From: bluez.test.bot@gmail.com
To: linux-bluetooth@vger.kernel.org, pav@iki.fi
Subject: RE: device: Fix resolving a coordinated set over Secure Connections
Date: Thu, 17 Sep 2026 18:58:59 -0700 (PDT) [thread overview]
Message-ID: <6aac9ae3.5701e4f5.2afb2e.5ab5@mx.google.com> (raw)
In-Reply-To: <67b6c0c399e8ab0ed746094d437687c1c8b2101d.1789689632.git.pav@iki.fi>
[-- Attachment #1: Type: text/plain, Size: 152975 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/series/1168152/
---Test result---
Test Summary:
CheckPatch PASS 1.72 seconds
GitLint FAIL 0.80 seconds
BuildEll PASS 20.11 seconds
BluezMake PASS 387.33 seconds
MakeCheck PASS 14.46 seconds
MakeDistcheck PASS 139.88 seconds
CheckValgrind PASS 231.38 seconds
CheckSmatch PASS 290.92 seconds
bluezmakeextell PASS 93.56 seconds
TestFunctional FAIL 1171.93 seconds
IncrementalBuild PASS 433.32 seconds
ScanBuild PASS 1125.45 seconds
Details
##############################
Test: GitLint - FAIL
Desc: Run gitlint
Output:
[BlueZ,4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing
1: T1 Title exceeds max length (83>80): "[BlueZ,4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing"
6: B1 Line exceeds max length (82>80): "test/functional/test_bap.py::test_bap_unicast_set_transport_created[hosts7-vm3-sc]"
7: B1 Line exceeds max length (86>80): "test/functional/test_bap.py::test_bap_unicast_set_transport_created[hosts7-vm3-legacy]"
##############################
Test: TestFunctional - FAIL
Desc: Run test-functional
Output:
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts7-vm3-sc]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts7.0-bluetoothd-1789695064-52.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 52]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7f68b0970900 (LWP 52)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007f68b10cbb7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007f68b10ae8ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 0, 0, 0, 140723960486512, 22, 140087620631504, 0, 140723960486448, 140087637476886, 140087607787520, 4096, 0, 12032862754435452416, 140087611969560}}, sa_flags = -1304465408, sa_restorer = 0x16}
#5 0x00007f68b1cd6a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007f68b1dfcc2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007f68b1dd193c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7ffcd9ad1ba6) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7f68b0188000 '=' <repeats 65 times>, "\n==52==ERROR: AddressSanitizer: heap-use-after-free on address 0x7cd8afde040b at pc 0x7f68b1d86445 bp 0x7ffcd9ad30a0 sp 0x7ffcd9ad2848\n"..., capacity_bytes_ = 4096, size_ = 3838}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007f68b1dd0e02 in __asan::ReportGenericError (pc=140087637075013, bp=140723960492192, sp=sp@entry=140723960490056, addr=addr@entry=137270105342987, is_write=is_write@entry=false, access_size=6, fatal=false, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, signal = {siginfo = 0xffffffff00000002, context = 0x7cd8afde040b, addr = 0, pc = 0, sp = 11785390261823, bp = 137270105342987, is_memory_access = 11, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = false}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, second_free_stack = 0xffffffff00000002, addr_description = {addr = 137270105342987, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1599, free_stack_id = 2744, chunk_access = {bad_addr = 137270105342987, offset = 11, chunk_begin = 137270105342976, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {addr = 137270105342987, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1599, free_stack_id = 2744, chunk_access = {bad_addr = 137270105342987, offset = 11, chunk_begin = 137270105342976, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 135689538805280, delete_alignment = 140723960487984}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {data = {kind = 2950562827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11785390261823, alloc_stack_id = 2950562827, free_stack_id = 31960, chunk_access = {bad_addr = 11, offset = 137270105342976, chunk_begin = 752, chunk_size = 140723960504328, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11785390261823, frame_pc = 137270105342987, access_size = 11, frame_descr = 0x7cd8afde0400 "\270\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11785390261823, size_with_redzone = 137270105342987, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cd8afde0400 "\270\n", has_dynamic_init = 752, gcc_location = 0x7ffcd9ad6008, odr_indicator = 135689538805280}, {beg = 140723960487984, size = 140087636372255, size_with_redzone = 1, name = 0x7b68aec29e20 "\340k\345\257\310{", module_name = 0x7ffcd9ad2880 "\220(\255\331\374\177", has_dynamic_init = 140087637329362, gcc_location = 0x7f68b05ba0d0, odr_indicator = 132501020816}, {beg = 140723960488032, size = 3, size_with_redzone = 140087637329424, name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723960490816, gcc_location = 0x7ffcd9ad2120, odr_indicator = 2}, {beg = 140087638044608, size = 136101874723600, size_with_redzone = 140723960488176, name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136101874723600, gcc_location = 0x7f68b05ba0d0, odr_indicator = 140723960488208}}, reg_sites = {2951047968, 31688, 81, 0}, access_size = 140723960490368, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, dealloc_stack = 0xffffffff00000002, alloc_type = 2950562827, dealloc_type = 31960, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x3c), shadow_byte = 6 '\006'}, heap = {addr = 0, alloc_tid = 11785390261823, free_tid = 137270105342987, alloc_stack_id = 11, free_stack_id = 0, chunk_access = {bad_addr = 137270105342976, offset = 752, chunk_begin = 140723960504328, chunk_size = 135689538805280, user_requested_alignment = 48, access_type = 2, alloc_type = 0}}, stack = {addr = 0, tid = 11785390261823, offset = 137270105342987, frame_pc = 11, access_size = 137270105342976, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11785390261823, size = 137270105342987, size_with_redzone = 11, name = 0x7cd8afde0400 "\270\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140723960504328, gcc_location = 0x7b68aec29e20, odr_indicator = 140723960487984}, {beg = 140087636372255, size = 1, size_with_redzone = 135689538805280, name = 0x7ffcd9ad2880 "\220(\255\331\374\177", module_name = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 140087612121296, gcc_location = 0x1ed9ad2090, odr_indicator = 140723960488032}, {beg = 3, size = 140087637329424, size_with_redzone = 140087624059791, name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", module_name = 0x7ffcd9ad2b40 "\344,\255\331\374\177", has_dynamic_init = 140723960488224, gcc_location = 0x2, odr_indicator = 140087638044608}, {beg = 136101874723600, size = 140723960488176, size_with_redzone = 140087636395832, name = 0x3e <error: Cannot access memory at address 0x3e>, module_name = 0x7bc8afe56b10 "\003\021", has_dynamic_init = 140087612121296, gcc_location = 0x7ffcd9ad2110, odr_indicator = 136101874723616}}, reg_sites = {81, 0, 3652004224, 32764}, access_size = 140087637075013, size = 160 '\240'}, wild = {addr = 0, access_size = 11785390261823}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2950562827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11785390261823, alloc_stack_id = 2950562827, free_stack_id = 31960, chunk_access = {bad_addr = 11, offset = 137270105342976, chunk_begin = 752, chunk_size = 140723960504328, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11785390261823, frame_pc = 137270105342987, access_size = 11, frame_descr = 0x7cd8afde0400 "\270\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11785390261823, size_with_redzone = 137270105342987, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cd8afde0400 "\270\n", has_dynamic_init = 752, gcc_location = 0x7ffcd9ad6008, odr_indicator = 135689538805280}, {beg = 140723960487984, size = 140087636372255, size_with_redzone = 1, name = 0x7b68aec29e20 "\340k\345\257\310{", module_name = 0x7ffcd9ad2880 "\220(\255\331\374\177", has_dynamic_init = 140087637329362, gcc_location = 0x7f68b05ba0d0, odr_indicator = 132501020816}, {beg = 140723960488032, size = 3, size_with_redzone = 140087637329424, name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723960490816, gcc_location = 0x7ffcd9ad2120, odr_indicator = 2}, {beg = 140087638044608, size = 136101874723600, size_with_redzone = 140723960488176, name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136101874723600, gcc_location = 0x7f68b05ba0d0, odr_indicator = 140723960488208}}, reg_sites = {2951047968, 31688, 81, 0}, access_size = 140723960490368, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2950562827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11785390261823, alloc_stack_id = 2950562827, free_stack_id = 31960, chunk_access = {bad_addr = 11, offset = 137270105342976, chunk_begin = 752, chunk_size = 140723960504328, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11785390261823, frame_pc = 137270105342987, access_size = 11, frame_descr = 0x7cd8afde0400 "\270\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11785390261823, size_with_redzone = 137270105342987, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cd8afde0400 "\270\n", has_dynamic_init = 752, gcc_location = 0x7ffcd9ad6008, odr_indicator = 135689538805280}, {beg = 140723960487984, size = 140087636372255, size_with_redzone = 1, name = 0x7b68aec29e20 "\340k\345\257\310{", module_name = 0x7ffcd9ad2880 "\220(\255\331\374\177", has_dynamic_init = 140087637329362, gcc_location = 0x7f68b05ba0d0, odr_indicator = 132501020816}, {beg = 140723960488032, size = 3, size_with_redzone = 140087637329424, name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723960490816, gcc_location = 0x7ffcd9ad2120, odr_indicator = 2}, {beg = 140087638044608, size = 136101874723600, size_with_redzone = 140723960488176, name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136101874723600, gcc_location = 0x7f68b05ba0d0, odr_indicator = 140723960488208}}, reg_sites = {2951047968, 31688, 81, 0}, access_size = 140723960490368, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137270105342987, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137270105342987, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137270105342987}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137270105342987}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137270105342987, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137270105342987}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, user_size = 137270105342987, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, requested_size = 137270105342987}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, length1 = 137270105342987, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11785390261823, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11785390261823, alloc_tid = 137270105342987, free_tid = 11, alloc_stack_id = 2950562816, free_stack_id = 31960, chunk_access = {bad_addr = 752, offset = 140723960504328, chunk_begin = 135689538805280, chunk_size = 140723960487984, user_requested_alignment = 2847, access_type = 2, alloc_type = 2}}, stack = {addr = 11785390261823, tid = 137270105342987, offset = 11, frame_pc = 137270105342976, access_size = 752, frame_descr = 0x7ffcd9ad6008 <error: Cannot access memory at address 0x7ffcd9ad6008>}, global = {addr = 11785390261823, static kMaxGlobals = 4, globals = {{beg = 137270105342987, size = 11, size_with_redzone = 137270105342976, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffcd9ad6008 <error: Cannot access memory at address 0x7ffcd9ad6008>, has_dynamic_init = 135689538805280, gcc_location = 0x7ffcd9ad2030, odr_indicator = 140087636372255}, {beg = 1, size = 135689538805280, size_with_redzone = 140723960490112, name = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f68b05ba0d0 "", has_dynamic_init = 132501020816, gcc_location = 0x7ffcd9ad2060, odr_indicator = 3}, {beg = 140087637329424, size = 140087624059791, size_with_redzone = 93890177049963, name = 0x7ffcd9ad2b40 "\344,\255\331\374\177", module_name = 0x7ffcd9ad2120 "\030", has_dynamic_init = 2, gcc_location = 0x7f68b1e72fc0 <__asan::instance>, odr_indicator = 136101874723600}, {beg = 140723960488176, size = 140087636395832, size_with_redzone = 62, name = 0x7bc8afe56b10 "\003\021", module_name = 0x7f68b05ba0d0 "", has_dynamic_init = 140723960488208, gcc_location = 0x7bc8afe56b20, odr_indicator = 81}}, reg_sites = {3652004224, 32764, 2983748677, 32616}, access_size = 140723960492192, size = 72 'H'}, wild = {addr = 11785390261823, access_size = 137270105342987}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 140087637755799, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140087637755799, alloc_tid = 140087638097152, free_tid = 140723960491744, alloc_stack_id = 2984003026, free_stack_id = 32616, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140723960489664, chunk_size = 3, user_requested_alignment = 1552, access_type = 0, alloc_type = 1}}, stack = {addr = 140087637755799, tid = 140087638097152, offset = 140723960491744, frame_pc = 140087637329362, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 140087637755799, static kMaxGlobals = 4, globals = {{beg = 140087638097152, size = 140723960491744, size_with_redzone = 140087637329362, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140723960489664, gcc_location = 0x3, odr_indicator = 140087637329424}, {beg = 140087624059791, size = 93890177049963, size_with_redzone = 140723960492448, name = 0x7ffcd9ad2740 "`'\255\331\374\177", module_name = 0x7f68b1e6cf78 "\001", has_dynamic_init = 140723960489856, gcc_location = 0x556482bab560, odr_indicator = 140087616014520}, {beg = 65535, size = 140723960489776, size_with_redzone = 140087637160793, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b68aee54800 "\0166\340E", has_dynamic_init = 140723960489824, gcc_location = 0x7f68b1ce774a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140723960489824}, {beg = 140087637585789, size = 140723960489856, size_with_redzone = 140087637429606, name = 0x7ffcd9ad2800 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 140087638044608, gcc_location = 0x7ba8afe4c880, odr_indicator = 140723960489936}}, reg_sites = {2983069496, 32616, 40, 0}, access_size = 140087637535261, size = 208 '\320'}, wild = {addr = 140087637755799, access_size = 140087638097152}}}}, function = 0x7ffcd9ad27f0 "\2400\255\331\374\177"}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2950562827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11785390261823, alloc_stack_id = 2950562827, free_stack_id = 31960, chunk_access = {bad_addr = 11, offset = 137270105342976, chunk_begin = 752, chunk_size = 140723960504328, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11785390261823, frame_pc = 137270105342987, access_size = 11, frame_descr = 0x7cd8afde0400 "\270\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11785390261823, size_with_redzone = 137270105342987, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cd8afde0400 "\270\n", has_dynamic_init = 752, gcc_location = 0x7ffcd9ad6008, odr_indicator = 135689538805280}, {beg = 140723960487984, size = 140087636372255, size_with_redzone = 1, name = 0x7b68aec29e20 "\340k\345\257\310{", module_name = 0x7ffcd9ad2880 "\220(\255\331\374\177", has_dynamic_init = 140087637329362, gcc_location = 0x7f68b05ba0d0, odr_indicator = 132501020816}, {beg = 140723960488032, size = 3, size_with_redzone = 140087637329424, name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723960490816, gcc_location = 0x7ffcd9ad2120, odr_indicator = 2}, {beg = 140087638044608, size = 136101874723600, size_with_redzone = 140723960488176, name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136101874723600, gcc_location = 0x7f68b05ba0d0, odr_indicator = 140723960488208}}, reg_sites = {2951047968, 31688, 81, 0}, access_size = 140723960490368, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}, size = 140723960492192}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, beg = 137270105342987, end = 0, old_mid = 0, new_mid = 11785390261823}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, storage_beg = 137270105342987, storage_end = 0, old_container_beg = 0, old_container_end = 11785390261823, new_container_beg = 137270105342987, new_container_end = 11}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, old_storage_beg = 137270105342987, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11785390261823}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, global1 = {beg = 18446744069414584322, size = 137270105342987, size_with_redzone = 0, name = 0x0, module_name = 0xab80000063f <error: Cannot access memory at address 0xab80000063f>, has_dynamic_init = 137270105342987, gcc_location = 0xb, odr_indicator = 137270105342976}, global2 = {beg = 752, size = 140723960504328, size_with_redzone = 135689538805280, name = 0x7ffcd9ad2030 "\200(\255\331\374\177", module_name = 0x7f68b1cdab1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47> "H\205\300t\f\311\303f.\017\037\204", has_dynamic_init = 1, gcc_location = 0x7b68aec29e20, odr_indicator = 140723960490112}, stack_id1 = 2984003026, stack_id2 = 32616}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, pc = 18446744069414584322, bp = 137270105342987, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11785390261823, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11785390261823, alloc_tid = 137270105342987, free_tid = 11, alloc_stack_id = 2950562816, free_stack_id = 31960, chunk_access = {bad_addr = 752, offset = 140723960504328, chunk_begin = 135689538805280, chunk_size = 140723960487984, user_requested_alignment = 2847, access_type = 2, alloc_type = 2}}, stack = {addr = 11785390261823, tid = 137270105342987, offset = 11, frame_pc = 137270105342976, access_size = 752, frame_descr = 0x7ffcd9ad6008 <error: Cannot access memory at address 0x7ffcd9ad6008>}, global = {addr = 11785390261823, static kMaxGlobals = 4, globals = {{beg = 137270105342987, size = 11, size_with_redzone = 137270105342976, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffcd9ad6008 <error: Cannot access memory at address 0x7ffcd9ad6008>, has_dynamic_init = 135689538805280, gcc_location = 0x7ffcd9ad2030, odr_indicator = 140087636372255}, {beg = 1, size = 135689538805280, size_with_redzone = 140723960490112, name = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f68b05ba0d0 "", has_dynamic_init = 132501020816, gcc_location = 0x7ffcd9ad2060, odr_indicator = 3}, {beg = 140087637329424, size = 140087624059791, size_with_redzone = 93890177049963, name = 0x7ffcd9ad2b40 "\344,\255\331\374\177", module_name = 0x7ffcd9ad2120 "\030", has_dynamic_init = 2, gcc_location = 0x7f68b1e72fc0 <__asan::instance>, odr_indicator = 136101874723600}, {beg = 140723960488176, size = 140087636395832, size_with_redzone = 62, name = 0x7bc8afe56b10 "\003\021", module_name = 0x7f68b05ba0d0 "", has_dynamic_init = 140723960488208, gcc_location = 0x7bc8afe56b20, odr_indicator = 81}}, reg_sites = {3652004224, 32764, 2983748677, 32616}, access_size = 140723960492192, size = 72 'H'}, wild = {addr = 11785390261823, access_size = 137270105342987}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 140087637755799, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140087637755799, alloc_tid = 140087638097152, free_tid = 140723960491744, alloc_stack_id = 2984003026, free_stack_id = 32616, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140723960489664, chunk_size = 3, user_requested_alignment = 1552, access_type = 0, alloc_type = 1}}, stack = {addr = 140087637755799, tid = 140087638097152, offset = 140723960491744, frame_pc = 140087637329362, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 140087637755799, static kMaxGlobals = 4, globals = {{beg = 140087638097152, size = 140723960491744, size_with_redzone = 140087637329362, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140723960489664, gcc_location = 0x3, odr_indicator = 140087637329424}, {beg = 140087624059791, size = 93890177049963, size_with_redzone = 140723960492448, name = 0x7ffcd9ad2740 "`'\255\331\374\177", module_name = 0x7f68b1e6cf78 "\001", has_dynamic_init = 140723960489856, gcc_location = 0x556482bab560, odr_indicator = 140087616014520}, {beg = 65535, size = 140723960489776, size_with_redzone = 140087637160793, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b68aee54800 "\0166\340E", has_dynamic_init = 140723960489824, gcc_location = 0x7f68b1ce774a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140723960489824}, {beg = 140087637585789, size = 140723960489856, size_with_redzone = 140087637429606, name = 0x7ffcd9ad2800 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 140087638044608, gcc_location = 0x7ba8afe4c880, odr_indicator = 140723960489936}}, reg_sites = {2983069496, 32616, 40, 0}, access_size = 140087637535261, size = 208 '\320'}, wild = {addr = 140087637755799, access_size = 140087638097152}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137270105342987, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137270105342987, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1599, free_stack_id = 2744, chunk_access = {bad_addr = 137270105342987, offset = 11, chunk_begin = 137270105342976, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137270105342987, tid = 0, offset = 0, frame_pc = 11785390261823, access_size = 137270105342987, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137270105342987, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11785390261823, name = 0x7cd8afde040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137270105342976, gcc_location = 0x2f0, odr_indicator = 140723960504328}, {beg = 135689538805280, size = 140723960487984, size_with_redzone = 140087636372255, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b68aec29e20 "\340k\345\257\310{", has_dynamic_init = 140723960490112, gcc_location = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 140087612121296}, {beg = 132501020816, size = 140723960488032, size_with_redzone = 3, name = 0x7f68b1dc4610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 93890177049963, gcc_location = 0x7ffcd9ad2b40, odr_indicator = 140723960488224}, {beg = 2, size = 140087638044608, size_with_redzone = 136101874723600, name = 0x7ffcd9ad20f0 "\2400\255\331\374\177", module_name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7bc8afe56b10, odr_indicator = 140087612121296}}, reg_sites = {3652002064, 32764, 2951047968, 31688}, access_size = 81, size = 128 '\200'}, wild = {addr = 137270105342987, access_size = 0}}}}, pc = 140087637075013, bp = 140723960492192, sp = 140723960490056, access_size = 6, bug_descr = 0x7f68b1e2c797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137270105342987, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137270105342987, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1599, free_stack_id = 2744, chunk_access = {bad_addr = 137270105342987, offset = 11, chunk_begin = 137270105342976, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137270105342987, tid = 0, offset = 0, frame_pc = 11785390261823, access_size = 137270105342987, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137270105342987, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11785390261823, name = 0x7cd8afde040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137270105342976, gcc_location = 0x2f0, odr_indicator = 140723960504328}, {beg = 135689538805280, size = 140723960487984, size_with_redzone = 140087636372255, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b68aec29e20 "\340k\345\257\310{", has_dynamic_init = 140723960490112, gcc_location = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 140087612121296}, {beg = 132501020816, size = 140723960488032, size_with_redzone = 3, name = 0x7f68b1dc4610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 93890177049963, gcc_location = 0x7ffcd9ad2b40, odr_indicator = 140723960488224}, {beg = 2, size = 140087638044608, size_with_redzone = 136101874723600, name = 0x7ffcd9ad20f0 "\2400\255\331\374\177", module_name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7bc8afe56b10, odr_indicator = 140087612121296}}, reg_sites = {3652002064, 32764, 2951047968, 31688}, access_size = 81, size = 128 '\200'}, wild = {addr = 137270105342987, access_size = 0}}}}, pc = 140087637075013, bp = 140723960492192, sp = 140723960490056, access_size = 6, bug_descr = 0x7f68b1e2c797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007f68b1dd0f8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140723960492192, sp=sp@entry=140723960490056, addr=addr@entry=137270105342987, is_write=is_write@entry=false, access_size=access_size@entry=6, exp=<optimized out>, fatal=false) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007f68b1d86468 in MemcmpInterceptorCommon (ctx=ctx@entry=0x7ffcd9ad30b0, real_fn=<optimized out>, a1=a1@entry=0x7cd8afde040b, a2=a2@entry=0x7b68aeb8aba0, size=size@entry=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:848
bp = 140723960492192
pc = <optimized out>
local_stack = 136926507958336
sp = 140723960490056
_ctx = 0x7ffcd9ad30b0
suppressed = <optimized out>
__offset = 137270105342987
__size = 6
__bad = <optimized out>
result = <optimized out>
#11 0x00007f68b1d86835 in ___interceptor_memcmp (a1=0x7cd8afde040b, a2=0x7b68aeb8aba0, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:880
ctx = 0x7ffcd9ad30b0
_ctx = {interceptor_name = 0x7f68b1e306b6 "memcmp"}
#12 ___interceptor_memcmp (a1=0x7cd8afde040b, a2=0x7b68aeb8aba0, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:875
ctx = <optimized out>
_ctx = <optimized out>
#13 0x000055648294e038 in bacmp (ba1=0x7cd8afde040b, ba2=0x7b68aeb8aba0) at ./lib/bluetooth/bluetooth.h:438
No locals.
#14 device_addr_type_cmp (a=0x7cd8afde0400, b=0x7b68aeb8aba0) at src/device.c:5657
dev = 0x7cd8afde0400
addr = 0x7b68aeb8aba0
cmp = <optimized out>
#15 0x00007f68b1b004c2 in g_slist_find_custom () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#16 0x00005564828cd6f4 in btd_adapter_find_device (adapter=<optimized out>, dst=dst@entry=0x7ba8afe0eed8, bdaddr_type=1 '\001') at src/adapter.c:1055
addr = <optimized out>
device = <optimized out>
list = <optimized out>
#17 0x000055648286fc07 in att_disconnected (err=<optimized out>, user_data=0x7ba8afe0eed0) at src/gatt-database.c:335
state = 0x7ba8afe0eed0
device = <optimized out>
__func__ = "att_disconnected"
#18 0x0000556482886b34 in btd_gatt_database_att_disconnected (database=<optimized out>, device=<optimized out>) at src/gatt-database.c:4238
server = <optimized out>
att = <optimized out>
state = <optimized out>
addr = <optimized out>
type = <optimized out>
__func__ = "btd_gatt_database_att_disconnected"
#19 0x00005564829300e6 in gatt_server_cleanup (device=device@entry=0x7cd8afde0080) at src/device.c:842
No locals.
#20 0x00005564829447dc in attio_cleanup (device=0x7cd8afde0080) at src/device.c:862
No locals.
#21 0x0000556482944e27 in device_free (user_data=0x7cd8afde0080) at src/device.c:918
device = 0x7cd8afde0080
__func__ = "device_free"
#22 0x00005564829c2a3a in remove_interface (data=0x7bd8afdeb000, name=name@entry=0x556482bcfa20 "org.bluez.Device1") at gdbus/object.c:742
iface = 0x7bc8afdfe380
#23 0x00005564829c55fc in g_dbus_unregister_interface (connection=<optimized out>, path=<optimized out>, name=<optimized out>) at gdbus/object.c:1499
data = <optimized out>
#24 0x00005564829001b3 in adapter_remove (adapter=adapter@entry=0x7c98afde0200) at src/adapter.c:7307
l = 0x7b88afe0b410 = {0x7cd8afde0080}
db = <optimized out>
ranging_manager = <optimized out>
__func__ = "adapter_remove"
#25 0x0000556482900d48 in adapter_cleanup () at src/adapter.c:11263
adapter = 0x7c98afde0200
#26 0x00005564826b22e0 in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1723
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts7-vm3-legacy]: failed on setup with "pytest_bluezenv.rpc.RemoteTimeoutError: Connection recv timed out"
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts7-vm3-legacy]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts7.0-bluetoothd-1789695083-71.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 71]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7ff5148da900 (LWP 71)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007ff515035b7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007ff5150188ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 136292505489056, 9130188358427281408, 140725062212288, 140725062212576, 140725062212432, 22, 140690593160144, 0, 140725062212368, 140690610005526, 140690584510464, 4096, 0, 9130188358427281408, 140690583388184}}, sa_flags = 372641792, sa_restorer = 0x16}
#5 0x00007ff515c40a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007ff515d66c2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007ff515d3b93c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7ffd1b581c86) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7ff514502000 '=' <repeats 65 times>, "\n==71==ERROR: AddressSanitizer: heap-use-after-free on address 0x7d6513de0208 at pc 0x5594209b7e9c bp 0x7ffd1b582900 sp 0x7ffd1b5828f0\n"..., capacity_bytes_ = 4096, size_ = 3419}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007ff515d3ae02 in __asan::ReportGenericError (pc=94094690582172, bp=140725062215936, sp=sp@entry=140725062215920, addr=137873078485512, is_write=is_write@entry=false, access_size=8, fatal=true, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, signal = {siginfo = 0x7ffd00000002, context = 0x7d6513de0208, addr = 0, pc = 0, sp = 11081015625204, bp = 137873078485512, is_memory_access = 136, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = 128}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, second_free_stack = 0x7ffd00000002, addr_description = {addr = 137873078485512, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2580, chunk_access = {bad_addr = 137873078485512, offset = 392, chunk_begin = 137873078485120, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, free_stack = 0x7ffd00000002, addr_description = {addr = 137873078485512, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2580, chunk_access = {bad_addr = 137873078485512, offset = 392, chunk_begin = 137873078485120, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 140690608900895, delete_alignment = 1}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, free_stack = 0x7ffd00000002, addr_description = {data = {kind = 333316616, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11081015625204, alloc_stack_id = 333316616, free_stack_id = 32101, chunk_access = {bad_addr = 392, offset = 137873078485120, chunk_begin = 752, chunk_size = 140725062230024, user_requested_alignment = 2847, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 0, offset = 11081015625204, frame_pc = 137873078485512, access_size = 392, frame_descr = 0x7d6513de0080 "\024\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11081015625204, size_with_redzone = 137873078485512, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7d6513de0080 "\024\n", has_dynamic_init = 752, gcc_location = 0x7ffd1b586008, odr_indicator = 140690608900895}, {beg = 1, size = 137117164394752, size_with_redzone = 140725062216016, name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 129189953536, gcc_location = 0x7ffd1b582130, odr_indicator = 2}, {beg = 140690609858064, size = 94094691141270, size_with_redzone = 140725062214112, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7ff515ddcfc0 <__asan::instance> "", has_dynamic_init = 136429970551552, gcc_location = 0x7ffd1b5821b0, odr_indicator = 140690609958246}, {beg = 140725062214160, size = 6, size_with_redzone = 140690610573248, name = 0x7cb513e185b0 "\003\021", module_name = 0x7ffd1b5821e0 "\b", has_dynamic_init = 140690608924472, gcc_location = 0x78, odr_indicator = 137117164471728}}, reg_sites = {458760656, 32765, 353468782, 32757}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, dealloc_stack = 0x7ffd00000002, alloc_type = 333316616, dealloc_type = 32101, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (unknown: 0xf4), shadow_byte = 5 '\005'}, heap = {addr = 0, alloc_tid = 11081015625204, free_tid = 137873078485512, alloc_stack_id = 392, free_stack_id = 0, chunk_access = {bad_addr = 137873078485120, offset = 752, chunk_begin = 140725062230024, chunk_size = 140690608900895, user_requested_alignment = 1, access_type = 0, alloc_type = 0}}, stack = {addr = 0, tid = 11081015625204, offset = 137873078485512, frame_pc = 392, access_size = 137873078485120, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11081015625204, size = 137873078485512, size_with_redzone = 392, name = 0x7d6513de0080 "\024\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140725062230024, gcc_location = 0x7ff515c44b1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47>, odr_indicator = 1}, {beg = 137117164394752, size = 140725062216016, size_with_redzone = 140690609858002, name = 0x3 <error: Cannot access memory at address 0x3>, module_name = 0x1e14524000 <error: Cannot access memory at address 0x1e14524000>, has_dynamic_init = 140725062213936, gcc_location = 0x2, odr_indicator = 140690609858064}, {beg = 94094691141270, size = 140725062214112, size_with_redzone = 7, name = 0x7ff515ddcfc0 <__asan::instance> "", module_name = 0x7c1513ee7300 "\003\021", has_dynamic_init = 140725062214064, gcc_location = 0x7ff515d46d66 <__sanitizer::RunFreeHooks(void*)+86>, odr_indicator = 140725062214160}, {beg = 6, size = 140690610573248, size_with_redzone = 137117164471728, name = 0x7ffd1b5821e0 "\b", module_name = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 120, gcc_location = 0x7cb513e185b0, odr_indicator = 140725062214096}}, reg_sites = {353468782, 32757, 0, 0}, access_size = 94094690582172, size = 0 '\000'}, wild = {addr = 0, access_size = 11081015625204}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, addr_description = {data = {kind = 333316616, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11081015625204, alloc_stack_id = 333316616, free_stack_id = 32101, chunk_access = {bad_addr = 392, offset = 137873078485120, chunk_begin = 752, chunk_size = 140725062230024, user_requested_alignment = 2847, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 0, offset = 11081015625204, frame_pc = 137873078485512, access_size = 392, frame_descr = 0x7d6513de0080 "\024\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11081015625204, size_with_redzone = 137873078485512, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7d6513de0080 "\024\n", has_dynamic_init = 752, gcc_location = 0x7ffd1b586008, odr_indicator = 140690608900895}, {beg = 1, size = 137117164394752, size_with_redzone = 140725062216016, name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 129189953536, gcc_location = 0x7ffd1b582130, odr_indicator = 2}, {beg = 140690609858064, size = 94094691141270, size_with_redzone = 140725062214112, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7ff515ddcfc0 <__asan::instance> "", has_dynamic_init = 136429970551552, gcc_location = 0x7ffd1b5821b0, odr_indicator = 140690609958246}, {beg = 140725062214160, size = 6, size_with_redzone = 140690610573248, name = 0x7cb513e185b0 "\003\021", module_name = 0x7ffd1b5821e0 "\b", has_dynamic_init = 140690608924472, gcc_location = 0x78, odr_indicator = 137117164471728}}, reg_sites = {458760656, 32765, 353468782, 32757}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, addr_description = {data = {kind = 333316616, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11081015625204, alloc_stack_id = 333316616, free_stack_id = 32101, chunk_access = {bad_addr = 392, offset = 137873078485120, chunk_begin = 752, chunk_size = 140725062230024, user_requested_alignment = 2847, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 0, offset = 11081015625204, frame_pc = 137873078485512, access_size = 392, frame_descr = 0x7d6513de0080 "\024\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11081015625204, size_with_redzone = 137873078485512, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7d6513de0080 "\024\n", has_dynamic_init = 752, gcc_location = 0x7ffd1b586008, odr_indicator = 140690608900895}, {beg = 1, size = 137117164394752, size_with_redzone = 140725062216016, name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 129189953536, gcc_location = 0x7ffd1b582130, odr_indicator = 2}, {beg = 140690609858064, size = 94094691141270, size_with_redzone = 140725062214112, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7ff515ddcfc0 <__asan::instance> "", has_dynamic_init = 136429970551552, gcc_location = 0x7ffd1b5821b0, odr_indicator = 140690609958246}, {beg = 140725062214160, size = 6, size_with_redzone = 140690610573248, name = 0x7cb513e185b0 "\003\021", module_name = 0x7ffd1b5821e0 "\b", has_dynamic_init = 140690608924472, gcc_location = 0x78, odr_indicator = 137117164471728}}, reg_sites = {458760656, 32765, 353468782, 32757}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, count = 137873078485512, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, count = 137873078485512, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, size = 137873078485512}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, alignment = 137873078485512}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, size = 137873078485512, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, alignment = 137873078485512}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, user_size = 137873078485512, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, requested_size = 137873078485512}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, length1 = 137873078485512, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11081015625204, kind = (unknown: 0x8), shadow_byte = 2 '\002'}, heap = {addr = 11081015625204, alloc_tid = 137873078485512, free_tid = 392, alloc_stack_id = 333316224, free_stack_id = 32101, chunk_access = {bad_addr = 752, offset = 140725062230024, chunk_begin = 140690608900895, chunk_size = 1, user_requested_alignment = 2304, access_type = 1, alloc_type = 1}}, stack = {addr = 11081015625204, tid = 137873078485512, offset = 392, frame_pc = 137873078485120, access_size = 752, frame_descr = 0x7ffd1b586008 <error: Cannot access memory at address 0x7ffd1b586008>}, global = {addr = 11081015625204, static kMaxGlobals = 4, globals = {{beg = 137873078485512, size = 392, size_with_redzone = 137873078485120, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffd1b586008 <error: Cannot access memory at address 0x7ffd1b586008>, has_dynamic_init = 140690608900895, gcc_location = 0x1, odr_indicator = 137117164394752}, {beg = 140725062216016, size = 140690609858002, size_with_redzone = 3, name = 0x1e14524000 <error: Cannot access memory at address 0x1e14524000>, module_name = 0x7ffd1b582130 "\020\346\322\025\365\177", has_dynamic_init = 2, gcc_location = 0x7ff515d2e610 <___interceptor_malloc(__sanitizer::uptr)+192>, odr_indicator = 94094691141270}, {beg = 140725062214112, size = 7, size_with_redzone = 140690610573248, name = 0x7c1513ee7300 "\003\021", module_name = 0x7ffd1b5821b0 "\320!X\033\375\177", has_dynamic_init = 140690609958246, gcc_location = 0x7ffd1b582210, odr_indicator = 6}, {beg = 140690610573248, size = 137117164471728, size_with_redzone = 140725062214112, name = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x78 <error: Cannot access memory at address 0x78>, has_dynamic_init = 137117164471728, gcc_location = 0x7ffd1b5821d0, odr_indicator = 140690597183854}}, reg_sites = {0, 0, 547061404, 21908}, access_size = 140725062215936, size = 240 '\360'}, wild = {addr = 11081015625204, access_size = 137873078485512}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 140690610284439, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140690610284439, alloc_tid = 140690606849280, free_tid = 140725062215584, alloc_stack_id = 365930707, free_stack_id = 32757, chunk_access = {bad_addr = 140725062215584, offset = 363305528, chunk_begin = 140725062215680, chunk_size = 140690606800470, user_requested_alignment = 384, access_type = 0, alloc_type = 0}}, stack = {addr = 140690610284439, tid = 140690606849280, offset = 140725062215584, frame_pc = 140690609645779, access_size = 140725062215584, frame_descr = 0x15a79a38 <error: Cannot access memory at address 0x15a79a38>}, global = {addr = 140690610284439, static kMaxGlobals = 4, globals = {{beg = 140690606849280, size = 140725062215584, size_with_redzone = 140690609645779, name = 0x7ffd1b5827a0 "\200\001\336\023\005}", module_name = 0x15a79a38 <error: Cannot access memory at address 0x15a79a38>, has_dynamic_init = 140725062215680, gcc_location = 0x7ff515a43e56, odr_indicator = 137460761624960}, {beg = 140690606800420, size = 140725062215632, size_with_redzone = 6979655174816, name = 0x21 <error: Cannot access memory at address 0x21>, module_name = 0x2eb4eb30 <error: Cannot access memory at address 0x2eb4eb30>, has_dynamic_init = 140725062215664, gcc_location = 0x7c5513de0aa0, odr_indicator = 140725062215696}, {beg = 137117164471744, size = 137460761624960, size_with_redzone = 136567408898704, name = 0x559420b98720 <watch_destroy> "\363\017\036\372SH\211\373H\203\354\020H\205\377\017\2049\002", module_name = 0x7ff515aa8dce "I\211\305L9\360tJH\205\300tUH\213E\310dH+\004%(", has_dynamic_init = 137117164471744, gcc_location = 0x7ff515aa8dce, odr_indicator = 94094692550432}, {beg = 0, size = 140725062215792, size_with_redzone = 140690607214030, name = 0x7cf513de0c40 "\001", module_name = 0x7c3513df84d0 "\002", has_dynamic_init = 44, gcc_location = 0x0, odr_indicator = 136567408526552}}, reg_sites = {333787816, 31797, 333415664, 31797}, access_size = 94094692552302, size = 144 '\220'}, wild = {addr = 140690610284439, access_size = 140690606849280}}}}, function = 0x7eb4f1f02c770800 <error: Cannot access memory at address 0x7eb4f1f02c770800>}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, addr_description = {data = {kind = 333316616, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11081015625204, alloc_stack_id = 333316616, free_stack_id = 32101, chunk_access = {bad_addr = 392, offset = 137873078485120, chunk_begin = 752, chunk_size = 140725062230024, user_requested_alignment = 2847, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 0, offset = 11081015625204, frame_pc = 137873078485512, access_size = 392, frame_descr = 0x7d6513de0080 "\024\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11081015625204, size_with_redzone = 137873078485512, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7d6513de0080 "\024\n", has_dynamic_init = 752, gcc_location = 0x7ffd1b586008, odr_indicator = 140690608900895}, {beg = 1, size = 137117164394752, size_with_redzone = 140725062216016, name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 129189953536, gcc_location = 0x7ffd1b582130, odr_indicator = 2}, {beg = 140690609858064, size = 94094691141270, size_with_redzone = 140725062214112, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7ff515ddcfc0 <__asan::instance> "", has_dynamic_init = 136429970551552, gcc_location = 0x7ffd1b5821b0, odr_indicator = 140690609958246}, {beg = 140725062214160, size = 6, size_with_redzone = 140690610573248, name = 0x7cb513e185b0 "\003\021", module_name = 0x7ffd1b5821e0 "\b", has_dynamic_init = 140690608924472, gcc_location = 0x78, odr_indicator = 137117164471728}}, reg_sites = {458760656, 32765, 353468782, 32757}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}, size = 140725062215936}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, beg = 137873078485512, end = 0, old_mid = 0, new_mid = 11081015625204}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, storage_beg = 137873078485512, storage_end = 0, old_container_beg = 0, old_container_end = 11081015625204, new_container_beg = 137873078485512, new_container_end = 392}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, old_storage_beg = 137873078485512, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11081015625204}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, global1 = {beg = 140724603453442, size = 137873078485512, size_with_redzone = 0, name = 0x0, module_name = 0xa14000005f4 <error: Cannot access memory at address 0xa14000005f4>, has_dynamic_init = 137873078485512, gcc_location = 0x188, odr_indicator = 137873078485120}, global2 = {beg = 752, size = 140725062230024, size_with_redzone = 140690608900895, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7cb513e05900 "\200\a\336\023e}", has_dynamic_init = 140725062216016, gcc_location = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 3}, stack_id1 = 340934656, stack_id2 = 30}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, pc = 140724603453442, bp = 137873078485512, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11081015625204, kind = (unknown: 0x8), shadow_byte = 2 '\002'}, heap = {addr = 11081015625204, alloc_tid = 137873078485512, free_tid = 392, alloc_stack_id = 333316224, free_stack_id = 32101, chunk_access = {bad_addr = 752, offset = 140725062230024, chunk_begin = 140690608900895, chunk_size = 1, user_requested_alignment = 2304, access_type = 1, alloc_type = 1}}, stack = {addr = 11081015625204, tid = 137873078485512, offset = 392, frame_pc = 137873078485120, access_size = 752, frame_descr = 0x7ffd1b586008 <error: Cannot access memory at address 0x7ffd1b586008>}, global = {addr = 11081015625204, static kMaxGlobals = 4, globals = {{beg = 137873078485512, size = 392, size_with_redzone = 137873078485120, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffd1b586008 <error: Cannot access memory at address 0x7ffd1b586008>, has_dynamic_init = 140690608900895, gcc_location = 0x1, odr_indicator = 137117164394752}, {beg = 140725062216016, size = 140690609858002, size_with_redzone = 3, name = 0x1e14524000 <error: Cannot access memory at address 0x1e14524000>, module_name = 0x7ffd1b582130 "\020\346\322\025\365\177", has_dynamic_init = 2, gcc_location = 0x7ff515d2e610 <___interceptor_malloc(__sanitizer::uptr)+192>, odr_indicator = 94094691141270}, {beg = 140725062214112, size = 7, size_with_redzone = 140690610573248, name = 0x7c1513ee7300 "\003\021", module_name = 0x7ffd1b5821b0 "\320!X\033\375\177", has_dynamic_init = 140690609958246, gcc_location = 0x7ffd1b582210, odr_indicator = 6}, {beg = 140690610573248, size = 137117164471728, size_with_redzone = 140725062214112, name = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x78 <error: Cannot access memory at address 0x78>, has_dynamic_init = 137117164471728, gcc_location = 0x7ffd1b5821d0, odr_indicator = 140690597183854}}, reg_sites = {0, 0, 547061404, 21908}, access_size = 140725062215936, size = 240 '\360'}, wild = {addr = 11081015625204, access_size = 137873078485512}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 140690610284439, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140690610284439, alloc_tid = 140690606849280, free_tid = 140725062215584, alloc_stack_id = 365930707, free_stack_id = 32757, chunk_access = {bad_addr = 140725062215584, offset = 363305528, chunk_begin = 140725062215680, chunk_size = 140690606800470, user_requested_alignment = 384, access_type = 0, alloc_type = 0}}, stack = {addr = 140690610284439, tid = 140690606849280, offset = 140725062215584, frame_pc = 140690609645779, access_size = 140725062215584, frame_descr = 0x15a79a38 <error: Cannot access memory at address 0x15a79a38>}, global = {addr = 140690610284439, static kMaxGlobals = 4, globals = {{beg = 140690606849280, size = 140725062215584, size_with_redzone = 140690609645779, name = 0x7ffd1b5827a0 "\200\001\336\023\005}", module_name = 0x15a79a38 <error: Cannot access memory at address 0x15a79a38>, has_dynamic_init = 140725062215680, gcc_location = 0x7ff515a43e56, odr_indicator = 137460761624960}, {beg = 140690606800420, size = 140725062215632, size_with_redzone = 6979655174816, name = 0x21 <error: Cannot access memory at address 0x21>, module_name = 0x2eb4eb30 <error: Cannot access memory at address 0x2eb4eb30>, has_dynamic_init = 140725062215664, gcc_location = 0x7c5513de0aa0, odr_indicator = 140725062215696}, {beg = 137117164471744, size = 137460761624960, size_with_redzone = 136567408898704, name = 0x559420b98720 <watch_destroy> "\363\017\036\372SH\211\373H\203\354\020H\205\377\017\2049\002", module_name = 0x7ff515aa8dce "I\211\305L9\360tJH\205\300tUH\213E\310dH+\004%(", has_dynamic_init = 137117164471744, gcc_location = 0x7ff515aa8dce, odr_indicator = 94094692550432}, {beg = 0, size = 140725062215792, size_with_redzone = 140690607214030, name = 0x7cf513de0c40 "\001", module_name = 0x7c3513df84d0 "\002", has_dynamic_init = 44, gcc_location = 0x0, odr_indicator = 136567408526552}}, reg_sites = {333787816, 31797, 333415664, 31797}, access_size = 94094692552302, size = 144 '\220'}, wild = {addr = 140690610284439, access_size = 140690606849280}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137873078485512, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137873078485512, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2580, chunk_access = {bad_addr = 137873078485512, offset = 392, chunk_begin = 137873078485120, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137873078485512, tid = 0, offset = 0, frame_pc = 11081015625204, access_size = 137873078485512, frame_descr = 0x188 <error: Cannot access memory at address 0x188>}, global = {addr = 137873078485512, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11081015625204, name = 0x7d6513de0208 "", module_name = 0x188 <error: Cannot access memory at address 0x188>, has_dynamic_init = 137873078485120, gcc_location = 0x2f0, odr_indicator = 140725062230024}, {beg = 140690608900895, size = 1, size_with_redzone = 137117164394752, name = 0x7ffd1b582950 "\320\001\206 \224U", module_name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 3, gcc_location = 0x1e14524000, odr_indicator = 140725062213936}, {beg = 2, size = 140690609858064, size_with_redzone = 94094691141270, name = 0x7ffd1b5821e0 "\b", module_name = 0x7 <error: Cannot access memory at address 0x7>, has_dynamic_init = 140690610573248, gcc_location = 0x7c1513ee7300, odr_indicator = 140725062214064}, {beg = 140690609958246, size = 140725062214160, size_with_redzone = 6, name = 0x7ff515ddcfc0 <__asan::instance> "", module_name = 0x7cb513e185b0 "\003\021", has_dynamic_init = 140725062214112, gcc_location = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248>, odr_indicator = 120}}, reg_sites = {333546928, 31925, 458760656, 32765}, access_size = 140690597183854, size = 0 '\000'}, wild = {addr = 137873078485512, access_size = 0}}}}, pc = 94094690582172, bp = 140725062215936, sp = 140725062215920, access_size = 8, bug_descr = 0x7ff515d96797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137873078485512, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137873078485512, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2580, chunk_access = {bad_addr = 137873078485512, offset = 392, chunk_begin = 137873078485120, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137873078485512, tid = 0, offset = 0, frame_pc = 11081015625204, access_size = 137873078485512, frame_descr = 0x188 <error: Cannot access memory at address 0x188>}, global = {addr = 137873078485512, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11081015625204, name = 0x7d6513de0208 "", module_name = 0x188 <error: Cannot access memory at address 0x188>, has_dynamic_init = 137873078485120, gcc_location = 0x2f0, odr_indicator = 140725062230024}, {beg = 140690608900895, size = 1, size_with_redzone = 137117164394752, name = 0x7ffd1b582950 "\320\001\206 \224U", module_name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 3, gcc_location = 0x1e14524000, odr_indicator = 140725062213936}, {beg = 2, size = 140690609858064, size_with_redzone = 94094691141270, name = 0x7ffd1b5821e0 "\b", module_name = 0x7 <error: Cannot access memory at address 0x7>, has_dynamic_init = 140690610573248, gcc_location = 0x7c1513ee7300, odr_indicator = 140725062214064}, {beg = 140690609958246, size = 140725062214160, size_with_redzone = 6, name = 0x7ff515ddcfc0 <__asan::instance> "", module_name = 0x7cb513e185b0 "\003\021", has_dynamic_init = 140725062214112, gcc_location = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248>, odr_indicator = 120}}, reg_sites = {333546928, 31925, 458760656, 32765}, access_size = 140690597183854, size = 0 '\000'}, wild = {addr = 137873078485512, access_size = 0}}}}, pc = 94094690582172, bp = 140725062215936, sp = 140725062215920, access_size = 8, bug_descr = 0x7ff515d96797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007ff515d3af8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140725062215936, sp=sp@entry=140725062215920, addr=<optimized out>, is_write=is_write@entry=false, access_size=access_size@entry=8, exp=<optimized out>, fatal=true) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007ff515d3c3f9 in __asan::__asan_report_load8 (addr=<optimized out>) at ../../../../src/libsanitizer/asan/asan_rtl.cpp:131
bp = 140725062215936
pc = <optimized out>
local_stack = 140725062216048
sp = 140725062215920
#11 0x00005594209b7e9c in device_get_adapter (device=<optimized out>) at src/device.c:6917
No locals.
#12 0x000055942086020f in find_cig_session (data=0x7cb513e0bfc0, match_data=0x7bf512c84830) at profiles/audio/bap.c:2500
session = 0x7cb513e0bfc0
info = 0x7bf512c84830
#13 0x0000559420a3f071 in queue_find (queue=<optimized out>, function=function@entry=0x5594208601d0 <find_cig_session>, match_data=match_data@entry=0x7bf512c84830) at src/shared/queue.c:230
entry = 0x7c1513e9ad90
#14 0x0000559420866cd4 in find_cig_enumerate (data=0x7cb513e05900) at profiles/audio/bap.c:2539
info = <optimized out>
#15 bap_update_cigs_cb (user_data=0x7cb513e05900) at profiles/audio/bap.c:2688
data = 0x7cb513e05900
cigs = <optimized out>
unset = <optimized out>
#16 0x00007ff515a46b9b in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#17 0x00007ff515a481d7 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#18 0x00007ff515a48577 in g_main_loop_run () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#19 0x0000559420b9af49 in mainloop_run () at src/shared/mainloop-glib.c:65
No locals.
#20 0x0000559420b9b87b in mainloop_run_with_signal (func=func@entry=0x559420a009d0 <signal_callback>, user_data=user_data@entry=0x0) at src/shared/mainloop-notify.c:196
data = 0x7c2513de3490
io = 0x7c3513df9b10
ret = <optimized out>
#21 0x00005594207192bb in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1713
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
FAIL functional.test_bap::test_bap_unicast_set_transport_acquire[hosts7-vm3]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts7.0-bluetoothd-1789695137-91.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 91]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7f198a4bb900 (LWP 91)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007f198ac16b7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007f198abf98ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 0, 0, 0, 140733469018544, 22, 139747675745232, 0, 140733469018480, 139747692590614, 139747665129472, 4096, 0, 16213640644049910784, 139747666034712}}, sa_flags = -1946935296, sa_restorer = 0x16}
#5 0x00007f198b821a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007f198b947c2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007f198b91c93c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7fff106dcae6) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7f1989f03000 '=' <repeats 65 times>, "\n==91==ERROR: AddressSanitizer: heap-use-after-free on address 0x7c89899e040b at pc 0x7f198b8d1445 bp 0x7fff106ddfe0 sp 0x7fff106dd788\n"..., capacity_bytes_ = 4096, size_ = 3838}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007f198b91be02 in __asan::ReportGenericError (pc=139747692188741, bp=140733469024224, sp=sp@entry=140733469022088, addr=addr@entry=136930161198091, is_write=is_write@entry=false, access_size=6, fatal=false, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, signal = {siginfo = 0xffffffff00000002, context = 0x7c89899e040b, addr = 0, pc = 0, sp = 11626476471848, bp = 136930161198091, is_memory_access = 11, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = false}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, second_free_stack = 0xffffffff00000002, addr_description = {addr = 136930161198091, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2707, chunk_access = {bad_addr = 136930161198091, offset = 11, chunk_begin = 136930161198080, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {addr = 136930161198091, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2707, chunk_access = {bad_addr = 136930161198091, offset = 11, chunk_begin = 136930161198080, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 135349594681376, delete_alignment = 140733469020016}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {data = {kind = 2308834315, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11626476471848, alloc_stack_id = 2308834315, free_stack_id = 31881, chunk_access = {bad_addr = 11, offset = 136930161198080, chunk_begin = 752, chunk_size = 140733468991496, user_requested_alignment = 32, access_type = 3, alloc_type = 3}}, stack = {addr = 0, tid = 0, offset = 11626476471848, frame_pc = 136930161198091, access_size = 11, frame_descr = 0x7c89899e0400 "\223\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11626476471848, size_with_redzone = 136930161198091, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7c89899e0400 "\223\n", has_dynamic_init = 752, gcc_location = 0x7fff106d6008, odr_indicator = 135349594681376}, {beg = 140733469020016, size = 139747691485983, size_with_redzone = 1, name = 0x7b198882f020 "", module_name = 0x7fff106dd7c0 "\320\327m\020\377\177", has_dynamic_init = 139747692443090, gcc_location = 0x7f198a1050d0, odr_indicator = 129124650960}, {beg = 140733469020064, size = 3, size_with_redzone = 139747692443152, name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733469022848, gcc_location = 0x7fff106dd060, odr_indicator = 2}, {beg = 139747693158336, size = 135761930584368, size_with_redzone = 140733469020208, name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135761930584368, gcc_location = 0x7f198a1050d0, odr_indicator = 140733469020240}}, reg_sites = {2309325120, 31609, 81, 0}, access_size = 140733469022400, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, dealloc_stack = 0xffffffff00000002, alloc_type = 2308834315, dealloc_type = 31881, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (unknown: 0x28), shadow_byte = 6 '\006'}, heap = {addr = 0, alloc_tid = 11626476471848, free_tid = 136930161198091, alloc_stack_id = 11, free_stack_id = 0, chunk_access = {bad_addr = 136930161198080, offset = 752, chunk_begin = 140733468991496, chunk_size = 135349594681376, user_requested_alignment = 3952, access_type = 0, alloc_type = 3}}, stack = {addr = 0, tid = 11626476471848, offset = 136930161198091, frame_pc = 11, access_size = 136930161198080, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11626476471848, size = 136930161198091, size_with_redzone = 11, name = 0x7c89899e0400 "\223\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140733468991496, gcc_location = 0x7b198882f020, odr_indicator = 140733469020016}, {beg = 139747691485983, size = 1, size_with_redzone = 135349594681376, name = 0x7fff106dd7c0 "\320\327m\020\377\177", module_name = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 139747667235024, gcc_location = 0x1e106dcfd0, odr_indicator = 140733469020064}, {beg = 3, size = 139747692443152, size_with_redzone = 139747679173519, name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", module_name = 0x7fff106dda80 "$\334m\020\377\177", has_dynamic_init = 140733469020256, gcc_location = 0x2, odr_indicator = 139747693158336}, {beg = 135761930584368, size = 140733469020208, size_with_redzone = 139747691509560, name = 0x3e <error: Cannot access memory at address 0x3e>, module_name = 0x7b7989a58130 "\003\021", has_dynamic_init = 139747667235024, gcc_location = 0x7fff106dd050, odr_indicator = 135761930584384}}, reg_sites = {81, 0, 275634368, 32767}, access_size = 139747692188741, size = 224 '\340'}, wild = {addr = 0, access_size = 11626476471848}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2308834315, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11626476471848, alloc_stack_id = 2308834315, free_stack_id = 31881, chunk_access = {bad_addr = 11, offset = 136930161198080, chunk_begin = 752, chunk_size = 140733468991496, user_requested_alignment = 32, access_type = 3, alloc_type = 3}}, stack = {addr = 0, tid = 0, offset = 11626476471848, frame_pc = 136930161198091, access_size = 11, frame_descr = 0x7c89899e0400 "\223\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11626476471848, size_with_redzone = 136930161198091, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7c89899e0400 "\223\n", has_dynamic_init = 752, gcc_location = 0x7fff106d6008, odr_indicator = 135349594681376}, {beg = 140733469020016, size = 139747691485983, size_with_redzone = 1, name = 0x7b198882f020 "", module_name = 0x7fff106dd7c0 "\320\327m\020\377\177", has_dynamic_init = 139747692443090, gcc_location = 0x7f198a1050d0, odr_indicator = 129124650960}, {beg = 140733469020064, size = 3, size_with_redzone = 139747692443152, name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733469022848, gcc_location = 0x7fff106dd060, odr_indicator = 2}, {beg = 139747693158336, size = 135761930584368, size_with_redzone = 140733469020208, name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135761930584368, gcc_location = 0x7f198a1050d0, odr_indicator = 140733469020240}}, reg_sites = {2309325120, 31609, 81, 0}, access_size = 140733469022400, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2308834315, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11626476471848, alloc_stack_id = 2308834315, free_stack_id = 31881, chunk_access = {bad_addr = 11, offset = 136930161198080, chunk_begin = 752, chunk_size = 140733468991496, user_requested_alignment = 32, access_type = 3, alloc_type = 3}}, stack = {addr = 0, tid = 0, offset = 11626476471848, frame_pc = 136930161198091, access_size = 11, frame_descr = 0x7c89899e0400 "\223\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11626476471848, size_with_redzone = 136930161198091, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7c89899e0400 "\223\n", has_dynamic_init = 752, gcc_location = 0x7fff106d6008, odr_indicator = 135349594681376}, {beg = 140733469020016, size = 139747691485983, size_with_redzone = 1, name = 0x7b198882f020 "", module_name = 0x7fff106dd7c0 "\320\327m\020\377\177", has_dynamic_init = 139747692443090, gcc_location = 0x7f198a1050d0, odr_indicator = 129124650960}, {beg = 140733469020064, size = 3, size_with_redzone = 139747692443152, name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733469022848, gcc_location = 0x7fff106dd060, odr_indicator = 2}, {beg = 139747693158336, size = 135761930584368, size_with_redzone = 140733469020208, name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135761930584368, gcc_location = 0x7f198a1050d0, odr_indicator = 140733469020240}}, reg_sites = {2309325120, 31609, 81, 0}, access_size = 140733469022400, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 136930161198091, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 136930161198091, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 136930161198091}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 136930161198091}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 136930161198091, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 136930161198091}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, user_size = 136930161198091, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, requested_size = 136930161198091}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, length1 = 136930161198091, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11626476471848, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11626476471848, alloc_tid = 136930161198091, free_tid = 11, alloc_stack_id = 2308834304, free_stack_id = 31881, chunk_access = {bad_addr = 752, offset = 140733468991496, chunk_begin = 135349594681376, chunk_size = 140733469020016, user_requested_alignment = 2847, access_type = 1, alloc_type = 1}}, stack = {addr = 11626476471848, tid = 136930161198091, offset = 11, frame_pc = 136930161198080, access_size = 752, frame_descr = 0x7fff106d6008 ""}, global = {addr = 11626476471848, static kMaxGlobals = 4, globals = {{beg = 136930161198091, size = 11, size_with_redzone = 136930161198080, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7fff106d6008 "", has_dynamic_init = 135349594681376, gcc_location = 0x7fff106dcf70, odr_indicator = 139747691485983}, {beg = 1, size = 135349594681376, size_with_redzone = 140733469022144, name = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f198a1050d0 "", has_dynamic_init = 129124650960, gcc_location = 0x7fff106dcfa0, odr_indicator = 3}, {beg = 139747692443152, size = 139747679173519, size_with_redzone = 94332613956971, name = 0x7fff106dda80 "$\334m\020\377\177", module_name = 0x7fff106dd060 "\030", has_dynamic_init = 2, gcc_location = 0x7f198b9bdfc0 <__asan::instance>, odr_indicator = 135761930584368}, {beg = 140733469020208, size = 139747691509560, size_with_redzone = 62, name = 0x7b7989a58130 "\003\021", module_name = 0x7f198a1050d0 "", has_dynamic_init = 140733469020240, gcc_location = 0x7b7989a58140, odr_indicator = 81}}, reg_sites = {275634368, 32767, 2341278789, 32537}, access_size = 140733469024224, size = 136 '\210'}, wild = {addr = 11626476471848, access_size = 136930161198091}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 139747692869527, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 139747692869527, alloc_tid = 139747693165824, free_tid = 140733469023776, alloc_stack_id = 2341533138, free_stack_id = 32537, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140733469021696, chunk_size = 3, user_requested_alignment = 1552, access_type = 3, alloc_type = 3}}, stack = {addr = 139747692869527, tid = 139747693165824, offset = 140733469023776, frame_pc = 139747692443090, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 139747692869527, static kMaxGlobals = 4, globals = {{beg = 139747693165824, size = 140733469023776, size_with_redzone = 139747692443090, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140733469021696, gcc_location = 0x3, odr_indicator = 139747692443152}, {beg = 139747679173519, size = 94332613956971, size_with_redzone = 140733469024480, name = 0x7fff106dd680 "\240\326m\020\377\177", module_name = 0x7f198b9b7f78 "\001", has_dynamic_init = 140733469021888, gcc_location = 0x55cb86062560, odr_indicator = 139747671128248}, {beg = 65535, size = 140733469021808, size_with_redzone = 139747692274521, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b1988a59200 "\0166\340E", has_dynamic_init = 140733469021856, gcc_location = 0x7f198b83274a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140733469021856}, {beg = 139747692699517, size = 140733469021888, size_with_redzone = 139747692543334, name = 0x7fff106dd740 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 139747693158336, gcc_location = 0x7b5989a4a200, odr_indicator = 140733469021968}}, reg_sites = {2340599608, 32537, 40, 0}, access_size = 139747692648989, size = 208 '\320'}, wild = {addr = 139747692869527, access_size = 139747693165824}}}}, function = 0x7fff106dd730 "\340\337m\020\377\177"}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2308834315, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11626476471848, alloc_stack_id = 2308834315, free_stack_id = 31881, chunk_access = {bad_addr = 11, offset = 136930161198080, chunk_begin = 752, chunk_size = 140733468991496, user_requested_alignment = 32, access_type = 3, alloc_type = 3}}, stack = {addr = 0, tid = 0, offset = 11626476471848, frame_pc = 136930161198091, access_size = 11, frame_descr = 0x7c89899e0400 "\223\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11626476471848, size_with_redzone = 136930161198091, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7c89899e0400 "\223\n", has_dynamic_init = 752, gcc_location = 0x7fff106d6008, odr_indicator = 135349594681376}, {beg = 140733469020016, size = 139747691485983, size_with_redzone = 1, name = 0x7b198882f020 "", module_name = 0x7fff106dd7c0 "\320\327m\020\377\177", has_dynamic_init = 139747692443090, gcc_location = 0x7f198a1050d0, odr_indicator = 129124650960}, {beg = 140733469020064, size = 3, size_with_redzone = 139747692443152, name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733469022848, gcc_location = 0x7fff106dd060, odr_indicator = 2}, {beg = 139747693158336, size = 135761930584368, size_with_redzone = 140733469020208, name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135761930584368, gcc_location = 0x7f198a1050d0, odr_indicator = 140733469020240}}, reg_sites = {2309325120, 31609, 81, 0}, access_size = 140733469022400, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}, size = 140733469024224}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, beg = 136930161198091, end = 0, old_mid = 0, new_mid = 11626476471848}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, storage_beg = 136930161198091, storage_end = 0, old_container_beg = 0, old_container_end = 11626476471848, new_container_beg = 136930161198091, new_container_end = 11}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, old_storage_beg = 136930161198091, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11626476471848}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, global1 = {beg = 18446744069414584322, size = 136930161198091, size_with_redzone = 0, name = 0x0, module_name = 0xa9300000628 <error: Cannot access memory at address 0xa9300000628>, has_dynamic_init = 136930161198091, gcc_location = 0xb, odr_indicator = 136930161198080}, global2 = {beg = 752, size = 140733468991496, size_with_redzone = 135349594681376, name = 0x7fff106dcf70 "\300\327m\020\377\177", module_name = 0x7f198b825b1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47> "H\205\300t\f\311\303f.\017\037\204", has_dynamic_init = 1, gcc_location = 0x7b198882f020, odr_indicator = 140733469022144}, stack_id1 = 2341533138, stack_id2 = 32537}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, pc = 18446744069414584322, bp = 136930161198091, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11626476471848, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11626476471848, alloc_tid = 136930161198091, free_tid = 11, alloc_stack_id = 2308834304, free_stack_id = 31881, chunk_access = {bad_addr = 752, offset = 140733468991496, chunk_begin = 135349594681376, chunk_size = 140733469020016, user_requested_alignment = 2847, access_type = 1, alloc_type = 1}}, stack = {addr = 11626476471848, tid = 136930161198091, offset = 11, frame_pc = 136930161198080, access_size = 752, frame_descr = 0x7fff106d6008 ""}, global = {addr = 11626476471848, static kMaxGlobals = 4, globals = {{beg = 136930161198091, size = 11, size_with_redzone = 136930161198080, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7fff106d6008 "", has_dynamic_init = 135349594681376, gcc_location = 0x7fff106dcf70, odr_indicator = 139747691485983}, {beg = 1, size = 135349594681376, size_with_redzone = 140733469022144, name = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f198a1050d0 "", has_dynamic_init = 129124650960, gcc_location = 0x7fff106dcfa0, odr_indicator = 3}, {beg = 139747692443152, size = 139747679173519, size_with_redzone = 94332613956971, name = 0x7fff106dda80 "$\334m\020\377\177", module_name = 0x7fff106dd060 "\030", has_dynamic_init = 2, gcc_location = 0x7f198b9bdfc0 <__asan::instance>, odr_indicator = 135761930584368}, {beg = 140733469020208, size = 139747691509560, size_with_redzone = 62, name = 0x7b7989a58130 "\003\021", module_name = 0x7f198a1050d0 "", has_dynamic_init = 140733469020240, gcc_location = 0x7b7989a58140, odr_indicator = 81}}, reg_sites = {275634368, 32767, 2341278789, 32537}, access_size = 140733469024224, size = 136 '\210'}, wild = {addr = 11626476471848, access_size = 136930161198091}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 139747692869527, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 139747692869527, alloc_tid = 139747693165824, free_tid = 140733469023776, alloc_stack_id = 2341533138, free_stack_id = 32537, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140733469021696, chunk_size = 3, user_requested_alignment = 1552, access_type = 3, alloc_type = 3}}, stack = {addr = 139747692869527, tid = 139747693165824, offset = 140733469023776, frame_pc = 139747692443090, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 139747692869527, static kMaxGlobals = 4, globals = {{beg = 139747693165824, size = 140733469023776, size_with_redzone = 139747692443090, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140733469021696, gcc_location = 0x3, odr_indicator = 139747692443152}, {beg = 139747679173519, size = 94332613956971, size_with_redzone = 140733469024480, name = 0x7fff106dd680 "\240\326m\020\377\177", module_name = 0x7f198b9b7f78 "\001", has_dynamic_init = 140733469021888, gcc_location = 0x55cb86062560, odr_indicator = 139747671128248}, {beg = 65535, size = 140733469021808, size_with_redzone = 139747692274521, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b1988a59200 "\0166\340E", has_dynamic_init = 140733469021856, gcc_location = 0x7f198b83274a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140733469021856}, {beg = 139747692699517, size = 140733469021888, size_with_redzone = 139747692543334, name = 0x7fff106dd740 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 139747693158336, gcc_location = 0x7b5989a4a200, odr_indicator = 140733469021968}}, reg_sites = {2340599608, 32537, 40, 0}, access_size = 139747692648989, size = 208 '\320'}, wild = {addr = 139747692869527, access_size = 139747693165824}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 136930161198091, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 136930161198091, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2707, chunk_access = {bad_addr = 136930161198091, offset = 11, chunk_begin = 136930161198080, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 136930161198091, tid = 0, offset = 0, frame_pc = 11626476471848, access_size = 136930161198091, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 136930161198091, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11626476471848, name = 0x7c89899e040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 136930161198080, gcc_location = 0x2f0, odr_indicator = 140733468991496}, {beg = 135349594681376, size = 140733469020016, size_with_redzone = 139747691485983, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b198882f020 "", has_dynamic_init = 140733469022144, gcc_location = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 139747667235024}, {beg = 129124650960, size = 140733469020064, size_with_redzone = 3, name = 0x7f198b90f610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 94332613956971, gcc_location = 0x7fff106dda80, odr_indicator = 140733469020256}, {beg = 2, size = 139747693158336, size_with_redzone = 135761930584368, name = 0x7fff106dd030 "\340\337m\020\377\177", module_name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7b7989a58130, odr_indicator = 139747667235024}}, reg_sites = {275632208, 32767, 2309325120, 31609}, access_size = 81, size = 192 '\300'}, wild = {addr = 136930161198091, access_size = 0}}}}, pc = 139747692188741, bp = 140733469024224, sp = 140733469022088, access_size = 6, bug_descr = 0x7f198b977797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 136930161198091, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 136930161198091, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2707, chunk_access = {bad_addr = 136930161198091, offset = 11, chunk_begin = 136930161198080, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 136930161198091, tid = 0, offset = 0, frame_pc = 11626476471848, access_size = 136930161198091, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 136930161198091, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11626476471848, name = 0x7c89899e040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 136930161198080, gcc_location = 0x2f0, odr_indicator = 140733468991496}, {beg = 135349594681376, size = 140733469020016, size_with_redzone = 139747691485983, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b198882f020 "", has_dynamic_init = 140733469022144, gcc_location = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 139747667235024}, {beg = 129124650960, size = 140733469020064, size_with_redzone = 3, name = 0x7f198b90f610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 94332613956971, gcc_location = 0x7fff106dda80, odr_indicator = 140733469020256}, {beg = 2, size = 139747693158336, size_with_redzone = 135761930584368, name = 0x7fff106dd030 "\340\337m\020\377\177", module_name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7b7989a58130, odr_indicator = 139747667235024}}, reg_sites = {275632208, 32767, 2309325120, 31609}, access_size = 81, size = 192 '\300'}, wild = {addr = 136930161198091, access_size = 0}}}}, pc = 139747692188741, bp = 140733469024224, sp = 140733469022088, access_size = 6, bug_descr = 0x7f198b977797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007f198b91bf8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140733469024224, sp=sp@entry=140733469022088, addr=addr@entry=136930161198091, is_write=is_write@entry=false, access_size=access_size@entry=6, exp=<optimized out>, fatal=false) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007f198b8d1468 in MemcmpInterceptorCommon (ctx=ctx@entry=0x7fff106ddff0, real_fn=<optimized out>, a1=a1@entry=0x7c89899e040b, a2=a2@entry=0x7b198878d4e0, size=size@entry=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:848
bp = 140733469024224
pc = <optimized out>
local_stack = 136586563813440
sp = 140733469022088
_ctx = 0x7fff106ddff0
suppressed = <optimized out>
__offset = 136930161198091
__size = 6
__bad = <optimized out>
result = <optimized out>
#11 0x00007f198b8d1835 in ___interceptor_memcmp (a1=0x7c89899e040b, a2=0x7b198878d4e0, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:880
ctx = 0x7fff106ddff0
_ctx = {interceptor_name = 0x7f198b97b6b6 "memcmp"}
#12 ___interceptor_memcmp (a1=0x7c89899e040b, a2=0x7b198878d4e0, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:875
ctx = <optimized out>
_ctx = <optimized out>
#13 0x000055cb85e05038 in bacmp (ba1=0x7c89899e040b, ba2=0x7b198878d4e0) at ./lib/bluetooth/bluetooth.h:438
No locals.
#14 device_addr_type_cmp (a=0x7c89899e0400, b=0x7b198878d4e0) at src/device.c:5657
dev = 0x7c89899e0400
addr = 0x7b198878d4e0
cmp = <optimized out>
#15 0x00007f198b64b4c2 in g_slist_find_custom () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#16 0x000055cb85d846f4 in btd_adapter_find_device (adapter=<optimized out>, dst=dst@entry=0x7b5989a23bd8, bdaddr_type=1 '\001') at src/adapter.c:1055
addr = <optimized out>
device = <optimized out>
list = <optimized out>
#17 0x000055cb85d26c07 in att_disconnected (err=<optimized out>, user_data=0x7b5989a23bd0) at src/gatt-database.c:335
state = 0x7b5989a23bd0
device = <optimized out>
__func__ = "att_disconnected"
#18 0x000055cb85d3db34 in btd_gatt_database_att_disconnected (database=<optimized out>, device=<optimized out>) at src/gatt-database.c:4238
server = <optimized out>
att = <optimized out>
state = <optimized out>
addr = <optimized out>
type = <optimized out>
__func__ = "btd_gatt_database_att_disconnected"
#19 0x000055cb85de70e6 in gatt_server_cleanup (device=device@entry=0x7c89899e0080) at src/device.c:842
No locals.
#20 0x000055cb85dfb7dc in attio_cleanup (device=0x7c89899e0080) at src/device.c:862
No locals.
#21 0x000055cb85dfbe27 in device_free (user_data=0x7c89899e0080) at src/device.c:918
device = 0x7c89899e0080
__func__ = "device_free"
#22 0x000055cb85e79a3a in remove_interface (data=0x7b89899eac80, name=name@entry=0x55cb86086a20 "org.bluez.Device1") at gdbus/object.c:742
iface = 0x7b79899fe560
#23 0x000055cb85e7c5fc in g_dbus_unregister_interface (connection=<optimized out>, path=<optimized out>, name=<optimized out>) at gdbus/object.c:1499
data = <optimized out>
#24 0x000055cb85db71b3 in adapter_remove (adapter=adapter@entry=0x7c49899e0200) at src/adapter.c:7307
l = 0x7b3989a0b2f0 = {0x7c89899e0080}
db = <optimized out>
ranging_manager = <optimized out>
__func__ = "adapter_remove"
#25 0x000055cb85db7d48 in adapter_cleanup () at src/adapter.c:11263
adapter = 0x7c49899e0200
#26 0x000055cb85b692e0 in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1723
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
https://github.com/bluez/bluez/pull/2544
---
Regards,
Linux Bluetooth
next prev parent reply other threads:[~2026-09-18 1:59 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-18 0:02 [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 1/4] mgmt: Add defines for the long term key types Pauli Virtanen
2026-09-18 1:58 ` bluez.test.bot [this message]
2026-09-18 0:02 ` [PATCH BlueZ 2/4] device: Remove unused central field from struct ltk_info Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 3/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing Pauli Virtanen
2026-09-18 16:30 ` [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections patchwork-bot+bluetooth
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6aac9ae3.5701e4f5.2afb2e.5ab5@mx.google.com \
--to=bluez.test.bot@gmail.com \
--cc=linux-bluetooth@vger.kernel.org \
--cc=pav@iki.fi \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.