This is automated email and please do not reply to this email! Dear submitter, Thank you for submitting the patches to the linux bluetooth mailing list. This is a CI test results with your patch series: PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1095781 ---Test result--- Test Summary: CheckPatch PASS 0.73 seconds GitLint FAIL 0.31 seconds SubjectPrefix PASS 0.12 seconds BuildKernel PASS 25.28 seconds CheckAllWarning PASS 27.92 seconds CheckSparse PASS 26.77 seconds BuildKernel32 PASS 24.49 seconds TestRunnerSetup PASS 525.15 seconds IncrementalBuild PASS 24.75 seconds Details ############################## Test: GitLint - FAIL Desc: Run gitlint Output: [v7] Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths WARNING: I3 - ignore-body-lines: gitlint will be switching from using Python regex 'match' (match beginning) to 'search' (match anywhere) semantics. Please review your ignore-body-lines.regex option accordingly. To remove this warning, set general.regex-style-search=True. More details: https://jorisroovers.github.io/gitlint/configuration/#regex-style-search 41: B1 Line exceeds max length (223>80): "- Reverted disable_work_sync() back to cancel_work_sync() across all error and close paths to preserve user-space retry capabilities, addressing the regression introduced in v4/v6 where work items were permanently disabled." 42: B1 Line exceeds max length (184>80): "- Synchronized workqueue teardown safely by atomically clearing PROTO_READY / PROTO_INIT under proto_lock prior to calling cancel_work_sync(), preventing any concurrent work requeuing." 43: B1 Line exceeds max length (230>80): "- Fixed a Use-After-Free (UAF) vulnerability in the teardown sequence by relocating hu->proto->close(hu) strictly prior to hci_free_dev(hdev) in all close and error paths, ensuring vendor specific callbacks safely access hu->hdev." 44: B1 Line exceeds max length (190>80): "- Added cancel_work_sync(&hu->init_ready) at the very beginning of hci_uart_tty_close() to serialize teardown against active asynchronous registration, eliminating race-induced double-frees." 47: B1 Line exceeds max length (130>80): "- Fixed missing `hu->proto_lock` write lock in hci_uart_init_work() error path to prevent race with readers (reported by Sashiko)." 48: B1 Line exceeds max length (239>80): "- Added disable_work_sync() instead of cancel_work_sync() for `hu->write_work` in hci_uart_init_work() and hci_uart_register_dev() error paths to completely block any concurrent re-queuing window before hdev is freed (reported by Sashiko)." 51: B2 Line has trailing whitespace: "- Relocated disable_work_sync() to the very top of hci_uart_tty_close(), " 52: B1 Line exceeds max length (85>80): " before hci_uart_close(), to ensure no new work is submitted during device teardown." 55: B2 Line has trailing whitespace: "- Adopted Luiz's suggestion to use disable_work_sync() instead of " https://github.com/bluez/bluetooth-next/pull/201 --- Regards, Linux Bluetooth