=================================================================
==1936==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x125d2753d298 at pc 0x7ffca01f18a5 bp 0x0087c2ffeb00 sp 0x0087c2ffeb48
READ of size 8 at 0x125d2753d298 thread T40
    #0 0x7ffca01f18a4 in midi::MidiManagerWin::SendOnTaskRunner C:\src\chromium\src\media\midi\midi_manager_win.cc:878
    #1 0x7ffca01f20c1 in midi::`anonymous namespace'::RunTask C:\src\chromium\src\media\midi\midi_manager_win.cc:157
    #2 0x7ffca01f9116 in base::internal::Invoker<base::internal::BindState<void (*)(int, base::OnceCallback<void ()>),int,base::OnceCallback<void ()> >,void ()>::RunOnce C:\src\chromium\src\base\bind_internal.h:658
    #3 0x7ffca1459f73 in base::debug::TaskAnnotator::RunTask C:\src\chromium\src\base\debug\task_annotator.cc:99
    #4 0x7ffca144065f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl C:\src\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:255
    #5 0x7ffc9f40c878 in base::MessagePumpDefault::Run C:\src\chromium\src\base\message_loop\message_pump_default.cc:39
    #6 0x7ffca1441b4c in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run C:\src\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:353
    #7 0x7ffc9d74a9a4 in base::RunLoop::Run C:\src\chromium\src\base\run_loop.cc:102
    #8 0x7ffc9d7ad646 in base::Thread::ThreadMain C:\src\chromium\src\base\threading\thread.cc:333
    #9 0x7ffc9d7a87f8 in base::`anonymous namespace'::ThreadFunc C:\src\chromium\src\base\threading\platform_thread_win.cc:97
    #10 0x7ff61c66a4e8 in __asan::AsanThread::ThreadStart C:\b\rr\tmpxtc1q6\w\src\third_party\llvm\projects\compiler-rt\lib\asan\asan_thread.cc:262
    #11 0x7ffce8567e93 in BaseThreadInitThunk+0x13 (C:\Windows\System32\KERNEL32.DLL+0x180017e93)
    #12 0x7ffce889a250 in RtlUserThreadStart+0x20 (C:\Windows\SYSTEM32\ntdll.dll+0x18006a250)

Address 0x125d2753d298 is a wild pointer.
SUMMARY: AddressSanitizer: heap-buffer-overflow C:\src\chromium\src\media\midi\midi_manager_win.cc:878 in midi::MidiManagerWin::SendOnTaskRunner
Shadow bytes around the buggy address:
  0x048ccc327a00: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x048ccc327a10: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa
  0x048ccc327a20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x048ccc327a30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x048ccc327a40: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x048ccc327a50: fa fa fa[fa]fa fa fa fa fa fa fa fa fa fa fa fa
  0x048ccc327a60: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x048ccc327a70: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x048ccc327a80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x048ccc327a90: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x048ccc327aa0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
Thread T40 created by T9 here:
    #0 0x7ff61c669310 in __asan_wrap_CreateThread C:\b\rr\tmpxtc1q6\w\src\third_party\llvm\projects\compiler-rt\lib\asan\asan_win.cc:136
    #2 0x7ffc9d7ac8ad in base::Thread::StartWithOptions C:\src\chromium\src\base\threading\thread.cc:112
    #3 0x7ffc9d7ac4a2 in base::Thread::Start C:\src\chromium\src\base\threading\thread.cc:75
    #4 0x7ffc9e5f4d56 in midi::MidiService::GetTaskRunner C:\src\chromium\src\media\midi\midi_service.cc:113
    #5 0x7ffca01f0726 in midi::MidiManagerWin::PostTask C:\src\chromium\src\media\midi\midi_manager_win.cc:799
    #6 0x7ffca01f04bb in midi::MidiManagerWin::StartInitialization C:\src\chromium\src\media\midi\midi_manager_win.cc:758
    #7 0x7ffca01fd1e3 in midi::MidiManager::StartSession C:\src\chromium\src\media\midi\midi_manager.cc:150
    #8 0x7ffc9e5f4434 in midi::MidiService::StartSession C:\src\chromium\src\media\midi\midi_service.cc:62
    #9 0x7ffc9bdbea79 in content::MidiHost::StartSession C:\src\chromium\src\content\browser\media\midi_host.cc:181
    #10 0x7ffc9addfabd in midi::mojom::MidiSessionProviderStubDispatch::Accept C:\src\chromium\src\out\Asan\gen\media\midi\midi_service.mojom.cc:876
    #11 0x7ffc9d8bfc6e in mojo::InterfaceEndpointClient::HandleValidatedMessage C:\src\chromium\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc:423
    #12 0x7ffc9d8d033c in mojo::internal::MultiplexRouter::ProcessIncomingMessage C:\src\chromium\src\mojo\public\cpp\bindings\lib\multiplex_router.cc:869
    #13 0x7ffc9d8cf2c9 in mojo::internal::MultiplexRouter::Accept C:\src\chromium\src\mojo\public\cpp\bindings\lib\multiplex_router.cc:590
    #14 0x7ffc9d8ba9a3 in mojo::Connector::ReadSingleMessage C:\src\chromium\src\mojo\public\cpp\bindings\lib\connector.cc:476
    #15 0x7ffc9d8bc117 in mojo::Connector::ReadAllAvailableMessages C:\src\chromium\src\mojo\public\cpp\bindings\lib\connector.cc:505
    #16 0x7ffc9d8fed58 in mojo::SimpleWatcher::OnHandleReady C:\src\chromium\src\mojo\public\cpp\system\simple_watcher.cc:289
    #17 0x7ffc9d8ff62e in mojo::SimpleWatcher::Context::Notify C:\src\chromium\src\mojo\public\cpp\system\simple_watcher.cc:118
    #18 0x7ffc9d8fd595 in mojo::SimpleWatcher::Context::CallNotify C:\src\chromium\src\mojo\public\cpp\system\simple_watcher.cc:57
    #19 0x7ffc9c777816 in mojo::core::WatcherDispatcher::InvokeWatchCallback C:\src\chromium\src\mojo\core\watcher_dispatcher.cc:90
    #20 0x7ffc9c776349 in mojo::core::Watch::InvokeCallback C:\src\chromium\src\mojo\core\watch.cc:78
    #21 0x7ffc9c76aea8 in mojo::core::RequestContext::~RequestContext C:\src\chromium\src\mojo\core\request_context.cc:72
    #22 0x7ffc9c749a44 in mojo::core::NodeChannel::OnChannelMessage C:\src\chromium\src\mojo\core\node_channel.cc:700
    #23 0x7ffc9c715205 in mojo::core::Channel::OnReadComplete C:\src\chromium\src\mojo\core\channel.cc:733
    #24 0x7ffc9c7188fa in mojo::core::`anonymous namespace'::ChannelWin::OnIOCompleted C:\src\chromium\src\mojo\core\channel_win.cc:232
    #25 0x7ffc9d6d68cf in base::MessagePumpForIO::WaitForIOCompletion C:\src\chromium\src\base\message_loop\message_pump_win.cc:570
    #26 0x7ffc9d6d5cd1 in base::MessagePumpForIO::DoRunLoop C:\src\chromium\src\base\message_loop\message_pump_win.cc:516
    #27 0x7ffc9d6d107f in base::MessagePumpWin::Run C:\src\chromium\src\base\message_loop\message_pump_win.cc:52
    #28 0x7ffca1441b4c in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run C:\src\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:353
    #29 0x7ffc9d74a9a4 in base::RunLoop::Run C:\src\chromium\src\base\run_loop.cc:102
    #30 0x7ffc9b5503e2 in content::BrowserProcessSubThread::IOThreadRun C:\src\chromium\src\content\browser\browser_process_sub_thread.cc:174
    #31 0x7ffc9d7ad646 in base::Thread::ThreadMain C:\src\chromium\src\base\threading\thread.cc:333
    #32 0x7ffc9d7a87f8 in base::`anonymous namespace'::ThreadFunc C:\src\chromium\src\base\threading\platform_thread_win.cc:97
    #33 0x7ff61c66a4e8 in __asan::AsanThread::ThreadStart C:\b\rr\tmpxtc1q6\w\src\third_party\llvm\projects\compiler-rt\lib\asan\asan_thread.cc:262
    #34 0x7ffce8567e93 in BaseThreadInitThunk+0x13 (C:\Windows\System32\KERNEL32.DLL+0x180017e93)
    #35 0x7ffce889a250 in RtlUserThreadStart+0x20 (C:\Windows\SYSTEM32\ntdll.dll+0x18006a250)

Thread T9 created by T0 here:
    #0 0x7ff61c669310 in __asan_wrap_CreateThread C:\b\rr\tmpxtc1q6\w\src\third_party\llvm\projects\compiler-rt\lib\asan\asan_win.cc:146
    #1 0x7ffc9d7a7cb8 in base::`anonymous namespace'::CreateThreadInternal C:\src\chromium\src\base\threading\platform_thread_win.cc:136
    #2 0x7ffc9d7ac8ad in base::Thread::StartWithOptions C:\src\chromium\src\base\threading\thread.cc:112
    #3 0x7ffc9b54fc64 in content::BrowserProcessSubThread::CreateIOThread C:\src\chromium\src\content\browser\browser_process_sub_thread.cc:90
    #4 0x7ffc9d4b7ea0 in content::ContentMainRunnerImpl::RunServiceManager C:\src\chromium\src\content\app\content_main_runner_impl.cc:934
    #5 0x7ffc9d4b77ba in content::ContentMainRunnerImpl::Run C:\src\chromium\src\content\app\content_main_runner_impl.cc:868
    #6 0x7ffc9d4e7f05 in service_manager::Main C:\src\chromium\src\services\service_manager\embedder\main.cc:461
    #7 0x7ffc9d4b5f78 in content::ContentMain C:\src\chromium\src\content\app\content_main.cc:19
    #8 0x7ffc9993141c in ChromeMain C:\src\chromium\src\chrome\app\chrome_main.cc:102
    #9 0x7ff61c637ceb in MainDllLoader::Launch C:\src\chromium\src\chrome\app\main_dll_loader_win.cc:201
    #10 0x7ff61c632342 in main C:\src\chromium\src\chrome\app\chrome_exe_main_win.cc:229
    #11 0x7ff61c9a5b53 in __scrt_common_main_seh d:\agent\_work\3\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
    #12 0x7ffce8567e93 in BaseThreadInitThunk+0x13 (C:\Windows\System32\KERNEL32.DLL+0x180017e93)
    #13 0x7ffce889a250 in RtlUserThreadStart+0x20 (C:\Windows\SYSTEM32\ntdll.dll+0x18006a250)

==1936==ABORTING