Fix ubsan/coverage test to put coverage file in a subdirectory.

By default coverage is dumped to the current directory, which may not
always be writable.

llvm-svn: 272732