[1934:1934:0520/010440.926911:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used.
[POC-RENDERER] Injecting cmds::VertexAttribPointer offset=0x80000000 (sign-extends to 0xffffffff80000000 in GPU process)
[0520/010440.946841:ERROR:third_party/crashpad/crashpad/util/file/file_io_posix.cc:145] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq: No such file or directory (2)
[0520/010440.946948:ERROR:third_party/crashpad/crashpad/util/file/file_io_posix.cc:145] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq: No such file or directory (2)
AddressSanitizer:DEADLYSIGNAL
=================================================================
==1966==ERROR: AddressSanitizer: SEGV on unknown address 0x785f764fb900 (pc 0x7c602fd717b0 bp 0x7ffdcfb54370 sp 0x7ffdcfb53b28 T0)
==1966==The signal is caused by a READ memory access.
[1934:1934:0520/010440.968672:INFO:CONSOLE:10] "UNMASKED_RENDERER: ANGLE (Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver)", source: http://127.0.0.1:18080/poc.html (10)
[1934:1934:0520/010440.968973:INFO:CONSOLE:10] "UNMASKED_VENDOR:   Google Inc. (Google)", source: http://127.0.0.1:18080/poc.html (10)
[1934:1934:0520/010440.969182:INFO:CONSOLE:10] "VERSION:  WebGL 2.0 (OpenGL ES 3.0 Chromium)", source: http://127.0.0.1:18080/poc.html (10)
[1934:1934:0520/010440.970197:INFO:CONSOLE:10] "glGetError after VAP: 0x0", source: http://127.0.0.1:18080/poc.html (10)
[1934:1934:0520/010440.970273:INFO:CONSOLE:10] "Calling drawArraysInstanced (expect GPU-process crash)...", source: http://127.0.0.1:18080/poc.html (10)
    #0 0x7c602fd717b0  (/lib/x86_64-linux-gnu/libc.so.6+0x16d7b0) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)
    #1 0x7860227e097b in void rx::CopyNativeVertexData<float, 4ul, 4ul, 0u>(unsigned char const*, unsigned long, unsigned long, unsigned char*) third_party/angle/src/libANGLE/renderer/copyvertex.inc.h:69:9
    #2 0x78602271586f in rx::VertexArrayVk::updateStreamedAttribs(gl::Context const*, int, int, int, gl::DrawElementsType, void const*, angle::BitSetT<16ul, unsigned long, unsigned long>*) third_party/angle/src/libANGLE/renderer/vulkan/VertexArrayVk.cpp:271:9
    #3 0x7860225a763b in rx::ContextVk::setupDraw(gl::Context const*, gl::PrimitiveMode, int, int, int, gl::DrawElementsType, void const*, angle::BitSetT<43ul, unsigned long, unsigned long>) third_party/angle/src/libANGLE/renderer/vulkan/ContextVk.cpp:1585:34
    #4 0x7860225b37c5 in rx::ContextVk::drawArraysInstanced(gl::Context const*, gl::PrimitiveMode, int, int, int) third_party/angle/src/libANGLE/renderer/vulkan/ContextVk.cpp:3957:15
    #5 0x786022a6e7f7 in gl::Context::drawArraysInstanced(gl::PrimitiveMode, int, int, int) third_party/angle/src/libANGLE/Context.cpp:2995:26
    #6 0x5aad5007abf1 in gpu::gles2::GLES2DecoderPassthroughImpl::DoDrawArraysInstancedANGLE(unsigned int, int, int, int) gpu/command_buffer/service/gles2_cmd_decoder_passthrough_doers.cc:4533:10
    #7 0x5aad50003845 in gpu::error::Error gpu::gles2::GLES2DecoderPassthroughImpl::DoCommandsImpl<false>(unsigned int, void const volatile*, int, int*) gpu/command_buffer/service/gles2_cmd_decoder_passthrough.cc:899:20
    #8 0x5aad39647774 in gpu::CommandBufferService::Flush(int, gpu::AsyncAPIInterface*) gpu/command_buffer/service/command_buffer_service.cc:267:35
    #9 0x5aad5062aec9 in gpu::CommandBufferStub::OnAsyncFlush(int, unsigned int, std::__Cr::vector<gpu::SyncToken, std::__Cr::allocator<gpu::SyncToken>> const&) gpu/ipc/service/command_buffer_stub.cc:504:22
    #10 0x5aad5062a143 in gpu::CommandBufferStub::ExecuteDeferredRequest(gpu::mojom::DeferredCommandBufferRequestParams&, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/command_buffer_stub.cc:173:7
    #11 0x5aad5063f62c in gpu::GpuChannel::ExecuteDeferredRequest(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/gpu_channel.cc:854:13
    #12 0x5aad5064e137 in void base::internal::DecayedFunctorTraits<void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>&&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&>::Invoke<void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel> const&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*>(void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel> const&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&, gpu::FenceSyncReleaseDelegate*&&) base/functional/bind_internal.h:740:12
    #13 0x5aad5064df19 in base::internal::Invoker<base::internal::FunctorTraits<void (gpu::GpuChannel::*&&)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>&&, mojo::StructPtr<gpu::mojom::DeferredRequestParams>&&>, base::internal::BindState<true, true, false, void (gpu::GpuChannel::*)(mojo::StructPtr<gpu::mojom::DeferredRequestParams>, gpu::FenceSyncReleaseDelegate*), base::WeakPtr<gpu::GpuChannel>, mojo::StructPtr<gpu::mojom::DeferredRequestParams>>, void (gpu::FenceSyncReleaseDelegate*)>::RunOnce(base::internal::BindStateBase*, gpu::FenceSyncReleaseDelegate*) base/functional/bind_internal.h:956:5
    #14 0x5aad3968c0b1 in void base::internal::Invoker<base::internal::FunctorTraits<base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>&&, gpu::FenceSyncReleaseDelegate*>, base::internal::BindState<false, true, true, base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>, base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunImpl<base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>, std::__Cr::tuple<base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, 0ul>(base::OnceCallback<void (gpu::FenceSyncReleaseDelegate*)>&&, std::__Cr::tuple<base::internal::UnretainedWrapper<gpu::FenceSyncReleaseDelegate, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>&&, std::__Cr::integer_sequence<unsigned long, 0ul>) base/functional/callback.h:155:12
    #15 0x5aad3965f81f in gpu::Scheduler::ExecuteSequence(base::IdType<gpu::SyncPointOrderData, unsigned int, 0u, 1u>) base/functional/callback.h:155:12
    #16 0x5aad3965d198 in gpu::Scheduler::RunNextTask() gpu/command_buffer/service/scheduler.cc:628:3
    #17 0x5aad396616d1 in base::internal::Invoker<base::internal::FunctorTraits<void (gpu::Scheduler::*&&)(), gpu::Scheduler*>, base::internal::BindState<true, true, false, void (gpu::Scheduler::*)(), base::internal::UnretainedWrapper<gpu::Scheduler, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #18 0x5aad466ec4c3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #19 0x5aad4675b4ec in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #20 0x5aad4675a38a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:336:40
    #21 0x5aad46906828 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46
    #22 0x5aad46909de8 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43
    #23 0x7c60310d6718 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x54718) (BuildId: 42c28e95f24a721d8e8e159f42dbc541f0ff353d)

==1966==Register values:
rax = 0x00007af02de3a300  rbx = 0x0000000000000000  rcx = 0x00000f5e85bbf461  rdx = 0x0000000000000010  
rdi = 0x00007af02de3a300  rsi = 0x0000785f764fb900  rbp = 0x00007ffdcfb54370  rsp = 0x00007ffdcfb53b28  
 r8 = 0x00000f5e05bc7460   r9 = 0x00007af02de3a30f  r10 = 0x00000f5e05bc7461  r11 = 0x00000f5e85bbf460  
r12 = 0x00000f5e85bbf460  r13 = 0xffffffffffffffcf  r14 = 0x000078602c9a1080  r15 = 0x0000000000000010  
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libc.so.6+0x16d7b0) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 

==1966==ADDITIONAL INFO

==1966==Note: Please include this section with the ASan report.
Task trace:
    #0 0x5aad39658376 in gpu::Scheduler::TryScheduleSequence(gpu::Scheduler::Sequence*) gpu/command_buffer/service/scheduler.cc:435:29


Command line: `/proc/self/exe --type=gpu-process --no-sandbox --ozone-platform=x11 --use-angle=swiftshader --crashpad-handler-pid=1936 --enable-crash-reporter=, --user-data-dir=/tmp/chrome-poc-profile --disable-breakpad --change-stack-guard-on-fork=enable --gpu-preferences=UAAAAAAAAAAgAAAMAAAAAAAAAAAAAMAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAYAAAAAAAAABgAAAAAAAAAAQAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --disable-in-process-stack-traces --shared-files --metrics-shmem-handle=4,i,4385310236644743867,15349704368420987536,262144 --field-trial-handle=3,i,14978974969490661708,14411436892630842353,262144 --variations-seed-version --pseudonymization-salt-handle=7,i,10076385799243835845,15871554714050334725,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=stderr --v=0`


==1966==END OF ADDITIONAL INFO

==1966==ABORTING
[2041:2041:0520/010442.087592:ERROR:gpu/ipc/client/command_buffer_proxy_impl.cc:488] GPU state invalid after WaitForGetOffsetInRange.