==27298==ERROR: AddressSanitizer: heap-use-after-free on address 0x60e00001230a at pc 0x7fcd970ce395 bp 0x7ffc9bb83920 sp 0x7ffc9bb830d0
READ of size 1 at 0x60e00001230a thread T0
    #0 0x7fcd970ce394  (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x46394)
    #1 0x6d49b6 in instance_create /home/ebg/src/map/instance.c:97
    #2 0x96665a in buildin_instance_create /home/ebg/src/map/script.c:17540
    #3 0x98d9dd in run_func /home/ebg/src/map/script.c:4010
    #4 0x9db4bc in run_script_main /home/ebg/src/map/script.c:4255
    #5 0x7eabe1 in npc_scriptcont /home/ebg/src/map/npc.c:1313
    #6 0x5e3de1 in clif_parse /home/ebg/src/map/clif.c:18644
    #7 0xc17499 in do_sockets /home/ebg/src/common/socket.c:877
    #8 0x4074f1 in main /home/ebg/src/common/core.c:446
    #9 0x7fcd94cd9b44 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21b44)
    #10 0x407d54  (/home/ebg/map-server+0x407d54)

0x60e00001230a is located 74 bytes inside of 148-byte region [0x60e0000122c0,0x60e000012354)
freed by thread T0 here:
    #0 0x7fcd9711c0da in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x940da)
    #1 0x9c3dc6 in pop_stack /home/ebg/src/map/script.c:3360

previously allocated by thread T0 here:
    #0 0x7fcd9711c37a in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x9437a)
    #1 0xc09a06 in aMalloc_ /home/ebg/src/common/memmgr.c:104

SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ??
Shadow bytes around the buggy address:
  0x0c1c7fffa410: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
  0x0c1c7fffa420: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c1c7fffa430: fd fd fd fd fa fa fa fa fa fa fa fa fd fd fd fd
  0x0c1c7fffa440: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
  0x0c1c7fffa450: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
=>0x0c1c7fffa460: fd[fd]fd fd fd fd fd fd fd fd fd fa fa fa fa fa
  0x0c1c7fffa470: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c1c7fffa480: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa
  0x0c1c7fffa490: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c1c7fffa4a0: fd fd fd fd fa fa fa fa fa fa fa fa fd fd fd fd
  0x0c1c7fffa4b0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Heap right redzone:      fb
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack partial redzone:   f4
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
==27298==ABORTING