[.] Sanitizer coverage enabled. Counter map size: 12070100, Cmp map size: 262144
Note: Google Test filter = PopupViewViewsTest.SetSelectedCellSurvivesReentrantOnSuggestionsChanged
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from PopupViewViewsTest
[ RUN      ] PopupViewViewsTest.SetSelectedCellSurvivesReentrantOnSuggestionsChanged

(unit_tests:10981): dbind-WARNING **: 10:04:55.045: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory
=================================================================
==10981==ERROR: AddressSanitizer: heap-use-after-free on address 0x76b8808a8dc0 at pc 0x60010a986bc4 bp 0x7fffe4d47bf0 sp 0x7fffe4d47be8
READ of size 8 at 0x76b8808a8dc0 thread T0
    #0 0x60010a986bc3 in autofill::PopupRowView::SetSelectedCell(std::__Cr::optional<autofill::PopupRowView::CellType>) base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:1012:48
    #1 0x60010a98f27a in autofill::PopupRowWithButtonView::SetSelectedCell(std::__Cr::optional<autofill::PopupRowView::CellType>) chrome/browser/ui/views/autofill/popup/popup_row_with_button_view.cc:251:27
    #2 0x60010a9a4b06 in autofill::PopupViewViews::SetSelectedCell(std::__Cr::optional<std::__Cr::pair<unsigned long, autofill::PopupRowView::CellType>>, autofill::PopupCellSelectionSource, base::StrongAlias<autofill::AutoselectFirstSuggestionTag, bool>, bool) chrome/browser/ui/views/autofill/popup/popup_view_views.cc:933:22
    #3 0x60010a9a42b4 in autofill::PopupViewViews::SetSelectedCell(std::__Cr::optional<std::__Cr::pair<unsigned long, autofill::PopupRowView::CellType>>, autofill::PopupCellSelectionSource) chrome/browser/ui/views/autofill/popup/popup_view_views.cc:371:3
    #4 0x60010a9a2848 in autofill::PopupViewViews::SelectNextRow(autofill::PopupCellSelectionSource) chrome/browser/ui/views/autofill/popup/popup_view_views.cc:695:3
    #5 0x60010a9a5768 in autofill::PopupViewViews::HandleKeyPressEvent(input::NativeWebKeyboardEvent const&) chrome/browser/ui/views/autofill/popup/popup_view_views.cc
    #6 0x6000cb8e8d8b in autofill::(anonymous namespace)::PopupViewViewsTest::SimulateKeyPress(int, autofill::PopupViewViews&, bool, bool) chrome/browser/ui/views/autofill/popup/popup_view_views_test_api.h:42:19
    #7 0x6000cb8e83fc in autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody() chrome/browser/ui/views/autofill/popup/popup_view_views_unittest.cc:353:12
    #8 0x6000e9cc7e4b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #9 0x6000e9ccafb7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #10 0x6000e9ccd0b3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #11 0x6000e9cfcc7a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #12 0x6000e9cfb74e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #13 0x6000f059a13c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #14 0x6000f1cca4d5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #15 0x6000f0509361 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), content::UnitTestTestSuite*>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), base::internal::UnretainedWrapper<content::UnitTestTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #16 0x6000f05acf6b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #17 0x6000f05ac88b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #18 0x6000f0508c53 in main chrome/test/base/run_all_unittests.cc:78:10
    #19 0x79288282b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x76b8808a8dc0 is located 832 bytes inside of 968-byte region [0x76b8808a8a80,0x76b8808a8e48)
freed by thread T0 here:
    #0 0x6000c5100891 in operator delete(void*) (/chromium/chromium/src/out/asan/unit_tests+0x18b45891) (BuildId: 6ff66c495f7623ee)
    #1 0x6000f53db82b in views::View::~View() ui/views/view.cc:285:9
    #2 0x6000f537a730 in views::BoxLayoutView::~BoxLayoutView() ui/views/layout/box_layout_view.h:27:37
    #3 0x6000f53db82b in views::View::~View() ui/views/view.cc:285:9
    #4 0x6000f5272660 in views::ScrollView::Viewport::~Viewport() ui/views/controls/scroll_view.cc:163:32
    #5 0x6000f53db82b in views::View::~View() ui/views/view.cc:285:9
    #6 0x6000f525fda3 in views::ScrollView::~ScrollView() ui/views/controls/scroll_view.cc:363:25
    #7 0x6000f53e064d in views::View::DoRemoveChildView(views::View*, bool, bool, views::View*) third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #8 0x6000f53e094d in views::View::RemoveAllChildViews() ui/views/view.cc:358:5
    #9 0x60010a9aa60e in autofill::PopupViewViews::CreateSuggestionViews() chrome/browser/ui/views/autofill/popup/popup_view_views.cc:1132:27
    #10 0x60010a9a8f56 in autofill::PopupViewViews::OnSuggestionsChanged(bool) chrome/browser/ui/views/autofill/popup/popup_view_views.cc:786:3
    #11 0x6000cb8e88db in base::internal::BindLambdaForTestingHelper<autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody()::$_0, void (ui::AXPlatformNodeDelegate const*, ax::mojom::Event)>::Run(autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody()::$_0 const&, ui::AXPlatformNodeDelegate const*, ax::mojom::Event) chrome/browser/ui/views/autofill/popup/popup_view_views_unittest.cc:294:45
    #12 0x6000cb8e8aca in base::internal::Invoker<base::internal::FunctorTraits<void (* const&)(autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody()::$_0 const&, ui::AXPlatformNodeDelegate const*, ax::mojom::Event), autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody()::$_0 const&>, base::internal::BindState<false, true, false, void (*)(autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody()::$_0 const&, ui::AXPlatformNodeDelegate const*, ax::mojom::Event), autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody()::$_0>, void (ui::AXPlatformNodeDelegate const*, ax::mojom::Event)>::Run(base::internal::BindStateBase*, ui::AXPlatformNodeDelegate const*, ax::mojom::Event) base/functional/bind_internal.h:673:12
    #13 0x6000f501fa91 in base::RepeatingCallback<void (ui::AXPlatformNodeDelegate const*, ax::mojom::Event)>::Run(ui::AXPlatformNodeDelegate const*, ax::mojom::Event) const & base/functional/callback.h:346:12
    #14 0x6000f5585525 in views::ViewAXPlatformNodeDelegate::FireNativeEvent(ax::mojom::Event) ui/views/accessibility/view_ax_platform_node_delegate.cc:281:36
    #15 0x6000f50511ec in views::ViewAccessibility::NotifyEvent(ax::mojom::Event, bool) ui/views/accessibility/view_accessibility.cc:263:5
    #16 0x60010a9682b7 in autofill::PopupBaseView::NotifyAXSelection(views::View&) chrome/browser/ui/views/autofill/popup/popup_base_view.cc:372:5
    #17 0x60010a9868ce in autofill::PopupRowView::SetSelectedCell(std::__Cr::optional<autofill::PopupRowView::CellType>) chrome/browser/ui/views/autofill/popup/popup_row_view.cc:388:32
    #18 0x60010a98f27a in autofill::PopupRowWithButtonView::SetSelectedCell(std::__Cr::optional<autofill::PopupRowView::CellType>) chrome/browser/ui/views/autofill/popup/popup_row_with_button_view.cc:251:27
    #19 0x60010a9a4b06 in autofill::PopupViewViews::SetSelectedCell(std::__Cr::optional<std::__Cr::pair<unsigned long, autofill::PopupRowView::CellType>>, autofill::PopupCellSelectionSource, base::StrongAlias<autofill::AutoselectFirstSuggestionTag, bool>, bool) chrome/browser/ui/views/autofill/popup/popup_view_views.cc:933:22
    #20 0x60010a9a42b4 in autofill::PopupViewViews::SetSelectedCell(std::__Cr::optional<std::__Cr::pair<unsigned long, autofill::PopupRowView::CellType>>, autofill::PopupCellSelectionSource) chrome/browser/ui/views/autofill/popup/popup_view_views.cc:371:3
    #21 0x60010a9a2848 in autofill::PopupViewViews::SelectNextRow(autofill::PopupCellSelectionSource) chrome/browser/ui/views/autofill/popup/popup_view_views.cc:695:3
    #22 0x60010a9a5768 in autofill::PopupViewViews::HandleKeyPressEvent(input::NativeWebKeyboardEvent const&) chrome/browser/ui/views/autofill/popup/popup_view_views.cc
    #23 0x6000cb8e8d8b in autofill::(anonymous namespace)::PopupViewViewsTest::SimulateKeyPress(int, autofill::PopupViewViews&, bool, bool) chrome/browser/ui/views/autofill/popup/popup_view_views_test_api.h:42:19
    #24 0x6000cb8e83fc in autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody() chrome/browser/ui/views/autofill/popup/popup_view_views_unittest.cc:353:12
    #25 0x6000e9cc7e4b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #26 0x6000e9ccafb7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #27 0x6000e9ccd0b3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #28 0x6000e9cfcc7a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #29 0x6000e9cfb74e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc

previously allocated by thread T0 here:
    #0 0x6000c5100051 in operator new(unsigned long) (/chromium/chromium/src/out/asan/unit_tests+0x18b45051) (BuildId: 6ff66c495f7623ee)
    #1 0x60010a97be94 in autofill::CreatePopupRowView(base::WeakPtr<autofill::AutofillPopupController>, autofill::PopupRowView::AccessibilitySelectionDelegate&, autofill::PopupRowView::SelectionDelegate&, int, std::__Cr::optional<autofill::AutofillPopupController::SuggestionFilterMatch>, autofill::PasswordFaviconLoader*) ui/views/view.h:304:3
    #2 0x60010a9ab611 in autofill::PopupViewViews::CreateSuggestionViews() chrome/browser/ui/views/autofill/popup/popup_view_views.cc:1195:44
    #3 0x60010a99f567 in autofill::PopupViewViews::InitViews() chrome/browser/ui/views/autofill/popup/popup_view_views.cc:1119:3
    #4 0x60010a9a00c2 in autofill::PopupViewViews::PopupViewViews(base::WeakPtr<autofill::AutofillPopupController>, std::__Cr::optional<autofill::AutofillPopupView::SearchBarConfig const>, std::__Cr::optional<autofill::AutofillPopupView::TabbedPaneConfig const>) chrome/browser/ui/views/autofill/popup/popup_view_views.cc:248:3
    #5 0x6000cb8ddfcc in autofill::(anonymous namespace)::PopupViewViewsTest::CreateView(std::__Cr::optional<views::Widget::InitParams>, std::__Cr::optional<autofill::AutofillPopupView::SearchBarConfig>, std::__Cr::optional<autofill::AutofillPopupView::TabbedPaneConfig>) chrome/browser/ui/views/autofill/popup/popup_view_views_unittest.cc:147:25
    #6 0x6000cb8dd80c in autofill::(anonymous namespace)::PopupViewViewsTest::CreateAndShowView(std::__Cr::optional<views::Widget::InitParams>, std::__Cr::optional<autofill::AutofillPopupView::SearchBarConfig>, std::__Cr::optional<autofill::AutofillPopupView::TabbedPaneConfig>) chrome/browser/ui/views/autofill/popup/popup_view_views_unittest.cc:274:5
    #7 0x6000cb8dd3b8 in autofill::(anonymous namespace)::PopupViewViewsTest::CreateAndShowView(std::__Cr::vector<autofill::SuggestionType, std::__Cr::allocator<autofill::SuggestionType>> const&, std::__Cr::optional<views::Widget::InitParams>, std::__Cr::optional<autofill::AutofillPopupView::SearchBarConfig>, std::__Cr::optional<autofill::AutofillPopupView::TabbedPaneConfig>) chrome/browser/ui/views/autofill/popup/popup_view_views_unittest.cc:287:5
    #8 0x6000cb8e820f in autofill::(anonymous namespace)::PopupViewViewsTest_SetSelectedCellSurvivesReentrantOnSuggestionsChanged_Test::TestBody() chrome/browser/ui/views/autofill/popup/popup_view_views_unittest.cc:490:3
    #9 0x6000e9cc7e4b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #10 0x6000e9ccafb7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #11 0x6000e9ccd0b3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #12 0x6000e9cfcc7a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #13 0x6000e9cfb74e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #14 0x6000f059a13c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #15 0x6000f1cca4d5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #16 0x6000f0509361 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), content::UnitTestTestSuite*>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), base::internal::UnretainedWrapper<content::UnitTestTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #17 0x6000f05acf6b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #18 0x6000f05ac88b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #19 0x6000f0508c53 in main chrome/test/base/run_all_unittests.cc:78:10
    #20 0x79288282b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

Shadow bytes around the buggy address:
  0x76b8808a8b00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x76b8808a8b80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x76b8808a8c00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x76b8808a8c80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x76b8808a8d00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x76b8808a8d80: fd fd fd fd fd fd fd fd[fd]fd fd fd fd fd fd fd
  0x76b8808a8e00: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa
  0x76b8808a8e80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x76b8808a8f00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x76b8808a8f80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x76b8808a9000: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
E0000 00:00:1779876299.084797   10981 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==10981==ADDITIONAL INFO
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779876299.084945   10981 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==10981==Note: Please include this section with the ASan report.
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779876299.084994   10981 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace:
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779876299.085023   10981 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779876299.085058   10981 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==10981==END OF ADDITIONAL INFO
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779876299.085093   10981 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==10981==ABORTING
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31