[.] Sanitizer coverage enabled. Counter map size: 11717149, Cmp map size: 262144
Note: Google Test filter = WebAuthnCancelUAFTest.*
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from WebAuthnCancelUAFTest, where TypeParam = 
[ RUN      ] WebAuthnCancelUAFTest.CancelAfterErrorFreesControllerThenReadsModel
[.] Sanitizer coverage enabled. Counter map size: 11717149, Cmp map size: 262144
[.] Sanitizer coverage enabled. Counter map size: 11717149, Cmp map size: 262144
[11716:11733:0611/083137.335025:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11716:11733:0611/083137.392944:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11716:11733:0611/083137.393026:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11716:11733:0611/083137.393068:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11716:11733:0611/083137.393100:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11716:11733:0611/083137.473494:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11750:11750:0611/083137.500063:WARNING:media/gpu/vaapi/vaapi_wrapper.cc:1655] drmGetDevices2() has not found any devices
[11750:11750:0611/083137.510408:WARNING:sandbox/policy/linux/sandbox_linux.cc:405] InitializeSandbox() called with multiple threads in process gpu-process.
[11750:11750:0611/083137.518928:WARNING:ui/gfx/linux/gbm_support_x11.cc:48] dri3 extension not supported.

(browser_tests:11716): dbind-WARNING **: 08:31:37.526: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory
[11716:11733:0611/083137.557310:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11716:11733:0611/083137.557373:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[.] Sanitizer coverage enabled. Counter map size: 11717149, Cmp map size: 262144
[11716:11716:0611/083137.755381:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11716:11716:0611/083137.755495:WARNING:device/bluetooth/dbus/bluez_dbus_manager.cc:209] Floss manager service not available, cannot set Floss enable/disable.
[11716:11733:0611/083137.755545:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11716:11716:0611/083137.755569:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11716:11733:0611/083137.755655:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11716:11716:0611/083137.766520:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11716:11733:0611/083137.818431:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11716:11733:0611/083137.818523:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11716:11716:0611/083137.818607:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11716:11716:0611/083137.818705:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11716:11733:0611/083137.818822:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11716:11716:0611/083137.862006:WARNING:dbus/property.cc:94] Failed to connect to PropertiesChangedsignal.
[11716:11716:0611/083137.862304:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: 
[11716:11716:0611/083137.862320:WARNING:dbus/property.cc:174] GetAll request failed for: org.freedesktop.UPower.Device
[11716:11716:0611/083137.862349:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11716:11733:0611/083137.862480:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11716:11716:0611/083137.906942:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11716:11733:0611/083137.907081:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11716:11716:0611/083137.938216:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11716:11716:0611/083137.938248:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used.
[11716:11716:0611/083138.215892:ERROR:components/device_event_log/device_event_log_impl.cc:200] [08:31:38.215] FIDO: fido_device_authenticator.cc:1496 CTAP error response code 46 received from VirtualFidoDevice-93B5E5C79C5F34F18DF6114A805BFA812C74E11843FCEABAF0BCF185C3B5114B
[11716:11716:0611/083138.216225:ERROR:components/device_event_log/device_event_log_impl.cc:200] [08:31:38.216] FIDO: get_assertion_request_handler.cc:667 Failing assertion request due to status 2 from VirtualFidoDevice-93B5E5C79C5F34F18DF6114A805BFA812C74E11843FCEABAF0BCF185C3B5114B
=================================================================
==11716==ERROR: AddressSanitizer: heap-use-after-free on address 0x6eea679596b8 at pc 0x5a9abae278eb bp 0x7ffeaa7cd810 sp 0x7ffeaa7cd808
READ of size 8 at 0x6eea679596b8 thread T0 (browser_tests)
    #0 0x5a9abae278ea in AuthenticatorRequestDialogController::CancelAuthenticatorRequest() base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:1022:48
    #1 0x5a9abae5c4e2 in AuthenticatorRequestDialogModel::CancelAuthenticatorRequest() chrome/browser/webauthn/authenticator_request_dialog_model.cc:253:1
    #2 0x5a9a9a9a0bab in (anonymous namespace)::WebAuthnCancelUAFTest_CancelAfterErrorFreesControllerThenReadsModel_Test::RunTestOnMainThread() chrome/browser/webauthn/chrome_webauthn_browsertest.cc:2030:10
    #3 0x5a9ac2ae3525 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9
    #4 0x5a9ac2ae9461 in base::internal::Invoker<base::internal::FunctorTraits<void (content::BrowserTestBase::*&&)(), content::BrowserTestBase*>, base::internal::BindState<true, true, false, void (content::BrowserTestBase::*)(), base::internal::UnretainedWrapper<content::BrowserTestBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #5 0x5a9ab2dffbaa in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12
    #6 0x5a9ab2e0866c in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15
    #7 0x5a9ab2df6a18 in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28
    #8 0x5a9abac38ec3 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:698:10
    #9 0x5a9abac3cfa4 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1332:10
    #10 0x5a9abac3c433 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1163:12
    #11 0x5a9abac35b5b in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36
    #12 0x5a9abac3614c in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10
    #13 0x5a9ac2ae12f2 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34
    #14 0x5a9ac056b12b in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:559:20
    #15 0x5a9a9a9749c3 in (anonymous namespace)::WebAuthnBrowserTest::SetUp() chrome/browser/webauthn/chrome_webauthn_browsertest.cc:229:30
    #16 0x5a9ab838d351 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #17 0x5a9ab8390627 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #18 0x5a9ab8392723 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #19 0x5a9ab83c23da in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #20 0x5a9ab83c0eae in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #21 0x5a9ac0a8ee5c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #22 0x5a9add1c91a0 in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:101:22
    #23 0x5a9ac2cecbfe in content::LaunchTestsInternal(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:423:31
    #24 0x5a9ac2ced631 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:518:10
    #25 0x5a9add1c9bb1 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:360:10
    #26 0x5a9ac03bcffb in main chrome/test/base/browser_tests_main.cc:60:10
    #27 0x719a6942b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x6eea679596b8 is located 56 bytes inside of 512-byte region [0x6eea67959680,0x6eea67959880)
freed by thread T0 (browser_tests) here:
    #0 0x5a9a979d0d56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x18f1fd56) (BuildId: 838a56c48774d9e4)
    #1 0x5a9abae7664a in ChromeAuthenticatorRequestDelegate::~ChromeAuthenticatorRequestDelegate() third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #2 0x5a9abae767e3 in ChromeAuthenticatorRequestDelegate::~ChromeAuthenticatorRequestDelegate() chrome/browser/webauthn/chrome_authenticator_request_delegate.cc:287:75
    #3 0x5a9ab51972ba in content::AuthenticatorCommonImpl::RequestState::~RequestState() third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #4 0x5a9ab5155b9e in content::AuthenticatorCommonImpl::~AuthenticatorCommonImpl() third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #5 0x5a9ab51a0b02 in content::AuthenticatorImpl::~AuthenticatorImpl() third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #6 0x5a9ab40218f5 in content::DocumentAssociatedData::~DocumentAssociatedData() content/browser/renderer_host/document_associated_data.cc:70:14
    #7 0x5a9ab43c9b80 in content::RenderFrameHostImpl::~RenderFrameHostImpl() third_party/libc++/src/include/optional:404:15
    #8 0x5a9ab43d1333 in content::RenderFrameHostImpl::~RenderFrameHostImpl() content/browser/renderer_host/render_frame_host_impl.cc:2812:45
    #9 0x5a9ab4523d34 in content::RenderFrameHostManager::~RenderFrameHostManager() third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #10 0x5a9ab4055a38 in content::FrameTreeNode::~FrameTreeNode() content/browser/renderer_host/frame_tree_node.cc:312:1
    #11 0x5a9ab403b84f in content::FrameTree::~FrameTree() content/browser/renderer_host/frame_tree.cc:230:1
    #12 0x5a9ab4c7702c in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1523:1
    #13 0x5a9ab4c7af23 in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1394:37
    #14 0x5a9abb56d13c in tabs::TabModel::~TabModel() third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #15 0x5a9abb586734 in TabStripModel::SendDetachWebContentsNotifications(TabStripModel::DetachNotifications*) third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #16 0x5a9abb5816ea in TabStripModel::DetachTabWithReasonAt(int, TabRemovedReason, tabs::TabInterface::DetachReason) chrome/browser/ui/tabs/tab_strip_model.cc:538:3
    #17 0x5a9abb581b05 in TabStripModel::DetachAndDeleteWebContentsAt(int) chrome/browser/ui/tabs/tab_strip_model.cc:468:3
    #18 0x5a9a9a9a218f in (anonymous namespace)::WebAuthnCancelUAFTest::TabCloser::OnStepTransition() chrome/browser/webauthn/chrome_webauthn_browsertest.cc:1913:36
    #19 0x5a9abae5a370 in AuthenticatorRequestDialogModel::SetStep(AuthenticatorRequestDialogModel::Step) chrome/browser/webauthn/authenticator_request_dialog_model.cc:178:14
    #20 0x5a9abae276cc in AuthenticatorRequestDialogController::CancelAuthenticatorRequest() chrome/browser/webauthn/authenticator_request_dialog_controller.cc:1731:11
    #21 0x5a9abae5c4e2 in AuthenticatorRequestDialogModel::CancelAuthenticatorRequest() chrome/browser/webauthn/authenticator_request_dialog_model.cc:253:1
    #22 0x5a9a9a9a0bab in (anonymous namespace)::WebAuthnCancelUAFTest_CancelAfterErrorFreesControllerThenReadsModel_Test::RunTestOnMainThread() chrome/browser/webauthn/chrome_webauthn_browsertest.cc:2030:10
    #23 0x5a9ac2ae3525 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9
    #24 0x5a9ac2ae9461 in base::internal::Invoker<base::internal::FunctorTraits<void (content::BrowserTestBase::*&&)(), content::BrowserTestBase*>, base::internal::BindState<true, true, false, void (content::BrowserTestBase::*)(), base::internal::UnretainedWrapper<content::BrowserTestBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #25 0x5a9ab2dffbaa in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12
    #26 0x5a9ab2e0866c in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15
    #27 0x5a9ab2df6a18 in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28
    #28 0x5a9abac38ec3 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:698:10
    #29 0x5a9abac3cfa4 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1332:10

previously allocated by thread T0 (browser_tests) here:
    #0 0x5a9a979d0151 in operator new(unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x18f1f151) (BuildId: 838a56c48774d9e4)
    #1 0x5a9abae75eea in ChromeAuthenticatorRequestDelegate::ChromeAuthenticatorRequestDelegate(content::RenderFrameHost*) third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x5a9abae715af in AuthenticatorRequestScheduler::CreateRequestDelegate(content::RenderFrameHost*) third_party/libc++/src/include/__memory/unique_ptr.h:756:30
    #3 0x5a9ab5155d78 in content::AuthenticatorCommonImpl::MaybeCreateRequestDelegate() content/browser/webauth/authenticator_common_impl.cc:865:38
    #4 0x5a9ab5173374 in content::AuthenticatorCommonImpl::ContinueGetAssertionAfterRpIdCheck(base::StrongAlias<content::RequestKeyTag, unsigned long>, url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, bool, blink::mojom::AuthenticatorStatus) content/browser/webauth/authenticator_common_impl.cc:1714:34
    #5 0x5a9ab518e891 in void base::internal::DecayedFunctorTraits<void (content::AuthenticatorCommonImpl::*)(base::StrongAlias<content::RequestKeyTag, unsigned long>, url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, bool, blink::mojom::AuthenticatorStatus), base::WeakPtr<content::AuthenticatorCommonImpl>&&, base::StrongAlias<content::RequestKeyTag, unsigned long>&&, url::Origin&&, mojo::StructPtr<blink::mojom::GetCredentialOptions>&&, mojo::StructPtr<blink::mojom::PaymentOptions>&&, bool&&>::Invoke<void (content::AuthenticatorCommonImpl::*)(base::StrongAlias<content::RequestKeyTag, unsigned long>, url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, bool, blink::mojom::AuthenticatorStatus), base::WeakPtr<content::AuthenticatorCommonImpl> const&, base::StrongAlias<content::RequestKeyTag, unsigned long>, url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, bool, blink::mojom::AuthenticatorStatus>(void (content::AuthenticatorCommonImpl::*)(base::StrongAlias<content::RequestKeyTag, unsigned long>, url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, bool, blink::mojom::AuthenticatorStatus), base::WeakPtr<content::AuthenticatorCommonImpl> const&, base::StrongAlias<content::RequestKeyTag, unsigned long>&&, url::Origin&&, mojo::StructPtr<blink::mojom::GetCredentialOptions>&&, mojo::StructPtr<blink::mojom::PaymentOptions>&&, bool&&, blink::mojom::AuthenticatorStatus&&) base/functional/bind_internal.h:740:12
    #6 0x5a9ab518e5bb in base::internal::Invoker<base::internal::FunctorTraits<void (content::AuthenticatorCommonImpl::*&&)(base::StrongAlias<content::RequestKeyTag, unsigned long>, url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, bool, blink::mojom::AuthenticatorStatus), base::WeakPtr<content::AuthenticatorCommonImpl>&&, base::StrongAlias<content::RequestKeyTag, unsigned long>&&, url::Origin&&, mojo::StructPtr<blink::mojom::GetCredentialOptions>&&, mojo::StructPtr<blink::mojom::PaymentOptions>&&, bool&&>, base::internal::BindState<true, true, false, void (content::AuthenticatorCommonImpl::*)(base::StrongAlias<content::RequestKeyTag, unsigned long>, url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, bool, blink::mojom::AuthenticatorStatus), base::WeakPtr<content::AuthenticatorCommonImpl>, base::StrongAlias<content::RequestKeyTag, unsigned long>, url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, bool>, void (blink::mojom::AuthenticatorStatus)>::RunOnce(base::internal::BindStateBase*, blink::mojom::AuthenticatorStatus) base/functional/bind_internal.h:956:5
    #7 0x5a9ab4e2ecd5 in content::WebAuthRequestSecurityCheckerImpl::ValidateDomainAndRelyingPartyID(url::Origin const&, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, content::WebAuthRequestSecurityChecker::RequestType, std::__Cr::optional<url::Origin> const&, base::OnceCallback<void (blink::mojom::AuthenticatorStatus)>) base/functional/callback.h:155:12
    #8 0x5a9ab516e0d6 in content::AuthenticatorCommonImpl::GetCredential(url::Origin, mojo::StructPtr<blink::mojom::GetCredentialOptions>, mojo::StructPtr<blink::mojom::PaymentOptions>, base::OnceCallback<void (mojo::StructPtr<blink::mojom::GetCredentialResponse>)>) content/browser/webauth/authenticator_common_impl.cc:1580:26
    #9 0x5a9ab51a134f in content::AuthenticatorImpl::GetCredential(mojo::StructPtr<blink::mojom::GetCredentialOptions>, base::OnceCallback<void (mojo::StructPtr<blink::mojom::GetCredentialResponse>)>) content/browser/webauth/authenticator_impl.cc:79:31
    #10 0x5a9ac9b0a77e in blink::mojom::AuthenticatorStubDispatch::AcceptWithResponder(blink::mojom::Authenticator*, mojo::Message*, std::__Cr::unique_ptr<mojo::MessageReceiverWithStatus, std::__Cr::default_delete<mojo::MessageReceiverWithStatus>>) gen/third_party/blink/public/mojom/webauthn/authenticator.mojom.cc:3866:13
    #11 0x5a9ac590c7ab in mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:1036:56
    #12 0x5a9ac592a4d1 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:44:19
    #13 0x5a9ac5912b03 in mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:747:20
    #14 0x5a9ac593a1b8 in mojo::internal::MultiplexRouter::ProcessIncomingMessage(mojo::internal::MultiplexRouter::MessageWrapper*, mojo::internal::MultiplexRouter::ClientCallBehavior, base::SequencedTaskRunner*) mojo/public/cpp/bindings/lib/multiplex_router.cc:1223:42
    #15 0x5a9ac5938703 in mojo::internal::MultiplexRouter::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/multiplex_router.cc:809:7
    #16 0x5a9ac592a4d1 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:44:19
    #17 0x5a9ac5901f65 in mojo::Connector::DispatchMessage(mojo::ScopedHandleBase<mojo::MessageHandle>) mojo/public/cpp/bindings/lib/connector.cc:572:49
    #18 0x5a9ac59035ec in mojo::Connector::ReadAllAvailableMessages() mojo/public/cpp/bindings/lib/connector.cc:633:14
    #19 0x5a9ac5903049 in mojo::Connector::OnWatcherHandleReady(char const*, unsigned int) mojo/public/cpp/bindings/lib/connector.cc:453:3
    #20 0x5a9ac5904e94 in base::internal::Invoker<base::internal::FunctorTraits<void (mojo::Connector::* const&)(char const*, unsigned int), mojo::Connector*, char const* const&>, base::internal::BindState<true, true, false, void (mojo::Connector::*)(char const*, unsigned int), base::internal::UnretainedWrapper<mojo::Connector, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>, base::internal::UnretainedWrapper<char const, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void (unsigned int)>::Run(base::internal::BindStateBase*, unsigned int) base/functional/bind_internal.h:740:12
    #21 0x5a9aa377a1de in base::RepeatingCallback<void (unsigned int)>::Run(unsigned int) const & base/functional/callback.h:346:12
    #22 0x5a9aa3779f7a in base::internal::Invoker<base::internal::FunctorTraits<void (* const&)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback<void (unsigned int)> const&>, base::internal::BindState<false, true, false, void (*)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback<void (unsigned int)>>, void (unsigned int, mojo::HandleSignalsState const&)>::Run(base::internal::BindStateBase*, unsigned int, mojo::HandleSignalsState const&) base/functional/bind_internal.h:673:12
    #23 0x5a9ac2f1baa0 in base::RepeatingCallback<void (unsigned int, mojo::HandleSignalsState const&)>::Run(unsigned int, mojo::HandleSignalsState const&) const & base/functional/callback.h:346:12
    #24 0x5a9ac2f1b3c7 in mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&) mojo/public/cpp/system/simple_watcher.cc:286:14
    #25 0x5a9ac2f1c5a7 in base::internal::Invoker<base::internal::FunctorTraits<void (mojo::SimpleWatcher::*&&)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>&&, int&&, unsigned int&&, mojo::HandleSignalsState&&>, base::internal::BindState<true, true, false, void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #26 0x5a9ac07a4aa3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #27 0x5a9ac0814d22 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #28 0x5a9ac0813aca in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:345:40
    #29 0x5a9ac09ceb98 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46

Shadow bytes around the buggy address:
  0x6eea67959400: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6eea67959480: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6eea67959500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6eea67959580: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa
  0x6eea67959600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa f7 fa
=>0x6eea67959680: fd fd fd fd fd fd fd[fd]fd fd fd fd fd fd fd fd
  0x6eea67959700: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6eea67959780: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6eea67959800: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6eea67959880: fa fa fa fa fa fa fa fa fa fa fa fa fa fa f7 fa
  0x6eea67959900: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
E0000 00:00:1781166700.951182   11716 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==11716==ADDITIONAL INFO
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781166700.951268   11716 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==11716==Note: Please include this section with the ASan report.
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781166700.951306   11716 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace:
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781166700.951332   11716 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781166700.951448   11716 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
Command line: `out/asan/browser_tests --disable-gpu-process-for-dx12-info-collection --gtest_filter=WebAuthnCancelUAFTest.* --no-sandbox --single-process-tests --user-data-dir=/tmp/org.chromium.Chromium.scoped_dir.wWZQm6 --disable-auto-reload --use-mock-cert-verifier-for-testing --enable-experimental-web-platform-features --no-first-run --enable-logging=stderr --disable-default-apps --wm-window-animations-disabled --password-store=basic --disable-component-update --change-stack-guard-on-fork=disable --test-type=browser --disable-zero-browsers-open-for-tests --disable-updater-scheduler --ip-address-space-overrides=127.0.0.1:0=public,[::1]:0=public --use-fake-device-for-media-stream --browser-test --ipc-connection-timeout=60 --log-missing-unload-ack --dom-automation --log-gpu-control-list-decisions --disable-d3d11-warp --disable-backgrounding-occluded-windows --disable-ignore-duplicate-navs-for-testing --disable-gl-drawing-for-tests --override-use-software-gl-for-tests --force-color-profile=srgb --enable-features=*TestBlinkFeatureDefault,TestFeatureForBrowserTest1 --disable-features=ExtensionDisableUnsupportedDeveloper,PreconnectToSearch,RestartNetworkServiceUnsandboxedForFailedLaunch,SessionRestoreInfobar,TestFeatureForBrowserTest2 --disable-gpu-process-for-dx12-info-collection --disable-platform-accessibility-integration --ozone-platform=x11 --flag-switches-begin --flag-switches-end about:blank`

=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781166700.951498   11716 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
MiraclePtr Status: NOT PROTECTED
No raw_ptr<T> access to this region was detected prior to this crash.
This crash is still exploitable with MiraclePtr.
Refer to https://chromium.googlesource.com/chromium/src/+/main/base/memory/raw_ptr.md for details.
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781166700.951526   11716 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==11716==END OF ADDITIONAL INFO
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781166700.951548   11716 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==11716==ABORTING
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

[11796:11805:0100/000000.033132:ERROR:gpu/ipc/client/command_buffer_proxy_impl.cc:285] ContextResult::kTransientFailure: Failed to send GpuControl.CreateCommandBuffer.