[.] Sanitizer coverage enabled. Counter map size: 11880984, Cmp map size: 262144
Note: Google Test filter = MandatoryReauthBubbleControllerImplTest.OnBubbleClosedSurvivesWebContentsDestructionInAcceptCallback
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from MandatoryReauthBubbleControllerImplTest
[ RUN      ] MandatoryReauthBubbleControllerImplTest.OnBubbleClosedSurvivesWebContentsDestructionInAcceptCallback
[839:839:WARNING:ui/gfx/linux/gbm_support_x11.cc:48] dri3 extension not supported.
[839:839:WARNING:content/browser/renderer_host/render_frame_host_impl.cc:3965] Creating unbound remote associated interface provider
[839:868:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
=================================================================
==839==ERROR: AddressSanitizer: heap-use-after-free on address 0x708ad12c3d40 at pc 0x5db3748158a2 bp 0x7ffd754a18b0 sp 0x7ffd754a18a8
READ of size 8 at 0x708ad12c3d40 thread T0
    #0 0x5db3748158a1 in autofill::MandatoryReauthBubbleControllerImpl::OnBubbleClosed(autofill::PaymentsUiClosedReason) chrome/browser/ui/autofill/payments/mandatory_reauth_bubble_controller_impl.cc:229:3
    #1 0x5db35903fdcd in autofill::MandatoryReauthBubbleControllerImplTest_OnBubbleClosedSurvivesWebContentsDestructionInAcceptCallback_Test::TestBody() chrome/browser/ui/autofill/payments/mandatory_reauth_bubble_controller_impl_unittest.cc:175:9
    #2 0x5db373539ecb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x5db37353cf47 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x5db37353efc3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x5db37356e144 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x5db37356ccba in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x5db379a63e90 in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x5db37b147a55 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #9 0x5db3799d59a1 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), content::UnitTestTestSuite*>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), base::internal::UnretainedWrapper<content::UnitTestTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #10 0x5db379a75d3b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #11 0x5db379a7565b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #12 0x5db3799d52aa in main chrome/test/base/run_all_unittests.cc:78:10
    #13 0x73cad322b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x708ad12c3d40 is located 0 bytes inside of 128-byte region [0x708ad12c3d40,0x708ad12c3dc0)
freed by thread T0 here:
    #0 0x5db34f131012 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/unit_tests+0x1854d012) (BuildId: e5e93fdaf1830733)
    #1 0x5db36198008b in absl::container_internal::IterateOverFullSlots(absl::container_internal::CommonFields const&, unsigned long, absl::FunctionRef<void (absl::container_internal::ctrl_t const*, void*)>) third_party/abseil-cpp/absl/functional/function_ref.h:165:12
    #2 0x5db37ddf96e3 in absl::container_internal::raw_hash_set<absl::container_internal::FlatHashMapPolicy<void const*, std::__Cr::unique_ptr<base::SupportsUserData::Data, std::__Cr::default_delete<base::SupportsUserData::Data>>>>::destructor_impl() third_party/abseil-cpp/absl/container/internal/raw_hash_set.h:3213:7
    #3 0x5db37ddf8810 in base::SupportsUserData::~SupportsUserData() third_party/abseil-cpp/absl/container/internal/raw_hash_set.h:2485:5
    #4 0x5db36ed65a1f in content::WebContentsImpl::~WebContentsImpl() content/public/browser/web_contents.h:439:35
    #5 0x5db36ed69333 in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1366:37
    #6 0x5db37530a3fc in tabs::TabModel::~TabModel() gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #7 0x5db3753233f4 in TabStripModel::SendDetachWebContentsNotifications(TabStripModel::DetachNotifications*) gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #8 0x5db37531e33a in TabStripModel::DetachTabWithReasonAt(int, TabRemovedReason, tabs::TabInterface::DetachReason) chrome/browser/ui/tabs/tab_strip_model.cc:537:3
    #9 0x5db37531e755 in TabStripModel::DetachAndDeleteWebContentsAt(int) chrome/browser/ui/tabs/tab_strip_model.cc:467:3
    #10 0x5db359046623 in base::internal::Invoker<base::internal::FunctorTraits<autofill::MandatoryReauthBubbleControllerImplTest_OnBubbleClosedSurvivesWebContentsDestructionInAcceptCallback_Test::TestBody()::$_0&&, Browser*&&>, base::internal::BindState<false, false, false, autofill::MandatoryReauthBubbleControllerImplTest_OnBubbleClosedSurvivesWebContentsDestructionInAcceptCallback_Test::TestBody()::$_0, base::internal::UnretainedWrapper<Browser, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) chrome/browser/ui/autofill/payments/mandatory_reauth_bubble_controller_impl_unittest.cc:164:37
    #11 0x5db37481579b in autofill::MandatoryReauthBubbleControllerImpl::OnBubbleClosed(autofill::PaymentsUiClosedReason) base/functional/callback.h:155:12
    #12 0x5db35903fdcd in autofill::MandatoryReauthBubbleControllerImplTest_OnBubbleClosedSurvivesWebContentsDestructionInAcceptCallback_Test::TestBody() chrome/browser/ui/autofill/payments/mandatory_reauth_bubble_controller_impl_unittest.cc:175:9
    #13 0x5db373539ecb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #14 0x5db37353cf47 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #15 0x5db37353efc3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #16 0x5db37356e144 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #17 0x5db37356ccba in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #18 0x5db379a63e90 in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #19 0x5db37b147a55 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #20 0x5db3799d59a1 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), content::UnitTestTestSuite*>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), base::internal::UnretainedWrapper<content::UnitTestTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #21 0x5db379a75d3b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #22 0x5db379a7565b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #23 0x5db3799d52aa in main chrome/test/base/run_all_unittests.cc:78:10
    #24 0x73cad322b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

previously allocated by thread T0 here:
    #0 0x5db34f13040d in operator new(unsigned long) (/chromium/chromium/src/out/asan/unit_tests+0x1854c40d) (BuildId: e5e93fdaf1830733)
    #1 0x5db3590441d3 in autofill::MandatoryReauthBubbleControllerImplTest::SetUp() gen/third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x5db373539d61 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x5db37353cf47 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x5db37353efc3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x5db37356e144 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x5db37356ccba in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x5db379a63e90 in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x5db37b147a55 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #9 0x5db3799d59a1 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), content::UnitTestTestSuite*>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), base::internal::UnretainedWrapper<content::UnitTestTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #10 0x5db379a75d3b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #11 0x5db379a7565b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #12 0x5db3799d52aa in main chrome/test/base/run_all_unittests.cc:78:10
    #13 0x73cad322b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

Shadow bytes around the buggy address:
  0x708ad12c3a80: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
  0x708ad12c3b00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x708ad12c3b80: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x708ad12c3c00: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
  0x708ad12c3c80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x708ad12c3d00: fa fa fa fa fa fa fa fa[fd]fd fd fd fd fd fd fd
  0x708ad12c3d80: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
  0x708ad12c3e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x708ad12c3e80: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x708ad12c3f00: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
  0x708ad12c3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
E0000 00:00:1778834259.282510     839 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==839==ADDITIONAL INFO
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778834259.282600     839 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==839==Note: Please include this section with the ASan report.
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778834259.282636     839 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace:
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778834259.282665     839 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778834259.282700     839 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==839==END OF ADDITIONAL INFO
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778834259.282720     839 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==839==ABORTING
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31