=================================================================
==4212==ERROR: AddressSanitizer: use-after-poison on address 0x7ef4005e9c88 at pc 0x7ffad9833282 bp 0x008e13bf6980 sp 0x008e13bf69c8
READ of size 8 at 0x7ef4005e9c88 thread T0
    #0 0x7ffad9833281 in blink::MediaStreamAudioTrack::StopAndNotify(class base::OnceCallback<(void)>) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\mediastream\media_stream_audio_track.cc:148:11
    #1 0x7ffad9830cce in blink::MediaStreamTrackPlatform::Stop C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\mediastream\media_stream_track_platform.h:151
    #2 0x7ffad9830cce in blink::MediaStreamAudioTrack::~MediaStreamAudioTrack(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\mediastream\media_stream_audio_track.cc:42:3
    #3 0x7ffad983509f in blink::MediaStreamAudioTrack::`scalar deleting dtor'(unsigned int) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\mediastream\media_stream_audio_track.cc:39:49
    #4 0x7ffadce75443 in std::__Cr::default_delete<blink::MediaStreamTrackPlatform>::operator() C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\unique_ptr.h:77
    #5 0x7ffadce75443 in std::__Cr::unique_ptr<blink::MediaStreamTrackPlatform,std::__Cr::default_delete<blink::MediaStreamTrackPlatform> >::reset C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\unique_ptr.h:290
    #6 0x7ffadce75443 in blink::MediaStreamComponentImpl::Dispose C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\mediastream\media_stream_component_impl.cc:101
    #7 0x7ffadce75443 in blink::MediaStreamComponentImpl::InvokePreFinalizer(class cppgc::LivenessBroker const &, void *) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\mediastream\media_stream_component_impl.h:57:3
    #8 0x7ffac02198d2 in cppgc::internal::PreFinalizerHandler::InvokePreFinalizers::<lambda_0>::operator() C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\prefinalizer-handler.cc:71
    #9 0x7ffac02198d2 in std::__Cr::find_if C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__algorithm\find_if.h:25
    #10 0x7ffac02198d2 in std::__Cr::remove_if C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__algorithm\remove_if.h:28
    #11 0x7ffac02198d2 in cppgc::internal::PreFinalizerHandler::InvokePreFinalizers(void) C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\prefinalizer-handler.cc:68:7
    #12 0x7ffac01eda20 in cppgc::internal::HeapBase::ExecutePreFinalizers(void) C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\heap-base.cc:169:26
    #13 0x7ffabe2dced3 in v8::internal::CppHeap::CompactAndSweep(void) C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc-js\cpp-heap.cc:990:51
    #14 0x7ffabe418466 in v8::internal::Heap::PerformGarbageCollection(enum v8::internal::GarbageCollector, enum v8::internal::GarbageCollectionReason, char const *) C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:2431:32
    #15 0x7ffabe46a87d in v8::internal::Heap::CollectGarbage::<lambda_2>::operator() C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:1725:7
    #16 0x7ffabe469e58 in heap::base::Stack::SetMarkerAndCallbackImpl<`lambda at ..\..\v8\src\heap\heap.cc:1693:40'> C:\b\s\w\ir\cache\builder\src\v8\src\heap\base\stack.h:185:5
    #17 0x7ffae356e6ac in PushAllRegistersAndIterateStack (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa61e6ac)
    #18 0x7ffabe40c1e3 in heap::base::Stack::SetMarkerIfNeededAndCallback C:\b\s\w\ir\cache\builder\src\v8\src\heap\base\stack.h:81
    #19 0x7ffabe40c1e3 in v8::internal::Heap::CollectGarbage(enum v8::internal::AllocationSpace, enum v8::internal::GarbageCollectionReason, enum v8::GCCallbackFlags, enum v8::internal::PerformHeapLimitCheck) C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:1693:11
    #20 0x7ffabe411bc7 in v8::internal::Heap::CollectAllGarbage C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:1283
    #21 0x7ffabe411bc7 in v8::internal::Heap::PreciseCollectAllGarbage(class v8::base::Flags<enum v8::internal::GCFlag, unsigned char, unsigned char>, enum v8::internal::GarbageCollectionReason, enum v8::GCCallbackFlags) C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:1462:3
    #22 0x7ffabe23c5fd in v8::internal::`anonymous namespace'::InvokeGC C:\b\s\w\ir\cache\builder\src\v8\src\extensions\gc-extension.cc:204:17
    #23 0x7ffabe23ace4 in v8::internal::GCExtension::GC(class v8::FunctionCallbackInfo<class v8::Value> const &) C:\b\s\w\ir\cache\builder\src\v8\src\extensions\gc-extension.cc:276:5
    #24 0x7ffae3380804 in Builtins_CallApiCallbackGeneric (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa430804)
    #25 0x7ffae337e9b4 in Builtins_InterpreterEntryTrampoline (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa42e9b4)
    #26 0x7ffae337e9b4 in Builtins_InterpreterEntryTrampoline (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa42e9b4)
    #27 0x7ffae337e9b4 in Builtins_InterpreterEntryTrampoline (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa42e9b4)
    #28 0x7ffae337b75b in Builtins_JSEntryTrampoline (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa42b75b)
    #29 0x7ffae337b2be in Builtins_JSEntry (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa42b2be)
    #30 0x7ffabe18228d in v8::internal::GeneratedCode<unsigned long long,unsigned long long,unsigned long long,unsigned long long,unsigned long long,long long,unsigned long long **>::Call C:\b\s\w\ir\cache\builder\src\v8\src\execution\simulator.h:212
    #31 0x7ffabe18228d in v8::internal::`anonymous namespace'::Invoke C:\b\s\w\ir\cache\builder\src\v8\src\execution\execution.cc:442:22
    #32 0x7ffabe1808fd in v8::internal::Execution::Call(class v8::internal::Isolate *, class v8::internal::DirectHandle<class v8::internal::Object>, class v8::internal::DirectHandle<class v8::internal::Object>, class v8::base::Vector<class v8::internal::DirectHandle<class v8::internal::Object> const>) C:\b\s\w\ir\cache\builder\src\v8\src\execution\execution.cc:532:10
    #33 0x7ffabdc722e0 in v8::Function::Call(class v8::Isolate *, class v8::Local<class v8::Context>, class v8::Local<class v8::Value>, int, class v8::Local<class v8::Value> *const) C:\b\s\w\ir\cache\builder\src\v8\src\api\api.cc:5367:27
    #34 0x7ffad91d144a in blink::V8ScriptRunner::CallFunction(class v8::Local<class v8::Function>, class blink::ExecutionContext *, class v8::Local<class v8::Value>, int, class v8::Local<class v8::Value> *const, class v8::Isolate *) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\bindings\core\v8\v8_script_runner.cc:856:48
    #35 0x7ffadb2442f5 in blink::bindings::CallbackInvokeHelper<blink::CallbackFunctionBase,0,0>::CallInternal C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\bindings\core\v8\callback_invoke_helper.cc:137
    #36 0x7ffadb2442f5 in blink::bindings::CallbackInvokeHelper<class blink::CallbackFunctionWithTaskAttributionBase, 0, 0>::Call(int, class v8::Local<class v8::Value> *) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\bindings\core\v8\callback_invoke_helper.cc:161:10
    #37 0x7ffadb260bb6 in blink::V8EventHandlerNonNull::InvokeWithoutRunnabilityCheck(class blink::bindings::V8ValueOrScriptWrappableAdapter, class blink::BasicHeapVector<1, class blink::ScriptValue, 0> const &) C:\b\s\w\ir\cache\builder\src\out\069a-Win_ASan_Releas\gen\third_party\blink\renderer\bindings\core\v8\v8_event_handler_non_null.cc:183:13
    #38 0x7ffad934f929 in blink::JSEventHandler::InvokeInternal(class blink::EventTarget &, class blink::Event &, class v8::Local<class v8::Value>) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\bindings\core\v8\js_event_handler.cc:134:14
    #39 0x7ffad9353bf7 in blink::JSBasedEventListener::Invoke(class blink::ExecutionContext *, class blink::Event *) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\bindings\core\v8\js_based_event_listener.cc:158:5
    #40 0x7ffad8647d95 in blink::EventTarget::FireEventListeners(class blink::Event &, class blink::EventTargetData *, class blink::BasicHeapVector<1, class cppgc::internal::BasicMember<class blink::RegisteredEventListener, class cppgc::internal::StrongMemberTag, struct cppgc::internal::DijkstraWriteBarrierPolicy, class cppgc::internal::DisabledCheckingPolicy, class cppgc::internal::CompressedPointer>, 1>) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\dom\events\event_target.cc:1055:15
    #41 0x7ffad8645ee2 in blink::EventTarget::FireEventListeners(class blink::Event &) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\dom\events\event_target.cc:976:29
    #42 0x7ffad7ddd194 in blink::LocalDOMWindow::DispatchEvent(class blink::Event &, class blink::EventTarget *) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\frame\local_dom_window.cc:2207:10
    #43 0x7ffad7ddca3e in blink::LocalDOMWindow::DispatchLoadEvent(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\frame\local_dom_window.cc:2167:5
    #44 0x7ffad7ddc31a in blink::LocalDOMWindow::DispatchWindowLoadEvent(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\frame\local_dom_window.cc:917:3
    #45 0x7ffad7ddcc54 in blink::LocalDOMWindow::DocumentWasClosed(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\frame\local_dom_window.cc:921:3
    #46 0x7ffada50dfdc in blink::Document::ImplicitClose(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\dom\document.cc:4121:18
    #47 0x7ffada50f323 in blink::Document::CheckCompletedInternal(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\dom\document.cc:4246:5
    #48 0x7ffada50dbd6 in blink::Document::CheckCompleted(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\dom\document.cc:4208:7
    #49 0x7ffad979c30b in blink::TimerBase::RunInternal(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\timer.cc:166:3
    #50 0x7ffada57c32e in base::internal::DecayedFunctorTraits<void (*)(blink::HeapTaskRunnerTimer<blink::Document> *, blink::Document *),blink::HeapTaskRunnerTimer<blink::Document> *,cppgc::internal::BasicPersistent<blink::Document,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:664
    #51 0x7ffada57c32e in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (*&&)(blink::HeapTaskRunnerTimer<blink::Document> *, blink::Document *),blink::HeapTaskRunnerTimer<blink::Document> *,cppgc::internal::BasicPersistent<blink::Document,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> &&>,void,0,1>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #52 0x7ffada57c32e in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(blink::HeapTaskRunnerTimer<blink::Document> *, blink::Document *),blink::HeapTaskRunnerTimer<blink::Document> *,cppgc::internal::BasicPersistent<blink::Document,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> &&>,base::internal::BindState<0,1,0,void (*)(blink::HeapTaskRunnerTimer<blink::Document> *, blink::Document *),WTF::UnretainedWrapper<blink::HeapTaskRunnerTimer<blink::Document> >,cppgc::internal::BasicPersistent<blink::Document,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #53 0x7ffada57c32e in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl *&&)(class blink::HeapTaskRunnerTimer<class blink::PendingAnimations> *, class blink::PendingAnimations *), class blink::HeapTaskRunnerTimer<class blink::PendingAnimations> *, class cppgc::internal::BasicPersistent<class blink::PendingAnimations, struct cppgc::internal::WeakPersistentPolicy, class cppgc::internal::IgnoreLocationPolicy, class cppgc::internal::DisabledCheckingPolicy> &&>, struct base::internal::BindState<0, 1, 0, void (__cdecl *)(class blink::HeapTaskRunnerTimer<class blink::PendingAnimations> *, class blink::PendingAnimations *), class WTF::UnretainedWrapper<class blink::HeapTaskRunnerTimer<class blink::PendingAnimations>>, class cppgc::internal::BasicPersistent<class blink::PendingAnimations, struct cppgc::internal::WeakPersistentPolicy, class cppgc::internal::IgnoreLocationPolicy, class cppgc::internal::DisabledCheckingPolicy>>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #54 0x7ffacc04b453 in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #55 0x7ffacc04b453 in base::TaskAnnotator::RunTaskImpl(struct base::PendingTask &) C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.cc:207:34
    #56 0x7ffacc01e4a9 in base::TaskAnnotator::RunTask C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.h:104
    #57 0x7ffacc01e4a9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(class base::LazyNow *) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:456:23
    #58 0x7ffacc01d34f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork(void) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:330:40
    #59 0x7ffacc17f7f7 in base::MessagePumpDefault::Run(class base::MessagePump::Delegate *) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_default.cc:42:55
    #60 0x7ffacc0201f1 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, class base::TimeDelta) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:629:12
    #61 0x7ffacc0bd52e in base::RunLoop::Run(class base::Location const &) C:\b\s\w\ir\cache\builder\src\base\run_loop.cc:134:14
    #62 0x7ffad5753ba7 in content::RendererMain(struct content::MainFunctionParams) C:\b\s\w\ir\cache\builder\src\content\renderer\renderer_main.cc:356:16
    #63 0x7ffac894dad6 in content::RunOtherNamedProcessTypeMain(class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>> const &, struct content::MainFunctionParams, class content::ContentMainDelegate *) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:795:14
    #64 0x7ffac894fe8c in content::ContentMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1198:10
    #65 0x7ffac8943ee3 in content::RunContentProcess(struct content::ContentMainParams, class content::ContentMainRunner *) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:362:36
    #66 0x7ffac8944a9d in content::ContentMain(struct content::ContentMainParams) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:375:10
    #67 0x7ffab8f52b0b in ChromeMain C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_main.cc:222:12
    #68 0x7ff71f5a47bb in MainDllLoader::Launch(struct HINSTANCE__*, class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\chrome\app\main_dll_loader_win.cc:201:12
    #69 0x7ff71f5a2021 in main C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_exe_main_win.cc:352:20
    #70 0x7ff71fa5b81b in invoke_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:78
    #71 0x7ff71fa5b81b in __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
    #72 0x7ffb7ad2e8d6  (C:\WINDOWS\System32\KERNEL32.DLL+0x18002e8d6)
    #73 0x7ffb7c21c34b  (C:\WINDOWS\SYSTEM32\ntdll.dll+0x18003c34b)

Address 0x7ef4005e9c88 is a wild pointer inside of access range of size 0x000000000008.
SUMMARY: AddressSanitizer: use-after-poison C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\mediastream\media_stream_audio_track.cc:148:11 in blink::MediaStreamAudioTrack::StopAndNotify(class base::OnceCallback<(void)>)
Shadow bytes around the buggy address:
  0x7ef4005e9a00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9a80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9b00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9b80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9c00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
=>0x7ef4005e9c80: f7[f7]f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9d00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9d80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9e00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9e80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x7ef4005e9f00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

Memory was manually poisoned by thread T0:
    #0 0x7ffb35abc683  (E:\chrome_asan\asan-win32-release_x64-1476007\clang_rt.asan_dynamic-x86_64.dll+0x18004c683)
    #1 0x7ffac02323c2 in cppgc::internal::`anonymous namespace'::InlinedFinalizationBuilder<cppgc::internal::(anonymous namespace)::RegularFreeHandler>::AddFinalizer C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\sweeper.cc:271
    #2 0x7ffac02323c2 in cppgc::internal::`anonymous namespace'::SweepNormalPage C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\sweeper.cc:379
    #3 0x7ffac02323c2 in cppgc::internal::`anonymous namespace'::MutatorThreadSweeper::VisitNormalPage C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\sweeper.cc:714
    #4 0x7ffac02323c2 in cppgc::internal::HeapVisitor<cppgc::internal::(anonymous namespace)::MutatorThreadSweeper>::VisitNormalPageImpl C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\heap-visitor.h:75
    #5 0x7ffac02323c2 in cppgc::internal::HeapVisitor<cppgc::internal::(anonymous namespace)::MutatorThreadSweeper>::Traverse C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\heap-visitor.h:47:11
    #6 0x7ffac0230648 in cppgc::internal::`anonymous namespace'::MutatorThreadSweeper::SweepPage C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\sweeper.cc:646
    #7 0x7ffac0230648 in cppgc::internal::`anonymous namespace'::MutatorThreadSweeper::Sweep C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\sweeper.cc:642:7
    #8 0x7ffac022fc3e in cppgc::internal::`anonymous namespace'::MutatorThreadSweeper::Sweep C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\sweeper.cc:636
    #9 0x7ffac022fc3e in cppgc::internal::Sweeper::SweeperImpl::Finish(void) C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\sweeper.cc:1307:13
    #10 0x7ffac022365a in cppgc::internal::Sweeper::SweeperImpl::FinishIfRunning(void) C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc\sweeper.cc:1233:7
    #11 0x7ffabe2ddedb in v8::internal::CppHeap::FinishSweepingIfRunning C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc-js\cpp-heap.cc:1240
    #12 0x7ffabe2ddedb in v8::internal::CppHeap::FinishAtomicSweepingIfRunning(void) C:\b\s\w\ir\cache\builder\src\v8\src\heap\cppgc-js\cpp-heap.cc:1251:5
    #13 0x7ffabe46a94d in v8::internal::Heap::CollectGarbage::<lambda_2>::operator() C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:1740:36
    #14 0x7ffabe469e58 in heap::base::Stack::SetMarkerAndCallbackImpl<`lambda at ..\..\v8\src\heap\heap.cc:1693:40'> C:\b\s\w\ir\cache\builder\src\v8\src\heap\base\stack.h:185:5
    #15 0x7ffae356e6ac in PushAllRegistersAndIterateStack (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa61e6ac)
    #16 0x7ffabe40c1e3 in heap::base::Stack::SetMarkerIfNeededAndCallback C:\b\s\w\ir\cache\builder\src\v8\src\heap\base\stack.h:81
    #17 0x7ffabe40c1e3 in v8::internal::Heap::CollectGarbage(enum v8::internal::AllocationSpace, enum v8::internal::GarbageCollectionReason, enum v8::GCCallbackFlags, enum v8::internal::PerformHeapLimitCheck) C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:1693:11
    #18 0x7ffabe411bc7 in v8::internal::Heap::CollectAllGarbage C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:1283
    #19 0x7ffabe411bc7 in v8::internal::Heap::PreciseCollectAllGarbage(class v8::base::Flags<enum v8::internal::GCFlag, unsigned char, unsigned char>, enum v8::internal::GarbageCollectionReason, enum v8::GCCallbackFlags) C:\b\s\w\ir\cache\builder\src\v8\src\heap\heap.cc:1462:3
    #20 0x7ffabe23c5fd in v8::internal::`anonymous namespace'::InvokeGC C:\b\s\w\ir\cache\builder\src\v8\src\extensions\gc-extension.cc:204:17
    #21 0x7ffabe23ace4 in v8::internal::GCExtension::GC(class v8::FunctionCallbackInfo<class v8::Value> const &) C:\b\s\w\ir\cache\builder\src\v8\src\extensions\gc-extension.cc:276:5
    #22 0x7ffae3380804 in Builtins_CallApiCallbackGeneric (E:\chrome_asan\asan-win32-release_x64-1476007\chrome.dll+0x1aa430804)


==4212==ADDITIONAL INFO

==4212==Note: Please include this section with the ASan report.
Task trace:
    #0 0x7ffada551bbb in blink::Document::CheckLoadEventSoon C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\core\dom\document.cc:8510
    #1 0x7ffadf30f34c in blink::MultiBufferDataSource::StartCallback(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\media\multi_buffer_data_source.cc:655:45
    #2 0x7ffadf30b6dc in blink::MultiBufferDataSource::OnRedirected(class scoped_refptr<class blink::UrlData> const &) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\media\multi_buffer_data_source.cc:224:33
    #3 0x7ffac633bdf3 in blink::BackgroundURLLoader::Context::PostTaskToMainThread(class WTF::CrossThreadOnceFunction<(void)>) C:\b\s\w\ir\cache\builder\src\third_party\blink\renderer\platform\loader\fetch\url_loader\background_url_loader.cc:496:52

==4212==END OF ADDITIONAL INFO
==4212==ABORTING