>&&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&>, base::internal::BindState<true, true, false, void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>, mojo::StructPtr<gpu::mojom::DeferredRequestParams>>, void (gpu::FenceSyncReleaseDelegate*)>::RunOnce(base::internal::BindStateBase*, gpu::FenceSyncReleaseDelegate*) base/functional/bind_internal.h:956:5
    #20 0x56e37aa9e211 in void base::internal::Invoker<base::internal::FunctorTraits<base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>&&, gpu::FenceSyncReleaseDelegate*>, base::internal::BindState<false, true, true, base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>, base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunImpl<base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>, std::__Cr::tuple<base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, 0ul>(base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>&&, std::__Cr::tuple<base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>&&, std::__Cr::integer_sequence<unsigned long, 0ul>) base/functional/callback.h:155:12
    #21 0x56e37aa72957 in gpu::Scheduler::ExecuteSequence(base::IdType<gpu::SyncPointOrderData, unsigned int, 0u, 1u>) base/functional/callback.h:155:12
    #22 0x56e37aa70988 in gpu::Scheduler::RunNextTask() gpu/command_buffer/service/scheduler.cc:625:3
    #23 0x56e37aa74571 in base::internal::Invoker<base::internal::FunctorTraits<void (gpu::Scheduler::*&&)(), gpu::Scheduler*>, base::internal::BindState<true, true, false, void (gpu::Scheduler::*)(), base::internal::UnretainedWrapper<gpu::Scheduler, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #24 0x56e3878f5e76 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #25 0x56e38796d519 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #26 0x56e38796c38a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:340:40
    #27 0x56e387b1b098 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46
    #28 0x56e387b1e658 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43
    #29 0x700fc9806584  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5d584) (BuildId: 116e142b9b52c8a4dfd403e759e71ab8f95d8bb3)
    #30 0x700fc9865976  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0xbc976) (BuildId: 116e142b9b52c8a4dfd403e759e71ab8f95d8bb3)
    #31 0x700fc9805a22 in g_main_context_iteration (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5ca22) (BuildId: 116e142b9b52c8a4dfd403e759e71ab8f95d8bb3)
    #32 0x56e387b1b6b3 in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_glib.cc:770:30
    #33 0x56e38796ec27 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:644:12
    #34 0x56e3878707f0 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14
    #35 0x56e3931630d7 in content::GpuMain(content::MainFunctionParams) content/gpu/gpu_main.cc:484:14
    #36 0x56e38341687f in content::RunZygote(content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:664:14
    #37 0x56e383417baf in content::RunOtherNamedProcessTypeMain(std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:771:12
    #38 0x56e38341a8b8 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1152:10
    #39 0x56e383414291 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:358:36
    #40 0x56e38341488c in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:371:10
    #41 0x56e36f93ab39 in ChromeMain chrome/app/chrome_main.cc:191:12
    #42 0x700fc822a1c9 in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
    #43 0x700fc822a28a in __libc_start_main csu/../csu/libc-start.c:360:3
    #44 0x56e36f860029 in _start (/home/[redacted]/chromium/src/out/asan/chrome+0x10d3e029) (BuildId: 8b8b65a955cc7134)

==913017==Register values:
rax = 0x0000000041414141  rbx = 0x0000000000000000  rcx = 0x000000008827a830  rdx = 0x0000000000000040
rdi = 0x0000000041414141  rsi = 0x00006c0bb982f000  rbp = 0x00007ffe4be20200  rsp = 0x00007ffe4be1f9a8
 r8 = 0x0000000008282828   r9 = 0x0000000041414180  r10 = 0x0000000008282830  r11 = 0x000000008827a828
r12 = 0x000000008827a830  r13 = 0xffffffffffffffff  r14 = 0x0000000041414141  r15 = 0x0000000000000004
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:271 in __memcpy_avx_unaligned_erms

==913017==ADDITIONAL INFO

==913017==Note: Please include this section with the ASan report.
Task trace:
    #0 0x56e37aa70e62 in gpu::Scheduler::RunNextTask() gpu/command_buffer/service/scheduler.cc:647:27
    #1 0x56e37aa6bbb6 in gpu::Scheduler::TryScheduleSequence(gpu::Scheduler::Sequence*) gpu/command_buffer/service/scheduler.cc:432:29


Command line: `/proc/self/exe --type=gpu-process --no-sandbox --ozone-platform=x11 --crashpad-handler-pid=912975 --enable-crash-reporter=, --user-data-dir=/tmp/x --change-stack-guard-on-fork=enable --gpu-preferences=UAAAAAAAAAAgAQAEAAAAAAAAAAAAAMAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAYAAAAAAAAABgAAAAAAAAAAQAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --disable-in-process-stack-traces --shared-files --metrics-shmem-handle=4,i,12876194157238273709,13437847631808853250,262144 --field-trial-handle=3,i,15619680027107635658,4294099825709814903,262144 --variations-seed-version --pseudonymization-salt-handle=7,i,15638180420272504583,17218585855486608520,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=stderr --v=0`


==913017==END OF ADDITIONAL INFO

==913017==ABORTING