[.] Sanitizer coverage enabled. Counter map size: 11602737, Cmp map size: 262144
Note: Google Test filter = AppWindowFullscreenUAFTest.SetNativeWindowFullscreenUseAfterFree
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from AppWindowFullscreenUAFTest, where TypeParam = 
[ RUN      ] AppWindowFullscreenUAFTest.SetNativeWindowFullscreenUseAfterFree
[.] Sanitizer coverage enabled. Counter map size: 11602737, Cmp map size: 262144
[.] Sanitizer coverage enabled. Counter map size: 11602737, Cmp map size: 262144
[11522:11539:0527/071450.607357:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11522:11539:0527/071450.627246:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11522:11539:0527/071450.627316:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11522:11539:0527/071450.627368:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11522:11539:0527/071450.627407:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11522:11539:0527/071450.707490:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11556:11556:0527/071450.727920:WARNING:media/gpu/vaapi/vaapi_wrapper.cc:1648] drmGetDevices2() has not found any devices
[11556:11556:0527/071450.740545:WARNING:sandbox/policy/linux/sandbox_linux.cc:405] InitializeSandbox() called with multiple threads in process gpu-process.

(browser_tests:11522): dbind-WARNING **: 07:14:50.754: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory
[.] Sanitizer coverage enabled. Counter map size: 11602737, Cmp map size: 262144
[11522:11522:0527/071450.937889:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11522:11522:0527/071450.937991:WARNING:device/bluetooth/dbus/bluez_dbus_manager.cc:209] Floss manager service not available, cannot set Floss enable/disable.
[11522:11522:0527/071450.938026:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11522:11539:0527/071450.938064:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11522:11539:0527/071450.938130:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11522:11522:0527/071450.947636:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11522:11539:0527/071450.986677:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11522:11522:0527/071450.986811:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11522:11522:0527/071450.986864:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11522:11539:0527/071450.986749:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
[11522:11539:0527/071450.986980:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11522:11522:0527/071451.005138:WARNING:dbus/property.cc:94] Failed to connect to PropertiesChangedsignal.
[11522:11522:0527/071451.005363:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: 
[11522:11522:0527/071451.005375:WARNING:dbus/property.cc:174] GetAll request failed for: org.freedesktop.UPower.Device
[11522:11522:0527/071451.005415:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11522:11539:0527/071451.005535:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11522:11522:0527/071451.040744:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11522:11539:0527/071451.040859:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory
[11522:11522:0527/071451.060828:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[11522:11522:0527/071451.060858:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used.
LaunchProcess: failed to execvp:
xdg-desktop-menu
LaunchProcess: failed to execvp:
xdg-icon-resource
LaunchProcess: failed to execvp:
xdg-icon-resource
LaunchProcess: failed to execvp:
xdg-icon-resource
LaunchProcess: failed to execvp:
xdg-icon-resource
LaunchProcess: failed to execvp:
xdg-icon-resource
LaunchProcess: failed to execvp:
xdg-icon-resource
LaunchProcess: failed to execvp:
xdg-icon-resource
[11522:11536:0527/071451.413690:WARNING:chrome/browser/web_applications/os_integration/web_app_shortcut_linux.cc:186] Could not install icon chrome-hhpnbpgjfofhbdmdimjpiboijegecgln-Default.png at size 512.
LaunchProcess: failed to execvp:
xdg-desktop-menu
=================================================================
==11522==ERROR: AddressSanitizer: heap-use-after-free on address 0x6e749bd05c56 at pc 0x5c06a1b7a3cc bp 0x7ffcf26e7350 sp 0x7ffcf26e7348
READ of size 1 at 0x6e749bd05c56 thread T0 (browser_tests)
    #0 0x5c06a1b7a3cb in extensions::AppWindow::SetFullscreen(extensions::AppWindow::FullscreenType, bool) extensions/browser/app_window/app_window.cc:771:7
    #1 0x5c068758815d in AppWindowFullscreenUAFTest_SetNativeWindowFullscreenUseAfterFree_Test::RunTestOnMainThread() chrome/browser/apps/platform_apps/app_window_browsertest.cc:356:15
    #2 0x5c06ad799075 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9
    #3 0x5c06ad79efb1 in base::internal::Invoker<base::internal::FunctorTraits<void (content::BrowserTestBase::*&&)(), content::BrowserTestBase*>, base::internal::BindState<true, true, false, void (content::BrowserTestBase::*)(), base::internal::UnretainedWrapper<content::BrowserTestBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #4 0x5c069e674eda in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12
    #5 0x5c069e67d8ac in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15
    #6 0x5c069e66be2c in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28
    #7 0x5c06a62210fa in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:697:10
    #8 0x5c06a62252c8 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1331:10
    #9 0x5c06a6224753 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1162:12
    #10 0x5c06a621dd7b in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36
    #11 0x5c06a621e36c in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10
    #12 0x5c06ad796e32 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34
    #13 0x5c06ab252a7b in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:559:20
    #14 0x5c06a3a88621 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #15 0x5c06a3a8b8f7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #16 0x5c06a3a8d9f3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #17 0x5c06a3abd5ba in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #18 0x5c06a3abc08e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #19 0x5c06ab77993c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #20 0x5c06c80457a0 in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:101:22
    #21 0x5c06ad9a31a2 in content::LaunchTestsInternal(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:423:31
    #22 0x5c06ad9a3bd1 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:518:10
    #23 0x5c06c80461b1 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:360:10
    #24 0x5c06ab067d3b in main chrome/test/base/browser_tests_main.cc:60:10
    #25 0x71249d82b249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x6e749bd05c56 is located 470 bytes inside of 504-byte region [0x6e749bd05a80,0x6e749bd05c78)
freed by thread T0 (browser_tests) here:
    #0 0x5c0683048c56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x18f38c56) (BuildId: fc974c8c124affb6)
    #1 0x5c06a1b78afb in extensions::AppWindow::OnNativeClose() extensions/browser/app_window/app_window.cc:517:3
    #2 0x5c06c6f8e8d3 in base::internal::Invoker<base::internal::FunctorTraits<native_app_window::NativeAppWindowViews::Init(extensions::AppWindow*, extensions::AppWindow::CreateParams const&)::$_0&&, native_app_window::NativeAppWindowViews*&&>, base::internal::BindState<false, false, false, native_app_window::NativeAppWindowViews::Init(extensions::AppWindow*, extensions::AppWindow::CreateParams const&)::$_0, base::internal::UnretainedWrapper<native_app_window::NativeAppWindowViews, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) extensions/components/native_app_window/native_app_window_views.cc:52:61
    #3 0x5c06af8f47c2 in views::WidgetDelegate::DeleteDelegate() base/functional/callback.h:155:12
    #4 0x5c06af8beca0 in views::Widget::HandleWidgetDestroyed() ui/views/widget/widget.cc:2869:23
    #5 0x5c06af8da1c5 in views::Widget::OnNativeWidgetDestroyed() ui/views/widget/widget.cc:2027:3
    #6 0x5c06af9a7185 in views::DesktopNativeWidgetAura::OnHostClosed() ui/views/widget/desktop_aura/desktop_native_widget_aura.cc:393:30
    #7 0x5c06af9eede1 in views::DesktopWindowTreeHostPlatform::OnClosed() ui/views/widget/desktop_aura/desktop_window_tree_host_platform.cc:1035:32
    #8 0x5c06af9e52d4 in views::DesktopWindowTreeHostPlatform::CloseNow() ui/views/widget/desktop_aura/desktop_window_tree_host_platform.cc:450:22
    #9 0x5c06af8cbae1 in views::Widget::CloseNow() ui/views/widget/widget.cc:1050:21
    #10 0x5c06a1b7a26a in extensions::AppWindow::SetFullscreen(extensions::AppWindow::FullscreenType, bool) extensions/browser/app_window/app_window.cc:856:23
    #11 0x5c068758815d in AppWindowFullscreenUAFTest_SetNativeWindowFullscreenUseAfterFree_Test::RunTestOnMainThread() chrome/browser/apps/platform_apps/app_window_browsertest.cc:356:15
    #12 0x5c06ad799075 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9
    #13 0x5c06ad79efb1 in base::internal::Invoker<base::internal::FunctorTraits<void (content::BrowserTestBase::*&&)(), content::BrowserTestBase*>, base::internal::BindState<true, true, false, void (content::BrowserTestBase::*)(), base::internal::UnretainedWrapper<content::BrowserTestBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #14 0x5c069e674eda in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12
    #15 0x5c069e67d8ac in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15
    #16 0x5c069e66be2c in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28
    #17 0x5c06a62210fa in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:697:10
    #18 0x5c06a62252c8 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1331:10
    #19 0x5c06a6224753 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1162:12
    #20 0x5c06a621dd7b in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36
    #21 0x5c06a621e36c in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10
    #22 0x5c06ad796e32 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34
    #23 0x5c06ab252a7b in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:559:20
    #24 0x5c06a3a88621 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #25 0x5c06a3a8b8f7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #26 0x5c06a3a8d9f3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #27 0x5c06a3abd5ba in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #28 0x5c06a3abc08e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #29 0x5c06ab77993c in base::TestSuite::Run() base/test/test_suite.cc:440:16

previously allocated by thread T0 (browser_tests) here:
    #0 0x5c0683048051 in operator new(unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x18f38051) (BuildId: fc974c8c124affb6)
    #1 0x5c06a684c41e in ChromeAppWindowClient::CreateAppWindow(content::BrowserContext*, extensions::Extension const*) chrome/browser/ui/apps/chrome_app_window_client.cc:46:10
    #2 0x5c06a36bdb60 in extensions::AppWindowCreateFunction::Run() extensions/browser/api/app_window/app_window_api.cc:380:31
    #3 0x5c06a18fc66c in ExtensionFunction::RunWithValidation() extensions/browser/extension_function.cc:494:10
    #4 0x5c06a190d5c0 in extensions::ExtensionFunctionDispatcher::DispatchWithCallbackInternal(mojo::StructPtr<extensions::mojom::RequestParams>, content::RenderFrameHost*, content::RenderProcessHost&, base::OnceCallback<void (ExtensionFunction::ResponseType, base::ListValue, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, mojo::StructPtr<extensions::mojom::ExtraResponseData>)>) extensions/browser/extension_function_dispatcher.cc:460:15
    #5 0x5c06a190b87e in extensions::ExtensionFunctionDispatcher::Dispatch(mojo::StructPtr<extensions::mojom::RequestParams>, content::RenderFrameHost&, base::OnceCallback<void (bool, base::ListValue, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, mojo::StructPtr<extensions::mojom::ExtraResponseData>)>) extensions/browser/extension_function_dispatcher.cc:194:3
    #6 0x5c06a18f399f in extensions::ExtensionFrameHost::Request(mojo::StructPtr<extensions::mojom::RequestParams>, base::OnceCallback<void (bool, base::ListValue, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, mojo::StructPtr<extensions::mojom::ExtraResponseData>)>) extensions/browser/extension_frame_host.cc:98:9
    #7 0x5c06922f427e in extensions::mojom::LocalFrameHostStubDispatch::AcceptWithResponder(extensions::mojom::LocalFrameHost*, mojo::Message*, std::__Cr::unique_ptr<mojo::MessageReceiverWithStatus, std::__Cr::default_delete<mojo::MessageReceiverWithStatus>>) gen/extensions/common/mojom/frame.mojom.cc:4249:13
    #8 0x5c06b067eb0b in mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:1036:56
    #9 0x5c06b069c7c3 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:51:24
    #10 0x5c06b0684e53 in mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:747:20
    #11 0x5c06b11cb8a3 in IPC::ChannelAssociatedGroupController::AcceptOnEndpointThread(mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification) ipc/ipc_mojo_bootstrap.cc:1199:24
    #12 0x5c06b11cdd25 in base::internal::Invoker<base::internal::FunctorTraits<void (IPC::ChannelAssociatedGroupController::*&&)(mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification), IPC::ChannelAssociatedGroupController*&&, mojo::Message&&, IPC::(anonymous namespace)::ScopedUrgentMessageNotification&&>, base::internal::BindState<true, true, false, void (IPC::ChannelAssociatedGroupController::*)(mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification), scoped_refptr<IPC::ChannelAssociatedGroupController>, mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #13 0x5c06ab48afe3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #14 0x5c06ab4fae0c in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #15 0x5c06ab4f9caa in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:336:40
    #16 0x5c06ab6bac84 in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_glib.cc:782:48
    #17 0x5c06ab4fc4f4 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:640:12
    #18 0x5c06ab407d70 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14
    #19 0x5c06c7c9a7cb in ExtensionTestMessageListener::WaitUntilSatisfied(base::RunLoop::Type) extensions/test/extension_test_message_listener.cc:43:18
    #20 0x5c06ab0f6810 in extensions::PlatformAppBrowserTest::LoadAndLaunchPlatformApp(char const*, ExtensionTestMessageListener*) chrome/browser/apps/platform_apps/app_browsertest_util.cc:127:25
    #21 0x5c06ab0f6d2f in extensions::PlatformAppBrowserTest::LoadAndLaunchPlatformApp(char const*, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&) chrome/browser/apps/platform_apps/app_browsertest_util.cc:138:7
    #22 0x5c06875880a0 in AppWindowFullscreenUAFTest_SetNativeWindowFullscreenUseAfterFree_Test::RunTestOnMainThread() chrome/browser/apps/platform_apps/app_window_browsertest.cc:325:3
    #23 0x5c06ad799075 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9
    #24 0x5c06ad79efb1 in base::internal::Invoker<base::internal::FunctorTraits<void (content::BrowserTestBase::*&&)(), content::BrowserTestBase*>, base::internal::BindState<true, true, false, void (content::BrowserTestBase::*)(), base::internal::UnretainedWrapper<content::BrowserTestBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #25 0x5c069e674eda in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12
    #26 0x5c069e67d8ac in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15
    #27 0x5c069e66be2c in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28
    #28 0x5c06a62210fa in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:697:10
    #29 0x5c06a62252c8 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1331:10

Shadow bytes around the buggy address:
  0x6e749bd05980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6e749bd05a00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa f7 fa
  0x6e749bd05a80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6e749bd05b00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6e749bd05b80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x6e749bd05c00: fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd fd fa
  0x6e749bd05c80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa f7 fa
  0x6e749bd05d00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6e749bd05d80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6e749bd05e00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x6e749bd05e80: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
E0000 00:00:1779866094.085188   11522 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==11522==ADDITIONAL INFO
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779866094.085269   11522 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==11522==Note: Please include this section with the ASan report.
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779866094.085301   11522 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace:
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779866094.085327   11522 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779866094.085436   11522 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
Command line: `out/asan/browser_tests --disable-gpu-process-for-dx12-info-collection --gtest_filter=AppWindowFullscreenUAFTest.SetNativeWindowFullscreenUseAfterFree --no-sandbox --ozone-platform=headless --single-process-tests --user-data-dir=/tmp/org.chromium.Chromium.scoped_dir.ZrVfuM --disable-auto-reload --no-first-run --enable-logging=stderr --disable-default-apps --wm-window-animations-disabled --password-store=basic --disable-component-update --change-stack-guard-on-fork=disable --test-type=browser --disable-zero-browsers-open-for-tests --disable-updater-scheduler --ip-address-space-overrides=127.0.0.1:0=public,[::1]:0=public --use-fake-device-for-media-stream --browser-test --ipc-connection-timeout=60 --log-missing-unload-ack --dom-automation --log-gpu-control-list-decisions --disable-d3d11-warp --disable-backgrounding-occluded-windows --disable-ignore-duplicate-navs-for-testing --disable-gl-drawing-for-tests --override-use-software-gl-for-tests --force-color-profile=srgb --enable-features=*TestBlinkFeatureDefault,TestFeatureForBrowserTest1 --disable-features=ExtensionDisableUnsupportedDeveloper,PreconnectToSearch,Prewarm,RestartNetworkServiceUnsandboxedForFailedLaunch,SessionRestoreInfobar,TestFeatureForBrowserTest2 --disable-gpu-process-for-dx12-info-collection --disable-platform-accessibility-integration --flag-switches-begin --flag-switches-end about:blank`

=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779866094.085471   11522 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
MiraclePtr Status: NOT PROTECTED
No raw_ptr<T> access to this region was detected prior to this crash.
This crash is still exploitable with MiraclePtr.
Refer to https://chromium.googlesource.com/chromium/src/+/main/base/memory/raw_ptr.md for details.
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779866094.085494   11522 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==11522==END OF ADDITIONAL INFO
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1779866094.085528   11522 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==11522==ABORTING
=== Source Location Trace: ===
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31