[.] Sanitizer coverage enabled. Counter map size: 8712893, Cmp map size: 262144
Note: Google Test filter = WidgetBaseInputHandlerGestureUAFTest.*
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from WidgetBaseInputHandlerGestureUAFTest
[ RUN      ] WidgetBaseInputHandlerGestureUAFTest.WillHandleGestureEventDestroysWidget
=================================================================
==4748==ERROR: AddressSanitizer: heap-use-after-free on address 0x761dc0a1d0e0 at pc 0x61d8eb7c9c88 bp 0x7ffd207b4630 sp 0x7ffd207b4628
WRITE of size 1 at 0x761dc0a1d0e0 thread T0
    #0 0x61d8eb7c9c87 in blink::WidgetBaseInputHandler::HandleInputEvent(blink::WebCoalescedInputEvent const&, std::__Cr::unique_ptr<cc::EventMetrics, std::__Cr::default_delete<cc::EventMetrics>>, base::OnceCallback<void (blink::mojom::InputEventResultState, ui::LatencyInfo const&, std::__Cr::unique_ptr<blink::InputHandlerProxy::DidOverscrollParams, std::__Cr::default_delete<blink::InputHandlerProxy::DidOverscrollParams>>, std::__Cr::optional<cc::TouchAction>)>) third_party/blink/renderer/platform/widget/input/widget_base_input_handler.cc:415:32
    #1 0x61d8e8609a23 in blink::WebFrameWidgetImpl::ProcessInputEventSynchronouslyForTesting(blink::WebCoalescedInputEvent const&, base::OnceCallback<void (blink::mojom::InputEventResultState, ui::LatencyInfo const&, std::__Cr::unique_ptr<blink::InputHandlerProxy::DidOverscrollParams, std::__Cr::default_delete<blink::InputHandlerProxy::DidOverscrollParams>>, std::__Cr::optional<cc::TouchAction>)>) third_party/blink/renderer/core/frame/web_frame_widget_impl.cc:3247:33
    #2 0x61d8d870481a in blink::WidgetBaseInputHandlerGestureUAFTest_WillHandleGestureEventDestroysWidget_Test::TestBody() third_party/blink/renderer/core/frame/web_frame_widget_test.cc:3217:11
    #3 0x61d8c459b7db in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #4 0x61d8c459e437 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #5 0x61d8c45a0533 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #6 0x61d8c45d036a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #7 0x61d8c45cee3e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #8 0x61d8e03da6ec in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #9 0x61d8c3838061 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), base::TestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<base::TestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #10 0x61d8e03e4de4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #11 0x61d8e03e470b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #12 0x61d8c3837acf in main third_party/blink/renderer/controller/tests/run_all_tests.cc:18:10
    #13 0x788dc29a8249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x761dc0a1d0e0 is located 352 bytes inside of 1120-byte region [0x761dc0a1cf80,0x761dc0a1d3e0)
freed by thread T0 here:
    #0 0x61d8c37cad56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/blink_unittests+0x106c4d56) (BuildId: f376652c91e67773)
    #1 0x61d8e85e1707 in blink::WebFrameWidgetImpl::Close(blink::DetachReason) third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #2 0x61d8e86456af in blink::WebLocalFrameImpl::Close(blink::DetachReason) third_party/blink/renderer/core/frame/web_local_frame_impl.cc:800:20
    #3 0x61d8d03d7ed7 in blink::frame_test_helpers::TestWebFrameClient::FrameDetached(blink::DetachReason) third_party/blink/renderer/core/frame/frame_test_helpers.cc:857:11
    #4 0x61d8e86782e9 in blink::LocalFrameClientImpl::Detached(blink::FrameDetachType) third_party/blink/renderer/core/frame/local_frame_client_impl.cc:381:11
    #5 0x61d8e8349847 in blink::Frame::Detach(blink::FrameDetachType) third_party/blink/renderer/core/frame/frame.cc:172:12
    #6 0x61d8ea03be25 in blink::Page::WillBeDestroyed() third_party/blink/renderer/core/page/page.cc:1375:17
    #7 0x61d8ee53e96a in blink::WebViewImpl::Close() third_party/blink/renderer/core/exported/web_view_impl.cc:1189:10
    #8 0x61d8d03d10c8 in blink::frame_test_helpers::WebViewHelper::Reset() third_party/blink/renderer/core/frame/frame_test_helpers.cc:729:16
    #9 0x61d8d87114e0 in base::internal::Invoker<base::internal::FunctorTraits<void (* const&)(blink::WidgetBaseInputHandlerGestureUAFTest_WillHandleGestureEventDestroysWidget_Test::TestBody()::$_0 const&), blink::WidgetBaseInputHandlerGestureUAFTest_WillHandleGestureEventDestroysWidget_Test::TestBody()::$_0 const&>, base::internal::BindState<false, true, false, void (*)(blink::WidgetBaseInputHandlerGestureUAFTest_WillHandleGestureEventDestroysWidget_Test::TestBody()::$_0 const&), blink::WidgetBaseInputHandlerGestureUAFTest_WillHandleGestureEventDestroysWidget_Test::TestBody()::$_0>, void ()>::Run(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #10 0x61d8d873447e in non-virtual thunk to blink::DestroyOnGestureWebFrameWidget::WillHandleGestureEvent(blink::WebGestureEvent const&, bool*) base/functional/callback.h:155:12
    #11 0x61d8eb7c8da7 in blink::WidgetBaseInputHandler::HandleInputEvent(blink::WebCoalescedInputEvent const&, std::__Cr::unique_ptr<cc::EventMetrics, std::__Cr::default_delete<cc::EventMetrics>>, base::OnceCallback<void (blink::mojom::InputEventResultState, ui::LatencyInfo const&, std::__Cr::unique_ptr<blink::InputHandlerProxy::DidOverscrollParams, std::__Cr::default_delete<blink::InputHandlerProxy::DidOverscrollParams>>, std::__Cr::optional<cc::TouchAction>)>) third_party/blink/renderer/platform/widget/input/widget_base_input_handler.cc:406:24
    #12 0x61d8e8609a23 in blink::WebFrameWidgetImpl::ProcessInputEventSynchronouslyForTesting(blink::WebCoalescedInputEvent const&, base::OnceCallback<void (blink::mojom::InputEventResultState, ui::LatencyInfo const&, std::__Cr::unique_ptr<blink::InputHandlerProxy::DidOverscrollParams, std::__Cr::default_delete<blink::InputHandlerProxy::DidOverscrollParams>>, std::__Cr::optional<cc::TouchAction>)>) third_party/blink/renderer/core/frame/web_frame_widget_impl.cc:3247:33
    #13 0x61d8d870481a in blink::WidgetBaseInputHandlerGestureUAFTest_WillHandleGestureEventDestroysWidget_Test::TestBody() third_party/blink/renderer/core/frame/web_frame_widget_test.cc:3217:11
    #14 0x61d8c459b7db in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #15 0x61d8c459e437 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #16 0x61d8c45a0533 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #17 0x61d8c45d036a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #18 0x61d8c45cee3e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #19 0x61d8e03da6ec in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #20 0x61d8c3838061 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), base::TestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<base::TestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #21 0x61d8e03e4de4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #22 0x61d8e03e470b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #23 0x61d8c3837acf in main third_party/blink/renderer/controller/tests/run_all_tests.cc:18:10
    #24 0x788dc29a8249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

previously allocated by thread T0 here:
    #0 0x61d8c37ca151 in operator new(unsigned long) (/chromium/chromium/src/out/asan/blink_unittests+0x106c4151) (BuildId: f376652c91e67773)
    #1 0x61d8e85df65b in std::__Cr::unique_ptr<blink::WidgetBase, std::__Cr::default_delete<blink::WidgetBase>> std::__Cr::make_unique<blink::WidgetBase, blink::WebFrameWidgetImpl*, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>&, bool&, bool&, bool, bool&, 0>(blink::WebFrameWidgetImpl*&&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>&&, scoped_refptr<base::SingleThreadTaskRunner>&, bool&, bool&, bool&&, bool&) third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x61d8e85ddfb5 in blink::WebFrameWidgetImpl::WebFrameWidgetImpl(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool) third_party/blink/renderer/core/frame/web_frame_widget_impl.cc:439:20
    #3 0x61d8d8711ed8 in blink::frame_test_helpers::TestWebFrameWidget::TestWebFrameWidget<base::PassKey<blink::WebLocalFrame>&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool&, bool&, bool&, bool&, bool&>(base::PassKey<blink::WebLocalFrame>&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>&&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>&&, scoped_refptr<base::SingleThreadTaskRunner>&&, viz::FrameSinkId const&, bool&, bool&, bool&, bool&, bool&) third_party/blink/renderer/core/frame/frame_test_helpers.h:239:9
    #4 0x61d8d87074b3 in blink::WidgetBaseInputHandlerGestureUAFTest::CreateWebFrameWidget(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool) third_party/blink/renderer/core/frame/web_frame_widget_test.cc:3137:9
    #5 0x61d8d0450128 in blink::frame_test_helpers::TestWebFrameWidget* base::internal::DecayedFunctorTraits<blink::frame_test_helpers::TestWebFrameWidget* (blink::SimTest::*)(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool), blink::SimTest*>::Invoke<blink::frame_test_helpers::TestWebFrameWidget* (blink::SimTest::*)(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool), blink::SimTest*, base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool>(blink::frame_test_helpers::TestWebFrameWidget* (blink::SimTest::*)(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool), blink::SimTest*&&, base::PassKey<blink::WebLocalFrame>&&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>&&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>&&, scoped_refptr<base::SingleThreadTaskRunner>&&, viz::FrameSinkId const&, bool&&, bool&&, bool&&, bool&&, bool&&) base/functional/bind_internal.h:740:12
    #6 0x61d8d044fd97 in base::internal::Invoker<base::internal::FunctorTraits<blink::frame_test_helpers::TestWebFrameWidget* (blink::SimTest::* const&)(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool), blink::SimTest*>, base::internal::BindState<true, true, false, blink::frame_test_helpers::TestWebFrameWidget* (blink::SimTest::*)(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool), blink::UnretainedWrapper<blink::SimTest>>, blink::frame_test_helpers::TestWebFrameWidget* (base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool)>::Run(base::internal::BindStateBase*, base::PassKey<blink::WebLocalFrame>&&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>&&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>&&, scoped_refptr<base::SingleThreadTaskRunner>&&, viz::FrameSinkId const&, bool, bool, bool, bool, bool) base/functional/bind_internal.h:932:12
    #7 0x61d8d03eeb06 in base::RepeatingCallback<blink::frame_test_helpers::TestWebFrameWidget* (base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool)>::Run(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool) const & base/functional/callback.h:346:12
    #8 0x61d8d03ee6ee in base::internal::Invoker<base::internal::FunctorTraits<blink::frame_test_helpers::WebViewHelper::WebViewHelper(base::RepeatingCallback<blink::frame_test_helpers::TestWebFrameWidget* (base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool)>)::$_0 const&, base::RepeatingCallback<blink::frame_test_helpers::TestWebFrameWidget* (base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool)> const&>, base::internal::BindState<false, false, false, blink::frame_test_helpers::WebViewHelper::WebViewHelper(base::RepeatingCallback<blink::frame_test_helpers::TestWebFrameWidget* (base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool)>)::$_0, base::RepeatingCallback<blink::frame_test_helpers::TestWebFrameWidget* (base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool)>>, blink::WebFrameWidget* (base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool)>::Run(base::internal::BindStateBase*, base::PassKey<blink::WebLocalFrame>&&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>&&, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>&&, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>&&, scoped_refptr<base::SingleThreadTaskRunner>&&, viz::FrameSinkId const&, bool, bool, bool, bool, bool) third_party/blink/renderer/core/frame/frame_test_helpers.cc:457:39
    #9 0x61d8e8665c66 in base::RepeatingCallback<blink::WebFrameWidget* (base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool)>::Run(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, scoped_refptr<base::SingleThreadTaskRunner>, viz::FrameSinkId const&, bool, bool, bool, bool, bool) const & base/functional/callback.h:346:12
    #10 0x61d8e8665347 in blink::WebLocalFrameImpl::CreateFrameWidgetInternal(base::PassKey<blink::WebLocalFrame>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, viz::FrameSinkId const&, bool, bool, bool) third_party/blink/renderer/core/frame/web_local_frame_impl.cc:3030:69
    #11 0x61d8e864471f in blink::WebLocalFrame::InitializeFrameWidget(blink::CrossVariantMojoAssociatedRemote<blink::mojom::FrameWidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::FrameWidgetInterfaceBase>, blink::CrossVariantMojoAssociatedRemote<blink::mojom::WidgetHostInterfaceBase>, blink::CrossVariantMojoAssociatedReceiver<blink::mojom::WidgetInterfaceBase>, viz::FrameSinkId const&, bool, bool, bool) third_party/blink/renderer/core/frame/web_local_frame_impl.cc:698:3
    #12 0x61d8d03d4e61 in blink::frame_test_helpers::WebViewHelper::CreateFrameWidget(blink::WebLocalFrame*) third_party/blink/renderer/core/frame/frame_test_helpers.cc:680:47
    #13 0x61d8d03d240f in blink::frame_test_helpers::WebViewHelper::CreateFrameWidgetAndInitializeCompositing(blink::WebLocalFrame*) third_party/blink/renderer/core/frame/frame_test_helpers.cc:692:38
    #14 0x61d8d03d15ce in blink::frame_test_helpers::WebViewHelper::InitializeWithOpener(blink::WebFrame*, blink::frame_test_helpers::TestWebFrameClient*, blink::WebViewClient*, void (*)(blink::WebSettings*), std::__Cr::optional<blink::FencedFrame::DeprecatedFencedFrameMode>, bool) third_party/blink/renderer/core/frame/frame_test_helpers.cc:502:7
    #15 0x61d8d03d2747 in blink::frame_test_helpers::WebViewHelper::Initialize(blink::frame_test_helpers::TestWebFrameClient*, blink::WebViewClient*, void (*)(blink::WebSettings*)) third_party/blink/renderer/core/frame/frame_test_helpers.cc:519:10
    #16 0x61d8d044dba8 in blink::SimTest::SetUp() third_party/blink/renderer/core/testing/sim/sim_test.cc:67:21
    #17 0x61d8c459b671 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #18 0x61d8c459e437 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #19 0x61d8c45a0533 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #20 0x61d8c45d036a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #21 0x61d8c45cee3e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #22 0x61d8e03da6ec in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #23 0x61d8c3838061 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), base::TestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<base::TestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #24 0x61d8e03e4de4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #25 0x61d8e03e470b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #26 0x61d8c3837acf in main third_party/blink/renderer/controller/tests/run_all_tests.cc:18:10
    #27 0x788dc29a8249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

Shadow bytes around the buggy address:
  0x761dc0a1ce00: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x761dc0a1ce80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x761dc0a1cf00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x761dc0a1cf80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x761dc0a1d000: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x761dc0a1d080: fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd
  0x761dc0a1d100: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x761dc0a1d180: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x761dc0a1d200: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x761dc0a1d280: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x761dc0a1d300: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
E0000 00:00:1781281201.186924    4748 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==4748==ADDITIONAL INFO
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781281201.187024    4748 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==4748==Note: Please include this section with the ASan report.
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781281201.187064    4748 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace:
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781281201.187088    4748 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781281201.187111    4748 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==4748==END OF ADDITIONAL INFO
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1781281201.187139    4748 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==4748==ABORTING
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31