==2522==ERROR: AddressSanitizer: container-overflow on address 0x71cab1ac96f0 at pc 0x557bc53a2208 bp 0x7fff6b56c050 sp 0x7fff6b56c048
READ of size 8 at 0x71cab1ac96f0 thread T0 (chrome)
    #0 0x557bc53a2207 in void std::__Cr::__introsort<std::__Cr::_ClassicAlgPolicy, content::(anonymous namespace)::BidStatesDescByPriorityAndGroupByJoinOrigin&, std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, false>(std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, content::(anonymous namespace)::BidStatesDescByPriorityAndGroupByJoinOrigin&, std::__Cr::iterator_traits<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*>::difference_type, bool) third_party/libc++/src/include/__memory/unique_ptr.h:265:101
    #1 0x557bc539c47e in content::InterestGroupAuction::BuyerHelper::ApplySizeLimitAndSort() third_party/libc++/src/include/__algorithm/sort.h:872:3
    #2 0x557bc53bbe3c in content::InterestGroupAuction::BuyerHelper::BuyerHelper(content::InterestGroupAuction*, std::__Cr::vector<content::SingleStorageInterestGroup, std::__Cr::allocator<content::SingleStorageInterestGroup>>&&) content/browser/interest_group/interest_group_auction.cc:1551:7
    #3 0x557bc534fa94 in content::InterestGroupAuction::OnInterestGroupRead(scoped_refptr<content::StorageInterestGroups>) third_party/libc++/src/include/__memory/unique_ptr.h:756:30
    #4 0x557bc5390d95 in base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupAuction::*&&)(scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupAuction>&&>, base::internal::BindState<true, true, false, void (content::InterestGroupAuction::*)(scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupAuction>>, void (scoped_refptr<content::StorageInterestGroups>)>::RunOnce(base::internal::BindStateBase*, scoped_refptr<content::StorageInterestGroups>&&) base/functional/bind_internal.h:740:12
    #5 0x557bc5404a8a in base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>::Run(scoped_refptr<content::StorageInterestGroups>) && base/functional/callback.h:155:12
    #6 0x557bc543c555 in content::InterestGroupManagerImpl::OnGetInterestGroupsComplete(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>) content/browser/interest_group/interest_group_manager_impl.cc:1019:23
    #7 0x557bc544831e in void base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupManagerImpl::*&&)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupManagerImpl>&&, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>&&, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>&&>, base::internal::BindState<true, true, false, void (content::InterestGroupManagerImpl::*)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>, void (scoped_refptr<content::StorageInterestGroups>)>::RunImpl<void (content::InterestGroupManagerImpl::*)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>, 0ul, 1ul, 2ul>(void (content::InterestGroupManagerImpl::*&&)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul, 2ul>, scoped_refptr<content::StorageInterestGroups>&&) base/functional/bind_internal.h:740:12
    #8 0x557bc5404a8a in base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>::Run(scoped_refptr<content::StorageInterestGroups>) && base/functional/callback.h:155:12
    #9 0x557bc53ebcb1 in content::InterestGroupCachingStorage::OnLoadInterestGroupsForOwner(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>) content/browser/interest_group/interest_group_caching_storage.cc:648:10
    #10 0x557bc5406550 in void base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupCachingStorage::*&&)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), base::WeakPtr<content::InterestGroupCachingStorage>&&, url::Origin&&, unsigned int&&>, base::internal::BindState<true, true, false, void (content::InterestGroupCachingStorage::*)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>, void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>::RunImpl<void (content::InterestGroupCachingStorage::*)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>, 0ul, 1ul, 2ul>(void (content::InterestGroupCachingStorage::*&&)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul, 2ul>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>&&) base/functional/bind_internal.h:740:12
    #11 0x557bc5414882 in std::__Cr::__invoke_result_impl<void, auto...>::type std::__Cr::__invoke<void base::internal::ReplyAdapter<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*)::'lambda'(auto&&...), std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(auto&&...) base/functional/callback.h:155:12
    #12 0x557bc5413e1b in void base::internal::ReplyAdapter<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*) third_party/libc++/src/include/tuple:1400:29
    #13 0x557bc54144e5 in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*), base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>&&, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*>, base::internal::BindState<false, true, false, void (*)(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*), base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, base::internal::OwnedWrapper<std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>, std::__Cr::default_delete<std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>>>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #14 0x557bd18f98ab in base::internal::PostTaskAndReplyRelay::RunReply(base::internal::PostTaskAndReplyRelay) base/functional/callback.h:155:12
    #15 0x557bd18f961e in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(base::internal::PostTaskAndReplyRelay), base::internal::PostTaskAndReplyRelay&&>, base::internal::BindState<false, true, false, void (*)(base::internal::PostTaskAndReplyRelay), base::internal::PostTaskAndReplyRelay>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #16 0x557bd186ec83 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #17 0x557bd18de792 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #18 0x557bd18dd53a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:345:40
    #19 0x557bd1a8d6e8 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46
    #20 0x557bd1a90ca8 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43
    #21 0x756ab466f718 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x54718) (BuildId: 42c28e95f24a721d8e8e159f42dbc541f0ff353d)

0x71cab1ac96f0 is located 48 bytes inside of 64-byte region [0x71cab1ac96c0,0x71cab1ac9700)
allocated by thread T0 (chrome) here:
    #0 0x557bb8ca1351 in operator new(unsigned long) (/chromium/chromium/src/out/asan/chrome+0x112dc351) (BuildId: 0f532d075d465f77)
    #1 0x557bc53bdd62 in std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>* std::__Cr::vector<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>, std::__Cr::allocator<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>>>::__emplace_back_slow_path<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>>(std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>&&) third_party/libc++/src/include/__new/allocate.h:42:28
    #2 0x557bc53bb89d in content::InterestGroupAuction::BuyerHelper::BuyerHelper(content::InterestGroupAuction*, std::__Cr::vector<content::SingleStorageInterestGroup, std::__Cr::allocator<content::SingleStorageInterestGroup>>&&) third_party/libc++/src/include/__vector/vector.h:1138:21
    #3 0x557bc534fa94 in content::InterestGroupAuction::OnInterestGroupRead(scoped_refptr<content::StorageInterestGroups>) third_party/libc++/src/include/__memory/unique_ptr.h:756:30
    #4 0x557bc5390d95 in base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupAuction::*&&)(scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupAuction>&&>, base::internal::BindState<true, true, false, void (content::InterestGroupAuction::*)(scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupAuction>>, void (scoped_refptr<content::StorageInterestGroups>)>::RunOnce(base::internal::BindStateBase*, scoped_refptr<content::StorageInterestGroups>&&) base/functional/bind_internal.h:740:12
    #5 0x557bc5404a8a in base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>::Run(scoped_refptr<content::StorageInterestGroups>) && base/functional/callback.h:155:12
    #6 0x557bc543c555 in content::InterestGroupManagerImpl::OnGetInterestGroupsComplete(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>) content/browser/interest_group/interest_group_manager_impl.cc:1019:23
    #7 0x557bc544831e in void base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupManagerImpl::*&&)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupManagerImpl>&&, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>&&, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>&&>, base::internal::BindState<true, true, false, void (content::InterestGroupManagerImpl::*)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>, void (scoped_refptr<content::StorageInterestGroups>)>::RunImpl<void (content::InterestGroupManagerImpl::*)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>, 0ul, 1ul, 2ul>(void (content::InterestGroupManagerImpl::*&&)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul, 2ul>, scoped_refptr<content::StorageInterestGroups>&&) base/functional/bind_internal.h:740:12
    #8 0x557bc5404a8a in base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>::Run(scoped_refptr<content::StorageInterestGroups>) && base/functional/callback.h:155:12
    #9 0x557bc53ebcb1 in content::InterestGroupCachingStorage::OnLoadInterestGroupsForOwner(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>) content/browser/interest_group/interest_group_caching_storage.cc:648:10
    #10 0x557bc5406550 in void base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupCachingStorage::*&&)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), base::WeakPtr<content::InterestGroupCachingStorage>&&, url::Origin&&, unsigned int&&>, base::internal::BindState<true, true, false, void (content::InterestGroupCachingStorage::*)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>, void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>::RunImpl<void (content::InterestGroupCachingStorage::*)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>, 0ul, 1ul, 2ul>(void (content::InterestGroupCachingStorage::*&&)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul, 2ul>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>&&) base/functional/bind_internal.h:740:12
    #11 0x557bc5414882 in std::__Cr::__invoke_result_impl<void, auto...>::type std::__Cr::__invoke<void base::internal::ReplyAdapter<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*)::'lambda'(auto&&...), std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(auto&&...) base/functional/callback.h:155:12
    #12 0x557bc5413e1b in void base::internal::ReplyAdapter<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*) third_party/libc++/src/include/tuple:1400:29
    #13 0x557bc54144e5 in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*), base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>&&, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*>, base::internal::BindState<false, true, false, void (*)(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*), base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, base::internal::OwnedWrapper<std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>, std::__Cr::default_delete<std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>>>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #14 0x557bd18f98ab in base::internal::PostTaskAndReplyRelay::RunReply(base::internal::PostTaskAndReplyRelay) base/functional/callback.h:155:12
    #15 0x557bd18f961e in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(base::internal::PostTaskAndReplyRelay), base::internal::PostTaskAndReplyRelay&&>, base::internal::BindState<false, true, false, void (*)(base::internal::PostTaskAndReplyRelay), base::internal::PostTaskAndReplyRelay>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #16 0x557bd186ec83 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #17 0x557bd18de792 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #18 0x557bd18dd53a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:345:40
    #19 0x557bd1a8d6e8 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46
    #20 0x557bd1a90ca8 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43
    #21 0x756ab466f718 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x54718) (BuildId: 42c28e95f24a721d8e8e159f42dbc541f0ff353d)

HINT: if you don't care about these errors you may set ASAN_OPTIONS=detect_container_overflow=0.
Or if supported by the container library, pass -D__SANITIZER_DISABLE_CONTAINER_OVERFLOW__ to the compiler to disable  instrumentation.
If you suspect a false positive see also: https://github.com/google/sanitizers/wiki/AddressSanitizerContainerOverflow.
SUMMARY: AddressSanitizer: container-overflow third_party/libc++/src/include/__memory/unique_ptr.h:265:101 in void std::__Cr::__introsort<std::__Cr::_ClassicAlgPolicy, content::(anonymous namespace)::BidStatesDescByPriorityAndGroupByJoinOrigin&, std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, false>(std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, content::(anonymous namespace)::BidStatesDescByPriorityAndGroupByJoinOrigin&, std::__Cr::iterator_traits<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*>::difference_type, bool)
Shadow bytes around the buggy address:
  0x71cab1ac9400: fa fa f7 fa 00 00 00 00 00 00 00 fa fa fa f7 fa
  0x71cab1ac9480: fd fd fd fd fd fd fd fd fa fa f7 fa fd fd fd fd
  0x71cab1ac9500: fd fd fd fd fa fa f7 fa 00 00 00 00 00 00 00 fa
  0x71cab1ac9580: fa fa f7 fa 00 00 00 00 00 00 00 fa fa fa f7 fa
  0x71cab1ac9600: 00 00 00 00 00 00 00 fa fa fa f7 fa 00 00 00 00
=>0x71cab1ac9680: 00 00 00 03 fa fa f7 fa 00 00 fc fc fc fc[fc]fc
  0x71cab1ac9700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x71cab1ac9780: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x71cab1ac9800: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x71cab1ac9880: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x71cab1ac9900: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

NOTE: the stack trace above identifies the code that *accessed* the poisoned memory.
HINT: To identify the code that *poisoned* the memory, try the experimental setting ASAN_OPTIONS=poison_history_size=<size>.

==2522==ADDITIONAL INFO

==2522==Note: Please include this section with the ASan report.
Task trace:
    #0 0x557bc53e9b7e in content::InterestGroupCachingStorage::GetInterestGroupsForOwner(url::Origin const&, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>) content/browser/interest_group/interest_group_caching_storage.cc:171:10
    #1 0x557bc53e9b7e in content::InterestGroupCachingStorage::GetInterestGroupsForOwner(url::Origin const&, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>) content/browser/interest_group/interest_group_caching_storage.cc:171:10
    #2 0x557bd26d1a63 in mojo::SimpleWatcher::Context::Notify(unsigned int, MojoHandleSignalsState, unsigned int) mojo/public/cpp/system/simple_watcher.cc:103:13


Command line: `/chromium/chromium/src/out/asan/chrome --no-first-run --no-default-browser-check --ignore-certificate-errors --user-data-dir=/tmp/nan-prio.f8t8Zy --no-sandbox --disable-gpu --headless=new --enable-logging=stderr --v=0 --privacy-sandbox-enrollment-overrides=https://localhost:8443 --enable-features=InterestGroupStorage,AdInterestGroupAPI,Fledge,AllowURNsInIframes,PrivacySandboxAdsAPIsOverride --disable-features=EnforcePrivacySandboxAttestations,FencedFrames,FledgeEnforceKAnonymity,PrivacySandboxAdPrivacyUxDeprecation --noerrdialogs --ozone-platform=headless --ozone-override-screen-size=800,600 --use-angle=swiftshader-webgl --flag-switches-begin --flag-switches-end https://localhost:8443/poc.html`


==2522==END OF ADDITIONAL INFO

==2522==ABORTING
[2559:2611:0613/234233.250564:WARNING:net/extras/sqlite/sqlite_persistent_store_backend_base.cc:179] Failed to post task from FlushAndNotifyInBackground@net/extras/sqlite/sqlite_persistent_store_backend_base.cc:229 to client_task_runner_.
[2559:2611:0613/234233.250740:WARNING:net/extras/sqlite/sqlite_persistent_store_backend_base.cc:179] Failed to post task from FlushAndNotifyInBackground@net/extras/sqlite/sqlite_persistent_store_backend_base.cc:229 to client_task_runner_.