[.] Sanitizer coverage enabled. Counter map size: 11727350, Cmp map size: 262144 Note: Google Test filter = HistoryClustersHandlerPopupUafBrowserTest.UseAfterFreeOnPopupToTabConversion [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from HistoryClustersHandlerPopupUafBrowserTest, where TypeParam = [ RUN ] HistoryClustersHandlerPopupUafBrowserTest.UseAfterFreeOnPopupToTabConversion [.] Sanitizer coverage enabled. Counter map size: 11727350, Cmp map size: 262144 [.] Sanitizer coverage enabled. Counter map size: 11727350, Cmp map size: 262144 [13717:13732:0612/155912.411804:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [13717:13732:0612/155912.412213:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13717:13732:0612/155912.412332:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [13717:13732:0612/155912.412393:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [13717:13732:0612/155912.412439:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13717:13732:0612/155912.504343:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13748:13748:0612/155912.536899:WARNING:media/gpu/vaapi/vaapi_wrapper.cc:1655] drmGetDevices2() has not found any devices [13748:13748:0612/155912.547449:WARNING:sandbox/policy/linux/sandbox_linux.cc:405] InitializeSandbox() called with multiple threads in process gpu-process. [13748:13748:0612/155912.555202:WARNING:ui/gfx/linux/gbm_support_x11.cc:48] dri3 extension not supported. (browser_tests:13717): dbind-WARNING **: 15:59:12.565: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory [13717:13732:0612/155912.601029:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13717:13732:0612/155912.601102:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [.] Sanitizer coverage enabled. Counter map size: 11727350, Cmp map size: 262144 [13717:13717:0612/155912.800545:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [13717:13717:0612/155912.800664:WARNING:device/bluetooth/dbus/bluez_dbus_manager.cc:209] Floss manager service not available, cannot set Floss enable/disable. [13717:13717:0612/155912.800711:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [13717:13732:0612/155912.800829:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13717:13732:0612/155912.800934:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13717:13717:0612/155912.812442:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [13717:13732:0612/155912.864362:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [13717:13732:0612/155912.864558:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [13717:13717:0612/155912.864686:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [13717:13717:0612/155912.864966:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [13717:13732:0612/155912.865061:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13717:13717:0612/155912.888606:WARNING:dbus/property.cc:94] Failed to connect to PropertiesChangedsignal. [13717:13717:0612/155912.888656:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: [13717:13717:0612/155912.888671:WARNING:dbus/property.cc:174] GetAll request failed for: org.freedesktop.UPower.Device [13717:13717:0612/155912.888992:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [13717:13732:0612/155912.889111:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13717:13717:0612/155912.938051:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [13717:13732:0612/155912.938221:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [13717:13717:0612/155912.976358:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [13717:13717:0612/155912.976406:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used. ================================================================= ==13717==ERROR: AddressSanitizer: heap-use-after-free on address 0x7bd03142b480 at pc 0x5a51bbebfc1f bp 0x7ffda7783750 sp 0x7ffda7783748 READ of size 8 at 0x7bd03142b480 thread T0 (browser_tests) #0 0x5a51bbebfc1e in history_clusters::HistoryClustersHandler::OpenHistoryUrl(GURL const&, mojo::StructPtr) chrome/browser/ui/webui/history_clusters/history_clusters_handler.cc:80:52 #1 0x5a51c0e574b5 in history_clusters::HistoryClustersHandlerPopupUafBrowserTest_UseAfterFreeOnPopupToTabConversion_Test::RunTestOnMainThread() chrome/browser/ui/webui/history_clusters/history_clusters_handler_browsertest.cc:434:12 #2 0x5a51c3850255 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9 #3 0x5a51c3856191 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #4 0x5a51b3ab0b6a in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12 #5 0x5a51b3ab962c in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15 #6 0x5a51b3aa79d8 in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28 #7 0x5a51bb92e473 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:698:10 #8 0x5a51bb932554 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1332:10 #9 0x5a51bb9319e3 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1163:12 #10 0x5a51bb92b10b in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36 #11 0x5a51bb92b6fc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10 #12 0x5a51c384e022 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34 #13 0x5a51c129edcb in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:559:20 #14 0x5a51b90503f1 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #15 0x5a51b90536c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #16 0x5a51b90557c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #17 0x5a51b908547a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #18 0x5a51b9083f4e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #19 0x5a51c17c2afc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #20 0x5a51ddec60e0 in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:101:22 #21 0x5a51c3a5992e in content::LaunchTestsInternal(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:423:31 #22 0x5a51c3a5a361 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:518:10 #23 0x5a51ddec6af1 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:360:10 #24 0x5a51c10f0c9b in main chrome/test/base/browser_tests_main.cc:60:10 #25 0x7e503302b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7bd03142b480 is located 0 bytes inside of 864-byte region [0x7bd03142b480,0x7bd03142b7e0) freed by thread T0 (browser_tests) here: #0 0x5a51985c6d56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x18e89d56) (BuildId: 8e4ba3e2c39cdbe5) #1 0x5a51bc25fcff in tabs::TabModel::DestroyAndTakeWebContents(std::__Cr::unique_ptr>) third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #2 0x5a51bc26c869 in TabStripModel::DetachWebContentsAtForInsertion(int, TabRemovedReason) chrome/browser/ui/tabs/tab_strip_model.cc:463:10 #3 0x5a51db5a352b in chrome::ConvertPopupToTabbedBrowser(BrowserWindowInterface*) chrome/browser/ui/browser_commands.cc:1832:18 #4 0x5a51c0e57404 in history_clusters::HistoryClustersHandlerPopupUafBrowserTest_UseAfterFreeOnPopupToTabConversion_Test::RunTestOnMainThread() chrome/browser/ui/webui/history_clusters/history_clusters_handler_browsertest.cc:422:3 #5 0x5a51c3850255 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9 #6 0x5a51c3856191 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #7 0x5a51b3ab0b6a in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12 #8 0x5a51b3ab962c in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15 #9 0x5a51b3aa79d8 in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28 #10 0x5a51bb92e473 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:698:10 #11 0x5a51bb932554 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1332:10 #12 0x5a51bb9319e3 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1163:12 #13 0x5a51bb92b10b in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36 #14 0x5a51bb92b6fc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10 #15 0x5a51c384e022 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34 #16 0x5a51c129edcb in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:559:20 #17 0x5a51b90503f1 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #18 0x5a51b90536c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #19 0x5a51b90557c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #20 0x5a51b908547a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #21 0x5a51b9083f4e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #22 0x5a51c17c2afc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #23 0x5a51ddec60e0 in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:101:22 #24 0x5a51c3a5992e in content::LaunchTestsInternal(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:423:31 #25 0x5a51c3a5a361 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:518:10 #26 0x5a51ddec6af1 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:360:10 #27 0x5a51c10f0c9b in main chrome/test/base/browser_tests_main.cc:60:10 #28 0x7e503302b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 (browser_tests) here: #0 0x5a51985c6151 in operator new(unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x18e89151) (BuildId: 8e4ba3e2c39cdbe5) #1 0x5a51bd478dea in Navigate(NavigateParams*) third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x5a51db5cdbc2 in chrome::AddAndReturnTabAt(BrowserWindowInterface*, GURL const&, int, bool, std::__Cr::optional, bool) chrome/browser/ui/browser_tabstrip.cc:53:3 #3 0x5a51db5cde9e in chrome::AddTabAt(BrowserWindowInterface*, GURL const&, int, bool, std::__Cr::optional, bool) chrome/browser/ui/browser_tabstrip.cc:72:12 #4 0x5a51c0e56fcd in history_clusters::HistoryClustersHandlerPopupUafBrowserTest_UseAfterFreeOnPopupToTabConversion_Test::RunTestOnMainThread() chrome/browser/ui/webui/history_clusters/history_clusters_handler_browsertest.cc:397:3 #5 0x5a51c3850255 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9 #6 0x5a51c3856191 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #7 0x5a51b3ab0b6a in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12 #8 0x5a51b3ab962c in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15 #9 0x5a51b3aa79d8 in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28 #10 0x5a51bb92e473 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:698:10 #11 0x5a51bb932554 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1332:10 #12 0x5a51bb9319e3 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1163:12 #13 0x5a51bb92b10b in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36 #14 0x5a51bb92b6fc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10 #15 0x5a51c384e022 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34 #16 0x5a51c129edcb in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:559:20 #17 0x5a51b90503f1 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #18 0x5a51b90536c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #19 0x5a51b90557c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #20 0x5a51b908547a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #21 0x5a51b9083f4e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #22 0x5a51c17c2afc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #23 0x5a51ddec60e0 in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:101:22 #24 0x5a51c3a5992e in content::LaunchTestsInternal(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:423:31 #25 0x5a51c3a5a361 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:518:10 #26 0x5a51ddec6af1 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:360:10 #27 0x5a51c10f0c9b in main chrome/test/base/browser_tests_main.cc:60:10 #28 0x7e503302b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x7bd03142b200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7bd03142b280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7bd03142b300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7bd03142b380: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa 0x7bd03142b400: fa fa fa fa fa fa fa fa fa fa fa fa fa fa f7 fa =>0x7bd03142b480:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7bd03142b500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7bd03142b580: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7bd03142b600: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7bd03142b680: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7bd03142b700: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1781279958.858898 13717 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==13717==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781279958.859006 13717 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==13717==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781279958.859045 13717 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781279958.859081 13717 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781279958.859202 13717 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Command line: `out/asan/browser_tests --disable-gpu-process-for-dx12-info-collection --gtest_filter=HistoryClustersHandlerPopupUafBrowserTest.UseAfterFreeOnPopupToTabConversion --no-sandbox --single-process-tests --user-data-dir=/tmp/org.chromium.Chromium.scoped_dir.FOPO94 --disable-auto-reload --no-first-run --enable-logging=stderr --disable-default-apps --wm-window-animations-disabled --password-store=basic --disable-component-update --change-stack-guard-on-fork=disable --test-type=browser --disable-zero-browsers-open-for-tests --disable-updater-scheduler --ip-address-space-overrides=127.0.0.1:0=public,[::1]:0=public --use-fake-device-for-media-stream --browser-test --ipc-connection-timeout=60 --log-missing-unload-ack --dom-automation --log-gpu-control-list-decisions --disable-d3d11-warp --disable-backgrounding-occluded-windows --disable-ignore-duplicate-navs-for-testing --disable-gl-drawing-for-tests --override-use-software-gl-for-tests --force-color-profile=srgb --enable-features=Journeys,*TestBlinkFeatureDefault,TestFeatureForBrowserTest1 --disable-features=ExtensionDisableUnsupportedDeveloper,PreconnectToSearch,RestartNetworkServiceUnsandboxedForFailedLaunch,SessionRestoreInfobar,TestFeatureForBrowserTest2 --disable-gpu-process-for-dx12-info-collection --disable-platform-accessibility-integration --ozone-platform=x11 --flag-switches-begin --flag-switches-end about:blank` === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781279958.859241 13717 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: MiraclePtr Status: NOT PROTECTED No raw_ptr access to this region was detected prior to this crash. This crash is still exploitable with MiraclePtr. Refer to https://chromium.googlesource.com/chromium/src/+/main/base/memory/raw_ptr.md for details. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781279958.859273 13717 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==13717==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781279958.859305 13717 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==13717==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31