[1180:1180:0614/040953.379185:INFO:CONSOLE:33] "[poc] pressing at (398,114)  rect={"x":38,"y":99.4375,"width":400,"height":30,"top":99.4375,"right":438,"bottom":129.4375,"left":38}", source: http://127.0.0.1:8765/poc.html (33)
[1180:1180:0614/040953.578229:INFO:CONSOLE:33] "[poc] input fired; calling fs.moveBefore(L0, L1)", source: http://127.0.0.1:8765/poc.html (33)
[1311:1311:0614/040953.580066:FATAL:third_party/blink/renderer/core/html/html_frame_owner_element.cc:214] Security CHECK failed: !ContentFrame() || GetDocument().StatePreservingAtomicMoveInProgress().
    #0 0x57fb0439e96a in ___interceptor_backtrace ??:0:0
    #1 0x57fb1d1c5a98 in base::debug::CollectStackTrace(base::span<void const*, 18446744073709551615ul, void const**>) ./../../base/debug/stack_trace_posix.cc:1052:7
    #2 0x57fb1d182377 in base::debug::StackTrace::StackTrace() ./../../base/debug/stack_trace.cc:280:20
    #3 0x57fb1ce8b57b in logging::LogMessage::Flush() ./../../base/logging.cc:708:29
    #4 0x57fb1ce8d239 in logging::LogMessageFatal::~LogMessageFatal() ./../../base/logging.cc:1052:3
    #5 0x57fb2b695b56 in blink::HTMLFrameOwnerElement::InsertedInto(blink::ContainerNode&) ./../../third_party/blink/renderer/core/html/html_frame_owner_element.cc:213:3
    #6 0x57fb2b9a520f in blink::HTMLFrameElementBase::InsertedInto(blink::ContainerNode&) ./../../third_party/blink/renderer/core/html/html_frame_element_base.cc:181:26
    #7 0x57fb2b999a3b in blink::HTMLIFrameElement::InsertedInto(blink::ContainerNode&) ./../../third_party/blink/renderer/core/html/html_iframe_element.cc:534:29
    #8 0x57fb2e6f1473 in blink::ContainerNode::NotifyNodeInsertedInternal(blink::Node&, blink::BasicHeapVector<(blink::internal::HeapCollectionType)1, cppgc::internal::BasicMember<blink::Node, cppgc::internal::StrongMemberTag, cppgc::internal::DijkstraWriteBarrierPolicy, cppgc::internal::DisabledCheckingPolicy, cppgc::internal::CompressedPointer>, 11u>&) ./../../third_party/blink/renderer/core/dom/container_node.cc:1398:18
    #9 0x57fb2e6eb28f in void blink::ContainerNode::InsertNodeVector<blink::ContainerNode::AdoptAndAppendChild>(blink::BasicHeapVector<(blink::internal::HeapCollectionType)1, cppgc::internal::BasicMember<blink::Node, cppgc::internal::StrongMemberTag, cppgc::internal::DijkstraWriteBarrierPolicy, cppgc::internal::DisabledCheckingPolicy, cppgc::internal::CompressedPointer>, 11u> const&, blink::Node*, blink::ContainerNode::AdoptAndAppendChild const&, blink::BasicHeapVector<(blink::internal::HeapCollectionType)1, cppgc::internal::BasicMember<blink::Node, cppgc::internal::StrongMemberTag, cppgc::internal::DijkstraWriteBarrierPolicy, cppgc::internal::DisabledCheckingPolicy, cppgc::internal::CompressedPointer>, 11u>&) ./../../third_party/blink/renderer/core/dom/container_node.cc:407:9
    #10 0x57fb2e6e685e in blink::ContainerNode::AppendChild(blink::Node*, blink::ExceptionState&) ./../../third_party/blink/renderer/core/dom/container_node.cc:1225:5
    #12 0x57fb0f572654 in Builtins_CallApiCallbackGeneric ???:0:0
Task trace:
    #0 0x57fb2e2b917d in blink::MainThreadEventQueue::PostTaskToMainThread() ./../../third_party/blink/renderer/platform/widget/input/main_thread_event_queue.cc:763:7
Crash keys:
  "gpu_count" = "0"

[1180:1180:0614/040953.653402:INFO:CONSOLE:33] "[poc] change fired; inAtomicMove=true", source: http://127.0.0.1:8765/poc.html (33)
[1180:1180:0614/040953.654222:INFO:CONSOLE:33] "[poc] victim.isConnected=false contentWindow-alive=true", source: http://127.0.0.1:8765/poc.html (33)
[1180:1180:0614/040953.654863:INFO:CONSOLE:33] "[poc] moveBefore returned; changeRanInsideMove=true", source: http://127.0.0.1:8765/poc.html (33)
[1180:1180:0614/040953.655489:INFO:CONSOLE:33] "[poc] orphan iframe contentWindow alive: true (savedWindow: ok)", source: http://127.0.0.1:8765/poc.html (33)
[1180:1180:0614/040953.656114:INFO:CONSOLE:33] "[poc] re-inserting orphaned iframe -> SECURITY_CHECK should fail", source: http://127.0.0.1:8765/poc.html (33)
Received signal 6
    #0 0x57fb0439e96a in ___interceptor_backtrace ??:0:0
    #1 0x57fb1d1c5a98 in base::debug::CollectStackTrace(base::span<void const*, 18446744073709551615ul, void const**>) ./../../base/debug/stack_trace_posix.cc:1052:7
    #2 0x57fb1d182377 in base::debug::StackTrace::StackTrace() ./../../base/debug/stack_trace.cc:280:20
    #3 0x57fb1d1c4e9f in base::debug::(anonymous namespace)::StackDumpSignalHandler(int, siginfo_t*, void*) ./../../base/debug/stack_trace_posix.cc:484:3
    #4 0x7ce2cb440050 in __sigaction ??:?
    #5 0x7ce2cb48eeec in pthread_key_delete ??:?
    #6 0x7ce2cb43ffb2 in raise ??:0:0
    #7 0x7ce2cb42a472 in abort ??:0:0
    #8 0x57fb1d15590a in base::debug::BreakDebuggerAsyncSafe() ./../../base/debug/debugger_posix.cc:330:3
    #9 0x57fb348d09cb in base::internal::Invoker<base::internal::FunctorTraits<void (* const&)(char const*, int, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>)>, base::internal::BindState<false, true, false, void (*)(char const*, int, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>)>, void (char const*, int, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>)>::Run(base::internal::BindStateBase*, char const*, int, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>&&, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>&&) ./../../base/functional/bind_internal.h:673:12
    #10 0x57fb1ce8d0aa in base::RepeatingCallback<void (char const*, int, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>)>::Run(char const*, int, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>, std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>) const & ./../../base/functional/callback.h:346:12
    #11 0x57fb1ce8cd08 in logging::LogMessage::HandleFatal(unsigned long, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&) const ./../../base/logging.cc:1023:26
    #12 0x57fb1ce8c17a in logging::LogMessage::Flush() ./../../base/logging.cc:743:7
    #13 0x57fb1ce8d239 in logging::LogMessageFatal::~LogMessageFatal() ./../../base/logging.cc:1052:3
    #14 0x57fb2b695b56 in blink::HTMLFrameOwnerElement::InsertedInto(blink::ContainerNode&) ./../../third_party/blink/renderer/core/html/html_frame_owner_element.cc:213:3
    #15 0x57fb2b9a520f in blink::HTMLFrameElementBase::InsertedInto(blink::ContainerNode&) ./../../third_party/blink/renderer/core/html/html_frame_element_base.cc:181:26
    #16 0x57fb2b999a3b in blink::HTMLIFrameElement::InsertedInto(blink::ContainerNode&) ./../../third_party/blink/renderer/core/html/html_iframe_element.cc:534:29
    #17 0x57fb2e6f1473 in blink::ContainerNode::NotifyNodeInsertedInternal(blink::Node&, blink::BasicHeapVector<(blink::internal::HeapCollectionType)1, cppgc::internal::BasicMember<blink::Node, cppgc::internal::StrongMemberTag, cppgc::internal::DijkstraWriteBarrierPolicy, cppgc::internal::DisabledCheckingPolicy, cppgc::internal::CompressedPointer>, 11u>&) ./../../third_party/blink/renderer/core/dom/container_node.cc:1398:18
    #18 0x57fb2e6eb28f in void blink::ContainerNode::InsertNodeVector<blink::ContainerNode::AdoptAndAppendChild>(blink::BasicHeapVector<(blink::internal::HeapCollectionType)1, cppgc::internal::BasicMember<blink::Node, cppgc::internal::StrongMemberTag, cppgc::internal::DijkstraWriteBarrierPolicy, cppgc::internal::DisabledCheckingPolicy, cppgc::internal::CompressedPointer>, 11u> const&, blink::Node*, blink::ContainerNode::AdoptAndAppendChild const&, blink::BasicHeapVector<(blink::internal::HeapCollectionType)1, cppgc::internal::BasicMember<blink::Node, cppgc::internal::StrongMemberTag, cppgc::internal::DijkstraWriteBarrierPolicy, cppgc::internal::DisabledCheckingPolicy, cppgc::internal::CompressedPointer>, 11u>&) ./../../third_party/blink/renderer/core/dom/container_node.cc:407:9
    #19 0x57fb2e6e685e in blink::ContainerNode::AppendChild(blink::Node*, blink::ExceptionState&) ./../../third_party/blink/renderer/core/dom/container_node.cc:1225:5
    #21 0x57fb0f572654 in Builtins_CallApiCallbackGeneric ???:0:0
  r8: 000057fb3ef93ff0  r9: 00007fffffffff01 r10: 0000000000000008 r11: 0000000000000246
 r12: 0000000000000006 r13: 000078e2c81f2e80 r14: 00000f1c5903e5d0 r15: 00007922c95ecf30
  di: 000000000000051f  si: 000000000000051f  bp: 00007ce2ca27c380  bx: 000000000000051f
  dx: 0000000000000006  ax: 0000000000000000  cx: 00007ce2cb48eeec  sp: 00007ffe74c8eee0
  ip: 00007ce2cb48eeec efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000
 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]