[.] Sanitizer coverage enabled. Counter map size: 12318210, Cmp map size: 262144
Note: Google Test filter = AutofillProgressDialogControllerImplUAFTest.*
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from AutofillProgressDialogControllerImplUAFTest
[ RUN      ] AutofillProgressDialogControllerImplUAFTest.OnDismissedAfterCallbackDestroysController
=================================================================
==6796==ERROR: AddressSanitizer: heap-use-after-free on address 0x74db380c48d0 at pc 0x56b169255622 bp 0x7fff4cc24690 sp 0x7fff4cc24688
READ of size 4 at 0x74db380c48d0 thread T0
    #0 0x56b169255621 in autofill::AutofillProgressDialogControllerImpl::OnDismissed(bool) components/autofill/core/browser/ui/payments/autofill_progress_dialog_controller_impl.cc:81:28
    #1 0x56b1692551d3 in autofill::AutofillProgressDialogControllerImpl::DismissDialog(bool, base::OnceCallback<void ()>) components/autofill/core/browser/ui/payments/autofill_progress_dialog_controller_impl.cc:64:35
    #2 0x56b135caba0e in autofill::AutofillProgressDialogControllerImplUAFTest_OnDismissedAfterCallbackDestroysController_Test::TestBody() components/autofill/core/browser/ui/payments/autofill_progress_dialog_controller_impl_unittest.cc:137:19
    #3 0x56b151de656b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #4 0x56b151de96d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #5 0x56b151deb7d3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #6 0x56b151e1b39a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #7 0x56b151e19e6e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #8 0x56b167a32b8c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #9 0x56b174d150f5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #10 0x56b159e4cdc0 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), std::__Cr::unique_ptr<content::UnitTestTestSuite, std::__Cr::default_delete<content::UnitTestTestSuite>>&&>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), std::__Cr::unique_ptr<content::UnitTestTestSuite, std::__Cr::default_delete<content::UnitTestTestSuite>>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #11 0x56b167a4caab in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #12 0x56b167a4c3cb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #13 0x787b39a25249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x74db380c48d0 is located 16 bytes inside of 56-byte region [0x74db380c48c0,0x74db380c48f8)
freed by thread T0 here:
    #0 0x56b131f74c56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x17856c56) (BuildId: fc5ded31e6a72a41)
    #1 0x56b135cac6d8 in base::internal::Invoker<base::internal::FunctorTraits<autofill::AutofillProgressDialogControllerImplUAFTest_OnDismissedAfterCallbackDestroysController_Test::TestBody()::$_1&&, std::__Cr::unique_ptr<autofill::AutofillProgressDialogControllerImpl, std::__Cr::default_delete<autofill::AutofillProgressDialogControllerImpl>>*>, base::internal::BindState<false, false, false, autofill::AutofillProgressDialogControllerImplUAFTest_OnDismissedAfterCallbackDestroysController_Test::TestBody()::$_1, base::internal::UnretainedWrapper<std::__Cr::unique_ptr<autofill::AutofillProgressDialogControllerImpl, std::__Cr::default_delete<autofill::AutofillProgressDialogControllerImpl>>, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #2 0x56b16925553e in autofill::AutofillProgressDialogControllerImpl::OnDismissed(bool) base/functional/callback.h:155:12
    #3 0x56b1692551d3 in autofill::AutofillProgressDialogControllerImpl::DismissDialog(bool, base::OnceCallback<void ()>) components/autofill/core/browser/ui/payments/autofill_progress_dialog_controller_impl.cc:64:35
    #4 0x56b135caba0e in autofill::AutofillProgressDialogControllerImplUAFTest_OnDismissedAfterCallbackDestroysController_Test::TestBody() components/autofill/core/browser/ui/payments/autofill_progress_dialog_controller_impl_unittest.cc:137:19
    #5 0x56b151de656b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #6 0x56b151de96d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #7 0x56b151deb7d3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #8 0x56b151e1b39a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #9 0x56b151e19e6e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #10 0x56b167a32b8c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #11 0x56b174d150f5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #12 0x56b159e4cdc0 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), std::__Cr::unique_ptr<content::UnitTestTestSuite, std::__Cr::default_delete<content::UnitTestTestSuite>>&&>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), std::__Cr::unique_ptr<content::UnitTestTestSuite, std::__Cr::default_delete<content::UnitTestTestSuite>>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #13 0x56b167a4caab in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #14 0x56b167a4c3cb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #15 0x787b39a25249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

previously allocated by thread T0 here:
    #0 0x56b131f74051 in operator new(unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x17856051) (BuildId: fc5ded31e6a72a41)
    #1 0x56b135cab7c0 in autofill::AutofillProgressDialogControllerImplUAFTest_OnDismissedAfterCallbackDestroysController_Test::TestBody() third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x56b151de656b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x56b151de96d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x56b151deb7d3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x56b151e1b39a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x56b151e19e6e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x56b167a32b8c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x56b174d150f5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23
    #9 0x56b159e4cdc0 in base::internal::Invoker<base::internal::FunctorTraits<int (content::UnitTestTestSuite::*&&)(), std::__Cr::unique_ptr<content::UnitTestTestSuite, std::__Cr::default_delete<content::UnitTestTestSuite>>&&>, base::internal::BindState<true, true, false, int (content::UnitTestTestSuite::*)(), std::__Cr::unique_ptr<content::UnitTestTestSuite, std::__Cr::default_delete<content::UnitTestTestSuite>>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #10 0x56b167a4caab in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #11 0x56b167a4c3cb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #12 0x787b39a25249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

Shadow bytes around the buggy address:
  0x74db380c4600: fa fa fa fa 00 00 00 00 00 00 00 05 fa fa fa fa
  0x74db380c4680: fd fd fd fd fd fd fd fa fa fa fa fa fd fd fd fd
  0x74db380c4700: fd fd fd fa fa fa fa fa fd fd fd fd fd fd fd fa
  0x74db380c4780: fa fa fa fa fd fd fd fd fd fd fd fd fa fa fa fa
  0x74db380c4800: fd fd fd fd fd fd fd fd fa fa fa fa 00 00 00 00
=>0x74db380c4880: 00 00 00 05 fa fa fa fa fd fd[fd]fd fd fd fd fa
  0x74db380c4900: fa fa fa fa 00 00 00 00 00 00 00 fa fa fa fa fa
  0x74db380c4980: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x74db380c4a00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x74db380c4a80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x74db380c4b00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
E0000 00:00:1779844304.841174    6796 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==6796==ADDITIONAL INFO
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779844304.841293    6796 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==6796==Note: Please include this section with the ASan report.
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779844304.841324    6796 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace:
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779844304.841349    6796 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779844304.841373    6796 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==6796==END OF ADDITIONAL INFO
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779844304.841400    6796 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==6796==ABORTING
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31