[836857:836857:0506/160452.985923:WARNING:chrome/browser/signin/account_consistency_mode_manager.cc:74] Desktop Identity Consistency cannot be enabled as no OAuth client ID and client secret have been configured.
[836857:836857:0506/160454.789251:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.UPower was not provided by any .service files
[836857:836857:0506/160454.789332:WARNING:dbus/property.cc:174] GetAll request failed for: org.freedesktop.UPower.Device
[836857:836857:0506/160454.966103:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used.
LateLoadElimination: Starting analysis
> ProcessBlock(B0)
> Process other op (id=7)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e010b5ae9 <JSFunction victim (sfi = 0x6d9e010b5931)>]
> Process other op (id=11)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e0102e0c9 <NativeContext[308]>]
> Process other op (id=15)
>> InvalidateAllNonAliasingInputs for Constant()[word32: 1]
> Process other op (id=17)
>> InvalidateAllNonAliasingInputs for Constant()[word32: 0]
> ProcessLoad(21)
> MemoryContentTable: will insert MemoryAddress{base=0, index=<invalid OpIndex>, offset=0, elem_size_log2=0, size=4} with value=21
> Process other op (id=22)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e010b5c5d <Map[24](HOLEY_ELEMENTS)>]
> ProcessAssumeMap(25)
> ProcessLoad(27)
> MemoryContentTable: will insert MemoryAddress{base=0, index=<invalid OpIndex>, offset=12, elem_size_log2=0, size=4} with value=27
> Process other op (id=28)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e010b5ab5 <JSFunction cbTransition (sfi = 0x6d9e010b5901)>]
> Process other op (id=29)
>> InvalidateAllNonAliasingInputs for TaggedBitcast(#27)[Tagged, Word32, Smi]
> Process other op (id=30)
>> InvalidateAllNonAliasingInputs for Shift(#29, #15)[ShiftRightArithmeticShiftOutZeros, Word32]
> Process other op (id=36)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e010b5a39 <ScriptContext[3]>]
> Process other op (id=37)
>> InvalidateAllNonAliasingInputs for Constant()[word32: 2]
> Process other op (id=38)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e00000011 <undefined>]
> Process other op (id=39)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e0102e069 <JSGlobalProxy>]
> ProcessCall(40)
>> InvalidateAllNonAliasingInputs for Call(#28, #33, #39, #0, #38, #37, #17, #36)[JS:js-call:r1s2i7f1]
>> InvalidateIfAlias: recursively invalidating for FrameState inputs (FrameState id=33)
>> InvalidateMaybeAliasing
>>> Invalidating MemoryAddress{base=0, index=<invalid OpIndex>, offset=12, elem_size_log2=0, size=4}
>>> Invalidating MemoryAddress{base=0, index=<invalid OpIndex>, offset=0, elem_size_log2=0, size=4}
> Process other op (id=52)
>> InvalidateAllNonAliasingInputs for TaggedBitcast(#44)[Tagged, Word32, Smi]
> Process other op (id=53)
>> InvalidateAllNonAliasingInputs for Shift(#52, #15)[ShiftRightArithmeticShiftOutZeros, Word32]
> ProcessLoad(59)
> MemoryContentTable: will insert MemoryAddress{base=4, index=<invalid OpIndex>, offset=0, elem_size_log2=0, size=4} with value=59
> Process other op (id=60)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e010c2741 <Map[24](HOLEY_ELEMENTS)>]
> ProcessAssumeMap(63)
> ProcessLoad(65)
> MemoryContentTable: will insert MemoryAddress{base=4, index=<invalid OpIndex>, offset=12, elem_size_log2=0, size=4} with value=65
> Process other op (id=67)
>> InvalidateAllNonAliasingInputs for Branch(#66)[B2, B1, None]
> ProcessBlock(B1)
> Process other op (id=69)
>> InvalidateAllNonAliasingInputs for Constant()[word64: 0]
> ProcessBlock(B2)
> Process other op (id=71)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e0104df2d <MakeBase map = 0x6d9e010b5c5d>]
> ProcessLoad(72)
> MemoryContentTable: will insert MemoryAddress{base=0, index=<invalid OpIndex>, offset=0, elem_size_log2=0, size=4} with value=72
>> Reusing existing key
> Process other op (id=74)
>> InvalidateAllNonAliasingInputs for TaggedBitcast(#72)[Tagged, Word64, HeapObject]
> ProcessChange(75)
> Process other op (id=76)
>> InvalidateAllNonAliasingInputs for Constant()[word32: 1703936]
> Process other op (id=78)
>> InvalidateAllNonAliasingInputs for Goto()[B3, 0]
> ProcessBlock(B3)
> Process other op (id=81)
>> InvalidateAllNonAliasingInputs for Branch(#80)[B8, B4, None]
> ProcessBlock(B4)
> Process other op (id=83)
>> InvalidateAllNonAliasingInputs for TaggedBitcast(#65)[Tagged, Word32, Smi]
> Process other op (id=84)
>> InvalidateAllNonAliasingInputs for Shift(#83, #15)[ShiftRightArithmeticShiftOutZeros, Word32]
> Process other op (id=85)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e010c2769 <Map[24](HOLEY_ELEMENTS)>]
> Process other op (id=86)
>> InvalidateAllNonAliasingInputs for Constant()[smi: 99]
> ProcessStore(87)
> MemoryContentTable: Invalidating based on 4, <invalid OpIndex>, 20
>> base is maybe-aliasing
>>> Invalidating everything maybe-aliasing at offset 20
> MemoryContentTable: will insert MemoryAddress{base=4, index=<invalid OpIndex>, offset=20, elem_size_log2=0, size=4} with value=86
> ProcessStore(89)
> MemoryContentTable: Invalidating based on 4, <invalid OpIndex>, 0
>> base is maybe-aliasing
>>> Invalidating everything maybe-aliasing at offset 0
>>>> InvalidateAtOffset: not invalidating thanks for maps: MemoryAddress{base=0, index=<invalid OpIndex>, offset=0, elem_size_log2=0, size=4}
>>>> InvalidateAtOffset: invalidating MemoryAddress{base=4, index=<invalid OpIndex>, offset=0, elem_size_log2=0, size=4}
> MemoryContentTable: will insert MemoryAddress{base=4, index=<invalid OpIndex>, offset=0, elem_size_log2=0, size=4} with value=85
>> Reusing existing key
>> Wiping all maps

> Process other op (id=93)
>> InvalidateAllNonAliasingInputs for Constant()[word32: 7]
> ProcessLoad(94)
>> Found potential replacement at offset 72
>>> Confirming replacement
> ProcessAssumeMap(98)
> Process other op (id=100)
>> InvalidateAllNonAliasingInputs for OverflowCheckedBinop(#99, #84)[signed add, Word32]
> Process other op (id=101)
>> InvalidateAllNonAliasingInputs for Projection(#100)[0, Word32]
> Process other op (id=102)
>> InvalidateAllNonAliasingInputs for Projection(#100)[1, Word32]
> Process other op (id=106)
>> InvalidateAllNonAliasingInputs for OverflowCheckedBinop(#101, #101)[signed add, Word32]
> Process other op (id=107)
>> InvalidateAllNonAliasingInputs for Projection(#106)[0, Word32]
> Process other op (id=108)
>> InvalidateAllNonAliasingInputs for Projection(#106)[1, Word32]
> Process other op (id=110)
>> InvalidateAllNonAliasingInputs for Branch(#108)[B6, B5, False]
> ProcessBlock(B5)
> Process other op (id=112)
>> InvalidateAllNonAliasingInputs for TaggedBitcast(#107)[Word32, Tagged, Smi]
> Process other op (id=113)
>> InvalidateAllNonAliasingInputs for Goto()[B7, 0]
> ProcessBlock(B6)
> ProcessChange(114)
> Process other op (id=115)
>> InvalidateAllNonAliasingInputs for Constant()[word64: 12]
> ProcessAllocate(116) ==> Fresh non-aliasing object
> Process other op (id=117)
>> InvalidateAllNonAliasingInputs for Constant()[heap object: 0x6d9e00000515 <Map[12](HEAP_NUMBER_TYPE)>]
> ProcessStore(118)
> MemoryContentTable: Invalidating based on 116, <invalid OpIndex>, 0
>> base is non-aliasing
> MemoryContentTable: will insert MemoryAddress{base=116, index=<invalid OpIndex>, offset=0, elem_size_log2=0, size=4} with value=117
>> Wiping all maps

> ProcessStore(119)
> MemoryContentTable: Invalidating based on 116, <invalid OpIndex>, 4
>> base is non-aliasing
> MemoryContentTable: will insert MemoryAddress{base=116, index=<invalid OpIndex>, offset=4, elem_size_log2=0, size=8} with value=114
> Process other op (id=121)
>> InvalidateAllNonAliasingInputs for Goto()[B7, 0]
> ProcessBlock(B7)
> Process other op (id=122)
>> InvalidateAllNonAliasingInputs for Phi(#112, #116)[Tagged]
> ProcessBlock(B8)
> Process other op (id=124)
>> InvalidateAllNonAliasingInputs for Constant()[word64: 0]
abort: Turboshaft's load elimination wrongly eliminated a Load

==== JS stack trace =========================================

    0: ExitFrame [pc: 0x564e7583197d]
    1: victim [0x6d9e010b5ae9] [http://127.0.0.1:8125/poc_missing_property.html:~21] [pc=0x564ed55802c5](this=0x6d9e0102e069 <JSGlobalProxy>#0#,0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#,0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#,0x6d9e010b5ab5 <JSFunction cbTransition (sfi = 0x6d9e010b5901)>#2#)
    2: run [0x6d9e010b5b1d] [http://127.0.0.1:8125/poc_missing_property.html:52] [bytecode=0x7ed701000881 offset=273](this=0x6d9e0102e069 <JSGlobalProxy>#0#)
    3: InternalFrame [pc: 0x564e755e6627]
    4: EntryFrame [pc: 0x564e755e636b]

==== Details ================================================

[0]: ExitFrame [pc: 0x564e7583197d]
[1]: victim [0x6d9e010b5ae9] [http://127.0.0.1:8125/poc_missing_property.html:~21] [pc=0x564ed55802c5](this=0x6d9e0102e069 <JSGlobalProxy>#0#,0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#,0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#,0x6d9e010b5ab5 <JSFunction cbTransition (sfi = 0x6d9e010b5901)>#2#) {
// optimized frame
--------- s o u r c e   c o d e ---------
function victim(x, y, cb) {\x0a  let s = x.x | 0;\x0a  let flag = cb(x) | 0;\x0a  let d = y.x | 0;\x0a  if (!(flag & 1)) return 0;\x0a  if (x == sentinel) return 0;\x0a  y.z = 99;\x0a  return (x.z === 99 ? 1000000 : 7) + s + d;\x0a}
-----------------------------------------
}
[2]: run [0x6d9e010b5b1d] [http://127.0.0.1:8125/poc_missing_property.html:52] [bytecode=0x7ed701000881 offset=273](this=0x6d9e0102e069 <JSGlobalProxy>#0#) {
  // expression stack (top to bottom)
  [17] : 0x6d9e0102e069 <JSGlobalProxy>#0#
  [16] : 0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#
  [15] : 0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#
  [14] : 0x6d9e010b5ab5 <JSFunction cbTransition (sfi = 0x6d9e010b5901)>#2#
  [13] : 0x6d9e010b5ab5 <JSFunction cbTransition (sfi = 0x6d9e010b5901)>#2#
  [12] : 0x6d9e010597c5 <MakeBase map = 0x6d9e010c2769>#3#
  [11] : 0x6d9e010b5ab5 <JSFunction cbTransition (sfi = 0x6d9e010b5901)>#2#
  [10] : 0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#
  [09] : 0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#
  [08] : 0x6d9e010b5ae9 <JSFunction victim (sfi = 0x6d9e010b5931)>#4#
  [07] : 0x6d9e010596f5 <MakeBase map = 0x6d9e010c2769>#5#
  [06] : 0x6d9e010596dd <MakeBase map = 0x6d9e010c2741>#6#
  [05] : 200
  [04] : 0x6d9e00000011 <undefined>
  [03] : 0x6d9e00000011 <undefined>
  [02] : 0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>#1#
  [01] : 0x6d9e010597c5 <MakeBase map = 0x6d9e010c2769>#3#
  [00] : 0x6d9e010597ad <MakeBase map = 0x6d9e010c2741>#7#
--------- s o u r c e   c o d e ---------
function run() {\x0a  log('starting warmup');\x0a  %PrepareFunctionForOptimization(victim);\x0a  for (let i = 0; i < 200; ++i) {\x0a    let xObj = new MakeBase(i);\x0a    let yObj = new MakeBase(i + 100);\x0a    cbTransition(yObj);\x0a    victim(xObj, yObj, cbTransition);\x0a  }\x0a\x0a  log('optimizing victim on non-aliased call');\x0a  %Opti...

-----------------------------------------
}

[3]: InternalFrame [pc: 0x564e755e6627]
[4]: EntryFrame [pc: 0x564e755e636b]
-- ObjectCacheKey --

 #0# 0x6d9e0102e069: 0x6d9e0102e069 <JSGlobalProxy>
 #1# 0x6d9e010599e1: 0x6d9e010599e1 <MakeBase map = 0x6d9e010c2769>
                 x: 1337
                 y: 42
                 z: 99
 #2# 0x6d9e010b5ab5: 0x6d9e010b5ab5 <JSFunction cbTransition (sfi = 0x6d9e010b5901)>
 #3# 0x6d9e010597c5: 0x6d9e010597c5 <MakeBase map = 0x6d9e010c2769>
                 x: 600
                 y: 42
                 z: 99
 #4# 0x6d9e010b5ae9: 0x6d9e010b5ae9 <JSFunction victim (sfi = 0x6d9e010b5931)>
 #5# 0x6d9e010596f5: 0x6d9e010596f5 <MakeBase map = 0x6d9e010c2769>
                 x: 299
                 y: 42
                 z: 99
 #6# 0x6d9e010596dd: 0x6d9e010596dd <MakeBase map = 0x6d9e010c2741>
                 x: 199
                 y: 42
 #7# 0x6d9e010597ad: 0x6d9e010597ad <MakeBase map = 0x6d9e010c2741>
                 x: 500
                 y: 42
=====================

[0506/160455.250494:WARNING:third_party/crashpad/crashpad/snapshot/linux/exception_snapshot_linux.cc:391] thread ID 1 not found in process
[0506/160455.250998:ERROR:third_party/crashpad/crashpad/snapshot/linux/process_snapshot_linux.cc:129] thread not found 1
Received signal 4 ILL_ILLOPN 564e8bb4303e
#0 0x564e66eabd16 (/home/mufeedvh/chromium/src/out/asan/chrome+0x19311d15)
#1 0x564e84fb72b8 (/home/mufeedvh/chromium/src/out/asan/chrome+0x3741d2b7)
#2 0x564e84f6778f (/home/mufeedvh/chromium/src/out/asan/chrome+0x373cd78e)
#3 0x564e84fb6422 (/home/mufeedvh/chromium/src/out/asan/chrome+0x3741c421)
#4 0x72ea6e042520 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x4251f)
#5 0x564e8bb4303e (/home/mufeedvh/chromium/src/out/asan/chrome+0x3dfa903d)
#6 0x564e6ff8ce24 (/home/mufeedvh/chromium/src/out/asan/chrome+0x223f2e23)
#7 0x564e7583197d (/home/mufeedvh/chromium/src/out/asan/chrome+0x27c9797c)
  r8: 000072ea6cf5c000  r9: 00007fffffffff01 r10: 00007fffffffff01 r11: 0000000000000201
 r12: 0000000000000000 r13: 000071fa6c631080 r14: 00007ffd64b90850 r15: 0000000000000001
  di: 00006eea6b0e7000  si: 0000000000000000  bp: 00007ffd64b907a0  bx: 000071fa6c631000
  dx: 0000000000000003  ax: 0000000000000003  cx: 0000000000000004  sp: 00007ffd64b907a0
  ip: 0000564e8bb4303e efl: 0000000000010202 cgf: 002b000000000033 erf: 0000000000000000
 trp: 0000000000000006 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
../../sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc:**CRASHING**:seccomp-bpf failure in syscall nr=0x25 arg1=0x5 arg2=0x0 arg3=0x0 arg4=0x8
Received signal 11 SEGV_MAPERR 000000005025
#0 0x564e66eabd16 (/home/mufeedvh/chromium/src/out/asan/chrome+0x19311d15)
#1 0x564e84fb72b8 (/home/mufeedvh/chromium/src/out/asan/chrome+0x3741d2b7)
#2 0x564e84f6778f (/home/mufeedvh/chromium/src/out/asan/chrome+0x373cd78e)
#3 0x564e84fb6422 (/home/mufeedvh/chromium/src/out/asan/chrome+0x3741c421)
#4 0x72ea6e042520 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x4251f)
#5 0x564e8c6a3aeb (/home/mufeedvh/chromium/src/out/asan/chrome+0x3eb09aea)
#6 0x564e8c6ad6d9 (/home/mufeedvh/chromium/src/out/asan/chrome+0x3eb136d8)
#7 0x72ea6e042520 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x4251f)
#8 0x72ea6e0ea54b (/usr/lib/x86_64-linux-gnu/libc.so.6+0xea54a)
#9 0x564e84fb6d00 (/home/mufeedvh/chromium/src/out/asan/chrome+0x3741ccff)
#10 0x72ea6e042520 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x4251f)
#11 0x564e8bb4303e (/home/mufeedvh/chromium/src/out/asan/chrome+0x3dfa903d)
#12 0x564e6ff8ce24 (/home/mufeedvh/chromium/src/out/asan/chrome+0x223f2e23)
#13 0x564e7583197d (/home/mufeedvh/chromium/src/out/asan/chrome+0x27c9797c)
  r8: 00000dddcd68b6c0  r9: 00000dddcd68b6c0 r10: 00000dddcd68b6c0 r11: 0000000000000246
 r12: 00000fffac971d7a r13: 0000000000000001 r14: 00006eea6b49b4e0 r15: 00000dddcd68b680
  di: 0000000000005025  si: 00000000000000f5  bp: 00007ffd64b8ea70  bx: 0000000000000025
  dx: 0000000000000040  ax: 0000000000000000  cx: 0000000000000000  sp: 00007ffd64b8ea60
  ip: 0000564e8c6a3aeb efl: 0000000000010246 cgf: 002b000000000033 erf: 0000000000000006
 trp: 000000000000000e msk: 0000000000000008 cr2: 0000000000005025
[end of stack trace]
../../sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc:**CRASHING**:seccomp-bpf failure in syscall nr=0x25 arg1=0x5 arg2=0x0 arg3=0x0 arg4=0x8
[836857:836857:0506/160455.267627:INFO:CONSOLE:8] "[poc] starting warmup", source: http://127.0.0.1:8125/poc_missing_property.html (8)
[836857:836857:0506/160455.269131:INFO:CONSOLE:8] "[poc] optimizing victim on non-aliased call", source: http://127.0.0.1:8125/poc_missing_property.html (8)
[836857:836857:0506/160455.274653:INFO:CONSOLE:8] "[poc] non-aliased result: 1107", source: http://127.0.0.1:8125/poc_missing_property.html (8)
[836857:836857:0506/160455.277127:INFO:CONSOLE:8] "[poc] triggering aliased call", source: http://127.0.0.1:8125/poc_missing_property.html (8)
[836857:836857:0506/160455.279874:INFO:CONSOLE:8] "[poc] target before: {"x":1337}", source: http://127.0.0.1:8125/poc_missing_property.html (8)
[836857:836876:0506/160459.937934:ERROR:google_apis/gcm/engine/registration_request.cc:291] Registration response error message: PHONE_REGISTRATION_ERROR
[836857:836876:0506/160459.939268:ERROR:google_apis/gcm/engine/mcs_client.cc:702]   Error code: 401  Error message: Authentication Failed: wrong_secret
[836857:836876:0506/160459.939309:ERROR:google_apis/gcm/engine/mcs_client.cc:704] Failed to log in to GCM, resetting connection.
[836892:836892:0506/160505.579392:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process.
[836892:836892:0506/160505.605341:WARNING:ui/gfx/linux/gbm_support_x11.cc:48] dri3 extension not supported.
[836857:836857:0506/160511.595959:WARNING:content/common/zygote/zygote_communication_linux.cc:301] Error reading message from zygote: Connection reset by peer (104)
[836857:836857:0506/160511.600170:ERROR:content/common/zygote/zygote_communication_linux.cc:291] Failed to send GetTerminationStatus message to zygote
[836857:836857:0506/160511.600213:WARNING:content/common/zygote/zygote_communication_linux.cc:303] Socket closed prematurely.