==4278==ERROR: AddressSanitizer: container-overflow on address 0x7ac053cb1ab0 at pc 0x5e8f3fc1e768 bp 0x7ffcefa1ebf0 sp 0x7ffcefa1ebe8
READ of size 8 at 0x7ac053cb1ab0 thread T0 (chrome)
    #0 0x5e8f3fc1e767 in void std::__Cr::__introsort<std::__Cr::_ClassicAlgPolicy, content::(anonymous namespace)::BidStatesDescByPriorityAndGroupByJoinOrigin&, std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, false>(std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, content::(anonymous namespace)::BidStatesDescByPriorityAndGroupByJoinOrigin&, std::__Cr::iterator_traits<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*>::difference_type, bool) third_party/libc++/src/include/__memory/unique_ptr.h:265:101
    #1 0x5e8f3fc18a68 in content::InterestGroupAuction::BuyerHelper::ApplySizeLimitAndSort() third_party/libc++/src/include/__algorithm/sort.h:872:3
    #2 0x5e8f3fc3839c in content::InterestGroupAuction::BuyerHelper::BuyerHelper(content::InterestGroupAuction*, std::__Cr::vector<content::SingleStorageInterestGroup, std::__Cr::allocator<content::SingleStorageInterestGroup>>&&) content/browser/interest_group/interest_group_auction.cc:1551:7
    #3 0x5e8f3fbcc71a in content::InterestGroupAuction::OnInterestGroupRead(scoped_refptr<content::StorageInterestGroups>) third_party/libc++/src/include/__memory/unique_ptr.h:756:30
    #4 0x5e8f3fc0da25 in base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupAuction::*&&)(scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupAuction>&&>, base::internal::BindState<true, true, false, void (content::InterestGroupAuction::*)(scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupAuction>>, void (scoped_refptr<content::StorageInterestGroups>)>::RunOnce(base::internal::BindStateBase*, scoped_refptr<content::StorageInterestGroups>&&) base/functional/bind_internal.h:740:12
    #5 0x5e8f3fc80fea in base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>::Run(scoped_refptr<content::StorageInterestGroups>) && base/functional/callback.h:155:12
    #6 0x5e8f3fcb8ab5 in content::InterestGroupManagerImpl::OnGetInterestGroupsComplete(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>) content/browser/interest_group/interest_group_manager_impl.cc:1019:23
    #7 0x5e8f3fcc487e in void base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupManagerImpl::*&&)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupManagerImpl>&&, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>&&, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>&&>, base::internal::BindState<true, true, false, void (content::InterestGroupManagerImpl::*)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>, void (scoped_refptr<content::StorageInterestGroups>)>::RunImpl<void (content::InterestGroupManagerImpl::*)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>, 0ul, 1ul, 2ul>(void (content::InterestGroupManagerImpl::*&&)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul, 2ul>, scoped_refptr<content::StorageInterestGroups>&&) base/functional/bind_internal.h:740:12
    #8 0x5e8f3fc80fea in base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>::Run(scoped_refptr<content::StorageInterestGroups>) && base/functional/callback.h:155:12
    #9 0x5e8f3fc68211 in content::InterestGroupCachingStorage::OnLoadInterestGroupsForOwner(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>) content/browser/interest_group/interest_group_caching_storage.cc:648:10
    #10 0x5e8f3fc82ab0 in void base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupCachingStorage::*&&)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), base::WeakPtr<content::InterestGroupCachingStorage>&&, url::Origin&&, unsigned int&&>, base::internal::BindState<true, true, false, void (content::InterestGroupCachingStorage::*)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>, void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>::RunImpl<void (content::InterestGroupCachingStorage::*)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>, 0ul, 1ul, 2ul>(void (content::InterestGroupCachingStorage::*&&)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul, 2ul>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>&&) base/functional/bind_internal.h:740:12
    #11 0x5e8f3fc90de2 in std::__Cr::__invoke_result_impl<void, auto...>::type std::__Cr::__invoke<void base::internal::ReplyAdapter<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*)::'lambda'(auto&&...), std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(auto&&...) base/functional/callback.h:155:12
    #12 0x5e8f3fc9037b in void base::internal::ReplyAdapter<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*) third_party/libc++/src/include/tuple:1400:29
    #13 0x5e8f3fc90a45 in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*), base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>&&, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*>, base::internal::BindState<false, true, false, void (*)(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*), base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, base::internal::OwnedWrapper<std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>, std::__Cr::default_delete<std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>>>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #14 0x5e8f4c175e0b in base::internal::PostTaskAndReplyRelay::RunReply(base::internal::PostTaskAndReplyRelay) base/functional/callback.h:155:12
    #15 0x5e8f4c175b7e in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(base::internal::PostTaskAndReplyRelay), base::internal::PostTaskAndReplyRelay&&>, base::internal::BindState<false, true, false, void (*)(base::internal::PostTaskAndReplyRelay), base::internal::PostTaskAndReplyRelay>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #16 0x5e8f4c0eb1e3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #17 0x5e8f4c15acf2 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #18 0x5e8f4c159a9a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:345:40
    #19 0x5e8f4c309c48 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46
    #20 0x5e8f4c30d208 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43
    #21 0x7e6056956718 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x54718) (BuildId: 42c28e95f24a721d8e8e159f42dbc541f0ff353d)

0x7ac053cb1ab0 is located 48 bytes inside of 64-byte region [0x7ac053cb1a80,0x7ac053cb1ac0)
allocated by thread T0 (chrome) here:
    #0 0x5e8f3351e351 in operator new(unsigned long) (/chromium/chromium/src/out/asan/chrome+0x112dc351) (BuildId: 94387377dc64fea5)
    #1 0x5e8f3fc3a2c2 in std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>* std::__Cr::vector<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>, std::__Cr::allocator<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>>>::__emplace_back_slow_path<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>>(std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>&&) third_party/libc++/src/include/__new/allocate.h:42:28
    #2 0x5e8f3fc37dfd in content::InterestGroupAuction::BuyerHelper::BuyerHelper(content::InterestGroupAuction*, std::__Cr::vector<content::SingleStorageInterestGroup, std::__Cr::allocator<content::SingleStorageInterestGroup>>&&) third_party/libc++/src/include/__vector/vector.h:1138:21
    #3 0x5e8f3fbcc71a in content::InterestGroupAuction::OnInterestGroupRead(scoped_refptr<content::StorageInterestGroups>) third_party/libc++/src/include/__memory/unique_ptr.h:756:30
    #4 0x5e8f3fc0da25 in base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupAuction::*&&)(scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupAuction>&&>, base::internal::BindState<true, true, false, void (content::InterestGroupAuction::*)(scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupAuction>>, void (scoped_refptr<content::StorageInterestGroups>)>::RunOnce(base::internal::BindStateBase*, scoped_refptr<content::StorageInterestGroups>&&) base/functional/bind_internal.h:740:12
    #5 0x5e8f3fc80fea in base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>::Run(scoped_refptr<content::StorageInterestGroups>) && base/functional/callback.h:155:12
    #6 0x5e8f3fcb8ab5 in content::InterestGroupManagerImpl::OnGetInterestGroupsComplete(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>) content/browser/interest_group/interest_group_manager_impl.cc:1019:23
    #7 0x5e8f3fcc487e in void base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupManagerImpl::*&&)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupManagerImpl>&&, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>&&, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>&&>, base::internal::BindState<true, true, false, void (content::InterestGroupManagerImpl::*)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>, void (scoped_refptr<content::StorageInterestGroups>)>::RunImpl<void (content::InterestGroupManagerImpl::*)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>, 0ul, 1ul, 2ul>(void (content::InterestGroupManagerImpl::*&&)(base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>> const&, scoped_refptr<content::StorageInterestGroups>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupManagerImpl>, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>, std::__Cr::optional<std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>>>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul, 2ul>, scoped_refptr<content::StorageInterestGroups>&&) base/functional/bind_internal.h:740:12
    #8 0x5e8f3fc80fea in base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>::Run(scoped_refptr<content::StorageInterestGroups>) && base/functional/callback.h:155:12
    #9 0x5e8f3fc68211 in content::InterestGroupCachingStorage::OnLoadInterestGroupsForOwner(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>) content/browser/interest_group/interest_group_caching_storage.cc:648:10
    #10 0x5e8f3fc82ab0 in void base::internal::Invoker<base::internal::FunctorTraits<void (content::InterestGroupCachingStorage::*&&)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), base::WeakPtr<content::InterestGroupCachingStorage>&&, url::Origin&&, unsigned int&&>, base::internal::BindState<true, true, false, void (content::InterestGroupCachingStorage::*)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>, void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>::RunImpl<void (content::InterestGroupCachingStorage::*)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>, 0ul, 1ul, 2ul>(void (content::InterestGroupCachingStorage::*&&)(url::Origin const&, unsigned int, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>), std::__Cr::tuple<base::WeakPtr<content::InterestGroupCachingStorage>, url::Origin, unsigned int>&&, std::__Cr::integer_sequence<unsigned long, 0ul, 1ul, 2ul>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>&&) base/functional/bind_internal.h:740:12
    #11 0x5e8f3fc90de2 in std::__Cr::__invoke_result_impl<void, auto...>::type std::__Cr::__invoke<void base::internal::ReplyAdapter<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*)::'lambda'(auto&&...), std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(auto&&...) base/functional/callback.h:155:12
    #12 0x5e8f3fc9037b in void base::internal::ReplyAdapter<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*) third_party/libc++/src/include/tuple:1400:29
    #13 0x5e8f3fc90a45 in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*), base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>&&, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*>, base::internal::BindState<false, true, false, void (*)(base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>*), base::OnceCallback<void (std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>)>, base::internal::OwnedWrapper<std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>, std::__Cr::default_delete<std::__Cr::unique_ptr<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>, std::__Cr::default_delete<std::__Cr::tuple<std::__Cr::vector<content::StorageInterestGroup, std::__Cr::allocator<content::StorageInterestGroup>>>>>>>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #14 0x5e8f4c175e0b in base::internal::PostTaskAndReplyRelay::RunReply(base::internal::PostTaskAndReplyRelay) base/functional/callback.h:155:12
    #15 0x5e8f4c175b7e in base::internal::Invoker<base::internal::FunctorTraits<void (*&&)(base::internal::PostTaskAndReplyRelay), base::internal::PostTaskAndReplyRelay&&>, base::internal::BindState<false, true, false, void (*)(base::internal::PostTaskAndReplyRelay), base::internal::PostTaskAndReplyRelay>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12
    #16 0x5e8f4c0eb1e3 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12
    #17 0x5e8f4c15acf2 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5
    #18 0x5e8f4c159a9a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:345:40
    #19 0x5e8f4c309c48 in base::MessagePumpGlib::HandleDispatch() base/message_loop/message_pump_glib.cc:736:46
    #20 0x5e8f4c30d208 in base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_loop/message_pump_glib.cc:355:43
    #21 0x7e6056956718 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x54718) (BuildId: 42c28e95f24a721d8e8e159f42dbc541f0ff353d)

HINT: if you don't care about these errors you may set ASAN_OPTIONS=detect_container_overflow=0.
Or if supported by the container library, pass -D__SANITIZER_DISABLE_CONTAINER_OVERFLOW__ to the compiler to disable  instrumentation.
If you suspect a false positive see also: https://github.com/google/sanitizers/wiki/AddressSanitizerContainerOverflow.
SUMMARY: AddressSanitizer: container-overflow third_party/libc++/src/include/__memory/unique_ptr.h:265:101 in void std::__Cr::__introsort<std::__Cr::_ClassicAlgPolicy, content::(anonymous namespace)::BidStatesDescByPriorityAndGroupByJoinOrigin&, std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, false>(std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*, content::(anonymous namespace)::BidStatesDescByPriorityAndGroupByJoinOrigin&, std::__Cr::iterator_traits<std::__Cr::unique_ptr<content::InterestGroupAuction::BidState, std::__Cr::default_delete<content::InterestGroupAuction::BidState>>*>::difference_type, bool)
Shadow bytes around the buggy address:
  0x7ac053cb1800: 00 00 00 fa fa fa f7 fa fd fd fd fd fd fd fd fd
  0x7ac053cb1880: fa fa f7 fa fd fd fd fd fd fd fd fd fa fa f7 fa
  0x7ac053cb1900: 00 00 00 00 00 00 00 fa fa fa f7 fa 00 00 00 00
  0x7ac053cb1980: 00 00 00 fa fa fa f7 fa 00 00 00 00 00 00 00 fa
  0x7ac053cb1a00: fa fa f7 fa 00 00 00 00 00 00 00 03 fa fa f7 fa
=>0x7ac053cb1a80: 00 00 fc fc fc fc[fc]fc fa fa fa fa fa fa fa fa
  0x7ac053cb1b00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7ac053cb1b80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7ac053cb1c00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7ac053cb1c80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7ac053cb1d00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

NOTE: the stack trace above identifies the code that *accessed* the poisoned memory.
HINT: To identify the code that *poisoned* the memory, try the experimental setting ASAN_OPTIONS=poison_history_size=<size>.

==4278==ADDITIONAL INFO

==4278==Note: Please include this section with the ASan report.
Task trace:
    #0 0x5e8f3fc660de in content::InterestGroupCachingStorage::GetInterestGroupsForOwner(url::Origin const&, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>) content/browser/interest_group/interest_group_caching_storage.cc:171:10
    #1 0x5e8f3fc660de in content::InterestGroupCachingStorage::GetInterestGroupsForOwner(url::Origin const&, base::OnceCallback<void (scoped_refptr<content::StorageInterestGroups>)>) content/browser/interest_group/interest_group_caching_storage.cc:171:10
    #2 0x5e8f4cf4dfc3 in mojo::SimpleWatcher::Context::Notify(unsigned int, MojoHandleSignalsState, unsigned int) mojo/public/cpp/system/simple_watcher.cc:103:13


Command line: `/chromium/chromium/src/out/asan/chrome --no-first-run --no-default-browser-check --ignore-certificate-errors --user-data-dir=/tmp/nan-prio-profile.vWL0Ti --no-sandbox --disable-gpu --headless=new --enable-logging=stderr --v=0 --privacy-sandbox-enrollment-overrides=https://localhost:8443 --enable-features=InterestGroupStorage,AdInterestGroupAPI,Fledge,AllowURNsInIframes,PrivacySandboxAdsAPIsOverride --disable-features=EnforcePrivacySandboxAttestations,FencedFrames,FledgeEnforceKAnonymity,PrivacySandboxAdPrivacyUxDeprecation --noerrdialogs --ozone-platform=headless --ozone-override-screen-size=800,600 --use-angle=swiftshader-webgl --flag-switches-begin --flag-switches-end https://localhost:8443/poc.html`


==4278==END OF ADDITIONAL INFO

==4278==ABORTING
[4315:4361:0613/235445.279316:WARNING:net/extras/sqlite/sqlite_persistent_store_backend_base.cc:179] Failed to post task from FlushAndNotifyInBackground@net/extras/sqlite/sqlite_persistent_store_backend_base.cc:229 to client_task_runner_.
[4315:4361:0613/235445.279434:WARNING:net/extras/sqlite/sqlite_persistent_store_backend_base.cc:179] Failed to post task from FlushAndNotifyInBackground@net/extras/sqlite/sqlite_persistent_store_backend_base.cc:229 to client_task_runner_.