Chromium	140.0.7305.0 (Developer Build) (64-bit) 
Revision	0000000000000000000000000000000000000000-0000000000000000000000000000000000000000
OS	Windows 11 Version 24H2 (Build 26100.4946)
JavaScript	V8 14.0.264

=================================================================
==37400==ERROR: AddressSanitizer: heap-use-after-free on address 0x1197f7be4748 at pc 0x7ff995df63f7 bp 0x005f5b3fa040 sp 0x005f5b3fa088
READ of size 8 at 0x1197f7be4748 thread T0
    #0 0x7ff995df63f6 in std::__Cr::__tree_next_iter C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:191
    #1 0x7ff995df63f6 in std::__Cr::__tree_iterator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::__tree_node<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,void *> *,long long>::operator++ C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:655
    #2 0x7ff995df63f6 in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::__remove_node_pointer C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1807
    #3 0x7ff995df63f6 in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::erase C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1937
    #4 0x7ff995df63f6 in std::__Cr::set<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::erase C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\set:772
    #5 0x7ff995df63f6 in content::ServiceWorkerVersion::FinishRequestWithFetchCount(int, bool, unsigned int) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:852:21
    #6 0x7ff995c78770 in base::internal::DecayedFunctorTraits<void (ResponseCallback::*)(),content::ServiceWorkerFetchDispatcher::ResponseCallback *>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #7 0x7ff995c78770 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (ResponseCallback::*&&)(),content::ServiceWorkerFetchDispatcher::ResponseCallback *>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #8 0x7ff995c78770 in base::internal::Invoker<base::internal::FunctorTraits<void (ResponseCallback::*&&)(),content::ServiceWorkerFetchDispatcher::ResponseCallback *>,base::internal::BindState<1,1,0,void (ResponseCallback::*)(),base::internal::UnretainedWrapper<content::ServiceWorkerFetchDispatcher::ResponseCallback,base::unretained_traits::MayNotDangle,0> >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #9 0x7ff995c78770 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerFetchDispatcher::ResponseCallback::*&&)(void), class content::ServiceWorkerFetchDispatcher::ResponseCallback *>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerFetchDispatcher::ResponseCallback::*)(void), class base::internal::UnretainedWrapper<class content::ServiceWorkerFetchDispatcher::ResponseCallback, struct base::unretained_traits::MayNotDangle, 0>>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #10 0x7ff99dfeffcb in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #11 0x7ff99dfeffcb in mojo::InterfaceEndpointClient::NotifyError(class std::__Cr::optional<struct mojo::DisconnectReason> const &) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc:769:31
    #12 0x7ff99dfd3e33 in mojo::internal::MultiplexRouter::ProcessNotifyErrorTask(struct mojo::internal::MultiplexRouter::Task *, enum mojo::internal::MultiplexRouter::ClientCallBehavior, class base::SequencedTaskRunner *) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\multiplex_router.cc:1034:13
    #13 0x7ff99dfca294 in mojo::internal::MultiplexRouter::ProcessTasks(enum mojo::internal::MultiplexRouter::ClientCallBehavior, class base::SequencedTaskRunner *) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\multiplex_router.cc:947:15
    #14 0x7ff99dfc4752 in mojo::internal::MultiplexRouter::OnPipeConnectionError(bool) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\multiplex_router.cc:856:3
    #15 0x7ff99dfd71b8 in base::internal::DecayedFunctorTraits<void (MultiplexRouter::*)(bool),mojo::internal::MultiplexRouter *,bool &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #16 0x7ff99dfd71b8 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (MultiplexRouter::*&&)(bool),mojo::internal::MultiplexRouter *,bool &&>,void,0,1>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #17 0x7ff99dfd71b8 in base::internal::Invoker<base::internal::FunctorTraits<void (MultiplexRouter::*&&)(bool),mojo::internal::MultiplexRouter *,bool &&>,base::internal::BindState<1,1,0,void (MultiplexRouter::*)(bool),base::internal::UnretainedWrapper<mojo::internal::MultiplexRouter,base::unretained_traits::MayNotDangle,0>,bool>,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #18 0x7ff99dfd71b8 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl mojo::internal::MultiplexRouter::*&&)(bool), class mojo::internal::MultiplexRouter *, bool &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl mojo::internal::MultiplexRouter::*)(bool), class base::internal::UnretainedWrapper<class mojo::internal::MultiplexRouter, struct base::unretained_traits::MayNotDangle, 0>, bool>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #19 0x7ff99e00d0aa in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #20 0x7ff99e00d0aa in mojo::Connector::HandleError(bool, bool) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\connector.cc:689:44
    #21 0x7ff99e00f057 in mojo::Connector::OnHandleReadyInternal C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\connector.cc:446
    #22 0x7ff99e00f057 in mojo::Connector::OnWatcherHandleReady(char const *, unsigned int) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\connector.cc:416:3
    #23 0x7ff99e010fb3 in base::internal::DecayedFunctorTraits<void (Connector::*)(const char *, unsigned int),mojo::Connector *,const char *const &>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #24 0x7ff99e010fb3 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (Connector::*const &)(const char *, unsigned int),mojo::Connector *,const char *const &>,void,0,1>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #25 0x7ff99e010fb3 in base::internal::Invoker<base::internal::FunctorTraits<void (Connector::*const &)(const char *, unsigned int),mojo::Connector *,const char *const &>,base::internal::BindState<1,1,0,void (Connector::*)(const char *, unsigned int),base::internal::UnretainedWrapper<mojo::Connector,base::unretained_traits::MayNotDangle,0>,base::internal::UnretainedWrapper<const char,base::unretained_traits::MayNotDangle,0> >,void (unsigned int)>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #26 0x7ff99e010fb3 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl mojo::Connector::*const &)(char const *, unsigned int), class mojo::Connector *, char const *const &>, struct base::internal::BindState<1, 1, 0, void (__cdecl mojo::Connector::*)(char const *, unsigned int), class base::internal::UnretainedWrapper<class mojo::Connector, struct base::unretained_traits::MayNotDangle, 0>, class base::internal::UnretainedWrapper<char const, struct base::unretained_traits::MayNotDangle, 0>>, (unsigned int)>::Run(class base::internal::BindStateBase *, unsigned int) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:980:12
    #27 0x7ff98f3e9cbc in base::RepeatingCallback<(unsigned int)>::Run(unsigned int) const & C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:344:12
    #28 0x7ff98f3e9aaf in base::internal::DecayedFunctorTraits<void (*)(const base::RepeatingCallback<void (unsigned int)> &, unsigned int, const mojo::HandleSignalsState &),const base::RepeatingCallback<void (unsigned int)> &>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:664
    #29 0x7ff98f3e9aaf in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (*const &)(const base::RepeatingCallback<void (unsigned int)> &, unsigned int, const mojo::HandleSignalsState &),const base::RepeatingCallback<void (unsigned int)> &>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #30 0x7ff98f3e9aaf in base::internal::Invoker<base::internal::FunctorTraits<void (*const &)(const base::RepeatingCallback<void (unsigned int)> &, unsigned int, const mojo::HandleSignalsState &),const base::RepeatingCallback<void (unsigned int)> &>,base::internal::BindState<0,1,0,void (*)(const base::RepeatingCallback<void (unsigned int)> &, unsigned int, const mojo::HandleSignalsState &),base::RepeatingCallback<void (unsigned int)> >,void (unsigned int, const mojo::HandleSignalsState &)>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #31 0x7ff98f3e9aaf in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl *const &)(class base::RepeatingCallback<(unsigned int)> const &, unsigned int, struct mojo::HandleSignalsState const &), class base::RepeatingCallback<void __cdecl(unsigned int)> const &>, struct base::internal::BindState<0, 1, 0, void (__cdecl *)(class base::RepeatingCallback<(unsigned int)> const &, unsigned int, struct mojo::HandleSignalsState const &), class base::RepeatingCallback<void __cdecl(unsigned int)>>, (unsigned int, struct mojo::HandleSignalsState const &)>::Run(class base::internal::BindStateBase *, unsigned int, struct mojo::HandleSignalsState const &) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:980:12
    #32 0x7ff99e7ae29b in base::RepeatingCallback<(unsigned int, struct mojo::HandleSignalsState const &)>::Run(unsigned int, struct mojo::HandleSignalsState const &) const & C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:344:12
    #33 0x7ff99e7adb95 in mojo::SimpleWatcher::OnHandleReady(int, unsigned int, struct mojo::HandleSignalsState const &) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\system\simple_watcher.cc:278:14
    #34 0x7ff99e7aedc8 in base::internal::DecayedFunctorTraits<void (SimpleWatcher::*)(int, unsigned int, const mojo::HandleSignalsState &),base::WeakPtr<mojo::SimpleWatcher> &&,int &&,unsigned int &&,mojo::HandleSignalsState &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #35 0x7ff99e7aedc8 in base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (SimpleWatcher::*&&)(int, unsigned int, const mojo::HandleSignalsState &),base::WeakPtr<mojo::SimpleWatcher> &&,int &&,unsigned int &&,mojo::HandleSignalsState &&>,void,0,1,2,3>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947
    #36 0x7ff99e7aedc8 in base::internal::Invoker<base::internal::FunctorTraits<void (SimpleWatcher::*&&)(int, unsigned int, const mojo::HandleSignalsState &),base::WeakPtr<mojo::SimpleWatcher> &&,int &&,unsigned int &&,mojo::HandleSignalsState &&>,base::internal::BindState<1,1,0,void (SimpleWatcher::*)(int, unsigned int, const mojo::HandleSignalsState &),base::WeakPtr<mojo::SimpleWatcher>,int,unsigned int,mojo::HandleSignalsState>,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #37 0x7ff99e7aedc8 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl mojo::SimpleWatcher::*&&)(int, unsigned int, struct mojo::HandleSignalsState const &), class base::WeakPtr<class mojo::SimpleWatcher> &&, int &&, unsigned int &&, struct mojo::HandleSignalsState &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl mojo::SimpleWatcher::*)(int, unsigned int, struct mojo::HandleSignalsState const &), class base::WeakPtr<class mojo::SimpleWatcher>, int, unsigned int, struct mojo::HandleSignalsState>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #38 0x7ff99e29a783 in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #39 0x7ff99e29a783 in base::TaskAnnotator::RunTaskImpl(struct base::PendingTask &) C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.cc:207:34
    #40 0x7ff99e26db49 in base::TaskAnnotator::RunTask C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.h:104
    #41 0x7ff99e26db49 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(class base::LazyNow *) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:456:23
    #42 0x7ff99e26c9ef in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork(void) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:330:40
    #43 0x7ff99e10b6d0 in base::MessagePumpForUI::DoRunLoop(void) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:260:67
    #44 0x7ff99e109098 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:87:3
    #45 0x7ff99e26f881 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, class base::TimeDelta) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:629:12
    #46 0x7ff99e30c43e in base::RunLoop::Run(class base::Location const &) C:\b\s\w\ir\cache\builder\src\base\run_loop.cc:134:14
    #47 0x7ff9945151bd in content::BrowserMainLoop::RunMainMessageLoop(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_loop.cc:1108:18
    #48 0x7ff99451ce39 in content::BrowserMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_runner_impl.cc:156:15
    #49 0x7ff99450b9dc in content::BrowserMain(struct content::MainFunctionParams) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main.cc:32:28
    #50 0x7ff99a9e4162 in content::RunBrowserProcessMain(struct content::MainFunctionParams, class content::ContentMainDelegate *) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:699:10
    #51 0x7ff99a9e71d7 in content::ContentMainRunnerImpl::RunBrowser(struct content::MainFunctionParams, bool) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1266:10
    #52 0x7ff99a9e69de in content::ContentMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1121:12
    #53 0x7ff99a9da998 in content::RunContentProcess(struct content::ContentMainParams, class content::ContentMainRunner *) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:361:36
    #54 0x7ff99a9db55d in content::ContentMain(struct content::ContentMainParams) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:374:10
    #55 0x7ff98b592b0b in ChromeMain C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_main.cc:222:12
    #56 0x7ff75f82479b in MainDllLoader::Launch(struct HINSTANCE__*, class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\chrome\app\main_dll_loader_win.cc:201:12
    #57 0x7ff75f82200c in main C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_exe_main_win.cc:352:20
    #58 0x7ff75fcddafb in invoke_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:78
    #59 0x7ff75fcddafb in __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
    #60 0x7ffae2b6e8d6  (C:\WINDOWS\System32\KERNEL32.DLL+0x18002e8d6)
    #61 0x7ffae411c34b  (C:\WINDOWS\SYSTEM32\ntdll.dll+0x18003c34b)

0x1197f7be4748 is located 8 bytes inside of 56-byte region [0x1197f7be4740,0x1197f7be4778)
freed by thread T0 here:
    #0 0x7ff9e982c584  (C:\AsanBuilds\win32-release_x64_asan-win32-release_x64-1489125\clang_rt.asan_dynamic-x86_64.dll+0x18005c584)
    #1 0x7ff995e18153 in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::~__tree C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1428
    #2 0x7ff995e18153 in std::__Cr::set<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::~set C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\set:706
    #3 0x7ff995e18153 in content::ServiceWorkerVersion::OnTimeoutTimer(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:2612:1
    #4 0x7ff995e30b10 in base::internal::DecayedFunctorTraits<void (ServiceWorkerVersion::*)(),content::ServiceWorkerVersion *>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #5 0x7ff995e30b10 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (ServiceWorkerVersion::*&&)(),content::ServiceWorkerVersion *>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #6 0x7ff995e30b10 in base::internal::Invoker<base::internal::FunctorTraits<void (ServiceWorkerVersion::*&&)(),content::ServiceWorkerVersion *>,base::internal::BindState<1,1,0,void (ServiceWorkerVersion::*)(),base::internal::UnretainedWrapper<content::ServiceWorkerVersion,base::unretained_traits::MayNotDangle,0> >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #7 0x7ff995e30b10 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerVersion::*&&)(void), class content::ServiceWorkerVersion *>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerVersion::*)(void), class base::internal::UnretainedWrapper<class content::ServiceWorkerVersion, struct base::unretained_traits::MayNotDangle, 0>>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #8 0x7ff99e1985f2 in base::RepeatingCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:344
    #9 0x7ff99e1985f2 in base::RepeatingTimer::RunUserTask(void) C:\b\s\w\ir\cache\builder\src\base\timer\timer.cc:215:8
    #10 0x7ff99e19a4d5 in base::internal::DecayedFunctorTraits<void (DelayTimerBase::*)(),base::internal::DelayTimerBase *>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #11 0x7ff99e19a4d5 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (DelayTimerBase::*const &)(),base::internal::DelayTimerBase *>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #12 0x7ff99e19a4d5 in base::internal::Invoker<base::internal::FunctorTraits<void (DelayTimerBase::*const &)(),base::internal::DelayTimerBase *>,base::internal::BindState<1,1,0,void (DelayTimerBase::*)(),base::internal::UnretainedWrapper<base::internal::DelayTimerBase,base::unretained_traits::MayNotDangle,0> >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #13 0x7ff99e19a4d5 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl base::internal::DelayTimerBase::*const &)(void), class base::internal::DelayTimerBase *>, struct base::internal::BindState<1, 1, 0, void (__cdecl base::internal::DelayTimerBase::*)(void), class base::internal::UnretainedWrapper<class base::internal::DelayTimerBase, struct base::unretained_traits::MayNotDangle, 0>>, (void)>::Run(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:980:12
    #14 0x7ff99e29a783 in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #15 0x7ff99e29a783 in base::TaskAnnotator::RunTaskImpl(struct base::PendingTask &) C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.cc:207:34
    #16 0x7ff99e26db49 in base::TaskAnnotator::RunTask C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.h:104
    #17 0x7ff99e26db49 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(class base::LazyNow *) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:456:23
    #18 0x7ff99e26c9ef in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork(void) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:330:40
    #19 0x7ff99e10b6d0 in base::MessagePumpForUI::DoRunLoop(void) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:260:67
    #20 0x7ff99e109098 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:87:3
    #21 0x7ff99e26f881 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, class base::TimeDelta) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:629:12
    #22 0x7ff99e30c43e in base::RunLoop::Run(class base::Location const &) C:\b\s\w\ir\cache\builder\src\base\run_loop.cc:134:14
    #23 0x7ff9945151bd in content::BrowserMainLoop::RunMainMessageLoop(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_loop.cc:1108:18
    #24 0x7ff99451ce39 in content::BrowserMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_runner_impl.cc:156:15
    #25 0x7ff99450b9dc in content::BrowserMain(struct content::MainFunctionParams) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main.cc:32:28
    #26 0x7ff99a9e4162 in content::RunBrowserProcessMain(struct content::MainFunctionParams, class content::ContentMainDelegate *) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:699:10
    #27 0x7ff99a9e71d7 in content::ContentMainRunnerImpl::RunBrowser(struct content::MainFunctionParams, bool) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1266:10
    #28 0x7ff99a9e69de in content::ContentMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1121:12
    #29 0x7ff99a9da998 in content::RunContentProcess(struct content::ContentMainParams, class content::ContentMainRunner *) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:361:36
    #30 0x7ff99a9db55d in content::ContentMain(struct content::ContentMainParams) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:374:10
    #31 0x7ff98b592b0b in ChromeMain C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_main.cc:222:12
    #32 0x7ff75f82479b in MainDllLoader::Launch(struct HINSTANCE__*, class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\chrome\app\main_dll_loader_win.cc:201:12
    #33 0x7ff75f82200c in main C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_exe_main_win.cc:352:20
    #34 0x7ff75fcddafb in invoke_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:78
    #35 0x7ff75fcddafb in __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
    #36 0x7ffae2b6e8d6  (C:\WINDOWS\System32\KERNEL32.DLL+0x18002e8d6)
    #37 0x7ffae411c34b  (C:\WINDOWS\SYSTEM32\ntdll.dll+0x18003c34b)

previously allocated by thread T0 here:
    #0 0x7ff9e982b99d  (C:\AsanBuilds\win32-release_x64_asan-win32-release_x64-1489125\clang_rt.asan_dynamic-x86_64.dll+0x18005b99d)
    #1 0x7ff995e34d5c in std::__Cr::__libcpp_allocate C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__new\allocate.h:43
    #2 0x7ff995e34d5c in std::__Cr::allocator<std::__Cr::__tree_node<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,void *> >::allocate C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\allocator.h:105
    #3 0x7ff995e34d5c in std::__Cr::allocator_traits<std::__Cr::allocator<std::__Cr::__tree_node<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,void *> > >::allocate C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\allocator_traits.h:259
    #4 0x7ff995e34d5c in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::__construct_node C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1708
    #5 0x7ff995e34d5c in std::__Cr::__tree<struct content::ServiceWorkerVersion::InflightRequestTimeoutInfo, struct std::__Cr::less<struct content::ServiceWorkerVersion::InflightRequestTimeoutInfo>, class std::__Cr::allocator<struct content::ServiceWorkerVersion::InflightRequestTimeoutInfo>>::__emplace_unique_impl<int const &, enum content::ServiceWorkerMetrics::EventType const &, class base::TimeTicks const &, enum content::ServiceWorkerVersion::TimeoutBehavior const &>(int const &, enum content::ServiceWorkerMetrics::EventType const &, class base::TimeTicks const &, enum content::ServiceWorkerVersion::TimeoutBehavior const &) C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1718:23
    #6 0x7ff995df5202 in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::__emplace_unique C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:949
    #7 0x7ff995df5202 in std::__Cr::set<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::emplace C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\set:731
    #8 0x7ff995df5202 in content::ServiceWorkerVersion::StartRequestWithCustomTimeout(enum content::ServiceWorkerMetrics::EventType, class base::OnceCallback<(enum blink::ServiceWorkerStatusCode)>, class base::TimeDelta const &, enum content::ServiceWorkerVersion::TimeoutBehavior) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:776:48
    #9 0x7ff995df493f in content::ServiceWorkerVersion::StartRequest(enum content::ServiceWorkerMetrics::EventType, class base::OnceCallback<(enum blink::ServiceWorkerStatusCode)>) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:724:10
    #10 0x7ff995c689f7 in content::ServiceWorkerFetchDispatcher::DispatchFetchEvent(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_fetch_dispatcher.cc:592:34
    #11 0x7ff995c678ba in content::ServiceWorkerFetchDispatcher::StartWorker(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_fetch_dispatcher.cc:530:5
    #12 0x7ff995c671ac in content::ServiceWorkerFetchDispatcher::Run(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_fetch_dispatcher.cc:502:3
    #13 0x7ff995cc1b90 in content::ServiceWorkerMainResourceLoader::StartRequest(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_main_resource_loader.cc:417:22
    #14 0x7ff995c5d7d6 in base::internal::DecayedFunctorTraits<void (ServiceWorkerMainResourceLoader::*)(mojo::PendingReceiver<network::mojom::URLLoader>, int, unsigned int, const network::ResourceRequest &, mojo::PendingRemote<network::mojom::URLLoaderClient>, const net::MutableNetworkTrafficAnnotationTag &),base::WeakPtr<content::ServiceWorkerMainResourceLoader> &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #15 0x7ff995c5d7d6 in base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (ServiceWorkerMainResourceLoader::*&&)(mojo::PendingReceiver<network::mojom::URLLoader>, int, unsigned int, const network::ResourceRequest &, mojo::PendingRemote<network::mojom::URLLoaderClient>, const net::MutableNetworkTrafficAnnotationTag &),base::WeakPtr<content::ServiceWorkerMainResourceLoader> &&>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947
    #16 0x7ff995c5d7d6 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerMainResourceLoader::*&&)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class base::WeakPtr<class content::ServiceWorkerMainResourceLoader> &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerMainResourceLoader::*)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class base::WeakPtr<class content::ServiceWorkerMainResourceLoader>>, (class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &)>::RunImpl<void (__cdecl content::ServiceWorkerMainResourceLoader::*)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class std::__Cr::tuple<class base::WeakPtr<class content::ServiceWorkerMainResourceLoader>>, 0>(void (__cdecl content::ServiceWorkerMainResourceLoader::*&&)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class std::__Cr::tuple<class base::WeakPtr<class content::ServiceWorkerMainResourceLoader>> &&, struct std::__Cr::integer_sequence<unsigned __int64, 0>, class mojo::PendingReceiver<class network::mojom::URLLoader> &&, int &&, unsigned int &&, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient> &&, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060:14
    #17 0x7ff995c5d55d in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerMainResourceLoader::*&&)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class base::WeakPtr<class content::ServiceWorkerMainResourceLoader> &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerMainResourceLoader::*)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class base::WeakPtr<class content::ServiceWorkerMainResourceLoader>>, (class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &)>::RunOnce(class base::internal::BindStateBase *, class mojo::PendingReceiver<class network::mojom::URLLoader> &&, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient> &&, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #18 0x7ff9a16815da in base::OnceCallback<void (mojo::PendingReceiver<network::mojom::URLLoader>, int, unsigned int, const network::ResourceRequest &, mojo::PendingRemote<network::mojom::URLLoaderClient>, const net::MutableNetworkTrafficAnnotationTag &)>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #19 0x7ff9a16815da in network::SingleRequestURLLoaderFactory::HandlerState::CreateLoaderAndStart(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\services\network\public\cpp\single_request_url_loader_factory.cc:46:25
    #20 0x7ff9a16812f0 in network::SingleRequestURLLoaderFactory::CreateLoaderAndStart(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\services\network\public\cpp\single_request_url_loader_factory.cc:114:11
    #21 0x7ff98cf8ec86 in network::mojom::URLLoaderFactory::CreateLoaderAndStart(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\out\069a-Win_ASan_Releas\gen\services\network\public\mojom\url_loader_factory.mojom.h:93:5
    #22 0x7ff98f3f2cb4 in blink::ThrottlingURLLoader::StartNow(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\common\loader\throttling_url_loader.cc:550:36
    #23 0x7ff98f3f071a in blink::ThrottlingURLLoader::Start(class scoped_refptr<class network::SharedURLLoaderFactory>, int, unsigned int, struct network::ResourceRequest *, class scoped_refptr<class base::SequencedTaskRunner>, class std::__Cr::optional<class std::__Cr::vector<class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>>, class std::__Cr::allocator<class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>>>>>, class std::__Cr::vector<int, class std::__Cr::allocator<int>> const *) C:\b\s\w\ir\cache\builder\src\third_party\blink\common\loader\throttling_url_loader.cc:486:5
    #24 0x7ff98f3eef61 in blink::ThrottlingURLLoader::CreateLoaderAndStart(class scoped_refptr<class network::SharedURLLoaderFactory>, class std::__Cr::vector<class std::__Cr::unique_ptr<class blink::URLLoaderThrottle, struct std::__Cr::default_delete<class blink::URLLoaderThrottle>>, class std::__Cr::allocator<class std::__Cr::unique_ptr<class blink::URLLoaderThrottle, struct std::__Cr::default_delete<class blink::URLLoaderThrottle>>>>, int, unsigned int, struct network::ResourceRequest *, class network::mojom::URLLoaderClient *, struct net::NetworkTrafficAnnotationTag const &, class scoped_refptr<class base::SequencedTaskRunner>, class std::__Cr::optional<class std::__Cr::vector<class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>>, class std::__Cr::allocator<class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>>>>>, class blink::ThrottlingURLLoader::ClientReceiverDelegate *, class std::__Cr::vector<int, class std::__Cr::allocator<int>> const *) C:\b\s\w\ir\cache\builder\src\third_party\blink\common\loader\throttling_url_loader.cc:277:11
    #25 0x7ff995023a5a in content::NavigationURLLoaderImpl::CreateThrottlingLoaderAndStart(class scoped_refptr<class network::SharedURLLoaderFactory>, class std::__Cr::vector<class std::__Cr::unique_ptr<class blink::URLLoaderThrottle, struct std::__Cr::default_delete<class blink::URLLoaderThrottle>>, class std::__Cr::allocator<class std::__Cr::unique_ptr<class blink::URLLoaderThrottle, struct std::__Cr::default_delete<class blink::URLLoaderThrottle>>>>) C:\b\s\w\ir\cache\builder\src\content\browser\loader\navigation_url_loader_impl.cc:1050:17
    #26 0x7ff995027e6f in content::NavigationURLLoaderImpl::StartInterceptedRequest(class scoped_refptr<class network::SharedURLLoaderFactory>) C:\b\s\w\ir\cache\builder\src\content\browser\loader\navigation_url_loader_impl.cc:859:3
    #27 0x7ff995026c06 in content::NavigationURLLoaderImpl::MaybeStartLoader(unsigned __int64, class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result>) C:\b\s\w\ir\cache\builder\src\content\browser\loader\navigation_url_loader_impl.cc:812:5
    #28 0x7ff99503bd0b in base::internal::DecayedFunctorTraits<void (NavigationURLLoaderImpl::*)(unsigned long long, std::__Cr::optional<content::NavigationLoaderInterceptor::Result>),base::WeakPtr<content::NavigationURLLoaderImpl> &&,unsigned long long &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #29 0x7ff99503bd0b in base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (NavigationURLLoaderImpl::*&&)(unsigned long long, std::__Cr::optional<content::NavigationLoaderInterceptor::Result>),base::WeakPtr<content::NavigationURLLoaderImpl> &&,unsigned long long &&>,void,0,1>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947
    #30 0x7ff99503bd0b in base::internal::Invoker<base::internal::FunctorTraits<void (NavigationURLLoaderImpl::*&&)(unsigned long long, std::__Cr::optional<content::NavigationLoaderInterceptor::Result>),base::WeakPtr<content::NavigationURLLoaderImpl> &&,unsigned long long &&>,base::internal::BindState<1,1,0,void (NavigationURLLoaderImpl::*)(unsigned long long, std::__Cr::optional<content::NavigationLoaderInterceptor::Result>),base::WeakPtr<content::NavigationURLLoaderImpl>,unsigned long long>,void (std::__Cr::optional<content::NavigationLoaderInterceptor::Result>)>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #31 0x7ff99503bd0b in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::NavigationURLLoaderImpl::*&&)(unsigned __int64, class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result>), class base::WeakPtr<class content::NavigationURLLoaderImpl> &&, unsigned __int64 &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::NavigationURLLoaderImpl::*)(unsigned __int64, class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result>), class base::WeakPtr<class content::NavigationURLLoaderImpl>, unsigned __int64>, (class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result>)>::RunOnce(class base::internal::BindStateBase *, class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result> &&) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #32 0x7ff995c52093 in base::OnceCallback<void (std::__Cr::optional<content::NavigationLoaderInterceptor::Result>)>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #33 0x7ff995c52093 in content::ServiceWorkerControlleeRequestHandler::CreateLoaderAndStartRequest(class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_controllee_request_handler.cc:513:8
    #34 0x7ff995c50627 in content::ServiceWorkerControlleeRequestHandler::ContinueWithActivatedVersion(class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>, class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_controllee_request_handler.cc:447:23
    #35 0x7ff995c582b0 in base::internal::DecayedFunctorTraits<void (ServiceWorkerControlleeRequestHandler::*)(scoped_refptr<content::ServiceWorkerRegistration>, scoped_refptr<content::ServiceWorkerVersion>, base::TimeTicks),base::WeakPtr<content::ServiceWorkerControlleeRequestHandler> &&,scoped_refptr<content::ServiceWorkerRegistration> &&,scoped_refptr<content::ServiceWorkerVersion> &&,base::TimeTicks &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #36 0x7ff995c582b0 in base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (ServiceWorkerControlleeRequestHandler::*&&)(scoped_refptr<content::ServiceWorkerRegistration>, scoped_refptr<content::ServiceWorkerVersion>, base::TimeTicks),base::WeakPtr<content::ServiceWorkerControlleeRequestHandler> &&,scoped_refptr<content::ServiceWorkerRegistration> &&,scoped_refptr<content::ServiceWorkerVersion> &&,base::TimeTicks &&>,void,0,1,2,3>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947
    #37 0x7ff995c582b0 in base::internal::Invoker<base::internal::FunctorTraits<void (ServiceWorkerControlleeRequestHandler::*&&)(scoped_refptr<content::ServiceWorkerRegistration>, scoped_refptr<content::ServiceWorkerVersion>, base::TimeTicks),base::WeakPtr<content::ServiceWorkerControlleeRequestHandler> &&,scoped_refptr<content::ServiceWorkerRegistration> &&,scoped_refptr<content::ServiceWorkerVersion> &&,base::TimeTicks &&>,base::internal::BindState<1,1,0,void (ServiceWorkerControlleeRequestHandler::*)(scoped_refptr<content::ServiceWorkerRegistration>, scoped_refptr<content::ServiceWorkerVersion>, base::TimeTicks),base::WeakPtr<content::ServiceWorkerControlleeRequestHandler>,scoped_refptr<content::ServiceWorkerRegistration>,scoped_refptr<content::ServiceWorkerVersion>,base::TimeTicks>,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #38 0x7ff995c582b0 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerControlleeRequestHandler::*&&)(class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>, class base::TimeTicks), class base::WeakPtr<class content::ServiceWorkerControlleeRequestHandler> &&, class scoped_refptr<class content::ServiceWorkerRegistration> &&, class scoped_refptr<class content::ServiceWorkerVersion> &&, class base::TimeTicks &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerControlleeRequestHandler::*)(class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>, class base::TimeTicks), class base::WeakPtr<class content::ServiceWorkerControlleeRequestHandler>, class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>, class base::TimeTicks>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #39 0x7ff995dec202 in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #40 0x7ff995dec202 in content::ServiceWorkerVersion::SetStatus(enum content::ServiceWorkerVersion::Status) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:450:25
    #41 0x7ff995d376ad in content::ServiceWorkerRegistration::OnActivateEventFinished(class scoped_refptr<class content::ServiceWorkerVersion>, enum blink::ServiceWorkerStatusCode) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_registration.cc:710:23
    #42 0x7ff995d3b394 in base::internal::DecayedFunctorTraits<void (ServiceWorkerRegistration::*)(scoped_refptr<content::ServiceWorkerVersion>, blink::ServiceWorkerStatusCode),content::ServiceWorkerRegistration *&&,scoped_refptr<content::ServiceWorkerVersion> &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #43 0x7ff995d3b394 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (ServiceWorkerRegistration::*&&)(scoped_refptr<content::ServiceWorkerVersion>, blink::ServiceWorkerStatusCode),content::ServiceWorkerRegistration *&&,scoped_refptr<content::ServiceWorkerVersion> &&>,void,0,1>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #44 0x7ff995d3b394 in base::internal::Invoker<base::internal::FunctorTraits<void (ServiceWorkerRegistration::*&&)(scoped_refptr<content::ServiceWorkerVersion>, blink::ServiceWorkerStatusCode),content::ServiceWorkerRegistration *&&,scoped_refptr<content::ServiceWorkerVersion> &&>,base::internal::BindState<1,1,0,void (ServiceWorkerRegistration::*)(scoped_refptr<content::ServiceWorkerVersion>, blink::ServiceWorkerStatusCode),scoped_refptr<content::ServiceWorkerRegistration>,scoped_refptr<content::ServiceWorkerVersion> >,void (blink::ServiceWorkerStatusCode)>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #45 0x7ff995d3b394 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerRegistration::*&&)(class scoped_refptr<class content::ServiceWorkerVersion>, enum blink::ServiceWorkerStatusCode), class content::ServiceWorkerRegistration *&&, class scoped_refptr<class content::ServiceWorkerVersion> &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerRegistration::*)(class scoped_refptr<class content::ServiceWorkerVersion>, enum blink::ServiceWorkerStatusCode), class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>>, (enum blink::ServiceWorkerStatusCode)>::RunOnce(class base::internal::BindStateBase *, enum blink::ServiceWorkerStatusCode) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #46 0x7ff995e18abe in base::OnceCallback<void (blink::ServiceWorkerStatusCode)>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #47 0x7ff995e18abe in content::ServiceWorkerVersion::MaybeTimeoutRequest(struct content::ServiceWorkerVersion::InflightRequestTimeoutInfo const &) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:2697:8
    #48 0x7ff995e17d25 in content::ServiceWorkerVersion::OnTimeoutTimer(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:2573:9

SUMMARY: AddressSanitizer: heap-use-after-free C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:191 in std::__Cr::__tree_next_iter
Shadow bytes around the buggy address:
  0x1197f7be4480: fa fa f7 fa 00 00 00 00 00 00 00 00 fa fa f7 fa
  0x1197f7be4500: 00 00 00 00 00 00 00 00 fa fa f7 fa 00 00 00 00
  0x1197f7be4580: 00 00 00 00 fa fa f7 fa fd fd fd fd fd fd fd fa
  0x1197f7be4600: fa fa f7 fa fd fd fd fd fd fd fd fa fa fa f7 fa
  0x1197f7be4680: fd fd fd fd fd fd fd fa fa fa f7 fa fd fd fd fd
=>0x1197f7be4700: fd fd fd fa fa fa f7 fa fd[fd]fd fd fd fd fd fa
  0x1197f7be4780: fa fa f7 fa 00 00 00 00 00 00 00 00 fa fa f7 fa
  0x1197f7be4800: fd fd fd fd fd fd fd fa fa fa f7 fa fd fd fd fd
  0x1197f7be4880: fd fd fd fd fa fa f7 fa fd fd fd fd fd fd fd fa
  0x1197f7be4900: fa fa f7 fa fd fd fd fd fd fd fd fa fa fa f7 fa
  0x1197f7be4980: 00 00 00 00 00 00 00 fa fa fa f7 fa fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==37400==ADDITIONAL INFO

==37400==Note: Please include this section with the ASan report.
Task trace:
    #0 0x7ff99e7ae858 in mojo::SimpleWatcher::Context::Notify(unsigned int, struct MojoHandleSignalsState, unsigned int) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\system\simple_watcher.cc:102:13


Command line: `chrome.exe --no-sandbox --ignore-certificate-errors --user-data-dir="C:\opensrc\tmpdata" --flag-switches-begin --flag-switches-end --file-url-path-alias="/gen=C:\AsanBuilds\win32-release_x64_asan-win32-release_x64-1489125\gen"`


MiraclePtr Status: NOT PROTECTED
No raw_ptr<T> access to this region was detected prior to this crash.
This crash is still exploitable with MiraclePtr.
Refer to https://chromium.googlesource.com/chromium/src/+/main/base/memory/raw_ptr.md for details.

==37400==END OF ADDITIONAL INFO
==37400==ABORTING

C:\AsanBuilds\win32-release_x64_asan-win32-release_x64-1489125>