Chromium	140.0.7305.0 (Developer Build) (64-bit) 
Revision	0000000000000000000000000000000000000000-0000000000000000000000000000000000000000
OS	Windows 11 Version 24H2 (Build 26100.4946)
JavaScript	V8 14.0.264

=================================================================
==31040==ERROR: AddressSanitizer: heap-use-after-free on address 0x11f53b846be8 at pc 0x7ff88c8463f7 bp 0x00571ddf9760 sp 0x00571ddf97a8
READ of size 8 at 0x11f53b846be8 thread T0
    #0 0x7ff88c8463f6 in std::__Cr::__tree_next_iter C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:191
    #1 0x7ff88c8463f6 in std::__Cr::__tree_iterator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::__tree_node<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,void *> *,long long>::operator++ C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:655
    #2 0x7ff88c8463f6 in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::__remove_node_pointer C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1807
    #3 0x7ff88c8463f6 in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::erase C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1937
    #4 0x7ff88c8463f6 in std::__Cr::set<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::erase C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\set:772
    #5 0x7ff88c8463f6 in content::ServiceWorkerVersion::FinishRequestWithFetchCount(int, bool, unsigned int) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:852:21
    #6 0x7ff88c6c8932 in content::ServiceWorkerFetchDispatcher::ResponseCallback::HandleResponse(class base::WeakPtr<class content::ServiceWorkerFetchDispatcher>, class content::ServiceWorkerVersion *, class std::__Cr::optional<int>, class mojo::StructPtr<class blink::mojom::FetchAPIResponse>, class mojo::StructPtr<class blink::mojom::ServiceWorkerStreamHandle>, enum content::ServiceWorkerFetchDispatcher::FetchEventResult, class mojo::StructPtr<class blink::mojom::ServiceWorkerFetchEventTiming>) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_fetch_dispatcher.cc:388:19
    #7 0x7ff88c6c7e2f in content::ServiceWorkerFetchDispatcher::ResponseCallback::OnFallback(class std::__Cr::optional<class network::DataElementChunkedDataPipe>, class mojo::StructPtr<class blink::mojom::ServiceWorkerFetchEventTiming>) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_fetch_dispatcher.cc:371:5
    #8 0x7ff885c8bc8a in blink::mojom::ServiceWorkerFetchResponseCallbackStubDispatch::Accept(class blink::mojom::ServiceWorkerFetchResponseCallback *, class mojo::Message *) C:\b\s\w\ir\cache\builder\src\out\069a-Win_ASan_Releas\gen\third_party\blink\public\mojom\service_worker\service_worker_fetch_response_callback.mojom.cc:536:13
    #9 0x7ff894a3946f in mojo::InterfaceEndpointClient::HandleValidatedMessage(class mojo::Message *) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc:1059:54
    #10 0x7ff894a3623a in mojo::MessageDispatcher::Accept(class mojo::Message *) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\message_dispatcher.cc:43:19
    #11 0x7ff894a3f75e in mojo::InterfaceEndpointClient::HandleIncomingMessage(class mojo::Message *) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc:731:20
    #12 0x7ff894a2166f in mojo::internal::MultiplexRouter::ProcessIncomingMessage(class mojo::internal::MultiplexRouter::MessageWrapper *, enum mojo::internal::MultiplexRouter::ClientCallBehavior, class base::SequencedTaskRunner *) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\multiplex_router.cc:1120:42
    #13 0x7ff894a1fc44 in mojo::internal::MultiplexRouter::Accept(class mojo::Message *) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\multiplex_router.cc:733:7
    #14 0x7ff894a3623a in mojo::MessageDispatcher::Accept(class mojo::Message *) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\message_dispatcher.cc:43:19
    #15 0x7ff894a5dcd8 in mojo::Connector::DispatchMessageW(class mojo::ScopedHandleBase<class mojo::MessageHandle>) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\connector.cc:561:49
    #16 0x7ff894a5f620 in mojo::Connector::ReadAllAvailableMessages(void) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\connector.cc:619:14
    #17 0x7ff894a5f047 in mojo::Connector::OnHandleReadyInternal C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\connector.cc:450
    #18 0x7ff894a5f047 in mojo::Connector::OnWatcherHandleReady(char const *, unsigned int) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\bindings\lib\connector.cc:416:3
    #19 0x7ff894a60fb3 in base::internal::DecayedFunctorTraits<void (Connector::*)(const char *, unsigned int),mojo::Connector *,const char *const &>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #20 0x7ff894a60fb3 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (Connector::*const &)(const char *, unsigned int),mojo::Connector *,const char *const &>,void,0,1>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #21 0x7ff894a60fb3 in base::internal::Invoker<base::internal::FunctorTraits<void (Connector::*const &)(const char *, unsigned int),mojo::Connector *,const char *const &>,base::internal::BindState<1,1,0,void (Connector::*)(const char *, unsigned int),base::internal::UnretainedWrapper<mojo::Connector,base::unretained_traits::MayNotDangle,0>,base::internal::UnretainedWrapper<const char,base::unretained_traits::MayNotDangle,0> >,void (unsigned int)>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #22 0x7ff894a60fb3 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl mojo::Connector::*const &)(char const *, unsigned int), class mojo::Connector *, char const *const &>, struct base::internal::BindState<1, 1, 0, void (__cdecl mojo::Connector::*)(char const *, unsigned int), class base::internal::UnretainedWrapper<class mojo::Connector, struct base::unretained_traits::MayNotDangle, 0>, class base::internal::UnretainedWrapper<char const, struct base::unretained_traits::MayNotDangle, 0>>, (unsigned int)>::Run(class base::internal::BindStateBase *, unsigned int) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:980:12
    #23 0x7ff885e39cbc in base::RepeatingCallback<(unsigned int)>::Run(unsigned int) const & C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:344:12
    #24 0x7ff885e39aaf in base::internal::DecayedFunctorTraits<void (*)(const base::RepeatingCallback<void (unsigned int)> &, unsigned int, const mojo::HandleSignalsState &),const base::RepeatingCallback<void (unsigned int)> &>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:664
    #25 0x7ff885e39aaf in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (*const &)(const base::RepeatingCallback<void (unsigned int)> &, unsigned int, const mojo::HandleSignalsState &),const base::RepeatingCallback<void (unsigned int)> &>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #26 0x7ff885e39aaf in base::internal::Invoker<base::internal::FunctorTraits<void (*const &)(const base::RepeatingCallback<void (unsigned int)> &, unsigned int, const mojo::HandleSignalsState &),const base::RepeatingCallback<void (unsigned int)> &>,base::internal::BindState<0,1,0,void (*)(const base::RepeatingCallback<void (unsigned int)> &, unsigned int, const mojo::HandleSignalsState &),base::RepeatingCallback<void (unsigned int)> >,void (unsigned int, const mojo::HandleSignalsState &)>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #27 0x7ff885e39aaf in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl *const &)(class base::RepeatingCallback<(unsigned int)> const &, unsigned int, struct mojo::HandleSignalsState const &), class base::RepeatingCallback<void __cdecl(unsigned int)> const &>, struct base::internal::BindState<0, 1, 0, void (__cdecl *)(class base::RepeatingCallback<(unsigned int)> const &, unsigned int, struct mojo::HandleSignalsState const &), class base::RepeatingCallback<void __cdecl(unsigned int)>>, (unsigned int, struct mojo::HandleSignalsState const &)>::Run(class base::internal::BindStateBase *, unsigned int, struct mojo::HandleSignalsState const &) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:980:12
    #28 0x7ff8951fe29b in base::RepeatingCallback<(unsigned int, struct mojo::HandleSignalsState const &)>::Run(unsigned int, struct mojo::HandleSignalsState const &) const & C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:344:12
    #29 0x7ff8951fdb95 in mojo::SimpleWatcher::OnHandleReady(int, unsigned int, struct mojo::HandleSignalsState const &) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\system\simple_watcher.cc:278:14
    #30 0x7ff8951fedc8 in base::internal::DecayedFunctorTraits<void (SimpleWatcher::*)(int, unsigned int, const mojo::HandleSignalsState &),base::WeakPtr<mojo::SimpleWatcher> &&,int &&,unsigned int &&,mojo::HandleSignalsState &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #31 0x7ff8951fedc8 in base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (SimpleWatcher::*&&)(int, unsigned int, const mojo::HandleSignalsState &),base::WeakPtr<mojo::SimpleWatcher> &&,int &&,unsigned int &&,mojo::HandleSignalsState &&>,void,0,1,2,3>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947
    #32 0x7ff8951fedc8 in base::internal::Invoker<base::internal::FunctorTraits<void (SimpleWatcher::*&&)(int, unsigned int, const mojo::HandleSignalsState &),base::WeakPtr<mojo::SimpleWatcher> &&,int &&,unsigned int &&,mojo::HandleSignalsState &&>,base::internal::BindState<1,1,0,void (SimpleWatcher::*)(int, unsigned int, const mojo::HandleSignalsState &),base::WeakPtr<mojo::SimpleWatcher>,int,unsigned int,mojo::HandleSignalsState>,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #33 0x7ff8951fedc8 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl mojo::SimpleWatcher::*&&)(int, unsigned int, struct mojo::HandleSignalsState const &), class base::WeakPtr<class mojo::SimpleWatcher> &&, int &&, unsigned int &&, struct mojo::HandleSignalsState &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl mojo::SimpleWatcher::*)(int, unsigned int, struct mojo::HandleSignalsState const &), class base::WeakPtr<class mojo::SimpleWatcher>, int, unsigned int, struct mojo::HandleSignalsState>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #34 0x7ff894cea783 in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #35 0x7ff894cea783 in base::TaskAnnotator::RunTaskImpl(struct base::PendingTask &) C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.cc:207:34
    #36 0x7ff894cbdb49 in base::TaskAnnotator::RunTask C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.h:104
    #37 0x7ff894cbdb49 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(class base::LazyNow *) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:456:23
    #38 0x7ff894cbc9ef in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork(void) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:330:40
    #39 0x7ff894b5b6d0 in base::MessagePumpForUI::DoRunLoop(void) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:260:67
    #40 0x7ff894b59098 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:87:3
    #41 0x7ff894cbf881 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, class base::TimeDelta) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:629:12
    #42 0x7ff894d5c43e in base::RunLoop::Run(class base::Location const &) C:\b\s\w\ir\cache\builder\src\base\run_loop.cc:134:14
    #43 0x7ff88af651bd in content::BrowserMainLoop::RunMainMessageLoop(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_loop.cc:1108:18
    #44 0x7ff88af6ce39 in content::BrowserMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_runner_impl.cc:156:15
    #45 0x7ff88af5b9dc in content::BrowserMain(struct content::MainFunctionParams) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main.cc:32:28
    #46 0x7ff891434162 in content::RunBrowserProcessMain(struct content::MainFunctionParams, class content::ContentMainDelegate *) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:699:10
    #47 0x7ff8914371d7 in content::ContentMainRunnerImpl::RunBrowser(struct content::MainFunctionParams, bool) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1266:10
    #48 0x7ff8914369de in content::ContentMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1121:12
    #49 0x7ff89142a998 in content::RunContentProcess(struct content::ContentMainParams, class content::ContentMainRunner *) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:361:36
    #50 0x7ff89142b55d in content::ContentMain(struct content::ContentMainParams) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:374:10
    #51 0x7ff881fe2b0b in ChromeMain C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_main.cc:222:12
    #52 0x7ff62a0a479b in MainDllLoader::Launch(struct HINSTANCE__*, class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\chrome\app\main_dll_loader_win.cc:201:12
    #53 0x7ff62a0a200c in main C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_exe_main_win.cc:352:20
    #54 0x7ff62a55dafb in invoke_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:78
    #55 0x7ff62a55dafb in __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
    #56 0x7ff9d632e8d6  (C:\WINDOWS\System32\KERNEL32.DLL+0x18002e8d6)
    #57 0x7ff9d6bdc34b  (C:\WINDOWS\SYSTEM32\ntdll.dll+0x18003c34b)

0x11f53b846be8 is located 8 bytes inside of 56-byte region [0x11f53b846be0,0x11f53b846c18)
freed by thread T0 here:
    #0 0x7ff8cd83c584  (C:\AsanBuilds\win32-release_x64_asan-win32-release_x64-1489125\clang_rt.asan_dynamic-x86_64.dll+0x18005c584)
    #1 0x7ff88c868153 in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::~__tree C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1428
    #2 0x7ff88c868153 in std::__Cr::set<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::~set C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\set:706
    #3 0x7ff88c868153 in content::ServiceWorkerVersion::OnTimeoutTimer(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:2612:1
    #4 0x7ff88c880b10 in base::internal::DecayedFunctorTraits<void (ServiceWorkerVersion::*)(),content::ServiceWorkerVersion *>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #5 0x7ff88c880b10 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (ServiceWorkerVersion::*&&)(),content::ServiceWorkerVersion *>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #6 0x7ff88c880b10 in base::internal::Invoker<base::internal::FunctorTraits<void (ServiceWorkerVersion::*&&)(),content::ServiceWorkerVersion *>,base::internal::BindState<1,1,0,void (ServiceWorkerVersion::*)(),base::internal::UnretainedWrapper<content::ServiceWorkerVersion,base::unretained_traits::MayNotDangle,0> >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #7 0x7ff88c880b10 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerVersion::*&&)(void), class content::ServiceWorkerVersion *>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerVersion::*)(void), class base::internal::UnretainedWrapper<class content::ServiceWorkerVersion, struct base::unretained_traits::MayNotDangle, 0>>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #8 0x7ff894be85f2 in base::RepeatingCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:344
    #9 0x7ff894be85f2 in base::RepeatingTimer::RunUserTask(void) C:\b\s\w\ir\cache\builder\src\base\timer\timer.cc:215:8
    #10 0x7ff894bea4d5 in base::internal::DecayedFunctorTraits<void (DelayTimerBase::*)(),base::internal::DelayTimerBase *>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #11 0x7ff894bea4d5 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (DelayTimerBase::*const &)(),base::internal::DelayTimerBase *>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #12 0x7ff894bea4d5 in base::internal::Invoker<base::internal::FunctorTraits<void (DelayTimerBase::*const &)(),base::internal::DelayTimerBase *>,base::internal::BindState<1,1,0,void (DelayTimerBase::*)(),base::internal::UnretainedWrapper<base::internal::DelayTimerBase,base::unretained_traits::MayNotDangle,0> >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #13 0x7ff894bea4d5 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl base::internal::DelayTimerBase::*const &)(void), class base::internal::DelayTimerBase *>, struct base::internal::BindState<1, 1, 0, void (__cdecl base::internal::DelayTimerBase::*)(void), class base::internal::UnretainedWrapper<class base::internal::DelayTimerBase, struct base::unretained_traits::MayNotDangle, 0>>, (void)>::Run(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:980:12
    #14 0x7ff894cea783 in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #15 0x7ff894cea783 in base::TaskAnnotator::RunTaskImpl(struct base::PendingTask &) C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.cc:207:34
    #16 0x7ff894cbdb49 in base::TaskAnnotator::RunTask C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.h:104
    #17 0x7ff894cbdb49 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(class base::LazyNow *) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:456:23
    #18 0x7ff894cbc9ef in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork(void) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:330:40
    #19 0x7ff894b5b6d0 in base::MessagePumpForUI::DoRunLoop(void) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:260:67
    #20 0x7ff894b59098 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:87:3
    #21 0x7ff894cbf881 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, class base::TimeDelta) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:629:12
    #22 0x7ff894d5c43e in base::RunLoop::Run(class base::Location const &) C:\b\s\w\ir\cache\builder\src\base\run_loop.cc:134:14
    #23 0x7ff88af651bd in content::BrowserMainLoop::RunMainMessageLoop(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_loop.cc:1108:18
    #24 0x7ff88af6ce39 in content::BrowserMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_runner_impl.cc:156:15
    #25 0x7ff88af5b9dc in content::BrowserMain(struct content::MainFunctionParams) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main.cc:32:28
    #26 0x7ff891434162 in content::RunBrowserProcessMain(struct content::MainFunctionParams, class content::ContentMainDelegate *) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:699:10
    #27 0x7ff8914371d7 in content::ContentMainRunnerImpl::RunBrowser(struct content::MainFunctionParams, bool) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1266:10
    #28 0x7ff8914369de in content::ContentMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1121:12
    #29 0x7ff89142a998 in content::RunContentProcess(struct content::ContentMainParams, class content::ContentMainRunner *) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:361:36
    #30 0x7ff89142b55d in content::ContentMain(struct content::ContentMainParams) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:374:10
    #31 0x7ff881fe2b0b in ChromeMain C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_main.cc:222:12
    #32 0x7ff62a0a479b in MainDllLoader::Launch(struct HINSTANCE__*, class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\chrome\app\main_dll_loader_win.cc:201:12
    #33 0x7ff62a0a200c in main C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_exe_main_win.cc:352:20
    #34 0x7ff62a55dafb in invoke_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:78
    #35 0x7ff62a55dafb in __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
    #36 0x7ff9d632e8d6  (C:\WINDOWS\System32\KERNEL32.DLL+0x18002e8d6)
    #37 0x7ff9d6bdc34b  (C:\WINDOWS\SYSTEM32\ntdll.dll+0x18003c34b)

previously allocated by thread T0 here:
    #0 0x7ff8cd83b99d  (C:\AsanBuilds\win32-release_x64_asan-win32-release_x64-1489125\clang_rt.asan_dynamic-x86_64.dll+0x18005b99d)
    #1 0x7ff88c884d5c in std::__Cr::__libcpp_allocate C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__new\allocate.h:43
    #2 0x7ff88c884d5c in std::__Cr::allocator<std::__Cr::__tree_node<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,void *> >::allocate C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\allocator.h:105
    #3 0x7ff88c884d5c in std::__Cr::allocator_traits<std::__Cr::allocator<std::__Cr::__tree_node<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,void *> > >::allocate C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\allocator_traits.h:259
    #4 0x7ff88c884d5c in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::__construct_node C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1708
    #5 0x7ff88c884d5c in std::__Cr::__tree<struct content::ServiceWorkerVersion::InflightRequestTimeoutInfo, struct std::__Cr::less<struct content::ServiceWorkerVersion::InflightRequestTimeoutInfo>, class std::__Cr::allocator<struct content::ServiceWorkerVersion::InflightRequestTimeoutInfo>>::__emplace_unique_impl<int const &, enum content::ServiceWorkerMetrics::EventType const &, class base::TimeTicks const &, enum content::ServiceWorkerVersion::TimeoutBehavior const &>(int const &, enum content::ServiceWorkerMetrics::EventType const &, class base::TimeTicks const &, enum content::ServiceWorkerVersion::TimeoutBehavior const &) C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:1718:23
    #6 0x7ff88c845202 in std::__Cr::__tree<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::__emplace_unique C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:949
    #7 0x7ff88c845202 in std::__Cr::set<content::ServiceWorkerVersion::InflightRequestTimeoutInfo,std::__Cr::less<content::ServiceWorkerVersion::InflightRequestTimeoutInfo>,std::__Cr::allocator<content::ServiceWorkerVersion::InflightRequestTimeoutInfo> >::emplace C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\set:731
    #8 0x7ff88c845202 in content::ServiceWorkerVersion::StartRequestWithCustomTimeout(enum content::ServiceWorkerMetrics::EventType, class base::OnceCallback<(enum blink::ServiceWorkerStatusCode)>, class base::TimeDelta const &, enum content::ServiceWorkerVersion::TimeoutBehavior) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:776:48
    #9 0x7ff88c84493f in content::ServiceWorkerVersion::StartRequest(enum content::ServiceWorkerMetrics::EventType, class base::OnceCallback<(enum blink::ServiceWorkerStatusCode)>) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:724:10
    #10 0x7ff88c6b89f7 in content::ServiceWorkerFetchDispatcher::DispatchFetchEvent(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_fetch_dispatcher.cc:592:34
    #11 0x7ff88c6b78ba in content::ServiceWorkerFetchDispatcher::StartWorker(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_fetch_dispatcher.cc:530:5
    #12 0x7ff88c6b71ac in content::ServiceWorkerFetchDispatcher::Run(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_fetch_dispatcher.cc:502:3
    #13 0x7ff88c711b90 in content::ServiceWorkerMainResourceLoader::StartRequest(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_main_resource_loader.cc:417:22
    #14 0x7ff88c6ad7d6 in base::internal::DecayedFunctorTraits<void (ServiceWorkerMainResourceLoader::*)(mojo::PendingReceiver<network::mojom::URLLoader>, int, unsigned int, const network::ResourceRequest &, mojo::PendingRemote<network::mojom::URLLoaderClient>, const net::MutableNetworkTrafficAnnotationTag &),base::WeakPtr<content::ServiceWorkerMainResourceLoader> &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #15 0x7ff88c6ad7d6 in base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (ServiceWorkerMainResourceLoader::*&&)(mojo::PendingReceiver<network::mojom::URLLoader>, int, unsigned int, const network::ResourceRequest &, mojo::PendingRemote<network::mojom::URLLoaderClient>, const net::MutableNetworkTrafficAnnotationTag &),base::WeakPtr<content::ServiceWorkerMainResourceLoader> &&>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947
    #16 0x7ff88c6ad7d6 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerMainResourceLoader::*&&)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class base::WeakPtr<class content::ServiceWorkerMainResourceLoader> &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerMainResourceLoader::*)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class base::WeakPtr<class content::ServiceWorkerMainResourceLoader>>, (class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &)>::RunImpl<void (__cdecl content::ServiceWorkerMainResourceLoader::*)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class std::__Cr::tuple<class base::WeakPtr<class content::ServiceWorkerMainResourceLoader>>, 0>(void (__cdecl content::ServiceWorkerMainResourceLoader::*&&)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class std::__Cr::tuple<class base::WeakPtr<class content::ServiceWorkerMainResourceLoader>> &&, struct std::__Cr::integer_sequence<unsigned __int64, 0>, class mojo::PendingReceiver<class network::mojom::URLLoader> &&, int &&, unsigned int &&, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient> &&, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060:14
    #17 0x7ff88c6ad55d in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerMainResourceLoader::*&&)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class base::WeakPtr<class content::ServiceWorkerMainResourceLoader> &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerMainResourceLoader::*)(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &), class base::WeakPtr<class content::ServiceWorkerMainResourceLoader>>, (class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &)>::RunOnce(class base::internal::BindStateBase *, class mojo::PendingReceiver<class network::mojom::URLLoader> &&, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient> &&, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #18 0x7ff8980d15da in base::OnceCallback<void (mojo::PendingReceiver<network::mojom::URLLoader>, int, unsigned int, const network::ResourceRequest &, mojo::PendingRemote<network::mojom::URLLoaderClient>, const net::MutableNetworkTrafficAnnotationTag &)>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #19 0x7ff8980d15da in network::SingleRequestURLLoaderFactory::HandlerState::CreateLoaderAndStart(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\services\network\public\cpp\single_request_url_loader_factory.cc:46:25
    #20 0x7ff8980d12f0 in network::SingleRequestURLLoaderFactory::CreateLoaderAndStart(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest const &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\services\network\public\cpp\single_request_url_loader_factory.cc:114:11
    #21 0x7ff8839dec86 in network::mojom::URLLoaderFactory::CreateLoaderAndStart(class mojo::PendingReceiver<class network::mojom::URLLoader>, int, unsigned int, struct network::ResourceRequest &, class mojo::PendingRemote<class network::mojom::URLLoaderClient>, struct net::MutableNetworkTrafficAnnotationTag const &) C:\b\s\w\ir\cache\builder\src\out\069a-Win_ASan_Releas\gen\services\network\public\mojom\url_loader_factory.mojom.h:93:5
    #22 0x7ff885e42cb4 in blink::ThrottlingURLLoader::StartNow(void) C:\b\s\w\ir\cache\builder\src\third_party\blink\common\loader\throttling_url_loader.cc:550:36
    #23 0x7ff885e4071a in blink::ThrottlingURLLoader::Start(class scoped_refptr<class network::SharedURLLoaderFactory>, int, unsigned int, struct network::ResourceRequest *, class scoped_refptr<class base::SequencedTaskRunner>, class std::__Cr::optional<class std::__Cr::vector<class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>>, class std::__Cr::allocator<class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>>>>>, class std::__Cr::vector<int, class std::__Cr::allocator<int>> const *) C:\b\s\w\ir\cache\builder\src\third_party\blink\common\loader\throttling_url_loader.cc:486:5
    #24 0x7ff885e3ef61 in blink::ThrottlingURLLoader::CreateLoaderAndStart(class scoped_refptr<class network::SharedURLLoaderFactory>, class std::__Cr::vector<class std::__Cr::unique_ptr<class blink::URLLoaderThrottle, struct std::__Cr::default_delete<class blink::URLLoaderThrottle>>, class std::__Cr::allocator<class std::__Cr::unique_ptr<class blink::URLLoaderThrottle, struct std::__Cr::default_delete<class blink::URLLoaderThrottle>>>>, int, unsigned int, struct network::ResourceRequest *, class network::mojom::URLLoaderClient *, struct net::NetworkTrafficAnnotationTag const &, class scoped_refptr<class base::SequencedTaskRunner>, class std::__Cr::optional<class std::__Cr::vector<class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>>, class std::__Cr::allocator<class std::__Cr::basic_string<char, struct std::__Cr::char_traits<char>, class std::__Cr::allocator<char>>>>>, class blink::ThrottlingURLLoader::ClientReceiverDelegate *, class std::__Cr::vector<int, class std::__Cr::allocator<int>> const *) C:\b\s\w\ir\cache\builder\src\third_party\blink\common\loader\throttling_url_loader.cc:277:11
    #25 0x7ff88ba73a5a in content::NavigationURLLoaderImpl::CreateThrottlingLoaderAndStart(class scoped_refptr<class network::SharedURLLoaderFactory>, class std::__Cr::vector<class std::__Cr::unique_ptr<class blink::URLLoaderThrottle, struct std::__Cr::default_delete<class blink::URLLoaderThrottle>>, class std::__Cr::allocator<class std::__Cr::unique_ptr<class blink::URLLoaderThrottle, struct std::__Cr::default_delete<class blink::URLLoaderThrottle>>>>) C:\b\s\w\ir\cache\builder\src\content\browser\loader\navigation_url_loader_impl.cc:1050:17
    #26 0x7ff88ba77e6f in content::NavigationURLLoaderImpl::StartInterceptedRequest(class scoped_refptr<class network::SharedURLLoaderFactory>) C:\b\s\w\ir\cache\builder\src\content\browser\loader\navigation_url_loader_impl.cc:859:3
    #27 0x7ff88ba76c06 in content::NavigationURLLoaderImpl::MaybeStartLoader(unsigned __int64, class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result>) C:\b\s\w\ir\cache\builder\src\content\browser\loader\navigation_url_loader_impl.cc:812:5
    #28 0x7ff88ba8bd0b in base::internal::DecayedFunctorTraits<void (NavigationURLLoaderImpl::*)(unsigned long long, std::__Cr::optional<content::NavigationLoaderInterceptor::Result>),base::WeakPtr<content::NavigationURLLoaderImpl> &&,unsigned long long &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #29 0x7ff88ba8bd0b in base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (NavigationURLLoaderImpl::*&&)(unsigned long long, std::__Cr::optional<content::NavigationLoaderInterceptor::Result>),base::WeakPtr<content::NavigationURLLoaderImpl> &&,unsigned long long &&>,void,0,1>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947
    #30 0x7ff88ba8bd0b in base::internal::Invoker<base::internal::FunctorTraits<void (NavigationURLLoaderImpl::*&&)(unsigned long long, std::__Cr::optional<content::NavigationLoaderInterceptor::Result>),base::WeakPtr<content::NavigationURLLoaderImpl> &&,unsigned long long &&>,base::internal::BindState<1,1,0,void (NavigationURLLoaderImpl::*)(unsigned long long, std::__Cr::optional<content::NavigationLoaderInterceptor::Result>),base::WeakPtr<content::NavigationURLLoaderImpl>,unsigned long long>,void (std::__Cr::optional<content::NavigationLoaderInterceptor::Result>)>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #31 0x7ff88ba8bd0b in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::NavigationURLLoaderImpl::*&&)(unsigned __int64, class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result>), class base::WeakPtr<class content::NavigationURLLoaderImpl> &&, unsigned __int64 &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::NavigationURLLoaderImpl::*)(unsigned __int64, class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result>), class base::WeakPtr<class content::NavigationURLLoaderImpl>, unsigned __int64>, (class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result>)>::RunOnce(class base::internal::BindStateBase *, class std::__Cr::optional<struct content::NavigationLoaderInterceptor::Result> &&) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #32 0x7ff88c6a2093 in base::OnceCallback<void (std::__Cr::optional<content::NavigationLoaderInterceptor::Result>)>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #33 0x7ff88c6a2093 in content::ServiceWorkerControlleeRequestHandler::CreateLoaderAndStartRequest(class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_controllee_request_handler.cc:513:8
    #34 0x7ff88c6a0627 in content::ServiceWorkerControlleeRequestHandler::ContinueWithActivatedVersion(class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>, class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_controllee_request_handler.cc:447:23
    #35 0x7ff88c6a82b0 in base::internal::DecayedFunctorTraits<void (ServiceWorkerControlleeRequestHandler::*)(scoped_refptr<content::ServiceWorkerRegistration>, scoped_refptr<content::ServiceWorkerVersion>, base::TimeTicks),base::WeakPtr<content::ServiceWorkerControlleeRequestHandler> &&,scoped_refptr<content::ServiceWorkerRegistration> &&,scoped_refptr<content::ServiceWorkerVersion> &&,base::TimeTicks &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #36 0x7ff88c6a82b0 in base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (ServiceWorkerControlleeRequestHandler::*&&)(scoped_refptr<content::ServiceWorkerRegistration>, scoped_refptr<content::ServiceWorkerVersion>, base::TimeTicks),base::WeakPtr<content::ServiceWorkerControlleeRequestHandler> &&,scoped_refptr<content::ServiceWorkerRegistration> &&,scoped_refptr<content::ServiceWorkerVersion> &&,base::TimeTicks &&>,void,0,1,2,3>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947
    #37 0x7ff88c6a82b0 in base::internal::Invoker<base::internal::FunctorTraits<void (ServiceWorkerControlleeRequestHandler::*&&)(scoped_refptr<content::ServiceWorkerRegistration>, scoped_refptr<content::ServiceWorkerVersion>, base::TimeTicks),base::WeakPtr<content::ServiceWorkerControlleeRequestHandler> &&,scoped_refptr<content::ServiceWorkerRegistration> &&,scoped_refptr<content::ServiceWorkerVersion> &&,base::TimeTicks &&>,base::internal::BindState<1,1,0,void (ServiceWorkerControlleeRequestHandler::*)(scoped_refptr<content::ServiceWorkerRegistration>, scoped_refptr<content::ServiceWorkerVersion>, base::TimeTicks),base::WeakPtr<content::ServiceWorkerControlleeRequestHandler>,scoped_refptr<content::ServiceWorkerRegistration>,scoped_refptr<content::ServiceWorkerVersion>,base::TimeTicks>,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #38 0x7ff88c6a82b0 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerControlleeRequestHandler::*&&)(class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>, class base::TimeTicks), class base::WeakPtr<class content::ServiceWorkerControlleeRequestHandler> &&, class scoped_refptr<class content::ServiceWorkerRegistration> &&, class scoped_refptr<class content::ServiceWorkerVersion> &&, class base::TimeTicks &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerControlleeRequestHandler::*)(class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>, class base::TimeTicks), class base::WeakPtr<class content::ServiceWorkerControlleeRequestHandler>, class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>, class base::TimeTicks>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #39 0x7ff88c83c202 in base::OnceCallback<void ()>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #40 0x7ff88c83c202 in content::ServiceWorkerVersion::SetStatus(enum content::ServiceWorkerVersion::Status) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:450:25
    #41 0x7ff88c7876ad in content::ServiceWorkerRegistration::OnActivateEventFinished(class scoped_refptr<class content::ServiceWorkerVersion>, enum blink::ServiceWorkerStatusCode) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_registration.cc:710:23
    #42 0x7ff88c78b394 in base::internal::DecayedFunctorTraits<void (ServiceWorkerRegistration::*)(scoped_refptr<content::ServiceWorkerVersion>, blink::ServiceWorkerStatusCode),content::ServiceWorkerRegistration *&&,scoped_refptr<content::ServiceWorkerVersion> &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731
    #43 0x7ff88c78b394 in base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (ServiceWorkerRegistration::*&&)(scoped_refptr<content::ServiceWorkerVersion>, blink::ServiceWorkerStatusCode),content::ServiceWorkerRegistration *&&,scoped_refptr<content::ServiceWorkerVersion> &&>,void,0,1>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:923
    #44 0x7ff88c78b394 in base::internal::Invoker<base::internal::FunctorTraits<void (ServiceWorkerRegistration::*&&)(scoped_refptr<content::ServiceWorkerVersion>, blink::ServiceWorkerStatusCode),content::ServiceWorkerRegistration *&&,scoped_refptr<content::ServiceWorkerVersion> &&>,base::internal::BindState<1,1,0,void (ServiceWorkerRegistration::*)(scoped_refptr<content::ServiceWorkerVersion>, blink::ServiceWorkerStatusCode),scoped_refptr<content::ServiceWorkerRegistration>,scoped_refptr<content::ServiceWorkerVersion> >,void (blink::ServiceWorkerStatusCode)>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060
    #45 0x7ff88c78b394 in base::internal::Invoker<struct base::internal::FunctorTraits<void (__cdecl content::ServiceWorkerRegistration::*&&)(class scoped_refptr<class content::ServiceWorkerVersion>, enum blink::ServiceWorkerStatusCode), class content::ServiceWorkerRegistration *&&, class scoped_refptr<class content::ServiceWorkerVersion> &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl content::ServiceWorkerRegistration::*)(class scoped_refptr<class content::ServiceWorkerVersion>, enum blink::ServiceWorkerStatusCode), class scoped_refptr<class content::ServiceWorkerRegistration>, class scoped_refptr<class content::ServiceWorkerVersion>>, (enum blink::ServiceWorkerStatusCode)>::RunOnce(class base::internal::BindStateBase *, enum blink::ServiceWorkerStatusCode) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12
    #46 0x7ff88c868abe in base::OnceCallback<void (blink::ServiceWorkerStatusCode)>::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156
    #47 0x7ff88c868abe in content::ServiceWorkerVersion::MaybeTimeoutRequest(struct content::ServiceWorkerVersion::InflightRequestTimeoutInfo const &) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:2697:8
    #48 0x7ff88c867d25 in content::ServiceWorkerVersion::OnTimeoutTimer(void) C:\b\s\w\ir\cache\builder\src\content\browser\service_worker\service_worker_version.cc:2573:9

SUMMARY: AddressSanitizer: heap-use-after-free C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__tree:191 in std::__Cr::__tree_next_iter
Shadow bytes around the buggy address:
  0x11f53b846900: fa fa fa fa fa fa f7 fa fa fa fa fa fa fa fa fa
  0x11f53b846980: fa fa f7 fa fa fa fa fa fa fa fa fa fa fa f7 fa
  0x11f53b846a00: fa fa fa fa fa fa fa fa fa fa f7 fa fa fa fa fa
  0x11f53b846a80: fa fa fa fa fa fa f7 fa fa fa fa fa fa fa fa fa
  0x11f53b846b00: fa fa f7 fa fa fa fa fa fa fa fa fa fa fa f7 fa
=>0x11f53b846b80: fa fa fa fa fa fa fa fa fa fa f7 fa fd[fd]fd fd
  0x11f53b846c00: fd fd fd fa fa fa f7 fa fa fa fa fa fa fa fa fa
  0x11f53b846c80: fa fa f7 fa fa fa fa fa fa fa fa fa fa fa f7 fa
  0x11f53b846d00: fd fd fd fd fd fd fd fd fa fa f7 fa fd fd fd fd
  0x11f53b846d80: fd fd fd fd fa fa f7 fa fd fd fd fd fd fd fd fa
  0x11f53b846e00: fa fa f7 fa fd fd fd fd fd fd fd fd fa fa f7 fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==31040==ADDITIONAL INFO

==31040==Note: Please include this section with the ASan report.
Task trace:
    #0 0x7ff8951fe858 in mojo::SimpleWatcher::Context::Notify(unsigned int, struct MojoHandleSignalsState, unsigned int) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\system\simple_watcher.cc:102:13


Command line: `chrome.exe --no-sandbox --ignore-certificate-errors --user-data-dir="C:\opensrc\tmpdata" --flag-switches-begin --flag-switches-end --file-url-path-alias="/gen=C:\AsanBuilds\win32-release_x64_asan-win32-release_x64-1489125\gen"`


MiraclePtr Status: NOT PROTECTED
No raw_ptr<T> access to this region was detected prior to this crash.
This crash is still exploitable with MiraclePtr.
Refer to https://chromium.googlesource.com/chromium/src/+/main/base/memory/raw_ptr.md for details.

==31040==END OF ADDITIONAL INFO
==31040==ABORTING

C:\AsanBuilds\win32-release_x64_asan-win32-release_x64-1489125>