[.] Sanitizer coverage enabled. Counter map size: 11658612, Cmp map size: 262144 Note: Google Test filter = RegisterProtocolHandlerFullscreenUAFTest.* [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from RegisterProtocolHandlerFullscreenUAFTest, where TypeParam = [ RUN ] RegisterProtocolHandlerFullscreenUAFTest.UseAfterFreeOnOpenerFullscreenExit [.] Sanitizer coverage enabled. Counter map size: 11658612, Cmp map size: 262144 [.] Sanitizer coverage enabled. Counter map size: 11658612, Cmp map size: 262144 [16402:16417:0603/042300.547969:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [16402:16417:0603/042300.548206:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16402:16417:0603/042300.548313:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [16402:16417:0603/042300.548392:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [16402:16417:0603/042300.548463:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16435:16435:0603/042300.649964:WARNING:media/gpu/vaapi/vaapi_wrapper.cc:1655] drmGetDevices2() has not found any devices [16402:16417:0603/042300.650789:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16435:16435:0603/042300.662019:WARNING:sandbox/policy/linux/sandbox_linux.cc:405] InitializeSandbox() called with multiple threads in process gpu-process. [16435:16435:0603/042300.670982:WARNING:ui/gfx/linux/gbm_support_x11.cc:48] dri3 extension not supported. (browser_tests:16402): dbind-WARNING **: 04:23:00.712: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory [16402:16417:0603/042300.750035:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16402:16417:0603/042300.750088:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [.] Sanitizer coverage enabled. Counter map size: 11658612, Cmp map size: 262144 [16402:16402:0603/042300.974595:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [16402:16402:0603/042300.974716:WARNING:device/bluetooth/dbus/bluez_dbus_manager.cc:209] Floss manager service not available, cannot set Floss enable/disable. [16402:16417:0603/042300.974778:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16402:16402:0603/042300.974799:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [16402:16417:0603/042300.974876:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16402:16402:0603/042300.986355:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [16402:16417:0603/042301.041290:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [16402:16417:0603/042301.041372:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [16402:16402:0603/042301.041444:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [16402:16402:0603/042301.041506:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [16402:16417:0603/042301.041609:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16402:16402:0603/042301.083281:WARNING:dbus/property.cc:94] Failed to connect to PropertiesChangedsignal. [16402:16402:0603/042301.083737:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: [16402:16402:0603/042301.083764:WARNING:dbus/property.cc:174] GetAll request failed for: org.freedesktop.UPower.Device [16402:16402:0603/042301.083810:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [16402:16417:0603/042301.083982:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16402:16402:0603/042301.134092:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [16402:16417:0603/042301.134270:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [16402:16402:0603/042301.192681:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [16402:16402:0603/042301.192777:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used. ================================================================= ==16402==ERROR: AddressSanitizer: heap-use-after-free on address 0x7cea95860100 at pc 0x649d49d932b5 bp 0x7ffe62e5f870 sp 0x7ffe62e5f868 READ of size 8 at 0x7cea95860100 thread T0 (browser_tests) #0 0x649d49d932b4 in permissions::PermissionRequestManager::AddRequest(content::RenderFrameHost*, std::__Cr::unique_ptr>) components/permissions/permission_request_manager.cc:224:21 #1 0x649d6d7c2c60 in Browser::RegisterProtocolHandler(content::RenderFrameHost*, std::__Cr::basic_string, std::__Cr::allocator> const&, GURL const&, bool) chrome/browser/ui/browser.cc:2470:33 #2 0x649d2d0e8679 in RegisterProtocolHandlerFullscreenUAFTest_UseAfterFreeOnOpenerFullscreenExit_Test::RunTestOnMainThread() chrome/browser/ui/browser_register_protocol_handler_uaf_browsertest.cc:186:9 #3 0x649d55ad64a5 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9 #4 0x649d55adc3e1 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #5 0x649d4672865a in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12 #6 0x649d4673102c in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15 #7 0x649d4671f5ac in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28 #8 0x649d4e37bc6a in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:697:10 #9 0x649d4e37fe38 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1331:10 #10 0x649d4e37f2c3 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1162:12 #11 0x649d4e3788eb in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36 #12 0x649d4e378edc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10 #13 0x649d55ad4262 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34 #14 0x649d5357871b in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:559:20 #15 0x649d4bb73961 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #16 0x649d4bb76c37 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #17 0x649d4bb78d33 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #18 0x649d4bba88fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #19 0x649d4bba73ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #20 0x649d53aa1b2c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #21 0x649d702af8b0 in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:101:22 #22 0x649d55cdfc72 in content::LaunchTestsInternal(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:423:31 #23 0x649d55ce06a1 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:518:10 #24 0x649d702b02c1 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:360:10 #25 0x649d5339d7ab in main chrome/test/base/browser_tests_main.cc:60:10 #26 0x7eca9722b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7cea95860100 is located 0 bytes inside of 5728-byte region [0x7cea95860100,0x7cea95861760) freed by thread T0 (browser_tests) here: #0 0x649d2ad48891 in operator delete(void*) (/chromium/chromium/src/out/asan/browser_tests+0x1915b891) (BuildId: bfe171818457a7e1) #1 0x649d47e4e3c4 in content::RenderFrameHostManager::~RenderFrameHostManager() third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #2 0x649d4798006d in content::FrameTreeNode::~FrameTreeNode() content/browser/renderer_host/frame_tree_node.cc:312:1 #3 0x649d47965e4f in content::FrameTree::~FrameTree() content/browser/renderer_host/frame_tree.cc:230:1 #4 0x649d4859c25c in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1517:1 #5 0x649d485a00b3 in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1393:37 #6 0x649d4ebb8dcc in tabs::TabModel::~TabModel() third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #7 0x649d4ebd2454 in TabStripModel::SendDetachWebContentsNotifications(TabStripModel::DetachNotifications*) third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #8 0x649d4ebcd39a in TabStripModel::DetachTabWithReasonAt(int, TabRemovedReason, tabs::TabInterface::DetachReason) chrome/browser/ui/tabs/tab_strip_model.cc:538:3 #9 0x649d4ebcd7b5 in TabStripModel::DetachAndDeleteWebContentsAt(int) chrome/browser/ui/tabs/tab_strip_model.cc:468:3 #10 0x649d2d0e98ea in (anonymous namespace)::DestroyOnFullscreenExitObserver::DidToggleFullscreenModeForTab(bool, bool) chrome/browser/ui/browser_register_protocol_handler_uaf_browsertest.cc:84:34 #11 0x649d485da92f in void content::WebContentsImpl::WebContentsObserverList::NotifyObservers(void (content::WebContentsObserver::*)(bool, bool), bool&&, bool&) content/browser/web_contents/web_contents_impl.h:1866:9 #12 0x649d485d9c2a in content::WebContentsImpl::ExitFullscreenMode(bool) content/browser/web_contents/web_contents_impl.cc:4910:14 #13 0x649d48609499 in content::WebContentsImpl::ExitFullscreen(bool) content/browser/web_contents/web_contents_impl.cc:7476:3 #14 0x649d36a46c6a in FullscreenController::NotifyTabExclusiveAccessLost() chrome/browser/ui/exclusive_access/fullscreen_controller.cc:509:19 #15 0x649d36a453a9 in FullscreenController::WindowFullscreenStateChanged() chrome/browser/ui/exclusive_access/fullscreen_controller.cc:384:5 #16 0x649d6d7b26d5 in Browser::WindowFullscreenStateChanged() chrome/browser/ui/browser.cc:1321:9 #17 0x649d6e0f7edd in BrowserView::FullscreenStateChanged() chrome/browser/ui/views/frame/browser_view.cc:2210:13 #18 0x649d6e0f7b16 in BrowserView::ProcessFullscreen(bool, long) chrome/browser/ui/views/frame/browser_view.cc:5368:3 #19 0x649d6e11d0fa in BrowserView::ExclusiveAccessContextImpl::ExitFullscreen() chrome/browser/ui/views/frame/browser_view.cc:745:22 #20 0x649d36a44861 in FullscreenController::ExitFullscreenModeInternal() chrome/browser/ui/exclusive_access/fullscreen_controller.cc:641:42 #21 0x649d485d9991 in content::WebContentsImpl::ExitFullscreenMode(bool) content/browser/web_contents/web_contents_impl.cc:4882:16 #22 0x649d48609499 in content::WebContentsImpl::ExitFullscreen(bool) content/browser/web_contents/web_contents_impl.cc:7476:3 #23 0x649d4860a8c7 in content::WebContentsImpl::ForSecurityDropFullscreen(long) content/browser/web_contents/web_contents_impl.cc:7553:15 #24 0x649d6d7c2b96 in Browser::RegisterProtocolHandler(content::RenderFrameHost*, std::__Cr::basic_string, std::__Cr::allocator> const&, GURL const&, bool) chrome/browser/ui/browser.cc:2464:34 #25 0x649d2d0e8679 in RegisterProtocolHandlerFullscreenUAFTest_UseAfterFreeOnOpenerFullscreenExit_Test::RunTestOnMainThread() chrome/browser/ui/browser_register_protocol_handler_uaf_browsertest.cc:186:9 #26 0x649d55ad64a5 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9 #27 0x649d55adc3e1 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #28 0x649d4672865a in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12 #29 0x649d4673102c in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15 previously allocated by thread T0 (browser_tests) here: #0 0x649d2ad48051 in operator new(unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x1915b051) (BuildId: bfe171818457a7e1) #1 0x649d47ce3655 in content::RenderFrameHostFactory::Create(content::SiteInstance*, scoped_refptr, content::RenderFrameHostDelegate*, content::FrameTree*, content::FrameTreeNode*, int, mojo::PendingAssociatedRemote, base::TokenType const&, base::TokenType const&, base::UnguessableToken, bool, content::RenderFrameHostImpl::LifecycleStateImpl, scoped_refptr) content/public/browser/render_frame_host.h:157:3 #2 0x649d47e515c2 in content::RenderFrameHostManager::CreateRenderFrameHost(content::RenderFrameHostManager::CreateFrameCase, content::SiteInstanceImpl*, int, mojo::PendingAssociatedRemote, base::TokenType const&, base::TokenType const&, base::UnguessableToken, bool, scoped_refptr, content::ProcessAllocationContext const&) content/browser/renderer_host/render_frame_host_manager.cc:4448:10 #3 0x649d47e50543 in content::RenderFrameHostManager::InitRoot(content::SiteInstanceImpl*, bool, blink::FramePolicy, std::__Cr::basic_string, std::__Cr::allocator> const&, base::UnguessableToken const&) content/browser/renderer_host/render_frame_host_manager.cc:863:22 #4 0x649d4796ffaa in content::FrameTree::Init(content::SiteInstanceImpl*, bool, std::__Cr::basic_string, std::__Cr::allocator> const&, content::RenderFrameHostImpl*, blink::FramePolicy const&, base::UnguessableToken const&) content/browser/renderer_host/frame_tree.cc:964:27 #5 0x649d485cf056 in content::WebContentsImpl::Init(content::WebContents::CreateParams const&, blink::FramePolicy) content/browser/web_contents/web_contents_impl.cc:4326:23 #6 0x649d4858ff21 in content::WebContentsImpl::CreateWithOpener(content::WebContents::CreateParams const&, content::RenderFrameHostImpl*) content/browser/web_contents/web_contents_impl.cc:1598:17 #7 0x649d485e4fd3 in content::WebContentsImpl::CreateNewWindow(content::RenderFrameHostImpl*, content::mojom::CreateNewWindowParams const&, bool, bool, content::SessionStorageNamespace*) content/browser/web_contents/web_contents_impl.cc:774:10 #8 0x649d47d672c9 in content::RenderFrameHostImpl::CreateNewWindow(mojo::StructPtr, base::OnceCallback)>) content/browser/renderer_host/render_frame_host_impl.cc:10417:18 #9 0x649d40835e66 in content::mojom::FrameHostStubDispatch::AcceptWithResponder(content::mojom::FrameHost*, mojo::Message*, std::__Cr::unique_ptr>) gen/content/common/frame.mojom.cc:6297:13 #10 0x649d589c4cfb in mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:1036:56 #11 0x649d589e2893 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:51:24 #12 0x649d589cb043 in mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:747:20 #13 0x649d59511884 in IPC::ChannelAssociatedGroupController::AcceptSyncMessage(unsigned int, unsigned int, IPC::(anonymous namespace)::ScopedUrgentMessageNotification) ipc/ipc_mojo_bootstrap.cc:1243:24 #14 0x649d59513c70 in base::internal::Invoker, base::internal::BindState, unsigned int, unsigned int, IPC::(anonymous namespace)::ScopedUrgentMessageNotification>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #15 0x649d537b28f3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #16 0x649d5382271c in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #17 0x649d538215ba in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:336:40 #18 0x649d539e1ce8 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46 #19 0x649d539e52a8 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43 #20 0x7eca9871c718 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x54718) (BuildId: 42c28e95f24a721d8e8e159f42dbc541f0ff353d) Shadow bytes around the buggy address: 0x7cea9585fe80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cea9585ff00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cea9585ff80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cea95860000: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cea95860080: fa fa fa fa fa fa fa fa fa fa fa fa fa fa f7 fa =>0x7cea95860100:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cea95860180: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cea95860200: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cea95860280: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cea95860300: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cea95860380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1780460588.829545 16402 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==16402==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780460588.829624 16402 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==16402==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780460588.829678 16402 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780460588.829704 16402 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780460588.829827 16402 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Command line: `out/asan/browser_tests --disable-gpu-process-for-dx12-info-collection --gtest_filter=RegisterProtocolHandlerFullscreenUAFTest.* --no-sandbox --single-process-tests --user-data-dir=/tmp/org.chromium.Chromium.scoped_dir.VEFRNx --disable-auto-reload --no-first-run --enable-logging=stderr --disable-default-apps --wm-window-animations-disabled --password-store=basic --disable-component-update --change-stack-guard-on-fork=disable --test-type=browser --disable-zero-browsers-open-for-tests --disable-updater-scheduler --ip-address-space-overrides=127.0.0.1:0=public,[::1]:0=public --use-fake-device-for-media-stream --browser-test --ipc-connection-timeout=60 --log-missing-unload-ack --dom-automation --log-gpu-control-list-decisions --disable-d3d11-warp --disable-backgrounding-occluded-windows --disable-ignore-duplicate-navs-for-testing --disable-gl-drawing-for-tests --override-use-software-gl-for-tests --force-color-profile=srgb --enable-features=*TestBlinkFeatureDefault,TestFeatureForBrowserTest1 --disable-features=ExtensionDisableUnsupportedDeveloper,PreconnectToSearch,RestartNetworkServiceUnsandboxedForFailedLaunch,SessionRestoreInfobar,TestFeatureForBrowserTest2 --disable-gpu-process-for-dx12-info-collection --disable-platform-accessibility-integration --ozone-platform=x11 --flag-switches-begin --flag-switches-end about:blank` === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780460588.829862 16402 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: MiraclePtr Status: NOT PROTECTED No raw_ptr access to this region was detected prior to this crash. This crash is still exploitable with MiraclePtr. Refer to https://chromium.googlesource.com/chromium/src/+/main/base/memory/raw_ptr.md for details. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780460588.829892 16402 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==16402==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780460588.830261 16402 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==16402==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31