* [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails
@ 2026-10-27 17:19 Kevin Dewald
2026-10-27 17:19 ` [PATCH BlueZ 1/2] adapter: Fix Discovering staying true after a rejected stop Kevin Dewald
` (2 more replies)
0 siblings, 3 replies; 5+ messages in thread
From: Kevin Dewald @ 2026-10-27 17:19 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Luiz Augusto von Dentz, Kevin Dewald
When the Stop Discovery bluetoothd sends for the last discovery client
fails, stop_discovery_complete() removes the client but leaves
Discovering true. The next StartDiscovery with the same filter then
returns success without starting a discovery, as reported in
bluez/bluez#2547 and, before it, #807.
The first patch treats Rejected as stopped: the kernel returns it when
the discovery already ended, or another mgmt client stopped it, just
before the command was processed. The second clears Discovering when
the kernel reports the discovery as stopped with no client left, which
covers the other failures, such as the scan disable timing out. That
needs the kernel to leave the stopping state after a failed stop, which
"Bluetooth: MGMT: Fix discovery stuck after a failed Stop Discovery",
posted separately, does.
I reproduced both with functional tests that hold the emulated
controller by stopping btvirt with SIGSTOP. In the first, a second mgmt
client stops the discovery before bluetoothd does, so the kernel
rejects bluetoothd's stop; in the second, the controller stays held
until the kernel times out the scan disable. Without its patch, the
first fails with InProgress from StopDiscovery and the second with
Discovering staying true (3 of 3 runs each); with them both pass (5 of
5 each, the second on bluetooth-next with the kernel fix). I can send
the tests as well if you want them.
make check passes, and so do the functional tests that use discovery.
Kevin Dewald (2):
adapter: Fix Discovering staying true after a rejected stop
adapter: Fix Discovering staying true after a failed stop
src/adapter.c | 19 +++++++++++++++++++
1 file changed, 19 insertions(+)
base-commit: b0bf49270d445da0852851f393cd67a0a1e5f05e
--
2.54.0 (Apple Git-157)
^ permalink raw reply [flat|nested] 5+ messages in thread
* [PATCH BlueZ 1/2] adapter: Fix Discovering staying true after a rejected stop
2026-10-27 17:19 [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails Kevin Dewald
@ 2026-10-27 17:19 ` Kevin Dewald
2026-10-27 20:29 ` adapter: Fix Discovering staying true when stopping fails bluez.test.bot
2026-10-27 17:19 ` [PATCH BlueZ 2/2] adapter: Fix Discovering staying true after a failed stop Kevin Dewald
2026-10-28 19:50 ` [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails patchwork-bot+bluetooth
2 siblings, 1 reply; 5+ messages in thread
From: Kevin Dewald @ 2026-10-27 17:19 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Luiz Augusto von Dentz, Kevin Dewald
The kernel rejects Stop Discovery when no discovery is active by the
time it processes the command, because the discovery ended or another
mgmt client stopped it just before. stop_discovery_complete() then
removes the client but keeps the discovery state, so Discovering stays
true with no client left, and the next StartDiscovery with the same
filter returns without starting a discovery. The client that called
StopDiscovery also gets an InProgress error, and "No discovery started"
if it tries again.
Treat MGMT_STATUS_REJECTED as the discovery being stopped, as
stop_passive_scanning_complete() already does.
Closes: https://github.com/bluez/bluez/issues/2547
Link: https://github.com/bluez/bluez/issues/807
Fixes: c1226f79ec97 ("adapter: Fix not checking status of stop discovery command")
Assisted-by: Claude:claude-opus-5.5
---
src/adapter.c | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/src/adapter.c b/src/adapter.c
index 1561ea3bf..4d753028a 100644
--- a/src/adapter.c
+++ b/src/adapter.c
@@ -2194,6 +2194,14 @@ static void stop_discovery_complete(uint8_t status, uint16_t length,
DBG("status 0x%02x", status);
+ /*
+ * MGMT_STATUS_REJECTED is returned from kernel when no discovery is
+ * active, e.g. because it ended or another mgmt client stopped it
+ * just before this command, so treat it as stopped as well.
+ */
+ if (status == MGMT_STATUS_REJECTED)
+ status = MGMT_STATUS_SUCCESS;
+
client = discovery_complete(adapter, status);
if (client)
discovery_remove(client);
--
2.54.0 (Apple Git-157)
^ permalink raw reply related [flat|nested] 5+ messages in thread
* [PATCH BlueZ 2/2] adapter: Fix Discovering staying true after a failed stop
2026-10-27 17:19 [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails Kevin Dewald
2026-10-27 17:19 ` [PATCH BlueZ 1/2] adapter: Fix Discovering staying true after a rejected stop Kevin Dewald
@ 2026-10-27 17:19 ` Kevin Dewald
2026-10-28 19:50 ` [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails patchwork-bot+bluetooth
2 siblings, 0 replies; 5+ messages in thread
From: Kevin Dewald @ 2026-10-27 17:19 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Luiz Augusto von Dentz, Kevin Dewald
When Stop Discovery for the last client fails, for example because the
controller times out the scan disable, stop_discovery_complete()
removes the client but keeps Discovering true until the kernel reports
the discovery state. When the kernel then reports the discovery as
stopped, discovering_callback() only triggers passive scanning, as no
client is left, so Discovering stays true and the next StartDiscovery
with the same filter returns without starting a discovery.
Clear Discovering when the kernel reports the discovery as stopped and
no client is left.
Fixes: c1226f79ec97 ("adapter: Fix not checking status of stop discovery command")
Assisted-by: Claude:claude-opus-5.5
---
src/adapter.c | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/src/adapter.c b/src/adapter.c
index 4d753028a..c8889bee1 100644
--- a/src/adapter.c
+++ b/src/adapter.c
@@ -2146,6 +2146,17 @@ static void discovering_callback(uint16_t index, uint16_t length,
* passive scanning attempt.
*/
if (!adapter->discovery_list) {
+ /*
+ * Discovering is left set when stopping the discovery of the
+ * last client failed, so clear it once the kernel reports the
+ * discovery as stopped.
+ */
+ if (!adapter->discovery_enable && adapter->discovering) {
+ adapter->discovering = false;
+ g_dbus_emit_property_changed(dbus_conn, adapter->path,
+ ADAPTER_INTERFACE, "Discovering");
+ }
+
if (!adapter->connect_le)
trigger_passive_scanning(adapter);
return;
--
2.54.0 (Apple Git-157)
^ permalink raw reply related [flat|nested] 5+ messages in thread
* RE: adapter: Fix Discovering staying true when stopping fails
2026-10-27 17:19 ` [PATCH BlueZ 1/2] adapter: Fix Discovering staying true after a rejected stop Kevin Dewald
@ 2026-10-27 20:29 ` bluez.test.bot
0 siblings, 0 replies; 5+ messages in thread
From: bluez.test.bot @ 2026-10-27 20:29 UTC (permalink / raw)
To: linux-bluetooth, kevin
[-- Attachment #1: Type: text/plain, Size: 51664 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/series/1194825/
---Test result---
Test Summary:
CheckPatch FAIL 0.64 seconds
GitLint PASS 0.43 seconds
BuildEll PASS 19.62 seconds
BluezMake PASS 292.93 seconds
CheckSmatch PASS 303.73 seconds
bluezmakeextell PASS 93.26 seconds
TestFunctional FAIL 1138.78 seconds
IncrementalBuild PASS 321.88 seconds
ScanBuild PASS 1154.72 seconds
Details
##############################
Test: CheckPatch - FAIL
Desc: Run checkpatch.pl script
Output:
[BlueZ,2/2] adapter: Fix Discovering staying true after a failed stop
WARNING:LONG_LINE_STRING: line length of 82 exceeds 80 columns
#155: FILE: src/adapter.c:2157:
+ ADAPTER_INTERFACE, "Discovering");
/home/runner/work/bluez/bluez/src/patch/14919284.patch total: 0 errors, 1 warnings, 17 lines checked
NOTE: For some of the reported defects, checkpatch may be able to
mechanically convert to the typical style using --fix or --fix-inplace.
/home/runner/work/bluez/bluez/src/patch/14919284.patch has style problems, please review.
NOTE: Ignored message types: COMMIT_MESSAGE COMPLEX_MACRO CONST_STRUCT FILE_PATH_CHANGES MISSING_SIGN_OFF PREFER_PACKED SPDX_LICENSE_TAG SPLIT_STRING SSCANF_TO_KSTRTO
NOTE: If any of the errors are false positives, please report
them to the maintainer, see CHECKPATCH in MAINTAINERS.
##############################
Test: TestFunctional - FAIL
Desc: Run test-functional
Output:
FAIL functional.test_a2dp::test_a2dp_transport_acquire[hosts0-vm2]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts0.1-bluetoothd-1793131187-67.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 67]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7fadf0461900 (LWP 67)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007fadf0bbcb7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007fadf0b9f8ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 0, 140736245122032, 140736245122320, 140736245122176, 22, 140385041812432, 0, 140736245122112, 140385058657814, 140385032601600, 4096, 0, 9955126442483274240, 140385033150488}}, sa_flags = -236027904, sa_restorer = 0x16}
#5 0x00007fadf17c7a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007fadf18edc2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007fadf18c293c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7fffb5e5c5b6) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7fadf0000000 '=' <repeats 65 times>, "\n==67==ERROR: AddressSanitizer: heap-use-after-free on address 0x7c5def8e6a78 at pc 0x5556cc0ff920 bp 0x7fffb5e5d230 sp 0x7fffb5e5d220\n"..., capacity_bytes_ = 4096, size_ = 3447}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007fadf18c1e02 in __asan::ReportGenericError (pc=93831279147296, bp=140736245125680, sp=sp@entry=140736245125664, addr=addr@entry=136742892890744, is_write=is_write@entry=false, access_size=8, fatal=true, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, signal = {siginfo = 0x7fad00000002, context = 0x7c5def8e6a78, addr = 0, pc = 0, sp = 12395275618732, bp = 136742892890744, is_memory_access = 88, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = 32}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, second_free_stack = 0x7fad00000002, addr_description = {addr = 136742892890744, alloc_tid = 0, free_tid = 0, alloc_stack_id = 2476, free_stack_id = 2886, chunk_access = {bad_addr = 136742892890744, offset = 88, chunk_begin = 136742892890656, chunk_size = 112, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, free_stack = 0x7fad00000002, addr_description = {addr = 136742892890744, alloc_tid = 0, free_tid = 0, alloc_stack_id = 2476, free_stack_id = 2886, chunk_access = {bad_addr = 136742892890744, offset = 88, chunk_begin = 136742892890656, chunk_size = 112, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 6, delete_alignment = 140385058505728}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, free_stack = 0x7fad00000002, addr_description = {data = {kind = 4019087992, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 12395275618732, alloc_stack_id = 4019087992, free_stack_id = 31837, chunk_access = {bad_addr = 88, offset = 136742892890656, chunk_begin = 112, chunk_size = 140736245096456, user_requested_alignment = 6, access_type = 0, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 12395275618732, frame_pc = 136742892890744, access_size = 88, frame_descr = 0x7c5def8e6a20 "F\v"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 12395275618732, size_with_redzone = 136742892890744, name = 0x58 <error: Cannot access memory at address 0x58>, module_name = 0x7c5def8e6a20 "F\v", has_dynamic_init = 112, gcc_location = 0x7fffb5e56008, odr_indicator = 6}, {beg = 140385058505728, size = 140385055453741, size_with_redzone = 140385055464086, name = 0x7fadf15cf1d7 "\351\303\376\377\377\017\037@", module_name = 0x7fadf15cf577 <g_main_loop_run+311> "A\213\004$H\213;\205\300u\346\350\031\356\377\377H\213;\350\321\267\002", has_dynamic_init = 93831283444521, gcc_location = 0x7fadf15cf577 <g_main_loop_run+311>, odr_indicator = 93831283444521}, {beg = 253403070510, size = 115964117011, size_with_redzone = 140736245123760, name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, module_name = 0x10f <error: Cannot access memory at address 0x10f>, has_dynamic_init = 140736245126032, gcc_location = 0x0, odr_indicator = 137017770774336}, {beg = 15, size = 137017770774336, size_with_redzone = 140736245125952, name = 0x7fadf188a8a8 <___interceptor_ppoll(__sanitizer::__sanitizer_pollfd*, __sanitizer::__sanitizer_nfds_t, void*, __sanitizer::__sanitizer_sigset_t*)+424> "\213\205\234\367\377\377\353\230H\215=rR\t", module_name = 0x7fffb5e5ca00 " j\216\357]|", has_dynamic_init = 140736245123832, gcc_location = 0x7fffb5e5caf8, odr_indicator = 7346703152}}, reg_sites = {4052876073, 32685, 0, 0}, access_size = 3414698780723773445, size = 32 ' '}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, dealloc_stack = 0x7fad00000002, alloc_type = 4019087992, dealloc_type = 31837, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (unknown: 0xac), shadow_byte = 9 '\t'}, heap = {addr = 0, alloc_tid = 12395275618732, free_tid = 136742892890744, alloc_stack_id = 88, free_stack_id = 0, chunk_access = {bad_addr = 136742892890656, offset = 112, chunk_begin = 140736245096456, chunk_size = 6, user_requested_alignment = 1024, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 12395275618732, offset = 136742892890744, frame_pc = 88, access_size = 136742892890656, frame_descr = 0x70 <error: Cannot access memory at address 0x70>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 12395275618732, size = 136742892890744, size_with_redzone = 88, name = 0x7c5def8e6a20 "F\v", module_name = 0x70 <error: Cannot access memory at address 0x70>, has_dynamic_init = 140736245096456, gcc_location = 0x6, odr_indicator = 140385058505728}, {beg = 140385055453741, size = 140385055464086, size_with_redzone = 140385055470039, name = 0x7fadf15cf577 <g_main_loop_run+311> "A\213\004$H\213;\205\300u\346\350\031\356\377\377H\213;\350\321\267\002", module_name = 0x5556cc518b29 <mainloop_run+25> "H\213=\020\315\205", has_dynamic_init = 140385055470967, gcc_location = 0x5556cc518b29 <mainloop_run+25>, odr_indicator = 253403070510}, {beg = 115964117011, size = 140736245123760, size_with_redzone = 9955126442483274240, name = 0x10f <error: Cannot access memory at address 0x10f>, module_name = 0x7fffb5e5d390 "", has_dynamic_init = 0, gcc_location = 0x7c9def8e0f40, odr_indicator = 15}, {beg = 137017770774336, size = 140736245125952, size_with_redzone = 140385058334888, name = 0x7fffb5e5ca00 " j\216\357]|", module_name = 0x7fffb5e5caf8 " \371\017\314VU", has_dynamic_init = 140736245123832, gcc_location = 0x1b5e5cb30, odr_indicator = 140385058945833}}, reg_sites = {0, 0, 5, 795046515}, access_size = 93831279147296, size = 48 '0'}, wild = {addr = 0, access_size = 12395275618732}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, addr_description = {data = {kind = 4019087992, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 12395275618732, alloc_stack_id = 4019087992, free_stack_id = 31837, chunk_access = {bad_addr = 88, offset = 136742892890656, chunk_begin = 112, chunk_size = 140736245096456, user_requested_alignment = 6, access_type = 0, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 12395275618732, frame_pc = 136742892890744, access_size = 88, frame_descr = 0x7c5def8e6a20 "F\v"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 12395275618732, size_with_redzone = 136742892890744, name = 0x58 <error: Cannot access memory at address 0x58>, module_name = 0x7c5def8e6a20 "F\v", has_dynamic_init = 112, gcc_location = 0x7fffb5e56008, odr_indicator = 6}, {beg = 140385058505728, size = 140385055453741, size_with_redzone = 140385055464086, name = 0x7fadf15cf1d7 "\351\303\376\377\377\017\037@", module_name = 0x7fadf15cf577 <g_main_loop_run+311> "A\213\004$H\213;\205\300u\346\350\031\356\377\377H\213;\350\321\267\002", has_dynamic_init = 93831283444521, gcc_location = 0x7fadf15cf577 <g_main_loop_run+311>, odr_indicator = 93831283444521}, {beg = 253403070510, size = 115964117011, size_with_redzone = 140736245123760, name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, module_name = 0x10f <error: Cannot access memory at address 0x10f>, has_dynamic_init = 140736245126032, gcc_location = 0x0, odr_indicator = 137017770774336}, {beg = 15, size = 137017770774336, size_with_redzone = 140736245125952, name = 0x7fadf188a8a8 <___interceptor_ppoll(__sanitizer::__sanitizer_pollfd*, __sanitizer::__sanitizer_nfds_t, void*, __sanitizer::__sanitizer_sigset_t*)+424> "\213\205\234\367\377\377\353\230H\215=rR\t", module_name = 0x7fffb5e5ca00 " j\216\357]|", has_dynamic_init = 140736245123832, gcc_location = 0x7fffb5e5caf8, odr_indicator = 7346703152}}, reg_sites = {4052876073, 32685, 0, 0}, access_size = 3414698780723773445, size = 32 ' '}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, addr_description = {data = {kind = 4019087992, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 12395275618732, alloc_stack_id = 4019087992, free_stack_id = 31837, chunk_access = {bad_addr = 88, offset = 136742892890656, chunk_begin = 112, chunk_size = 140736245096456, user_requested_alignment = 6, access_type = 0, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 12395275618732, frame_pc = 136742892890744, access_size = 88, frame_descr = 0x7c5def8e6a20 "F\v"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 12395275618732, size_with_redzone = 136742892890744, name = 0x58 <error: Cannot access memory at address 0x58>, module_name = 0x7c5def8e6a20 "F\v", has_dynamic_init = 112, gcc_location = 0x7fffb5e56008, odr_indicator = 6}, {beg = 140385058505728, size = 140385055453741, size_with_redzone = 140385055464086, name = 0x7fadf15cf1d7 "\351\303\376\377\377\017\037@", module_name = 0x7fadf15cf577 <g_main_loop_run+311> "A\213\004$H\213;\205\300u\346\350\031\356\377\377H\213;\350\321\267\002", has_dynamic_init = 93831283444521, gcc_location = 0x7fadf15cf577 <g_main_loop_run+311>, odr_indicator = 93831283444521}, {beg = 253403070510, size = 115964117011, size_with_redzone = 140736245123760, name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, module_name = 0x10f <error: Cannot access memory at address 0x10f>, has_dynamic_init = 140736245126032, gcc_location = 0x0, odr_indicator = 137017770774336}, {beg = 15, size = 137017770774336, size_with_redzone = 140736245125952, name = 0x7fadf188a8a8 <___interceptor_ppoll(__sanitizer::__sanitizer_pollfd*, __sanitizer::__sanitizer_nfds_t, void*, __sanitizer::__sanitizer_sigset_t*)+424> "\213\205\234\367\377\377\353\230H\215=rR\t", module_name = 0x7fffb5e5ca00 " j\216\357]|", has_dynamic_init = 140736245123832, gcc_location = 0x7fffb5e5caf8, odr_indicator = 7346703152}}, reg_sites = {4052876073, 32685, 0, 0}, access_size = 3414698780723773445, size = 32 ' '}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, count = 136742892890744, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, count = 136742892890744, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, size = 136742892890744}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, alignment = 136742892890744}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, size = 136742892890744, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, alignment = 136742892890744}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, user_size = 136742892890744, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, requested_size = 136742892890744}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, length1 = 136742892890744, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 12395275618732, kind = (unknown: 0x78), shadow_byte = 106 'j'}, heap = {addr = 12395275618732, alloc_tid = 136742892890744, free_tid = 88, alloc_stack_id = 4019087904, free_stack_id = 31837, chunk_access = {bad_addr = 112, offset = 140736245096456, chunk_begin = 6, chunk_size = 140385058505728, user_requested_alignment = 557, access_type = 3, alloc_type = 2}}, stack = {addr = 12395275618732, tid = 136742892890744, offset = 88, frame_pc = 136742892890656, access_size = 112, frame_descr = 0x7fffb5e56008 ""}, global = {addr = 12395275618732, static kMaxGlobals = 4, globals = {{beg = 136742892890744, size = 88, size_with_redzone = 136742892890656, name = 0x70 <error: Cannot access memory at address 0x70>, module_name = 0x7fffb5e56008 "", has_dynamic_init = 6, gcc_location = 0x7fadf18b4400 <___interceptor_free(void*)+176>, odr_indicator = 140385055453741}, {beg = 140385055464086, size = 140385055470039, size_with_redzone = 140385055470967, name = 0x5556cc518b29 <mainloop_run+25> "H\213=\020\315\205", module_name = 0x7fadf15cf577 <g_main_loop_run+311> "A\213\004$H\213;\205\300u\346\350\031\356\377\377H\213;\350\321\267\002", has_dynamic_init = 93831283444521, gcc_location = 0x3b0000002e, odr_indicator = 115964117011}, {beg = 140736245123760, size = 9955126442483274240, size_with_redzone = 271, name = 0x7fffb5e5d390 "", module_name = 0x0, has_dynamic_init = 137017770774336, gcc_location = 0xf, odr_indicator = 137017770774336}, {beg = 140736245125952, size = 140385058334888, size_with_redzone = 140736245123584, name = 0x7fffb5e5caf8 " \371\017\314VU", module_name = 0x7fffb5e5caf8 " \371\017\314VU", has_dynamic_init = 7346703152, gcc_location = 0x7fadf191fb29, odr_indicator = 0}}, reg_sites = {5, 795046515, 3423598880, 21846}, access_size = 140736245125680, size = 32 ' '}, wild = {addr = 12395275618732, access_size = 136742892890744}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 140385058936727, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140385058936727, alloc_tid = 7953758733700693248, free_tid = 136399295533600, alloc_stack_id = 3184254072, free_stack_id = 3957, chunk_access = {bad_addr = 135986958754752, offset = -8491617631226277376, chunk_begin = 136399295533648, chunk_size = 9955126442483274240, user_requested_alignment = 384, access_type = 1, alloc_type = 3}}, stack = {addr = 140385058936727, tid = 7953758733700693248, offset = 136399295533600, frame_pc = 16998369844344, access_size = 135986958754752, frame_descr = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>}, global = {addr = 140385058936727, static kMaxGlobals = 4, globals = {{beg = 7953758733700693248, size = 136399295533600, size_with_redzone = 16998369844344, name = 0x7badee5ee3c0 "\0166\340E", module_name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, has_dynamic_init = 136399295533648, gcc_location = 0x8a27b6c142505200, odr_indicator = 140736245125504}, {beg = 140385056297801, size = 140736245125520, size_with_redzone = 136811612343360, name = 0x7fadf1697642 "GLib", module_name = 0x7fadf16992f4 "GSource.check", has_dynamic_init = 140736245125504, gcc_location = 0x7fadf163090b, odr_indicator = 50}, {beg = 20344808945, size = 40, size_with_redzone = 20344823121, name = 0x7badee5ee540 "\0166\340E", module_name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, has_dynamic_init = 3997406, gcc_location = 0x8a27b6c142505200, odr_indicator = 1}, {beg = 137017770774448, size = 137017770774448, size_with_redzone = 136811612343360, name = 0xc8 <error: Cannot access memory at address 0xc8>, module_name = 0x7cbdef8e0180 "", has_dynamic_init = 140736245125728, gcc_location = 0x7fadf160866c, odr_indicator = 206158430248}}, reg_sites = {3051737712, 32767, 3051737520, 32767}, access_size = 9955126442483274240, size = 96 '`'}, wild = {addr = 140385058936727, access_size = 7953758733700693248}}}}, function = 0x7fadf1ea9c4c <clock_gettime+332> "\213|$\fH\2134$H\203\370\377H\211\302\017\204h\377\377\377\351\364\376\377\377Lc\307I\215@\002H\301\340\004L\001\310A\213\021\366\302\001\017\205\326"}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, addr_description = {data = {kind = 4019087992, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 12395275618732, alloc_stack_id = 4019087992, free_stack_id = 31837, chunk_access = {bad_addr = 88, offset = 136742892890656, chunk_begin = 112, chunk_size = 140736245096456, user_requested_alignment = 6, access_type = 0, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 12395275618732, frame_pc = 136742892890744, access_size = 88, frame_descr = 0x7c5def8e6a20 "F\v"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 12395275618732, size_with_redzone = 136742892890744, name = 0x58 <error: Cannot access memory at address 0x58>, module_name = 0x7c5def8e6a20 "F\v", has_dynamic_init = 112, gcc_location = 0x7fffb5e56008, odr_indicator = 6}, {beg = 140385058505728, size = 140385055453741, size_with_redzone = 140385055464086, name = 0x7fadf15cf1d7 "\351\303\376\377\377\017\037@", module_name = 0x7fadf15cf577 <g_main_loop_run+311> "A\213\004$H\213;\205\300u\346\350\031\356\377\377H\213;\350\321\267\002", has_dynamic_init = 93831283444521, gcc_location = 0x7fadf15cf577 <g_main_loop_run+311>, odr_indicator = 93831283444521}, {beg = 253403070510, size = 115964117011, size_with_redzone = 140736245123760, name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, module_name = 0x10f <error: Cannot access memory at address 0x10f>, has_dynamic_init = 140736245126032, gcc_location = 0x0, odr_indicator = 137017770774336}, {beg = 15, size = 137017770774336, size_with_redzone = 140736245125952, name = 0x7fadf188a8a8 <___interceptor_ppoll(__sanitizer::__sanitizer_pollfd*, __sanitizer::__sanitizer_nfds_t, void*, __sanitizer::__sanitizer_sigset_t*)+424> "\213\205\234\367\377\377\353\230H\215=rR\t", module_name = 0x7fffb5e5ca00 " j\216\357]|", has_dynamic_init = 140736245123832, gcc_location = 0x7fffb5e5caf8, odr_indicator = 7346703152}}, reg_sites = {4052876073, 32685, 0, 0}, access_size = 3414698780723773445, size = 32 ' '}, wild = {addr = 0, access_size = 0}}}}, size = 140736245125680}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, beg = 136742892890744, end = 0, old_mid = 0, new_mid = 12395275618732}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, storage_beg = 136742892890744, storage_end = 0, old_container_beg = 0, old_container_end = 12395275618732, new_container_beg = 136742892890744, new_container_end = 88}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, stack = 0x7fad00000002, old_storage_beg = 136742892890744, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 12395275618732}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, global1 = {beg = 140381006069762, size = 136742892890744, size_with_redzone = 0, name = 0x0, module_name = 0xb46000009ac <error: Cannot access memory at address 0xb46000009ac>, has_dynamic_init = 136742892890744, gcc_location = 0x58, odr_indicator = 136742892890656}, global2 = {beg = 112, size = 140736245096456, size_with_redzone = 6, name = 0x7fadf18b4400 <___interceptor_free(void*)+176> "D\213\215\314\367\377\377E\205\311t4H\211m\330A\203\371\001tzE\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\3502\026\001", module_name = 0x7fadf15cb22d "\200}\314", has_dynamic_init = 140385055464086, gcc_location = 0x7fadf15cf1d7, odr_indicator = 140385055470967}, stack_id1 = 3427896105, stack_id2 = 21846}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, pc = 140381006069762, bp = 136742892890744, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 12395275618732, kind = (unknown: 0x78), shadow_byte = 106 'j'}, heap = {addr = 12395275618732, alloc_tid = 136742892890744, free_tid = 88, alloc_stack_id = 4019087904, free_stack_id = 31837, chunk_access = {bad_addr = 112, offset = 140736245096456, chunk_begin = 6, chunk_size = 140385058505728, user_requested_alignment = 557, access_type = 3, alloc_type = 2}}, stack = {addr = 12395275618732, tid = 136742892890744, offset = 88, frame_pc = 136742892890656, access_size = 112, frame_descr = 0x7fffb5e56008 ""}, global = {addr = 12395275618732, static kMaxGlobals = 4, globals = {{beg = 136742892890744, size = 88, size_with_redzone = 136742892890656, name = 0x70 <error: Cannot access memory at address 0x70>, module_name = 0x7fffb5e56008 "", has_dynamic_init = 6, gcc_location = 0x7fadf18b4400 <___interceptor_free(void*)+176>, odr_indicator = 140385055453741}, {beg = 140385055464086, size = 140385055470039, size_with_redzone = 140385055470967, name = 0x5556cc518b29 <mainloop_run+25> "H\213=\020\315\205", module_name = 0x7fadf15cf577 <g_main_loop_run+311> "A\213\004$H\213;\205\300u\346\350\031\356\377\377H\213;\350\321\267\002", has_dynamic_init = 93831283444521, gcc_location = 0x3b0000002e, odr_indicator = 115964117011}, {beg = 140736245123760, size = 9955126442483274240, size_with_redzone = 271, name = 0x7fffb5e5d390 "", module_name = 0x0, has_dynamic_init = 137017770774336, gcc_location = 0xf, odr_indicator = 137017770774336}, {beg = 140736245125952, size = 140385058334888, size_with_redzone = 140736245123584, name = 0x7fffb5e5caf8 " \371\017\314VU", module_name = 0x7fffb5e5caf8 " \371\017\314VU", has_dynamic_init = 7346703152, gcc_location = 0x7fadf191fb29, odr_indicator = 0}}, reg_sites = {5, 795046515, 3423598880, 21846}, access_size = 140736245125680, size = 32 ' '}, wild = {addr = 12395275618732, access_size = 136742892890744}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 140385058936727, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140385058936727, alloc_tid = 7953758733700693248, free_tid = 136399295533600, alloc_stack_id = 3184254072, free_stack_id = 3957, chunk_access = {bad_addr = 135986958754752, offset = -8491617631226277376, chunk_begin = 136399295533648, chunk_size = 9955126442483274240, user_requested_alignment = 384, access_type = 1, alloc_type = 3}}, stack = {addr = 140385058936727, tid = 7953758733700693248, offset = 136399295533600, frame_pc = 16998369844344, access_size = 135986958754752, frame_descr = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>}, global = {addr = 140385058936727, static kMaxGlobals = 4, globals = {{beg = 7953758733700693248, size = 136399295533600, size_with_redzone = 16998369844344, name = 0x7badee5ee3c0 "\0166\340E", module_name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, has_dynamic_init = 136399295533648, gcc_location = 0x8a27b6c142505200, odr_indicator = 140736245125504}, {beg = 140385056297801, size = 140736245125520, size_with_redzone = 136811612343360, name = 0x7fadf1697642 "GLib", module_name = 0x7fadf16992f4 "GSource.check", has_dynamic_init = 140736245125504, gcc_location = 0x7fadf163090b, odr_indicator = 50}, {beg = 20344808945, size = 40, size_with_redzone = 20344823121, name = 0x7badee5ee540 "\0166\340E", module_name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, has_dynamic_init = 3997406, gcc_location = 0x8a27b6c142505200, odr_indicator = 1}, {beg = 137017770774448, size = 137017770774448, size_with_redzone = 136811612343360, name = 0xc8 <error: Cannot access memory at address 0xc8>, module_name = 0x7cbdef8e0180 "", has_dynamic_init = 140736245125728, gcc_location = 0x7fadf160866c, odr_indicator = 206158430248}}, reg_sites = {3051737712, 32767, 3051737520, 32767}, access_size = 9955126442483274240, size = 96 '`'}, wild = {addr = 140385058936727, access_size = 7953758733700693248}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 136742892890744, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 136742892890744, alloc_tid = 0, free_tid = 0, alloc_stack_id = 2476, free_stack_id = 2886, chunk_access = {bad_addr = 136742892890744, offset = 88, chunk_begin = 136742892890656, chunk_size = 112, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 136742892890744, tid = 0, offset = 0, frame_pc = 12395275618732, access_size = 136742892890744, frame_descr = 0x58 <error: Cannot access memory at address 0x58>}, global = {addr = 136742892890744, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 12395275618732, name = 0x7c5def8e6a78 "\0202\220\357\315{", module_name = 0x58 <error: Cannot access memory at address 0x58>, has_dynamic_init = 136742892890656, gcc_location = 0x70, odr_indicator = 140736245096456}, {beg = 6, size = 140385058505728, size_with_redzone = 140385055453741, name = 0x7fadf15cda96 "I\213~@D;g\b\017\203|\002", module_name = 0x7fadf15cf1d7 "\351\303\376\377\377\017\037@", has_dynamic_init = 140385055470967, gcc_location = 0x5556cc518b29 <mainloop_run+25>, odr_indicator = 140385055470967}, {beg = 93831283444521, size = 253403070510, size_with_redzone = 115964117011, name = 0x7fffb5e5cab0 "@\323\345\265\377\177", module_name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, has_dynamic_init = 271, gcc_location = 0x7fffb5e5d390, odr_indicator = 0}, {beg = 137017770774336, size = 15, size_with_redzone = 137017770774336, name = 0x7fffb5e5d340 "\340\323\345\265\377\177", module_name = 0x7fadf188a8a8 <___interceptor_ppoll(__sanitizer::__sanitizer_pollfd*, __sanitizer::__sanitizer_nfds_t, void*, __sanitizer::__sanitizer_sigset_t*)+424> "\213\205\234\367\377\377\353\230H\215=rR\t", has_dynamic_init = 140736245123584, gcc_location = 0x7fffb5e5caf8, odr_indicator = 140736245123832}}, reg_sites = {3051735856, 1, 4052876073, 32685}, access_size = 0, size = 5 '\005'}, wild = {addr = 136742892890744, access_size = 0}}}}, pc = 93831279147296, bp = 140736245125680, sp = 140736245125664, access_size = 8, bug_descr = 0x7fadf191d797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\377\177\000\000,\337\300\360\255\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\377\177\000\000\000\000\000\000 \177", '\000' <repeats 18 times>, " \033r\356\255{\000\000\300\306\345\265\377\177\000\000\a\000\000\000\000\000\000\000\300?\226\36146\000\000\000RPB\301\266'\212\240\316\217\357\335{\000\000\202V\325\360\255\177\000\000\207\310\345\265\377\177\000\000\017\000\000\000\000\000\000\000\207\310\345\265\377\177\000\000\020\000\000\0000\000\000\000`\316\345\265\377\177\000\000p\315\345\265\377\177\000\000\340}\330\360\255\177\000\000c\213\306\360"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 136742892890744, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 136742892890744, alloc_tid = 0, free_tid = 0, alloc_stack_id = 2476, free_stack_id = 2886, chunk_access = {bad_addr = 136742892890744, offset = 88, chunk_begin = 136742892890656, chunk_size = 112, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 136742892890744, tid = 0, offset = 0, frame_pc = 12395275618732, access_size = 136742892890744, frame_descr = 0x58 <error: Cannot access memory at address 0x58>}, global = {addr = 136742892890744, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 12395275618732, name = 0x7c5def8e6a78 "\0202\220\357\315{", module_name = 0x58 <error: Cannot access memory at address 0x58>, has_dynamic_init = 136742892890656, gcc_location = 0x70, odr_indicator = 140736245096456}, {beg = 6, size = 140385058505728, size_with_redzone = 140385055453741, name = 0x7fadf15cda96 "I\213~@D;g\b\017\203|\002", module_name = 0x7fadf15cf1d7 "\351\303\376\377\377\017\037@", has_dynamic_init = 140385055470967, gcc_location = 0x5556cc518b29 <mainloop_run+25>, odr_indicator = 140385055470967}, {beg = 93831283444521, size = 253403070510, size_with_redzone = 115964117011, name = 0x7fffb5e5cab0 "@\323\345\265\377\177", module_name = 0x8a27b6c142505200 <error: Cannot access memory at address 0x8a27b6c142505200>, has_dynamic_init = 271, gcc_location = 0x7fffb5e5d390, odr_indicator = 0}, {beg = 137017770774336, size = 15, size_with_redzone = 137017770774336, name = 0x7fffb5e5d340 "\340\323\345\265\377\177", module_name = 0x7fadf188a8a8 <___interceptor_ppoll(__sanitizer::__sanitizer_pollfd*, __sanitizer::__sanitizer_nfds_t, void*, __sanitizer::__sanitizer_sigset_t*)+424> "\213\205\234\367\377\377\353\230H\215=rR\t", has_dynamic_init = 140736245123584, gcc_location = 0x7fffb5e5caf8, odr_indicator = 140736245123832}}, reg_sites = {3051735856, 1, 4052876073, 32685}, access_size = 0, size = 5 '\005'}, wild = {addr = 136742892890744, access_size = 0}}}}, pc = 93831279147296, bp = 140736245125680, sp = 140736245125664, access_size = 8, bug_descr = 0x7fadf191d797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007fadf18c1f8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140736245125680, sp=sp@entry=140736245125664, addr=addr@entry=136742892890744, is_write=is_write@entry=false, access_size=access_size@entry=8, exp=<optimized out>, fatal=true) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007fadf18c33f9 in __asan::__asan_report_load8 (addr=addr@entry=136742892890744) at ../../../../src/libsanitizer/asan/asan_rtl.cpp:131
bp = 140736245125680
pc = <optimized out>
local_stack = 137017770774448
sp = 140736245125664
#11 0x00005556cc0ff920 in finalize_resume (data=0x7c5def8e6a20) at profiles/audio/a2dp.c:437
s = 0x7c5def8e6a20
l = <optimized out>
#12 0x00007fadf15cdb9b in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#13 0x00007fadf15cf1d7 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#14 0x00007fadf15cf577 in g_main_loop_run () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#15 0x00005556cc518b29 in mainloop_run () at src/shared/mainloop-glib.c:65
No locals.
#16 0x00005556cc51945b in mainloop_run_with_signal (func=func@entry=0x5556cc369320 <signal_callback>, user_data=user_data@entry=0x0) at src/shared/mainloop-notify.c:196
data = 0x7bddef8e3430
io = 0x7bedef8fa490
ret = <optimized out>
#17 0x00005556cc09e0ab in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1713
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
https://github.com/bluez/bluez/pull/2725
---
Regards,
Linux Bluetooth
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails
2026-10-27 17:19 [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails Kevin Dewald
2026-10-27 17:19 ` [PATCH BlueZ 1/2] adapter: Fix Discovering staying true after a rejected stop Kevin Dewald
2026-10-27 17:19 ` [PATCH BlueZ 2/2] adapter: Fix Discovering staying true after a failed stop Kevin Dewald
@ 2026-10-28 19:50 ` patchwork-bot+bluetooth
2 siblings, 0 replies; 5+ messages in thread
From: patchwork-bot+bluetooth @ 2026-10-28 19:50 UTC (permalink / raw)
To: Kevin Dewald; +Cc: linux-bluetooth, luiz.dentz
Hello:
This series was applied to bluetooth/bluez.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:
On Tue, 27 Oct 2026 10:19:21 -0700 you wrote:
> When the Stop Discovery bluetoothd sends for the last discovery client
> fails, stop_discovery_complete() removes the client but leaves
> Discovering true. The next StartDiscovery with the same filter then
> returns success without starting a discovery, as reported in
> bluez/bluez#2547 and, before it, #807.
>
> The first patch treats Rejected as stopped: the kernel returns it when
> the discovery already ended, or another mgmt client stopped it, just
> before the command was processed. The second clears Discovering when
> the kernel reports the discovery as stopped with no client left, which
> covers the other failures, such as the scan disable timing out. That
> needs the kernel to leave the stopping state after a failed stop, which
> "Bluetooth: MGMT: Fix discovery stuck after a failed Stop Discovery",
> posted separately, does.
>
> [...]
Here is the summary with links:
- [BlueZ,1/2] adapter: Fix Discovering staying true after a rejected stop
https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=4f3428e9df2f
- [BlueZ,2/2] adapter: Fix Discovering staying true after a failed stop
(no matching commit)
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2026-10-28 19:50 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-27 17:19 [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails Kevin Dewald
2026-10-27 17:19 ` [PATCH BlueZ 1/2] adapter: Fix Discovering staying true after a rejected stop Kevin Dewald
2026-10-27 20:29 ` adapter: Fix Discovering staying true when stopping fails bluez.test.bot
2026-10-27 17:19 ` [PATCH BlueZ 2/2] adapter: Fix Discovering staying true after a failed stop Kevin Dewald
2026-10-28 19:50 ` [PATCH BlueZ 0/2] adapter: Fix Discovering staying true when stopping fails patchwork-bot+bluetooth
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox