[0516/174609.033870:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[0516/174609.035448:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[0516/174609.035513:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[0516/174609.082128:WARNING:media/gpu/vaapi/vaapi_wrapper.cc:1587] drmGetDevices2() has not found any devices
[0516/174609.115217:WARNING:device/bluetooth/dbus/bluez_dbus_manager.cc:209] Floss manager service not available, cannot set Floss enable/disable.
=================================================================
==2530==ERROR: AddressSanitizer: heap-use-after-free on address 0x6f6385905c20 at pc 0x6519539c7855 bp 0x7fff9871ed50 sp 0x7fff9871ed48
READ of size 8 at 0x6f6385905c20 thread T0 (headless_shell)
    #0 0x6519539c7854 in headless::HeadlessDevToolsManagerDelegate::DisposeBrowserContext(content::BrowserContext*, base::OnceCallback<void (bool, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&)>) headless/lib/browser/headless_devtools_manager_delegate.cc:108:11
    #1 0x65195f6d1bfe in content::protocol::TargetHandler::DisposeBrowserContext(std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, std::__Cr::unique_ptr<content::protocol::Target::Backend::DisposeBrowserContextCallback, std::__Cr::default_delete<content::protocol::Target::Backend::DisposeBrowserContextCallback>>) content/browser/devtools/protocol/target_handler.cc:1610:13
    #2 0x65195ed38e50 in content::protocol::Target::DomainDispatcherImpl::disposeBrowserContext(crdtp::Dispatchable const&) gen/content/browser/devtools/protocol/target.cc:767:16
    #3 0x651965a8aa10 in crdtp::UberDispatcher::DispatchResult::Run() gen/third_party/libc++/src/include/__functional/function.h:502:12
    #4 0x65195f4adb4c in content::DevToolsSession::HandleCommandInternal(crdtp::Dispatchable, base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>) content/browser/devtools/devtools_session.cc:406:16
    #5 0x65195f4ad848 in content::DevToolsSession::HandleCommand(base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>) content/browser/devtools/devtools_session.cc:392:3
    #6 0x65195f4b716d in base::internal::Invoker<base::internal::FunctorTraits<void (content::DevToolsSession::*&&)(base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>), base::WeakPtr<content::DevToolsSession>&&>, base::internal::BindState<true, true, false, void (content::DevToolsSession::*)(base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>), base::WeakPtr<content::DevToolsSession>>, void (base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>)>::RunOnce(base::internal::BindStateBase*, base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>&&) base/functional/bind_internal.h:740:12
    #7 0x6519539f351d in headless::protocol::HeadlessDevToolsSession::HandleCommand(base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>, base::OnceCallback<void (base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>)>) base/functional/callback.h:155:12
    #8 0x6519539c5ff9 in headless::HeadlessDevToolsManagerDelegate::HandleCommand(content::DevToolsAgentHostClientChannel*, base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>, base::OnceCallback<void (base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>)>) headless/lib/browser/headless_devtools_manager_delegate.cc:31:15
    #9 0x65195f4ad4ba in content::DevToolsSession::DispatchProtocolMessageInternal(crdtp::Dispatchable, base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>) content/browser/devtools/devtools_session.cc:383:15
    #10 0x65195f4abdfa in content::DevToolsSession::DispatchProtocolMessage(base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>) content/browser/devtools/devtools_session.cc:342:5
    #11 0x65195f496d55 in void base::internal::Invoker<base::internal::FunctorTraits<void (content::DevToolsPipeHandler::*&&)(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>), base::WeakPtr<content::DevToolsPipeHandler>&&, std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>&&>, base::internal::BindState<true, true, false, void (content::DevToolsPipeHandler::*)(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>), base::WeakPtr<content::DevToolsPipeHandler>, std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>>, void ()>::RunImpl<void (content::DevToolsPipeHandler::*)(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>), std::__Cr::tuple<base::WeakPtr<content::DevToolsPipeHandler>, std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>>, 0ul, 1ul>(void (content::DevToolsPipeHandler::*&&)(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>), std::__Cr::tuple<base::WeakPtr<content::DevToolsPipeHandler>, std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul>) base/functional/bind_internal.h:740:12
    #12 0x651963a650e3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #13 0x651963ad3c2c in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #14 0x651963ad2aca in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:336:40
    #15 0x651963c71148 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46
    #16 0x651963c74708 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43
    #17 0x72e388a65718 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x54718) (BuildId: 42c28e95f24a721d8e8e159f42dbc541f0ff353d)

0x6f6385905c20 is located 0 bytes inside of 96-byte region [0x6f6385905c20,0x6f6385905c80)
freed by thread T0 (headless_shell) here:
    #0 0x6519539981a2 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/headless_shell+0xb63a1a2) (BuildId: 9edc463232f09aa4)
    #1 0x6519539a642e in std::__Cr::unordered_map<unsigned long, std::__Cr::unique_ptr<headless::HeadlessWebContentsImpl, std::__Cr::default_delete<headless::HeadlessWebContentsImpl>>, std::__Cr::hash<unsigned long>, std::__Cr::equal_to<unsigned long>, std::__Cr::allocator<std::__Cr::pair<unsigned long const, std::__Cr::unique_ptr<headless::HeadlessWebContentsImpl, std::__Cr::default_delete<headless::HeadlessWebContentsImpl>>>>>::erase(unsigned long const&) gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #2 0x6519539a5dbb in headless::HeadlessBrowserContextImpl::DestroyWebContents(headless::HeadlessWebContentsImpl*) headless/lib/browser/headless_browser_context_impl.cc:299:37
    #3 0x6519539da3e2 in headless::HeadlessWebContentsImpl::Delegate::CloseContents(content::WebContents*) headless/lib/browser/headless_web_contents_impl.cc:131:23
    #4 0x6519610a0e9a in content::WebContentsImpl::Close() content/browser/web_contents/web_contents_impl.cc:9724:16
    #5 0x65196079594d in content::RenderFrameHostImpl::ClosePageIgnoringUnloadEvents(content::RenderFrameHostImpl::ClosePageSource, base::RepeatingCallback<void ()>) content/browser/renderer_host/render_frame_host_impl.cc:7752:14
    #6 0x6519607962eb in content::RenderFrameHostImpl::ClosePage(content::RenderFrameHostImpl::ClosePageSource, base::RepeatingCallback<void ()>) content/browser/renderer_host/render_frame_host_impl.cc:7710:5
    #7 0x651961006386 in content::WebContentsImpl::ClosePage() content/browser/web_contents/web_contents_impl.cc:2035:26
    #8 0x65195f718071 in content::RenderFrameDevToolsAgentHost::Close() content/browser/devtools/render_frame_devtools_agent_host.cc:946:21
    #9 0x6519539ff00e in headless::protocol::TargetHandler::Disable() headless/lib/browser/protocol/target_handler.cc:37:19
    #10 0x6519539f2eff in headless::protocol::HeadlessDevToolsSession::~HeadlessDevToolsSession() headless/lib/browser/protocol/headless_devtools_session.cc:44:14
    #11 0x6519539f30a3 in headless::protocol::HeadlessDevToolsSession::~HeadlessDevToolsSession() headless/lib/browser/protocol/headless_devtools_session.cc:42:53
    #12 0x6519539c8495 in unsigned long std::__Cr::__tree<std::__Cr::__value_type<content::DevToolsAgentHostClientChannel*, std::__Cr::unique_ptr<headless::protocol::HeadlessDevToolsSession, std::__Cr::default_delete<headless::protocol::HeadlessDevToolsSession>>>, std::__Cr::__map_value_compare<content::DevToolsAgentHostClientChannel*, std::__Cr::pair<content::DevToolsAgentHostClientChannel* const, std::__Cr::unique_ptr<headless::protocol::HeadlessDevToolsSession, std::__Cr::default_delete<headless::protocol::HeadlessDevToolsSession>>>, std::__Cr::less<content::DevToolsAgentHostClientChannel*>>, std::__Cr::allocator<std::__Cr::pair<content::DevToolsAgentHostClientChannel* const, std::__Cr::unique_ptr<headless::protocol::HeadlessDevToolsSession, std::__Cr::default_delete<headless::protocol::HeadlessDevToolsSession>>>>>::__erase_unique<content::DevToolsAgentHostClientChannel*>(content::DevToolsAgentHostClientChannel* const&) gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #13 0x6519539c692e in headless::HeadlessDevToolsManagerDelegate::ClientDetached(content::DevToolsAgentHostClientChannel*) gen/third_party/libc++/src/include/map:1262:79
    #14 0x65195f42a438 in content::DevToolsAgentHostImpl::DetachInternal(content::DevToolsSession*) content/browser/devtools/devtools_agent_host_impl.cc:394:26
    #15 0x65195f429ec3 in content::DevToolsAgentHostImpl::DetachClient(content::DevToolsAgentHostClient*) content/browser/devtools/devtools_agent_host_impl.cc:371:3
    #16 0x65195f42c4f6 in content::DevToolsAgentHostImpl::ForceDetachAllSessionsImpl() content/browser/devtools/devtools_agent_host_impl.cc:507:5
    #17 0x65195f7134ca in content::RenderFrameDevToolsAgentHost::DestroyOnRenderFrameGone() content/browser/devtools/render_frame_devtools_agent_host.cc:641:19
    #18 0x65195f7140f2 in content::RenderFrameDevToolsAgentHost::FrameDeleted(base::IdType<content::FrameTreeNodeIdTag, int, -1, 1, 0>) content/browser/devtools/render_frame_devtools_agent_host.cc:620:5
    #19 0x6519610bafc3 in void content::WebContentsImpl::WebContentsObserverList::NotifyObservers<void (content::WebContentsObserver::*)(base::IdType<content::FrameTreeNodeIdTag, int, -1, 1, 0>), base::IdType<content::FrameTreeNodeIdTag, int, -1, 1, 0>>(void (content::WebContentsObserver::*)(base::IdType<content::FrameTreeNodeIdTag, int, -1, 1, 0>), base::IdType<content::FrameTreeNodeIdTag, int, -1, 1, 0>&&) content/browser/web_contents/web_contents_impl.h:1846:9
    #20 0x6519610ba455 in content::WebContentsImpl::OnFrameTreeNodeDestroyed(content::FrameTreeNode*) content/browser/web_contents/web_contents_impl.cc:11147:14
    #21 0x6519603c865e in content::FrameTree::Shutdown() content/browser/renderer_host/frame_tree.cc:1080:22
    #22 0x651960ffbc07 in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1449:23
    #23 0x6519610009b3 in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1366:37
    #24 0x6519539d6842 in headless::HeadlessWebContentsImpl::~HeadlessWebContentsImpl() gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #25 0x6519539d6a83 in headless::HeadlessWebContentsImpl::~HeadlessWebContentsImpl() headless/lib/browser/headless_web_contents_impl.cc:460:53
    #26 0x6519539a642e in std::__Cr::unordered_map<unsigned long, std::__Cr::unique_ptr<headless::HeadlessWebContentsImpl, std::__Cr::default_delete<headless::HeadlessWebContentsImpl>>, std::__Cr::hash<unsigned long>, std::__Cr::equal_to<unsigned long>, std::__Cr::allocator<std::__Cr::pair<unsigned long const, std::__Cr::unique_ptr<headless::HeadlessWebContentsImpl, std::__Cr::default_delete<headless::HeadlessWebContentsImpl>>>>>::erase(unsigned long const&) gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #27 0x6519539a5dbb in headless::HeadlessBrowserContextImpl::DestroyWebContents(headless::HeadlessWebContentsImpl*) headless/lib/browser/headless_browser_context_impl.cc:299:37
    #28 0x6519539c746c in headless::HeadlessDevToolsManagerDelegate::DisposeBrowserContext(content::BrowserContext*, base::OnceCallback<void (bool, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&)>) headless/lib/browser/headless_devtools_manager_delegate.cc:108:11
    #29 0x65195f6d1bfe in content::protocol::TargetHandler::DisposeBrowserContext(std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, std::__Cr::unique_ptr<content::protocol::Target::Backend::DisposeBrowserContextCallback, std::__Cr::default_delete<content::protocol::Target::Backend::DisposeBrowserContextCallback>>) content/browser/devtools/protocol/target_handler.cc:1610:13

previously allocated by thread T0 (headless_shell) here:
    #0 0x65195399759d in operator new(unsigned long) (/chromium/chromium/src/out/asan/headless_shell+0xb63959d) (BuildId: 9edc463232f09aa4)
    #1 0x6519539d513c in headless::HeadlessWebContentsImpl::Create(headless::HeadlessWebContents::Builder*) headless/lib/browser/headless_web_contents_impl.cc:380:7
    #2 0x6519539a5637 in headless::HeadlessBrowserContextImpl::CreateWebContents(headless::HeadlessWebContents::Builder*) headless/lib/browser/headless_browser_context_impl.cc:269:7
    #3 0x651953a0019f in headless::protocol::TargetHandler::CreateTarget(std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, std::__Cr::optional<int>, std::__Cr::optional<int>, std::__Cr::optional<int>, std::__Cr::optional<int>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>*) headless/lib/browser/protocol/target_handler.cc:111:65
    #4 0x651953a006da in non-virtual thunk to headless::protocol::TargetHandler::CreateTarget(std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, std::__Cr::optional<int>, std::__Cr::optional<int>, std::__Cr::optional<int>, std::__Cr::optional<int>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::optional<bool>, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>*) headless/lib/browser/protocol/target_handler.cc
    #5 0x651965a78e95 in headless::protocol::Target::DomainDispatcherImpl::createTarget(crdtp::Dispatchable const&) gen/headless/lib/browser/protocol/target.cc:199:44
    #6 0x651965a8aa10 in crdtp::UberDispatcher::DispatchResult::Run() gen/third_party/libc++/src/include/__functional/function.h:502:12
    #7 0x6519539f3606 in headless::protocol::HeadlessDevToolsSession::HandleCommand(base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>, base::OnceCallback<void (base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>)>) headless/lib/browser/protocol/headless_devtools_session.cc:65:14
    #8 0x6519539c5ff9 in headless::HeadlessDevToolsManagerDelegate::HandleCommand(content::DevToolsAgentHostClientChannel*, base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>, base::OnceCallback<void (base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>)>) headless/lib/browser/headless_devtools_manager_delegate.cc:31:15
    #9 0x65195f4ad4ba in content::DevToolsSession::DispatchProtocolMessageInternal(crdtp::Dispatchable, base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>) content/browser/devtools/devtools_session.cc:383:15
    #10 0x65195f4ac830 in content::DevToolsSession::DispatchProtocolMessage(base::span<unsigned char const, 18446744073709551615ul, unsigned char const*>) content/browser/devtools/devtools_session.cc:361:12
    #11 0x65195f496d55 in void base::internal::Invoker<base::internal::FunctorTraits<void (content::DevToolsPipeHandler::*&&)(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>), base::WeakPtr<content::DevToolsPipeHandler>&&, std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>&&>, base::internal::BindState<true, true, false, void (content::DevToolsPipeHandler::*)(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>), base::WeakPtr<content::DevToolsPipeHandler>, std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>>, void ()>::RunImpl<void (content::DevToolsPipeHandler::*)(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>), std::__Cr::tuple<base::WeakPtr<content::DevToolsPipeHandler>, std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>>, 0ul, 1ul>(void (content::DevToolsPipeHandler::*&&)(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>), std::__Cr::tuple<base::WeakPtr<content::DevToolsPipeHandler>, std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul>) base/functional/bind_internal.h:740:12
    #12 0x651963a650e3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #13 0x651963ad3c2c in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #14 0x651963ad2aca in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:336:40
    #15 0x651963c71a84 in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_glib.cc:782:48
    #16 0x651963ad5314 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:640:12
    #17 0x6519639f97a0 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14
    #18 0x65195f1b16ac in content::BrowserMainLoop::RunMainMessageLoop() content/browser/browser_main_loop.cc:1103:18
    #19 0x65195f1ba05c in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15
    #20 0x6519638e8d60 in headless::HeadlessContentMainDelegate::RunProcess(std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, content::MainFunctionParams) headless/lib/headless_content_main_delegate.cc:463:19
    #21 0x6519623260cc in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:692:30
    #22 0x65196232a2a8 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1331:10
    #23 0x651962329740 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1162:12
    #24 0x651962323028 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36
    #25 0x65196232362c in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10
    #26 0x651953999505 in headless::HeadlessShellMain(content::ContentMainParams) headless/app/headless_shell.cc:233:10
    #27 0x65195399e012 in main headless/app/headless_shell_main.cc:36:10
    #28 0x72e387845249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

SUMMARY: AddressSanitizer: heap-use-after-free headless/lib/browser/headless_devtools_manager_delegate.cc:108:11 in headless::HeadlessDevToolsManagerDelegate::DisposeBrowserContext(content::BrowserContext*, base::OnceCallback<void (bool, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&)>)
Shadow bytes around the buggy address:
  0x6f6385905980: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd
  0x6f6385905a00: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd
  0x6f6385905a80: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa
  0x6f6385905b00: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa
  0x6f6385905b80: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd
=>0x6f6385905c00: fa fa f7 fa[fd]fd fd fd fd fd fd fd fd fd fd fd
  0x6f6385905c80: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa
  0x6f6385905d00: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa
  0x6f6385905d80: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa
  0x6f6385905e00: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd
  0x6f6385905e80: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==2530==ADDITIONAL INFO

==2530==Note: Please include this section with the ASan report.
Task trace:
    #0 0x65195f4964de in content::PipeReaderBase::HandleMessage(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>) content/browser/devtools/devtools_pipe_handler.cc:204:9
    #1 0x65195f4934fe in content::PipeReaderBase::StartMainLoop() content/browser/devtools/devtools_pipe_handler.cc:151:9


Command line: `/chromium/chromium/src/out/asan/headless_shell --remote-debugging-pipe --no-sandbox --disable-gpu --disable-dev-shm-usage --user-data-dir=/tmp/headless-poc-profile --no-first-run --headless=old --use-gl=angle --use-angle=swiftshader-webgl --ozone-platform=headless --allow-pre-commit-input about:blank`


MiraclePtr Status: NOT PROTECTED
No raw_ptr<T> access to this region was detected prior to this crash.
This crash is still exploitable with MiraclePtr.
Refer to https://chromium.googlesource.com/chromium/src/+/main/base/memory/raw_ptr.md for details.

==2530==END OF ADDITIONAL INFO

==2530==ABORTING