[.] Sanitizer coverage enabled. Counter map size: 8712941, Cmp map size: 262144
Note: Google Test filter = WebViewTest.UpdateCompositionInfoWidgetDestroyedDuringLayout
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from WebViewTest
[ RUN      ] WebViewTest.UpdateCompositionInfoWidgetDestroyedDuringLayout
POC: calling UpdateCompositionInfo, plugin owned=1
POC: plugin Destroy() callback running, detaching
POC: frame detached, WidgetBase freed
Received signal 11 SEGV_MAPERR 000000000524
#0 0x5cb1d105894a (/chromium/chromium/src/out/asan/blink_unittests+0x1062f949)
#1 0x5cb1ee0b91d8 (/chromium/chromium/src/out/asan/blink_unittests+0x2d6901d7)
#2 0x5cb1ee079e07 (/chromium/chromium/src/out/asan/blink_unittests+0x2d650e06)
#3 0x5cb1ee0b85df (/chromium/chromium/src/out/asan/blink_unittests+0x2d68f5de)
#4 0x7c3f9739d050 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3c04f)
#5 0x5cb1f57f3a56 (/chromium/chromium/src/out/asan/blink_unittests+0x34dcaa55)
#6 0x5cb1fbe172d1 (/chromium/chromium/src/out/asan/blink_unittests+0x3b3ee2d0)
#7 0x5cb1f5f3a061 (/chromium/chromium/src/out/asan/blink_unittests+0x35511060)
#8 0x5cb1f9199631 (/chromium/chromium/src/out/asan/blink_unittests+0x38770630)
#9 0x5cb1e540ed69 (/chromium/chromium/src/out/asan/blink_unittests+0x249e5d68)
#10 0x5cb1d1ebd7dc (/chromium/chromium/src/out/asan/blink_unittests+0x114947db)
#11 0x5cb1d1ec0438 (/chromium/chromium/src/out/asan/blink_unittests+0x11497437)
#12 0x5cb1d1ec2534 (/chromium/chromium/src/out/asan/blink_unittests+0x11499533)
#13 0x5cb1d1ef236b (/chromium/chromium/src/out/asan/blink_unittests+0x114c936a)
#14 0x5cb1d1ef0e3f (/chromium/chromium/src/out/asan/blink_unittests+0x114c7e3e)
#15 0x5cb1edcfcabd (/chromium/chromium/src/out/asan/blink_unittests+0x2d2d3abc)
#16 0x5cb1d115a062 (/chromium/chromium/src/out/asan/blink_unittests+0x10731061)
#17 0x5cb1edd071b5 (/chromium/chromium/src/out/asan/blink_unittests+0x2d2de1b4)
#18 0x5cb1edd06adc (/chromium/chromium/src/out/asan/blink_unittests+0x2d2ddadb)
#19 0x5cb1d1159ad0 (/chromium/chromium/src/out/asan/blink_unittests+0x10730acf)
#20 0x7c3f9738824a (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27249)
#21 0x7c3f97388305 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27304)
#22 0x5cb1d101002a (/chromium/chromium/src/out/asan/blink_unittests+0x105e7029)
  r8: 00005cb20a8b1ff0  r9: 00007fffffffff01 r10: 00007fffffffff01 r11: bb41c74aceffbc01
 r12: 00000f07f28044b0 r13: 00000b9640def520 r14: 0000783f94022580 r15: 0000783f940225a0
  di: 0000000000000524  si: 00000000000000f3  bp: 00007fff8b1dad50  bx: 00007fff8b1dace0
  dx: f5f5f5f5f5f5f5f5  ax: 0000000000000000  cx: 00007e9fffffffff  sp: 00007fff8b1dace0
  ip: 00005cb1f57f3a56 efl: 0000000000010246 cgf: 002b000000000033 erf: 0000000000000004
 trp: 000000000000000e msk: 0000000000000000 cr2: 0000000000000524
[end of stack trace]

=== Symbolized stack trace ===
#5  blink::FrameSelection::RootEditableElementOrDocumentElement() const
    (cppgc Member<> deref of null document_ after ContextDestroyed)
#6  blink::WebInputMethodControllerImpl::CompositionRange() const
    third_party/blink/renderer/core/exported/web_input_method_controller_impl.cc:225
#7  blink::WebFrameWidgetImpl::CompositionRange()
    third_party/blink/renderer/core/frame/web_frame_widget_impl.cc:4356
#8  blink::WidgetBase::UpdateCompositionInfo(bool)
    third_party/blink/renderer/platform/widget/widget_base.cc:1492
    [inlined GetCompositionRange]
#9  blink::WebViewTest_UpdateCompositionInfoWidgetDestroyedDuringLayout_Test::TestBody()