Note: Google Test filter = SelectionWithPointers/TabStripModelTest.ReentrantCloseDuringMoveUAF/*
[==========] Running 2 tests from 1 test suite.
[----------] Global test environment set-up.
[----------] 2 tests from SelectionWithPointers/TabStripModelTest
[ RUN      ] SelectionWithPointers/TabStripModelTest.ReentrantCloseDuringMoveUAF/Disabled
Gtk-Message: 10:45:51.637: Failed to load module "canberra-gtk-module"
Gtk-Message: 10:45:51.639: Failed to load module "canberra-gtk-module"
[12891:12916:ERROR:net/disk_cache/simple/simple_backend_impl.cc:81] Failed to create directory: /usr/local/google/home/vmiura/.cache/chromium/test_scoped_temp_dirsQArEy/Code Cache/js
[12891:12914:ERROR:net/disk_cache/simple/simple_backend_impl.cc:81] Failed to create directory: /usr/local/google/home/vmiura/.cache/chromium/test_scoped_temp_dirsQArEy/Code Cache/wasm
[12891:12914:ERROR:net/disk_cache/simple/simple_backend_impl.cc:81] Failed to create directory: /usr/local/google/home/vmiura/.cache/chromium/test_scoped_temp_dirsQArEy/Code Cache/wasm
[12891:12914:ERROR:net/disk_cache/simple/simple_backend_impl.cc:749] Simple Cache Backend: wrong file structure on disk: 1 path: /usr/local/google/home/vmiura/.cache/chromium/test_scoped_temp_dirsQArEy/Code Cache/wasm
[12891:12916:ERROR:net/disk_cache/simple/simple_backend_impl.cc:81] Failed to create directory: /usr/local/google/home/vmiura/.cache/chromium/test_scoped_temp_dirsQArEy/Code Cache/js
[12891:12916:ERROR:net/disk_cache/simple/simple_backend_impl.cc:749] Simple Cache Backend: wrong file structure on disk: 1 path: /usr/local/google/home/vmiura/.cache/chromium/test_scoped_temp_dirsQArEy/Code Cache/js
[12891:12919:ERROR:net/disk_cache/disk_cache.cc:284] Unable to create cache
[12891:12919:ERROR:net/disk_cache/disk_cache.cc:284] Unable to create cache
=================================================================
==12891==ERROR: AddressSanitizer: heap-use-after-free on address 0x7d5ef65f9880 at pc 0x55720a2cd5fe bp 0x7ffc7492e190 sp 0x7ffc7492e188
READ of size 8 at 0x7d5ef65f9880 thread T0
    #0 0x55720a2cd5fd in TabStripModel::MoveTabToIndexImpl(int, int, std::__Cr::optional<tab_groups::TabGroupId>, bool, bool) chrome/browser/ui/tabs/tab_strip_model.cc:4650:36
    #1 0x55720a2cac57 in TabStripModel::MoveWebContentsAt(int, int, bool) chrome/browser/ui/tabs/tab_strip_model.cc:1064:3
    #2 0x5571f3172855 in TabStripModelTest_ReentrantCloseDuringMoveUAF_Test::TestBody() chrome/browser/ui/tabs/tab_strip_model_unittest.cc:7325:15
    #3 0x55720bb35f1b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #4 0x55720bb390d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #5 0x55720bb3b1e3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #6 0x55720bb6b03a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #7 0x55720bb69a9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #8 0x55720e76c67c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #9 0x55720fd235e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #10 0x55720e6ddf51 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), content::UnitTestTestSuite*>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), base::internal::UnretainedWrapper<content::UnitTestTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #11 0x55720e77f40b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #12 0x55720e77ed2b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #13 0x55720e6dd847 in main chrome/test/base/run_all_unittests.cc:78:10
    #14 0x7fdef862b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x7d5ef65f9880 is located 0 bytes inside of 864-byte region [0x7d5ef65f9880,0x7d5ef65f9be0)
freed by thread T0 here:
    #0 0x5571e4b59002 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/unit_tests+0x18429002) (BuildId: fb01fd5a327e2c9b)
    #1 0x55720a2beff6 in TabStripModel::SendDetachWebContentsNotifications(TabStripModel::DetachNotifications*) gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #2 0x55720a2d6241 in TabStripModel::CloseTabs(base::span<content::WebContents* const, 18446744073709551615ul, content::WebContents* const*>, unsigned int) chrome/browser/ui/tabs/tab_strip_model.cc:3674:5
    #3 0x55720a2d7fd9 in TabStripModel::CloseWebContentsAt(int, unsigned int) chrome/browser/ui/tabs/tab_strip_model.cc:1319:3
    #4 0x55720a2b9b7e in TabStripModel::OnChange(TabStripModelChange const&, TabStripSelectionChange const&) chrome/browser/ui/tabs/tab_strip_model.cc:709:14
    #5 0x55720a309c5a in TabStripModel::SendMoveNotificationForTab(int, int, tabs::TabInterface*, TabStripSelectionChange const&) chrome/browser/ui/tabs/tab_strip_model.cc:4821:3
    #6 0x55720a2cc8ef in TabStripModel::MoveTabToIndexImpl(int, int, std::__Cr::optional<tab_groups::TabGroupId>, bool, bool) chrome/browser/ui/tabs/tab_strip_model.cc:4641:5
    #7 0x55720a2cac57 in TabStripModel::MoveWebContentsAt(int, int, bool) chrome/browser/ui/tabs/tab_strip_model.cc:1064:3
    #8 0x5571f3172855 in TabStripModelTest_ReentrantCloseDuringMoveUAF_Test::TestBody() chrome/browser/ui/tabs/tab_strip_model_unittest.cc:7325:15
    #9 0x55720bb35f1b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #10 0x55720bb390d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #11 0x55720bb3b1e3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #12 0x55720bb6b03a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #13 0x55720bb69a9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #14 0x55720e76c67c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #15 0x55720fd235e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #16 0x55720e6ddf51 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), content::UnitTestTestSuite*>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), base::internal::UnretainedWrapper<content::UnitTestTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #17 0x55720e77f40b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #18 0x55720e77ed2b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #19 0x55720e6dd847 in main chrome/test/base/run_all_unittests.cc:78:10
    #20 0x7fdef862b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

previously allocated by thread T0 here:
    #0 0x5571e4b583fd in operator new(unsigned long) (/chromium/chromium/src/out/asan/unit_tests+0x184283fd) (BuildId: fb01fd5a327e2c9b)
    #1 0x55720a2b77b7 in TabStripModel::AppendWebContents(std::__Cr::unique_ptr<content::WebContents, std::__Cr::default_delete<content::WebContents>>, bool) gen/third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x5571f31724c3 in TabStripModelTest_ReentrantCloseDuringMoveUAF_Test::TestBody() chrome/browser/ui/tabs/tab_strip_model_unittest.cc:7314:15
    #3 0x55720bb35f1b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #4 0x55720bb390d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #5 0x55720bb3b1e3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #6 0x55720bb6b03a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #7 0x55720bb69a9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #8 0x55720e76c67c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #9 0x55720fd235e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #10 0x55720e6ddf51 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), content::UnitTestTestSuite*>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), base::internal::UnretainedWrapper<content::UnitTestTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #11 0x55720e77f40b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #12 0x55720e77ed2b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #13 0x55720e6dd847 in main chrome/test/base/run_all_unittests.cc:78:10
    #14 0x7fdef862b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

SUMMARY: AddressSanitizer: heap-use-after-free chrome/browser/ui/tabs/tab_strip_model.cc:4650:36 in TabStripModel::MoveTabToIndexImpl(int, int, std::__Cr::optional<tab_groups::TabGroupId>, bool, bool)
Shadow bytes around the buggy address:
  0x7d5ef65f9600: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7d5ef65f9680: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7d5ef65f9700: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7d5ef65f9780: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa
  0x7d5ef65f9800: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x7d5ef65f9880:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7d5ef65f9900: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7d5ef65f9980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7d5ef65f9a00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7d5ef65f9a80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7d5ef65f9b00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==12891==ADDITIONAL INFO

==12891==Note: Please include this section with the ASan report.
Task trace:


==12891==END OF ADDITIONAL INFO

==12891==ABORTING