* [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections
@ 2026-09-18 0:02 Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 1/4] mgmt: Add defines for the long term key types Pauli Virtanen
` (4 more replies)
0 siblings, 5 replies; 7+ messages in thread
From: Pauli Virtanen @ 2026-09-18 0:02 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Pauli Virtanen
CSIP coordinator was not finding its LTKs with Secure Connections, as
the fix in 9251e630efdd to make legacy pairing to work doesn't work with
SC.
Fix by keeping track of what kind of LTK we have, and not distinguishing
between central/peripheral key slots for SC, which kernel doesn't do and
AFAIK the role difference doesn't exist in SC.
LLM was used for bug triage and write initial version, but these are now
almost manually done.
Assisted-by: opencode:qwen3.8-flash-next
Pauli Virtanen (4):
mgmt: Add defines for the long term key types
device: Remove unused central field from struct ltk_info
device: Fix resolving a coordinated set over Secure Connections
test: functional: run CSIP test for Secure Connections & Legacy
Pairing
lib/bluetooth/mgmt.h | 6 ++++++
profiles/audio/csip.c | 2 +-
src/adapter.c | 5 +++--
src/device.c | 39 ++++++++++++++++++++++++++-----------
src/device.h | 4 ++--
test/functional/test_bap.py | 21 +++++++++++++++++---
6 files changed, 58 insertions(+), 19 deletions(-)
--
2.55.0
^ permalink raw reply [flat|nested] 7+ messages in thread
* [PATCH BlueZ 1/4] mgmt: Add defines for the long term key types
2026-09-18 0:02 [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
@ 2026-09-18 0:02 ` Pauli Virtanen
2026-09-18 1:58 ` device: Fix resolving a coordinated set over Secure Connections bluez.test.bot
2026-09-18 0:02 ` [PATCH BlueZ 2/4] device: Remove unused central field from struct ltk_info Pauli Virtanen
` (3 subsequent siblings)
4 siblings, 1 reply; 7+ messages in thread
From: Pauli Virtanen @ 2026-09-18 0:02 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Pauli Virtanen
Add defines for MGMT_EV_NEW_LONG_TERM_KEY key types.
Assisted-by: opencode:qwen3.8-flash-next
---
lib/bluetooth/mgmt.h | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/lib/bluetooth/mgmt.h b/lib/bluetooth/mgmt.h
index 9df0c1ba2..098be2074 100644
--- a/lib/bluetooth/mgmt.h
+++ b/lib/bluetooth/mgmt.h
@@ -188,6 +188,12 @@ struct mgmt_cp_load_link_keys {
struct mgmt_link_key_info keys[0];
} __packed;
+#define MGMT_LTK_UNAUTHENTICATED 0x00
+#define MGMT_LTK_AUTHENTICATED 0x01
+#define MGMT_LTK_P256_UNAUTH 0x02
+#define MGMT_LTK_P256_AUTH 0x03
+#define MGMT_LTK_P256_DEBUG 0x04
+
struct mgmt_ltk_info {
struct mgmt_addr_info addr;
uint8_t type;
--
2.55.0
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [PATCH BlueZ 2/4] device: Remove unused central field from struct ltk_info
2026-09-18 0:02 [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 1/4] mgmt: Add defines for the long term key types Pauli Virtanen
@ 2026-09-18 0:02 ` Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 3/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
` (2 subsequent siblings)
4 siblings, 0 replies; 7+ messages in thread
From: Pauli Virtanen @ 2026-09-18 0:02 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Pauli Virtanen
struct ltk_info::central is only read in btd_device_get_ltk(), but its
only caller in csip.c does not use the output parameter.
Remove the unused field and adjust btd_device_get_ltk() accordingly.
Assisted-by: opencode:qwen3.8-flash-next
---
profiles/audio/csip.c | 2 +-
src/device.c | 7 +------
src/device.h | 2 +-
3 files changed, 3 insertions(+), 8 deletions(-)
diff --git a/profiles/audio/csip.c b/profiles/audio/csip.c
index d766c3da9..bbd9e4ffd 100644
--- a/profiles/audio/csip.c
+++ b/profiles/audio/csip.c
@@ -328,7 +328,7 @@ static bool csis_encrypt(struct bt_att *att, uint8_t val[16])
return false;
}
- if (!btd_device_get_ltk(device, ltk, NULL, NULL)) {
+ if (!btd_device_get_ltk(device, ltk, NULL)) {
error("Unable to get device LTK");
return false;
}
diff --git a/src/device.c b/src/device.c
index c140a2e36..443fbbca9 100644
--- a/src/device.c
+++ b/src/device.c
@@ -163,7 +163,6 @@ struct bearer_state {
struct ltk_info {
uint8_t key[16];
- bool central;
uint8_t enc_size;
};
@@ -2147,7 +2146,6 @@ void device_set_ltk(struct btd_device *device, const uint8_t val[16],
*ltk = new0(struct ltk_info, 1);
memcpy((*ltk)->key, val, sizeof((*ltk)->key));
- (*ltk)->central = central;
(*ltk)->enc_size = enc_size;
bt_att_set_enc_key_size(device->att, enc_size);
@@ -2156,7 +2154,7 @@ void device_set_ltk(struct btd_device *device, const uint8_t val[16],
}
bool btd_device_get_ltk(struct btd_device *device, uint8_t key[16],
- bool *central, uint8_t *enc_size)
+ uint8_t *enc_size)
{
struct ltk_info *ltk;
@@ -2174,9 +2172,6 @@ bool btd_device_get_ltk(struct btd_device *device, uint8_t key[16],
memcpy(key, ltk->key, sizeof(ltk->key));
- if (central)
- *central = ltk->central;
-
if (enc_size)
*enc_size = ltk->enc_size;
diff --git a/src/device.h b/src/device.h
index 7683be82e..7c3f45333 100644
--- a/src/device.h
+++ b/src/device.h
@@ -151,7 +151,7 @@ bool device_is_connecting(struct btd_device *device);
void device_set_ltk(struct btd_device *device, const uint8_t val[16],
bool central, uint8_t enc_size);
bool btd_device_get_ltk(struct btd_device *device, uint8_t val[16],
- bool *central, uint8_t *enc_size);
+ uint8_t *enc_size);
void device_set_csrk(struct btd_device *device, const uint8_t val[16],
uint32_t counter, uint8_t type,
bool store_hint);
--
2.55.0
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [PATCH BlueZ 3/4] device: Fix resolving a coordinated set over Secure Connections
2026-09-18 0:02 [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 1/4] mgmt: Add defines for the long term key types Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 2/4] device: Remove unused central field from struct ltk_info Pauli Virtanen
@ 2026-09-18 0:02 ` Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing Pauli Virtanen
2026-09-18 16:30 ` [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections patchwork-bot+bluetooth
4 siblings, 0 replies; 7+ messages in thread
From: Pauli Virtanen @ 2026-09-18 0:02 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Pauli Virtanen
Commit 9251e630efdd ("device: keep the long term key of both roles")
adds separate central/peripheral slots for LTKs.
Kernel only sets LTK event central flag for legacy pairing:
net/bluetooth/mgmt.c:mgmt_new_ltk() sets it if key->type == SMP_LTK.
For Secure Connections there's then no role difference, and BlueZ puts
those keys to peripheral slot.
CSIP coordinator is GAP Central (CSIP 4.2). To decrypt SIRK in
btd_device_add_set() / add_set() it reads device->ltk central key
which then never exists with Secure Connections.
test_bap.py:test_bap_unicast_set_* implicitly use legacy pairing since
pytest-bluezenv==0.1.9 powers controller on before bluetoothd, so these
tests miss this bug.
Fix by tracking the MGMT LTK type in struct ltk_info so the code knows
which kind of key it has. For Secure Connections, store the same key in
both slots. If key type changes, drop both slots, to avoid mixed
legacy/SC keys.
This fixes test_bap.py:test_bap_unicast_set_* with SC enabled, ie if
controller is powered off before bluetoothd start.
Assisted-by: qwen3.8-flash-next
---
src/adapter.c | 5 +++--
src/device.c | 32 +++++++++++++++++++++++++++-----
src/device.h | 2 +-
3 files changed, 31 insertions(+), 8 deletions(-)
diff --git a/src/adapter.c b/src/adapter.c
index fc734424b..717db2ea9 100644
--- a/src/adapter.c
+++ b/src/adapter.c
@@ -4580,7 +4580,7 @@ static void load_ltks(struct btd_adapter *adapter, GSList *keys)
device_set_paired(dev, info->bdaddr_type);
device_set_bonded(dev, info->bdaddr_type);
device_set_ltk(dev, info->val, info->central,
- info->enc_size);
+ info->authenticated, info->enc_size);
}
}
@@ -9241,7 +9241,8 @@ static void new_long_term_key_callback(uint16_t index, uint16_t length,
device_set_bonded(device, addr->type);
}
- device_set_ltk(device, ev->key.val, ev->key.central, ev->key.enc_size);
+ device_set_ltk(device, ev->key.val, ev->key.central, ev->key.type,
+ ev->key.enc_size);
bonding_complete(adapter, &addr->bdaddr, addr->type, 0);
}
diff --git a/src/device.c b/src/device.c
index 443fbbca9..6d82ea3e2 100644
--- a/src/device.c
+++ b/src/device.c
@@ -163,6 +163,7 @@ struct bearer_state {
struct ltk_info {
uint8_t key[16];
+ uint8_t type;
uint8_t enc_size;
};
@@ -2132,21 +2133,41 @@ static void add_set(void *data, void *user_data)
}
}
-void device_set_ltk(struct btd_device *device, const uint8_t val[16],
- bool central, uint8_t enc_size)
+static bool ltk_is_sc(uint8_t type)
{
- struct ltk_info **ltk;
+ return type == MGMT_LTK_P256_UNAUTH || type == MGMT_LTK_P256_AUTH ||
+ type == MGMT_LTK_P256_DEBUG;
+}
+
+void device_set_ltk(struct btd_device *device, const uint8_t val[16],
+ bool central, uint8_t type, uint8_t enc_size)
+{
+ struct ltk_info **ltk, **other;
/* Legacy pairing distributes one key per role, so both are kept
* to let each of them be selected by the role of the link.
+ * Secure Connections has no difference, so duplicate same key in
+ * both slots.
*/
ltk = central ? &device->ltk : &device->peripheral_ltk;
+ other = central ? &device->peripheral_ltk : &device->ltk;
if (!*ltk)
*ltk = new0(struct ltk_info, 1);
memcpy((*ltk)->key, val, sizeof((*ltk)->key));
+ (*ltk)->type = type;
(*ltk)->enc_size = enc_size;
+
+ if (ltk_is_sc(type)) {
+ free(*other);
+ *other = util_memdup(*ltk, sizeof(**ltk));
+ } else if (*other && ltk_is_sc((*other)->type)) {
+ /* Drop stale SC key */
+ free(*other);
+ *other = NULL;
+ }
+
bt_att_set_enc_key_size(device->att, enc_size);
/* Check if there is any set/sirk that needs decryption */
@@ -2162,8 +2183,9 @@ bool btd_device_get_ltk(struct btd_device *device, uint8_t key[16],
return false;
/* The key securing the link is the one distributed by the
- * peripheral, so each side has to select the one matching its
- * role for both to use the same key.
+ * peripheral, so for LE legacy pairing each side has to select
+ * the one matching its role for both to use the same key.
+ * Secure Connections duplicates its single shared key in both slots.
*/
ltk = btd_device_is_initiator(device) ? device->ltk :
device->peripheral_ltk;
diff --git a/src/device.h b/src/device.h
index 7c3f45333..2ed369856 100644
--- a/src/device.h
+++ b/src/device.h
@@ -149,7 +149,7 @@ void device_request_disconnect(struct btd_device *device, DBusMessage *msg);
bool device_is_disconnecting(struct btd_device *device);
bool device_is_connecting(struct btd_device *device);
void device_set_ltk(struct btd_device *device, const uint8_t val[16],
- bool central, uint8_t enc_size);
+ bool central, uint8_t type, uint8_t enc_size);
bool btd_device_get_ltk(struct btd_device *device, uint8_t val[16],
uint8_t *enc_size);
void device_set_csrk(struct btd_device *device, const uint8_t val[16],
--
2.55.0
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [PATCH BlueZ 4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing
2026-09-18 0:02 [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
` (2 preceding siblings ...)
2026-09-18 0:02 ` [PATCH BlueZ 3/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
@ 2026-09-18 0:02 ` Pauli Virtanen
2026-09-18 16:30 ` [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections patchwork-bot+bluetooth
4 siblings, 0 replies; 7+ messages in thread
From: Pauli Virtanen @ 2026-09-18 0:02 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Pauli Virtanen
Parametrize test_bap_unicast_set_transport_created() to test CSIP with
and without Secure connections, toggling it with btmgmt before pairing.
test/functional/test_bap.py::test_bap_unicast_set_transport_created[hosts7-vm3-sc]
test/functional/test_bap.py::test_bap_unicast_set_transport_created[hosts7-vm3-legacy]
---
test/functional/test_bap.py | 21 ++++++++++++++++++---
1 file changed, 18 insertions(+), 3 deletions(-)
diff --git a/test/functional/test_bap.py b/test/functional/test_bap.py
index ce11dc38d..2f3334387 100644
--- a/test/functional/test_bap.py
+++ b/test/functional/test_bap.py
@@ -9,7 +9,7 @@ import warnings
import pytest
-from pytest_bluezenv import Bluetoothd, Pexpect, find_exe, host_config
+from pytest_bluezenv import Bluetoothd, Pexpect, find_exe, host_config, run
from pytest_bluezenv.utils import bluez_src_dir
pytestmark = [pytest.mark.vm]
@@ -437,7 +437,19 @@ set_host_config = host_config(
@pytest.fixture
-def set_hosts(hosts):
+def secure_connections(hosts, request):
+ """Set Secure Connections from fixture param"""
+
+ if getattr(request, "param", None) is None:
+ return
+
+ btmgmt = find_exe("tools", "btmgmt")
+ for host in hosts:
+ host.call(run, [btmgmt, "sc", request.param], check=True)
+
+
+@pytest.fixture
+def set_hosts(hosts, secure_connections):
"""
Initiator (host0) and two acceptors forming a coordinated set, one
taking the left channel (host1) and one the right (host2), paired
@@ -535,8 +547,11 @@ def set_hosts(hosts):
yield host0, host1, host2, initiator, left, right, transports
+@pytest.mark.parametrize(
+ "secure_connections", ["on", "off"], ids=["sc", "legacy"], indirect=True
+)
@set_host_config
-def test_bap_unicast_set_transport_created(set_hosts):
+def test_bap_unicast_set_transport_created(secure_connections, set_hosts):
host0, host1, host2, initiator, left, right, transports = set_hosts
# One transport per member, each taking a single channel
--
2.55.0
^ permalink raw reply related [flat|nested] 7+ messages in thread
* RE: device: Fix resolving a coordinated set over Secure Connections
2026-09-18 0:02 ` [PATCH BlueZ 1/4] mgmt: Add defines for the long term key types Pauli Virtanen
@ 2026-09-18 1:58 ` bluez.test.bot
0 siblings, 0 replies; 7+ messages in thread
From: bluez.test.bot @ 2026-09-18 1:58 UTC (permalink / raw)
To: linux-bluetooth, pav
[-- Attachment #1: Type: text/plain, Size: 152975 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/series/1168152/
---Test result---
Test Summary:
CheckPatch PASS 1.72 seconds
GitLint FAIL 0.80 seconds
BuildEll PASS 20.11 seconds
BluezMake PASS 387.33 seconds
MakeCheck PASS 14.46 seconds
MakeDistcheck PASS 139.88 seconds
CheckValgrind PASS 231.38 seconds
CheckSmatch PASS 290.92 seconds
bluezmakeextell PASS 93.56 seconds
TestFunctional FAIL 1171.93 seconds
IncrementalBuild PASS 433.32 seconds
ScanBuild PASS 1125.45 seconds
Details
##############################
Test: GitLint - FAIL
Desc: Run gitlint
Output:
[BlueZ,4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing
1: T1 Title exceeds max length (83>80): "[BlueZ,4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing"
6: B1 Line exceeds max length (82>80): "test/functional/test_bap.py::test_bap_unicast_set_transport_created[hosts7-vm3-sc]"
7: B1 Line exceeds max length (86>80): "test/functional/test_bap.py::test_bap_unicast_set_transport_created[hosts7-vm3-legacy]"
##############################
Test: TestFunctional - FAIL
Desc: Run test-functional
Output:
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts7-vm3-sc]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts7.0-bluetoothd-1789695064-52.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 52]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7f68b0970900 (LWP 52)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007f68b10cbb7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007f68b10ae8ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 0, 0, 0, 140723960486512, 22, 140087620631504, 0, 140723960486448, 140087637476886, 140087607787520, 4096, 0, 12032862754435452416, 140087611969560}}, sa_flags = -1304465408, sa_restorer = 0x16}
#5 0x00007f68b1cd6a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007f68b1dfcc2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007f68b1dd193c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7ffcd9ad1ba6) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7f68b0188000 '=' <repeats 65 times>, "\n==52==ERROR: AddressSanitizer: heap-use-after-free on address 0x7cd8afde040b at pc 0x7f68b1d86445 bp 0x7ffcd9ad30a0 sp 0x7ffcd9ad2848\n"..., capacity_bytes_ = 4096, size_ = 3838}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007f68b1dd0e02 in __asan::ReportGenericError (pc=140087637075013, bp=140723960492192, sp=sp@entry=140723960490056, addr=addr@entry=137270105342987, is_write=is_write@entry=false, access_size=6, fatal=false, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, signal = {siginfo = 0xffffffff00000002, context = 0x7cd8afde040b, addr = 0, pc = 0, sp = 11785390261823, bp = 137270105342987, is_memory_access = 11, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = false}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, second_free_stack = 0xffffffff00000002, addr_description = {addr = 137270105342987, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1599, free_stack_id = 2744, chunk_access = {bad_addr = 137270105342987, offset = 11, chunk_begin = 137270105342976, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {addr = 137270105342987, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1599, free_stack_id = 2744, chunk_access = {bad_addr = 137270105342987, offset = 11, chunk_begin = 137270105342976, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 135689538805280, delete_alignment = 140723960487984}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {data = {kind = 2950562827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11785390261823, alloc_stack_id = 2950562827, free_stack_id = 31960, chunk_access = {bad_addr = 11, offset = 137270105342976, chunk_begin = 752, chunk_size = 140723960504328, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11785390261823, frame_pc = 137270105342987, access_size = 11, frame_descr = 0x7cd8afde0400 "\270\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11785390261823, size_with_redzone = 137270105342987, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cd8afde0400 "\270\n", has_dynamic_init = 752, gcc_location = 0x7ffcd9ad6008, odr_indicator = 135689538805280}, {beg = 140723960487984, size = 140087636372255, size_with_redzone = 1, name = 0x7b68aec29e20 "\340k\345\257\310{", module_name = 0x7ffcd9ad2880 "\220(\255\331\374\177", has_dynamic_init = 140087637329362, gcc_location = 0x7f68b05ba0d0, odr_indicator = 132501020816}, {beg = 140723960488032, size = 3, size_with_redzone = 140087637329424, name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723960490816, gcc_location = 0x7ffcd9ad2120, odr_indicator = 2}, {beg = 140087638044608, size = 136101874723600, size_with_redzone = 140723960488176, name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136101874723600, gcc_location = 0x7f68b05ba0d0, odr_indicator = 140723960488208}}, reg_sites = {2951047968, 31688, 81, 0}, access_size = 140723960490368, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, dealloc_stack = 0xffffffff00000002, alloc_type = 2950562827, dealloc_type = 31960, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x3c), shadow_byte = 6 '\006'}, heap = {addr = 0, alloc_tid = 11785390261823, free_tid = 137270105342987, alloc_stack_id = 11, free_stack_id = 0, chunk_access = {bad_addr = 137270105342976, offset = 752, chunk_begin = 140723960504328, chunk_size = 135689538805280, user_requested_alignment = 48, access_type = 2, alloc_type = 0}}, stack = {addr = 0, tid = 11785390261823, offset = 137270105342987, frame_pc = 11, access_size = 137270105342976, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11785390261823, size = 137270105342987, size_with_redzone = 11, name = 0x7cd8afde0400 "\270\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140723960504328, gcc_location = 0x7b68aec29e20, odr_indicator = 140723960487984}, {beg = 140087636372255, size = 1, size_with_redzone = 135689538805280, name = 0x7ffcd9ad2880 "\220(\255\331\374\177", module_name = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 140087612121296, gcc_location = 0x1ed9ad2090, odr_indicator = 140723960488032}, {beg = 3, size = 140087637329424, size_with_redzone = 140087624059791, name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", module_name = 0x7ffcd9ad2b40 "\344,\255\331\374\177", has_dynamic_init = 140723960488224, gcc_location = 0x2, odr_indicator = 140087638044608}, {beg = 136101874723600, size = 140723960488176, size_with_redzone = 140087636395832, name = 0x3e <error: Cannot access memory at address 0x3e>, module_name = 0x7bc8afe56b10 "\003\021", has_dynamic_init = 140087612121296, gcc_location = 0x7ffcd9ad2110, odr_indicator = 136101874723616}}, reg_sites = {81, 0, 3652004224, 32764}, access_size = 140087637075013, size = 160 '\240'}, wild = {addr = 0, access_size = 11785390261823}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2950562827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11785390261823, alloc_stack_id = 2950562827, free_stack_id = 31960, chunk_access = {bad_addr = 11, offset = 137270105342976, chunk_begin = 752, chunk_size = 140723960504328, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11785390261823, frame_pc = 137270105342987, access_size = 11, frame_descr = 0x7cd8afde0400 "\270\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11785390261823, size_with_redzone = 137270105342987, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cd8afde0400 "\270\n", has_dynamic_init = 752, gcc_location = 0x7ffcd9ad6008, odr_indicator = 135689538805280}, {beg = 140723960487984, size = 140087636372255, size_with_redzone = 1, name = 0x7b68aec29e20 "\340k\345\257\310{", module_name = 0x7ffcd9ad2880 "\220(\255\331\374\177", has_dynamic_init = 140087637329362, gcc_location = 0x7f68b05ba0d0, odr_indicator = 132501020816}, {beg = 140723960488032, size = 3, size_with_redzone = 140087637329424, name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723960490816, gcc_location = 0x7ffcd9ad2120, odr_indicator = 2}, {beg = 140087638044608, size = 136101874723600, size_with_redzone = 140723960488176, name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136101874723600, gcc_location = 0x7f68b05ba0d0, odr_indicator = 140723960488208}}, reg_sites = {2951047968, 31688, 81, 0}, access_size = 140723960490368, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2950562827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11785390261823, alloc_stack_id = 2950562827, free_stack_id = 31960, chunk_access = {bad_addr = 11, offset = 137270105342976, chunk_begin = 752, chunk_size = 140723960504328, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11785390261823, frame_pc = 137270105342987, access_size = 11, frame_descr = 0x7cd8afde0400 "\270\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11785390261823, size_with_redzone = 137270105342987, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cd8afde0400 "\270\n", has_dynamic_init = 752, gcc_location = 0x7ffcd9ad6008, odr_indicator = 135689538805280}, {beg = 140723960487984, size = 140087636372255, size_with_redzone = 1, name = 0x7b68aec29e20 "\340k\345\257\310{", module_name = 0x7ffcd9ad2880 "\220(\255\331\374\177", has_dynamic_init = 140087637329362, gcc_location = 0x7f68b05ba0d0, odr_indicator = 132501020816}, {beg = 140723960488032, size = 3, size_with_redzone = 140087637329424, name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723960490816, gcc_location = 0x7ffcd9ad2120, odr_indicator = 2}, {beg = 140087638044608, size = 136101874723600, size_with_redzone = 140723960488176, name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136101874723600, gcc_location = 0x7f68b05ba0d0, odr_indicator = 140723960488208}}, reg_sites = {2951047968, 31688, 81, 0}, access_size = 140723960490368, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137270105342987, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137270105342987, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137270105342987}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137270105342987}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137270105342987, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137270105342987}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, user_size = 137270105342987, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, requested_size = 137270105342987}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, length1 = 137270105342987, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11785390261823, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11785390261823, alloc_tid = 137270105342987, free_tid = 11, alloc_stack_id = 2950562816, free_stack_id = 31960, chunk_access = {bad_addr = 752, offset = 140723960504328, chunk_begin = 135689538805280, chunk_size = 140723960487984, user_requested_alignment = 2847, access_type = 2, alloc_type = 2}}, stack = {addr = 11785390261823, tid = 137270105342987, offset = 11, frame_pc = 137270105342976, access_size = 752, frame_descr = 0x7ffcd9ad6008 <error: Cannot access memory at address 0x7ffcd9ad6008>}, global = {addr = 11785390261823, static kMaxGlobals = 4, globals = {{beg = 137270105342987, size = 11, size_with_redzone = 137270105342976, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffcd9ad6008 <error: Cannot access memory at address 0x7ffcd9ad6008>, has_dynamic_init = 135689538805280, gcc_location = 0x7ffcd9ad2030, odr_indicator = 140087636372255}, {beg = 1, size = 135689538805280, size_with_redzone = 140723960490112, name = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f68b05ba0d0 "", has_dynamic_init = 132501020816, gcc_location = 0x7ffcd9ad2060, odr_indicator = 3}, {beg = 140087637329424, size = 140087624059791, size_with_redzone = 93890177049963, name = 0x7ffcd9ad2b40 "\344,\255\331\374\177", module_name = 0x7ffcd9ad2120 "\030", has_dynamic_init = 2, gcc_location = 0x7f68b1e72fc0 <__asan::instance>, odr_indicator = 136101874723600}, {beg = 140723960488176, size = 140087636395832, size_with_redzone = 62, name = 0x7bc8afe56b10 "\003\021", module_name = 0x7f68b05ba0d0 "", has_dynamic_init = 140723960488208, gcc_location = 0x7bc8afe56b20, odr_indicator = 81}}, reg_sites = {3652004224, 32764, 2983748677, 32616}, access_size = 140723960492192, size = 72 'H'}, wild = {addr = 11785390261823, access_size = 137270105342987}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 140087637755799, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140087637755799, alloc_tid = 140087638097152, free_tid = 140723960491744, alloc_stack_id = 2984003026, free_stack_id = 32616, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140723960489664, chunk_size = 3, user_requested_alignment = 1552, access_type = 0, alloc_type = 1}}, stack = {addr = 140087637755799, tid = 140087638097152, offset = 140723960491744, frame_pc = 140087637329362, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 140087637755799, static kMaxGlobals = 4, globals = {{beg = 140087638097152, size = 140723960491744, size_with_redzone = 140087637329362, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140723960489664, gcc_location = 0x3, odr_indicator = 140087637329424}, {beg = 140087624059791, size = 93890177049963, size_with_redzone = 140723960492448, name = 0x7ffcd9ad2740 "`'\255\331\374\177", module_name = 0x7f68b1e6cf78 "\001", has_dynamic_init = 140723960489856, gcc_location = 0x556482bab560, odr_indicator = 140087616014520}, {beg = 65535, size = 140723960489776, size_with_redzone = 140087637160793, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b68aee54800 "\0166\340E", has_dynamic_init = 140723960489824, gcc_location = 0x7f68b1ce774a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140723960489824}, {beg = 140087637585789, size = 140723960489856, size_with_redzone = 140087637429606, name = 0x7ffcd9ad2800 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 140087638044608, gcc_location = 0x7ba8afe4c880, odr_indicator = 140723960489936}}, reg_sites = {2983069496, 32616, 40, 0}, access_size = 140087637535261, size = 208 '\320'}, wild = {addr = 140087637755799, access_size = 140087638097152}}}}, function = 0x7ffcd9ad27f0 "\2400\255\331\374\177"}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2950562827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11785390261823, alloc_stack_id = 2950562827, free_stack_id = 31960, chunk_access = {bad_addr = 11, offset = 137270105342976, chunk_begin = 752, chunk_size = 140723960504328, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11785390261823, frame_pc = 137270105342987, access_size = 11, frame_descr = 0x7cd8afde0400 "\270\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11785390261823, size_with_redzone = 137270105342987, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cd8afde0400 "\270\n", has_dynamic_init = 752, gcc_location = 0x7ffcd9ad6008, odr_indicator = 135689538805280}, {beg = 140723960487984, size = 140087636372255, size_with_redzone = 1, name = 0x7b68aec29e20 "\340k\345\257\310{", module_name = 0x7ffcd9ad2880 "\220(\255\331\374\177", has_dynamic_init = 140087637329362, gcc_location = 0x7f68b05ba0d0, odr_indicator = 132501020816}, {beg = 140723960488032, size = 3, size_with_redzone = 140087637329424, name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x556482a6a56b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723960490816, gcc_location = 0x7ffcd9ad2120, odr_indicator = 2}, {beg = 140087638044608, size = 136101874723600, size_with_redzone = 140723960488176, name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136101874723600, gcc_location = 0x7f68b05ba0d0, odr_indicator = 140723960488208}}, reg_sites = {2951047968, 31688, 81, 0}, access_size = 140723960490368, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}, size = 140723960492192}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, beg = 137270105342987, end = 0, old_mid = 0, new_mid = 11785390261823}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, storage_beg = 137270105342987, storage_end = 0, old_container_beg = 0, old_container_end = 11785390261823, new_container_beg = 137270105342987, new_container_end = 11}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, old_storage_beg = 137270105342987, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11785390261823}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, global1 = {beg = 18446744069414584322, size = 137270105342987, size_with_redzone = 0, name = 0x0, module_name = 0xab80000063f <error: Cannot access memory at address 0xab80000063f>, has_dynamic_init = 137270105342987, gcc_location = 0xb, odr_indicator = 137270105342976}, global2 = {beg = 752, size = 140723960504328, size_with_redzone = 135689538805280, name = 0x7ffcd9ad2030 "\200(\255\331\374\177", module_name = 0x7f68b1cdab1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47> "H\205\300t\f\311\303f.\017\037\204", has_dynamic_init = 1, gcc_location = 0x7b68aec29e20, odr_indicator = 140723960490112}, stack_id1 = 2984003026, stack_id2 = 32616}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, pc = 18446744069414584322, bp = 137270105342987, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11785390261823, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11785390261823, alloc_tid = 137270105342987, free_tid = 11, alloc_stack_id = 2950562816, free_stack_id = 31960, chunk_access = {bad_addr = 752, offset = 140723960504328, chunk_begin = 135689538805280, chunk_size = 140723960487984, user_requested_alignment = 2847, access_type = 2, alloc_type = 2}}, stack = {addr = 11785390261823, tid = 137270105342987, offset = 11, frame_pc = 137270105342976, access_size = 752, frame_descr = 0x7ffcd9ad6008 <error: Cannot access memory at address 0x7ffcd9ad6008>}, global = {addr = 11785390261823, static kMaxGlobals = 4, globals = {{beg = 137270105342987, size = 11, size_with_redzone = 137270105342976, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffcd9ad6008 <error: Cannot access memory at address 0x7ffcd9ad6008>, has_dynamic_init = 135689538805280, gcc_location = 0x7ffcd9ad2030, odr_indicator = 140087636372255}, {beg = 1, size = 135689538805280, size_with_redzone = 140723960490112, name = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f68b05ba0d0 "", has_dynamic_init = 132501020816, gcc_location = 0x7ffcd9ad2060, odr_indicator = 3}, {beg = 140087637329424, size = 140087624059791, size_with_redzone = 93890177049963, name = 0x7ffcd9ad2b40 "\344,\255\331\374\177", module_name = 0x7ffcd9ad2120 "\030", has_dynamic_init = 2, gcc_location = 0x7f68b1e72fc0 <__asan::instance>, odr_indicator = 136101874723600}, {beg = 140723960488176, size = 140087636395832, size_with_redzone = 62, name = 0x7bc8afe56b10 "\003\021", module_name = 0x7f68b05ba0d0 "", has_dynamic_init = 140723960488208, gcc_location = 0x7bc8afe56b20, odr_indicator = 81}}, reg_sites = {3652004224, 32764, 2983748677, 32616}, access_size = 140723960492192, size = 72 'H'}, wild = {addr = 11785390261823, access_size = 137270105342987}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 140087637755799, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140087637755799, alloc_tid = 140087638097152, free_tid = 140723960491744, alloc_stack_id = 2984003026, free_stack_id = 32616, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140723960489664, chunk_size = 3, user_requested_alignment = 1552, access_type = 0, alloc_type = 1}}, stack = {addr = 140087637755799, tid = 140087638097152, offset = 140723960491744, frame_pc = 140087637329362, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 140087637755799, static kMaxGlobals = 4, globals = {{beg = 140087638097152, size = 140723960491744, size_with_redzone = 140087637329362, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140723960489664, gcc_location = 0x3, odr_indicator = 140087637329424}, {beg = 140087624059791, size = 93890177049963, size_with_redzone = 140723960492448, name = 0x7ffcd9ad2740 "`'\255\331\374\177", module_name = 0x7f68b1e6cf78 "\001", has_dynamic_init = 140723960489856, gcc_location = 0x556482bab560, odr_indicator = 140087616014520}, {beg = 65535, size = 140723960489776, size_with_redzone = 140087637160793, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b68aee54800 "\0166\340E", has_dynamic_init = 140723960489824, gcc_location = 0x7f68b1ce774a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140723960489824}, {beg = 140087637585789, size = 140723960489856, size_with_redzone = 140087637429606, name = 0x7ffcd9ad2800 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 140087638044608, gcc_location = 0x7ba8afe4c880, odr_indicator = 140723960489936}}, reg_sites = {2983069496, 32616, 40, 0}, access_size = 140087637535261, size = 208 '\320'}, wild = {addr = 140087637755799, access_size = 140087638097152}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137270105342987, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137270105342987, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1599, free_stack_id = 2744, chunk_access = {bad_addr = 137270105342987, offset = 11, chunk_begin = 137270105342976, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137270105342987, tid = 0, offset = 0, frame_pc = 11785390261823, access_size = 137270105342987, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137270105342987, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11785390261823, name = 0x7cd8afde040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137270105342976, gcc_location = 0x2f0, odr_indicator = 140723960504328}, {beg = 135689538805280, size = 140723960487984, size_with_redzone = 140087636372255, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b68aec29e20 "\340k\345\257\310{", has_dynamic_init = 140723960490112, gcc_location = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 140087612121296}, {beg = 132501020816, size = 140723960488032, size_with_redzone = 3, name = 0x7f68b1dc4610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 93890177049963, gcc_location = 0x7ffcd9ad2b40, odr_indicator = 140723960488224}, {beg = 2, size = 140087638044608, size_with_redzone = 136101874723600, name = 0x7ffcd9ad20f0 "\2400\255\331\374\177", module_name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7bc8afe56b10, odr_indicator = 140087612121296}}, reg_sites = {3652002064, 32764, 2951047968, 31688}, access_size = 81, size = 128 '\200'}, wild = {addr = 137270105342987, access_size = 0}}}}, pc = 140087637075013, bp = 140723960492192, sp = 140723960490056, access_size = 6, bug_descr = 0x7f68b1e2c797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[5\000N'\035\354P\375\246nal] orgp&\255\331\374\177\000\000 \034\255\331\374\177\000\000.\354\032\261h\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\240$\255\331\374\177\000\000\211\315\021\261h\177\000\000\\\034\255\331\374\177\000\000\\\034\255\331\374\177\000\000\\$\255\331\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000h\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137270105342987, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137270105342987, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1599, free_stack_id = 2744, chunk_access = {bad_addr = 137270105342987, offset = 11, chunk_begin = 137270105342976, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137270105342987, tid = 0, offset = 0, frame_pc = 11785390261823, access_size = 137270105342987, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137270105342987, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11785390261823, name = 0x7cd8afde040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137270105342976, gcc_location = 0x2f0, odr_indicator = 140723960504328}, {beg = 135689538805280, size = 140723960487984, size_with_redzone = 140087636372255, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b68aec29e20 "\340k\345\257\310{", has_dynamic_init = 140723960490112, gcc_location = 0x7f68b1dc45d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 140087612121296}, {beg = 132501020816, size = 140723960488032, size_with_redzone = 3, name = 0x7f68b1dc4610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f68b111cb8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 93890177049963, gcc_location = 0x7ffcd9ad2b40, odr_indicator = 140723960488224}, {beg = 2, size = 140087638044608, size_with_redzone = 136101874723600, name = 0x7ffcd9ad20f0 "\2400\255\331\374\177", module_name = 0x7f68b1ce0738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7bc8afe56b10, odr_indicator = 140087612121296}}, reg_sites = {3652002064, 32764, 2951047968, 31688}, access_size = 81, size = 128 '\200'}, wild = {addr = 137270105342987, access_size = 0}}}}, pc = 140087637075013, bp = 140723960492192, sp = 140723960490056, access_size = 6, bug_descr = 0x7f68b1e2c797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007f68b1dd0f8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140723960492192, sp=sp@entry=140723960490056, addr=addr@entry=137270105342987, is_write=is_write@entry=false, access_size=access_size@entry=6, exp=<optimized out>, fatal=false) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007f68b1d86468 in MemcmpInterceptorCommon (ctx=ctx@entry=0x7ffcd9ad30b0, real_fn=<optimized out>, a1=a1@entry=0x7cd8afde040b, a2=a2@entry=0x7b68aeb8aba0, size=size@entry=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:848
bp = 140723960492192
pc = <optimized out>
local_stack = 136926507958336
sp = 140723960490056
_ctx = 0x7ffcd9ad30b0
suppressed = <optimized out>
__offset = 137270105342987
__size = 6
__bad = <optimized out>
result = <optimized out>
#11 0x00007f68b1d86835 in ___interceptor_memcmp (a1=0x7cd8afde040b, a2=0x7b68aeb8aba0, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:880
ctx = 0x7ffcd9ad30b0
_ctx = {interceptor_name = 0x7f68b1e306b6 "memcmp"}
#12 ___interceptor_memcmp (a1=0x7cd8afde040b, a2=0x7b68aeb8aba0, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:875
ctx = <optimized out>
_ctx = <optimized out>
#13 0x000055648294e038 in bacmp (ba1=0x7cd8afde040b, ba2=0x7b68aeb8aba0) at ./lib/bluetooth/bluetooth.h:438
No locals.
#14 device_addr_type_cmp (a=0x7cd8afde0400, b=0x7b68aeb8aba0) at src/device.c:5657
dev = 0x7cd8afde0400
addr = 0x7b68aeb8aba0
cmp = <optimized out>
#15 0x00007f68b1b004c2 in g_slist_find_custom () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#16 0x00005564828cd6f4 in btd_adapter_find_device (adapter=<optimized out>, dst=dst@entry=0x7ba8afe0eed8, bdaddr_type=1 '\001') at src/adapter.c:1055
addr = <optimized out>
device = <optimized out>
list = <optimized out>
#17 0x000055648286fc07 in att_disconnected (err=<optimized out>, user_data=0x7ba8afe0eed0) at src/gatt-database.c:335
state = 0x7ba8afe0eed0
device = <optimized out>
__func__ = "att_disconnected"
#18 0x0000556482886b34 in btd_gatt_database_att_disconnected (database=<optimized out>, device=<optimized out>) at src/gatt-database.c:4238
server = <optimized out>
att = <optimized out>
state = <optimized out>
addr = <optimized out>
type = <optimized out>
__func__ = "btd_gatt_database_att_disconnected"
#19 0x00005564829300e6 in gatt_server_cleanup (device=device@entry=0x7cd8afde0080) at src/device.c:842
No locals.
#20 0x00005564829447dc in attio_cleanup (device=0x7cd8afde0080) at src/device.c:862
No locals.
#21 0x0000556482944e27 in device_free (user_data=0x7cd8afde0080) at src/device.c:918
device = 0x7cd8afde0080
__func__ = "device_free"
#22 0x00005564829c2a3a in remove_interface (data=0x7bd8afdeb000, name=name@entry=0x556482bcfa20 "org.bluez.Device1") at gdbus/object.c:742
iface = 0x7bc8afdfe380
#23 0x00005564829c55fc in g_dbus_unregister_interface (connection=<optimized out>, path=<optimized out>, name=<optimized out>) at gdbus/object.c:1499
data = <optimized out>
#24 0x00005564829001b3 in adapter_remove (adapter=adapter@entry=0x7c98afde0200) at src/adapter.c:7307
l = 0x7b88afe0b410 = {0x7cd8afde0080}
db = <optimized out>
ranging_manager = <optimized out>
__func__ = "adapter_remove"
#25 0x0000556482900d48 in adapter_cleanup () at src/adapter.c:11263
adapter = 0x7c98afde0200
#26 0x00005564826b22e0 in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1723
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts7-vm3-legacy]: failed on setup with "pytest_bluezenv.rpc.RemoteTimeoutError: Connection recv timed out"
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts7-vm3-legacy]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts7.0-bluetoothd-1789695083-71.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 71]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7ff5148da900 (LWP 71)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007ff515035b7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007ff5150188ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 136292505489056, 9130188358427281408, 140725062212288, 140725062212576, 140725062212432, 22, 140690593160144, 0, 140725062212368, 140690610005526, 140690584510464, 4096, 0, 9130188358427281408, 140690583388184}}, sa_flags = 372641792, sa_restorer = 0x16}
#5 0x00007ff515c40a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007ff515d66c2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007ff515d3b93c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7ffd1b581c86) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7ff514502000 '=' <repeats 65 times>, "\n==71==ERROR: AddressSanitizer: heap-use-after-free on address 0x7d6513de0208 at pc 0x5594209b7e9c bp 0x7ffd1b582900 sp 0x7ffd1b5828f0\n"..., capacity_bytes_ = 4096, size_ = 3419}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007ff515d3ae02 in __asan::ReportGenericError (pc=94094690582172, bp=140725062215936, sp=sp@entry=140725062215920, addr=137873078485512, is_write=is_write@entry=false, access_size=8, fatal=true, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, signal = {siginfo = 0x7ffd00000002, context = 0x7d6513de0208, addr = 0, pc = 0, sp = 11081015625204, bp = 137873078485512, is_memory_access = 136, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = 128}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, second_free_stack = 0x7ffd00000002, addr_description = {addr = 137873078485512, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2580, chunk_access = {bad_addr = 137873078485512, offset = 392, chunk_begin = 137873078485120, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, free_stack = 0x7ffd00000002, addr_description = {addr = 137873078485512, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2580, chunk_access = {bad_addr = 137873078485512, offset = 392, chunk_begin = 137873078485120, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 140690608900895, delete_alignment = 1}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, free_stack = 0x7ffd00000002, addr_description = {data = {kind = 333316616, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11081015625204, alloc_stack_id = 333316616, free_stack_id = 32101, chunk_access = {bad_addr = 392, offset = 137873078485120, chunk_begin = 752, chunk_size = 140725062230024, user_requested_alignment = 2847, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 0, offset = 11081015625204, frame_pc = 137873078485512, access_size = 392, frame_descr = 0x7d6513de0080 "\024\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11081015625204, size_with_redzone = 137873078485512, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7d6513de0080 "\024\n", has_dynamic_init = 752, gcc_location = 0x7ffd1b586008, odr_indicator = 140690608900895}, {beg = 1, size = 137117164394752, size_with_redzone = 140725062216016, name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 129189953536, gcc_location = 0x7ffd1b582130, odr_indicator = 2}, {beg = 140690609858064, size = 94094691141270, size_with_redzone = 140725062214112, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7ff515ddcfc0 <__asan::instance> "", has_dynamic_init = 136429970551552, gcc_location = 0x7ffd1b5821b0, odr_indicator = 140690609958246}, {beg = 140725062214160, size = 6, size_with_redzone = 140690610573248, name = 0x7cb513e185b0 "\003\021", module_name = 0x7ffd1b5821e0 "\b", has_dynamic_init = 140690608924472, gcc_location = 0x78, odr_indicator = 137117164471728}}, reg_sites = {458760656, 32765, 353468782, 32757}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, dealloc_stack = 0x7ffd00000002, alloc_type = 333316616, dealloc_type = 32101, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (unknown: 0xf4), shadow_byte = 5 '\005'}, heap = {addr = 0, alloc_tid = 11081015625204, free_tid = 137873078485512, alloc_stack_id = 392, free_stack_id = 0, chunk_access = {bad_addr = 137873078485120, offset = 752, chunk_begin = 140725062230024, chunk_size = 140690608900895, user_requested_alignment = 1, access_type = 0, alloc_type = 0}}, stack = {addr = 0, tid = 11081015625204, offset = 137873078485512, frame_pc = 392, access_size = 137873078485120, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11081015625204, size = 137873078485512, size_with_redzone = 392, name = 0x7d6513de0080 "\024\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140725062230024, gcc_location = 0x7ff515c44b1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47>, odr_indicator = 1}, {beg = 137117164394752, size = 140725062216016, size_with_redzone = 140690609858002, name = 0x3 <error: Cannot access memory at address 0x3>, module_name = 0x1e14524000 <error: Cannot access memory at address 0x1e14524000>, has_dynamic_init = 140725062213936, gcc_location = 0x2, odr_indicator = 140690609858064}, {beg = 94094691141270, size = 140725062214112, size_with_redzone = 7, name = 0x7ff515ddcfc0 <__asan::instance> "", module_name = 0x7c1513ee7300 "\003\021", has_dynamic_init = 140725062214064, gcc_location = 0x7ff515d46d66 <__sanitizer::RunFreeHooks(void*)+86>, odr_indicator = 140725062214160}, {beg = 6, size = 140690610573248, size_with_redzone = 137117164471728, name = 0x7ffd1b5821e0 "\b", module_name = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 120, gcc_location = 0x7cb513e185b0, odr_indicator = 140725062214096}}, reg_sites = {353468782, 32757, 0, 0}, access_size = 94094690582172, size = 0 '\000'}, wild = {addr = 0, access_size = 11081015625204}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, addr_description = {data = {kind = 333316616, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11081015625204, alloc_stack_id = 333316616, free_stack_id = 32101, chunk_access = {bad_addr = 392, offset = 137873078485120, chunk_begin = 752, chunk_size = 140725062230024, user_requested_alignment = 2847, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 0, offset = 11081015625204, frame_pc = 137873078485512, access_size = 392, frame_descr = 0x7d6513de0080 "\024\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11081015625204, size_with_redzone = 137873078485512, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7d6513de0080 "\024\n", has_dynamic_init = 752, gcc_location = 0x7ffd1b586008, odr_indicator = 140690608900895}, {beg = 1, size = 137117164394752, size_with_redzone = 140725062216016, name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 129189953536, gcc_location = 0x7ffd1b582130, odr_indicator = 2}, {beg = 140690609858064, size = 94094691141270, size_with_redzone = 140725062214112, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7ff515ddcfc0 <__asan::instance> "", has_dynamic_init = 136429970551552, gcc_location = 0x7ffd1b5821b0, odr_indicator = 140690609958246}, {beg = 140725062214160, size = 6, size_with_redzone = 140690610573248, name = 0x7cb513e185b0 "\003\021", module_name = 0x7ffd1b5821e0 "\b", has_dynamic_init = 140690608924472, gcc_location = 0x78, odr_indicator = 137117164471728}}, reg_sites = {458760656, 32765, 353468782, 32757}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, addr_description = {data = {kind = 333316616, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11081015625204, alloc_stack_id = 333316616, free_stack_id = 32101, chunk_access = {bad_addr = 392, offset = 137873078485120, chunk_begin = 752, chunk_size = 140725062230024, user_requested_alignment = 2847, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 0, offset = 11081015625204, frame_pc = 137873078485512, access_size = 392, frame_descr = 0x7d6513de0080 "\024\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11081015625204, size_with_redzone = 137873078485512, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7d6513de0080 "\024\n", has_dynamic_init = 752, gcc_location = 0x7ffd1b586008, odr_indicator = 140690608900895}, {beg = 1, size = 137117164394752, size_with_redzone = 140725062216016, name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 129189953536, gcc_location = 0x7ffd1b582130, odr_indicator = 2}, {beg = 140690609858064, size = 94094691141270, size_with_redzone = 140725062214112, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7ff515ddcfc0 <__asan::instance> "", has_dynamic_init = 136429970551552, gcc_location = 0x7ffd1b5821b0, odr_indicator = 140690609958246}, {beg = 140725062214160, size = 6, size_with_redzone = 140690610573248, name = 0x7cb513e185b0 "\003\021", module_name = 0x7ffd1b5821e0 "\b", has_dynamic_init = 140690608924472, gcc_location = 0x78, odr_indicator = 137117164471728}}, reg_sites = {458760656, 32765, 353468782, 32757}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, count = 137873078485512, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, count = 137873078485512, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, size = 137873078485512}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, alignment = 137873078485512}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, size = 137873078485512, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, alignment = 137873078485512}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, user_size = 137873078485512, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, requested_size = 137873078485512}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, length1 = 137873078485512, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11081015625204, kind = (unknown: 0x8), shadow_byte = 2 '\002'}, heap = {addr = 11081015625204, alloc_tid = 137873078485512, free_tid = 392, alloc_stack_id = 333316224, free_stack_id = 32101, chunk_access = {bad_addr = 752, offset = 140725062230024, chunk_begin = 140690608900895, chunk_size = 1, user_requested_alignment = 2304, access_type = 1, alloc_type = 1}}, stack = {addr = 11081015625204, tid = 137873078485512, offset = 392, frame_pc = 137873078485120, access_size = 752, frame_descr = 0x7ffd1b586008 <error: Cannot access memory at address 0x7ffd1b586008>}, global = {addr = 11081015625204, static kMaxGlobals = 4, globals = {{beg = 137873078485512, size = 392, size_with_redzone = 137873078485120, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffd1b586008 <error: Cannot access memory at address 0x7ffd1b586008>, has_dynamic_init = 140690608900895, gcc_location = 0x1, odr_indicator = 137117164394752}, {beg = 140725062216016, size = 140690609858002, size_with_redzone = 3, name = 0x1e14524000 <error: Cannot access memory at address 0x1e14524000>, module_name = 0x7ffd1b582130 "\020\346\322\025\365\177", has_dynamic_init = 2, gcc_location = 0x7ff515d2e610 <___interceptor_malloc(__sanitizer::uptr)+192>, odr_indicator = 94094691141270}, {beg = 140725062214112, size = 7, size_with_redzone = 140690610573248, name = 0x7c1513ee7300 "\003\021", module_name = 0x7ffd1b5821b0 "\320!X\033\375\177", has_dynamic_init = 140690609958246, gcc_location = 0x7ffd1b582210, odr_indicator = 6}, {beg = 140690610573248, size = 137117164471728, size_with_redzone = 140725062214112, name = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x78 <error: Cannot access memory at address 0x78>, has_dynamic_init = 137117164471728, gcc_location = 0x7ffd1b5821d0, odr_indicator = 140690597183854}}, reg_sites = {0, 0, 547061404, 21908}, access_size = 140725062215936, size = 240 '\360'}, wild = {addr = 11081015625204, access_size = 137873078485512}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 140690610284439, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140690610284439, alloc_tid = 140690606849280, free_tid = 140725062215584, alloc_stack_id = 365930707, free_stack_id = 32757, chunk_access = {bad_addr = 140725062215584, offset = 363305528, chunk_begin = 140725062215680, chunk_size = 140690606800470, user_requested_alignment = 384, access_type = 0, alloc_type = 0}}, stack = {addr = 140690610284439, tid = 140690606849280, offset = 140725062215584, frame_pc = 140690609645779, access_size = 140725062215584, frame_descr = 0x15a79a38 <error: Cannot access memory at address 0x15a79a38>}, global = {addr = 140690610284439, static kMaxGlobals = 4, globals = {{beg = 140690606849280, size = 140725062215584, size_with_redzone = 140690609645779, name = 0x7ffd1b5827a0 "\200\001\336\023\005}", module_name = 0x15a79a38 <error: Cannot access memory at address 0x15a79a38>, has_dynamic_init = 140725062215680, gcc_location = 0x7ff515a43e56, odr_indicator = 137460761624960}, {beg = 140690606800420, size = 140725062215632, size_with_redzone = 6979655174816, name = 0x21 <error: Cannot access memory at address 0x21>, module_name = 0x2eb4eb30 <error: Cannot access memory at address 0x2eb4eb30>, has_dynamic_init = 140725062215664, gcc_location = 0x7c5513de0aa0, odr_indicator = 140725062215696}, {beg = 137117164471744, size = 137460761624960, size_with_redzone = 136567408898704, name = 0x559420b98720 <watch_destroy> "\363\017\036\372SH\211\373H\203\354\020H\205\377\017\2049\002", module_name = 0x7ff515aa8dce "I\211\305L9\360tJH\205\300tUH\213E\310dH+\004%(", has_dynamic_init = 137117164471744, gcc_location = 0x7ff515aa8dce, odr_indicator = 94094692550432}, {beg = 0, size = 140725062215792, size_with_redzone = 140690607214030, name = 0x7cf513de0c40 "\001", module_name = 0x7c3513df84d0 "\002", has_dynamic_init = 44, gcc_location = 0x0, odr_indicator = 136567408526552}}, reg_sites = {333787816, 31797, 333415664, 31797}, access_size = 94094692552302, size = 144 '\220'}, wild = {addr = 140690610284439, access_size = 140690606849280}}}}, function = 0x7eb4f1f02c770800 <error: Cannot access memory at address 0x7eb4f1f02c770800>}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, addr_description = {data = {kind = 333316616, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11081015625204, alloc_stack_id = 333316616, free_stack_id = 32101, chunk_access = {bad_addr = 392, offset = 137873078485120, chunk_begin = 752, chunk_size = 140725062230024, user_requested_alignment = 2847, access_type = 0, alloc_type = 1}}, stack = {addr = 0, tid = 0, offset = 11081015625204, frame_pc = 137873078485512, access_size = 392, frame_descr = 0x7d6513de0080 "\024\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11081015625204, size_with_redzone = 137873078485512, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7d6513de0080 "\024\n", has_dynamic_init = 752, gcc_location = 0x7ffd1b586008, odr_indicator = 140690608900895}, {beg = 1, size = 137117164394752, size_with_redzone = 140725062216016, name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 129189953536, gcc_location = 0x7ffd1b582130, odr_indicator = 2}, {beg = 140690609858064, size = 94094691141270, size_with_redzone = 140725062214112, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7ff515ddcfc0 <__asan::instance> "", has_dynamic_init = 136429970551552, gcc_location = 0x7ffd1b5821b0, odr_indicator = 140690609958246}, {beg = 140725062214160, size = 6, size_with_redzone = 140690610573248, name = 0x7cb513e185b0 "\003\021", module_name = 0x7ffd1b5821e0 "\b", has_dynamic_init = 140690608924472, gcc_location = 0x78, odr_indicator = 137117164471728}}, reg_sites = {458760656, 32765, 353468782, 32757}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}, size = 140725062215936}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, beg = 137873078485512, end = 0, old_mid = 0, new_mid = 11081015625204}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, storage_beg = 137873078485512, storage_end = 0, old_container_beg = 0, old_container_end = 11081015625204, new_container_beg = 137873078485512, new_container_end = 392}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffd00000002, old_storage_beg = 137873078485512, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11081015625204}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, global1 = {beg = 140724603453442, size = 137873078485512, size_with_redzone = 0, name = 0x0, module_name = 0xa14000005f4 <error: Cannot access memory at address 0xa14000005f4>, has_dynamic_init = 137873078485512, gcc_location = 0x188, odr_indicator = 137873078485120}, global2 = {beg = 752, size = 140725062230024, size_with_redzone = 140690608900895, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7cb513e05900 "\200\a\336\023e}", has_dynamic_init = 140725062216016, gcc_location = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 3}, stack_id1 = 340934656, stack_id2 = 30}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, pc = 140724603453442, bp = 137873078485512, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11081015625204, kind = (unknown: 0x8), shadow_byte = 2 '\002'}, heap = {addr = 11081015625204, alloc_tid = 137873078485512, free_tid = 392, alloc_stack_id = 333316224, free_stack_id = 32101, chunk_access = {bad_addr = 752, offset = 140725062230024, chunk_begin = 140690608900895, chunk_size = 1, user_requested_alignment = 2304, access_type = 1, alloc_type = 1}}, stack = {addr = 11081015625204, tid = 137873078485512, offset = 392, frame_pc = 137873078485120, access_size = 752, frame_descr = 0x7ffd1b586008 <error: Cannot access memory at address 0x7ffd1b586008>}, global = {addr = 11081015625204, static kMaxGlobals = 4, globals = {{beg = 137873078485512, size = 392, size_with_redzone = 137873078485120, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffd1b586008 <error: Cannot access memory at address 0x7ffd1b586008>, has_dynamic_init = 140690608900895, gcc_location = 0x1, odr_indicator = 137117164394752}, {beg = 140725062216016, size = 140690609858002, size_with_redzone = 3, name = 0x1e14524000 <error: Cannot access memory at address 0x1e14524000>, module_name = 0x7ffd1b582130 "\020\346\322\025\365\177", has_dynamic_init = 2, gcc_location = 0x7ff515d2e610 <___interceptor_malloc(__sanitizer::uptr)+192>, odr_indicator = 94094691141270}, {beg = 140725062214112, size = 7, size_with_redzone = 140690610573248, name = 0x7c1513ee7300 "\003\021", module_name = 0x7ffd1b5821b0 "\320!X\033\375\177", has_dynamic_init = 140690609958246, gcc_location = 0x7ffd1b582210, odr_indicator = 6}, {beg = 140690610573248, size = 137117164471728, size_with_redzone = 140725062214112, name = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x78 <error: Cannot access memory at address 0x78>, has_dynamic_init = 137117164471728, gcc_location = 0x7ffd1b5821d0, odr_indicator = 140690597183854}}, reg_sites = {0, 0, 547061404, 21908}, access_size = 140725062215936, size = 240 '\360'}, wild = {addr = 11081015625204, access_size = 137873078485512}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 140690610284439, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140690610284439, alloc_tid = 140690606849280, free_tid = 140725062215584, alloc_stack_id = 365930707, free_stack_id = 32757, chunk_access = {bad_addr = 140725062215584, offset = 363305528, chunk_begin = 140725062215680, chunk_size = 140690606800470, user_requested_alignment = 384, access_type = 0, alloc_type = 0}}, stack = {addr = 140690610284439, tid = 140690606849280, offset = 140725062215584, frame_pc = 140690609645779, access_size = 140725062215584, frame_descr = 0x15a79a38 <error: Cannot access memory at address 0x15a79a38>}, global = {addr = 140690610284439, static kMaxGlobals = 4, globals = {{beg = 140690606849280, size = 140725062215584, size_with_redzone = 140690609645779, name = 0x7ffd1b5827a0 "\200\001\336\023\005}", module_name = 0x15a79a38 <error: Cannot access memory at address 0x15a79a38>, has_dynamic_init = 140725062215680, gcc_location = 0x7ff515a43e56, odr_indicator = 137460761624960}, {beg = 140690606800420, size = 140725062215632, size_with_redzone = 6979655174816, name = 0x21 <error: Cannot access memory at address 0x21>, module_name = 0x2eb4eb30 <error: Cannot access memory at address 0x2eb4eb30>, has_dynamic_init = 140725062215664, gcc_location = 0x7c5513de0aa0, odr_indicator = 140725062215696}, {beg = 137117164471744, size = 137460761624960, size_with_redzone = 136567408898704, name = 0x559420b98720 <watch_destroy> "\363\017\036\372SH\211\373H\203\354\020H\205\377\017\2049\002", module_name = 0x7ff515aa8dce "I\211\305L9\360tJH\205\300tUH\213E\310dH+\004%(", has_dynamic_init = 137117164471744, gcc_location = 0x7ff515aa8dce, odr_indicator = 94094692550432}, {beg = 0, size = 140725062215792, size_with_redzone = 140690607214030, name = 0x7cf513de0c40 "\001", module_name = 0x7c3513df84d0 "\002", has_dynamic_init = 44, gcc_location = 0x0, odr_indicator = 136567408526552}}, reg_sites = {333787816, 31797, 333415664, 31797}, access_size = 94094692552302, size = 144 '\220'}, wild = {addr = 140690610284439, access_size = 140690606849280}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137873078485512, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137873078485512, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2580, chunk_access = {bad_addr = 137873078485512, offset = 392, chunk_begin = 137873078485120, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137873078485512, tid = 0, offset = 0, frame_pc = 11081015625204, access_size = 137873078485512, frame_descr = 0x188 <error: Cannot access memory at address 0x188>}, global = {addr = 137873078485512, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11081015625204, name = 0x7d6513de0208 "", module_name = 0x188 <error: Cannot access memory at address 0x188>, has_dynamic_init = 137873078485120, gcc_location = 0x2f0, odr_indicator = 140725062230024}, {beg = 140690608900895, size = 1, size_with_redzone = 137117164394752, name = 0x7ffd1b582950 "\320\001\206 \224U", module_name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 3, gcc_location = 0x1e14524000, odr_indicator = 140725062213936}, {beg = 2, size = 140690609858064, size_with_redzone = 94094691141270, name = 0x7ffd1b5821e0 "\b", module_name = 0x7 <error: Cannot access memory at address 0x7>, has_dynamic_init = 140690610573248, gcc_location = 0x7c1513ee7300, odr_indicator = 140725062214064}, {beg = 140690609958246, size = 140725062214160, size_with_redzone = 6, name = 0x7ff515ddcfc0 <__asan::instance> "", module_name = 0x7cb513e185b0 "\003\021", has_dynamic_init = 140725062214112, gcc_location = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248>, odr_indicator = 120}}, reg_sites = {333546928, 31925, 458760656, 32765}, access_size = 140690597183854, size = 0 '\000'}, wild = {addr = 137873078485512, access_size = 0}}}}, pc = 94094690582172, bp = 140725062215936, sp = 140725062215920, access_size = 8, bug_descr = 0x7ff515d96797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\365{\000\000\377\000\000\000\000\000\000\000`\367\310 \224U\000\000fm\324\025\365\177\000\000p\035X\033\375\177\000\000\002\000\000\000\000\000\000\000\300\317\335\025\365\177\000\000\020\a\337\023u|\000\000@\035X\033\375\177\000\0008\247\304\025\365\177\000\000^\000\000\000\000\000\000\000\020\a\337\023u|\000\000\320@R\024\365\177\000\000`\035X\033\375\177\000\000 \a\337\023u|\000\000q\000\000\000\000\000\000\000\320%X\033\375\177\000\000^\000\000\000\000\000\000\000\220%X\033\375\177\000\000\301\323\322\025\365\177\000\000\342\031\302 \224U\000\000\270\377\377\377"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137873078485512, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137873078485512, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2580, chunk_access = {bad_addr = 137873078485512, offset = 392, chunk_begin = 137873078485120, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137873078485512, tid = 0, offset = 0, frame_pc = 11081015625204, access_size = 137873078485512, frame_descr = 0x188 <error: Cannot access memory at address 0x188>}, global = {addr = 137873078485512, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11081015625204, name = 0x7d6513de0208 "", module_name = 0x188 <error: Cannot access memory at address 0x188>, has_dynamic_init = 137873078485120, gcc_location = 0x2f0, odr_indicator = 140725062230024}, {beg = 140690608900895, size = 1, size_with_redzone = 137117164394752, name = 0x7ffd1b582950 "\320\001\206 \224U", module_name = 0x7ff515d2e5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 3, gcc_location = 0x1e14524000, odr_indicator = 140725062213936}, {beg = 2, size = 140690609858064, size_with_redzone = 94094691141270, name = 0x7ffd1b5821e0 "\b", module_name = 0x7 <error: Cannot access memory at address 0x7>, has_dynamic_init = 140690610573248, gcc_location = 0x7c1513ee7300, odr_indicator = 140725062214064}, {beg = 140690609958246, size = 140725062214160, size_with_redzone = 6, name = 0x7ff515ddcfc0 <__asan::instance> "", module_name = 0x7cb513e185b0 "\003\021", has_dynamic_init = 140725062214112, gcc_location = 0x7ff515c4a738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248>, odr_indicator = 120}}, reg_sites = {333546928, 31925, 458760656, 32765}, access_size = 140690597183854, size = 0 '\000'}, wild = {addr = 137873078485512, access_size = 0}}}}, pc = 94094690582172, bp = 140725062215936, sp = 140725062215920, access_size = 8, bug_descr = 0x7ff515d96797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007ff515d3af8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140725062215936, sp=sp@entry=140725062215920, addr=<optimized out>, is_write=is_write@entry=false, access_size=access_size@entry=8, exp=<optimized out>, fatal=true) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007ff515d3c3f9 in __asan::__asan_report_load8 (addr=<optimized out>) at ../../../../src/libsanitizer/asan/asan_rtl.cpp:131
bp = 140725062215936
pc = <optimized out>
local_stack = 140725062216048
sp = 140725062215920
#11 0x00005594209b7e9c in device_get_adapter (device=<optimized out>) at src/device.c:6917
No locals.
#12 0x000055942086020f in find_cig_session (data=0x7cb513e0bfc0, match_data=0x7bf512c84830) at profiles/audio/bap.c:2500
session = 0x7cb513e0bfc0
info = 0x7bf512c84830
#13 0x0000559420a3f071 in queue_find (queue=<optimized out>, function=function@entry=0x5594208601d0 <find_cig_session>, match_data=match_data@entry=0x7bf512c84830) at src/shared/queue.c:230
entry = 0x7c1513e9ad90
#14 0x0000559420866cd4 in find_cig_enumerate (data=0x7cb513e05900) at profiles/audio/bap.c:2539
info = <optimized out>
#15 bap_update_cigs_cb (user_data=0x7cb513e05900) at profiles/audio/bap.c:2688
data = 0x7cb513e05900
cigs = <optimized out>
unset = <optimized out>
#16 0x00007ff515a46b9b in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#17 0x00007ff515a481d7 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#18 0x00007ff515a48577 in g_main_loop_run () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#19 0x0000559420b9af49 in mainloop_run () at src/shared/mainloop-glib.c:65
No locals.
#20 0x0000559420b9b87b in mainloop_run_with_signal (func=func@entry=0x559420a009d0 <signal_callback>, user_data=user_data@entry=0x0) at src/shared/mainloop-notify.c:196
data = 0x7c2513de3490
io = 0x7c3513df9b10
ret = <optimized out>
#21 0x00005594207192bb in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1713
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
FAIL functional.test_bap::test_bap_unicast_set_transport_acquire[hosts7-vm3]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts7.0-bluetoothd-1789695137-91.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 91]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7f198a4bb900 (LWP 91)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007f198ac16b7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007f198abf98ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 0, 0, 0, 140733469018544, 22, 139747675745232, 0, 140733469018480, 139747692590614, 139747665129472, 4096, 0, 16213640644049910784, 139747666034712}}, sa_flags = -1946935296, sa_restorer = 0x16}
#5 0x00007f198b821a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007f198b947c2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007f198b91c93c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7fff106dcae6) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7f1989f03000 '=' <repeats 65 times>, "\n==91==ERROR: AddressSanitizer: heap-use-after-free on address 0x7c89899e040b at pc 0x7f198b8d1445 bp 0x7fff106ddfe0 sp 0x7fff106dd788\n"..., capacity_bytes_ = 4096, size_ = 3838}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007f198b91be02 in __asan::ReportGenericError (pc=139747692188741, bp=140733469024224, sp=sp@entry=140733469022088, addr=addr@entry=136930161198091, is_write=is_write@entry=false, access_size=6, fatal=false, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, signal = {siginfo = 0xffffffff00000002, context = 0x7c89899e040b, addr = 0, pc = 0, sp = 11626476471848, bp = 136930161198091, is_memory_access = 11, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = false}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, second_free_stack = 0xffffffff00000002, addr_description = {addr = 136930161198091, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2707, chunk_access = {bad_addr = 136930161198091, offset = 11, chunk_begin = 136930161198080, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {addr = 136930161198091, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2707, chunk_access = {bad_addr = 136930161198091, offset = 11, chunk_begin = 136930161198080, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 135349594681376, delete_alignment = 140733469020016}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {data = {kind = 2308834315, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11626476471848, alloc_stack_id = 2308834315, free_stack_id = 31881, chunk_access = {bad_addr = 11, offset = 136930161198080, chunk_begin = 752, chunk_size = 140733468991496, user_requested_alignment = 32, access_type = 3, alloc_type = 3}}, stack = {addr = 0, tid = 0, offset = 11626476471848, frame_pc = 136930161198091, access_size = 11, frame_descr = 0x7c89899e0400 "\223\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11626476471848, size_with_redzone = 136930161198091, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7c89899e0400 "\223\n", has_dynamic_init = 752, gcc_location = 0x7fff106d6008, odr_indicator = 135349594681376}, {beg = 140733469020016, size = 139747691485983, size_with_redzone = 1, name = 0x7b198882f020 "", module_name = 0x7fff106dd7c0 "\320\327m\020\377\177", has_dynamic_init = 139747692443090, gcc_location = 0x7f198a1050d0, odr_indicator = 129124650960}, {beg = 140733469020064, size = 3, size_with_redzone = 139747692443152, name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733469022848, gcc_location = 0x7fff106dd060, odr_indicator = 2}, {beg = 139747693158336, size = 135761930584368, size_with_redzone = 140733469020208, name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135761930584368, gcc_location = 0x7f198a1050d0, odr_indicator = 140733469020240}}, reg_sites = {2309325120, 31609, 81, 0}, access_size = 140733469022400, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, dealloc_stack = 0xffffffff00000002, alloc_type = 2308834315, dealloc_type = 31881, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (unknown: 0x28), shadow_byte = 6 '\006'}, heap = {addr = 0, alloc_tid = 11626476471848, free_tid = 136930161198091, alloc_stack_id = 11, free_stack_id = 0, chunk_access = {bad_addr = 136930161198080, offset = 752, chunk_begin = 140733468991496, chunk_size = 135349594681376, user_requested_alignment = 3952, access_type = 0, alloc_type = 3}}, stack = {addr = 0, tid = 11626476471848, offset = 136930161198091, frame_pc = 11, access_size = 136930161198080, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11626476471848, size = 136930161198091, size_with_redzone = 11, name = 0x7c89899e0400 "\223\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140733468991496, gcc_location = 0x7b198882f020, odr_indicator = 140733469020016}, {beg = 139747691485983, size = 1, size_with_redzone = 135349594681376, name = 0x7fff106dd7c0 "\320\327m\020\377\177", module_name = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 139747667235024, gcc_location = 0x1e106dcfd0, odr_indicator = 140733469020064}, {beg = 3, size = 139747692443152, size_with_redzone = 139747679173519, name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", module_name = 0x7fff106dda80 "$\334m\020\377\177", has_dynamic_init = 140733469020256, gcc_location = 0x2, odr_indicator = 139747693158336}, {beg = 135761930584368, size = 140733469020208, size_with_redzone = 139747691509560, name = 0x3e <error: Cannot access memory at address 0x3e>, module_name = 0x7b7989a58130 "\003\021", has_dynamic_init = 139747667235024, gcc_location = 0x7fff106dd050, odr_indicator = 135761930584384}}, reg_sites = {81, 0, 275634368, 32767}, access_size = 139747692188741, size = 224 '\340'}, wild = {addr = 0, access_size = 11626476471848}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2308834315, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11626476471848, alloc_stack_id = 2308834315, free_stack_id = 31881, chunk_access = {bad_addr = 11, offset = 136930161198080, chunk_begin = 752, chunk_size = 140733468991496, user_requested_alignment = 32, access_type = 3, alloc_type = 3}}, stack = {addr = 0, tid = 0, offset = 11626476471848, frame_pc = 136930161198091, access_size = 11, frame_descr = 0x7c89899e0400 "\223\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11626476471848, size_with_redzone = 136930161198091, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7c89899e0400 "\223\n", has_dynamic_init = 752, gcc_location = 0x7fff106d6008, odr_indicator = 135349594681376}, {beg = 140733469020016, size = 139747691485983, size_with_redzone = 1, name = 0x7b198882f020 "", module_name = 0x7fff106dd7c0 "\320\327m\020\377\177", has_dynamic_init = 139747692443090, gcc_location = 0x7f198a1050d0, odr_indicator = 129124650960}, {beg = 140733469020064, size = 3, size_with_redzone = 139747692443152, name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733469022848, gcc_location = 0x7fff106dd060, odr_indicator = 2}, {beg = 139747693158336, size = 135761930584368, size_with_redzone = 140733469020208, name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135761930584368, gcc_location = 0x7f198a1050d0, odr_indicator = 140733469020240}}, reg_sites = {2309325120, 31609, 81, 0}, access_size = 140733469022400, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2308834315, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11626476471848, alloc_stack_id = 2308834315, free_stack_id = 31881, chunk_access = {bad_addr = 11, offset = 136930161198080, chunk_begin = 752, chunk_size = 140733468991496, user_requested_alignment = 32, access_type = 3, alloc_type = 3}}, stack = {addr = 0, tid = 0, offset = 11626476471848, frame_pc = 136930161198091, access_size = 11, frame_descr = 0x7c89899e0400 "\223\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11626476471848, size_with_redzone = 136930161198091, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7c89899e0400 "\223\n", has_dynamic_init = 752, gcc_location = 0x7fff106d6008, odr_indicator = 135349594681376}, {beg = 140733469020016, size = 139747691485983, size_with_redzone = 1, name = 0x7b198882f020 "", module_name = 0x7fff106dd7c0 "\320\327m\020\377\177", has_dynamic_init = 139747692443090, gcc_location = 0x7f198a1050d0, odr_indicator = 129124650960}, {beg = 140733469020064, size = 3, size_with_redzone = 139747692443152, name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733469022848, gcc_location = 0x7fff106dd060, odr_indicator = 2}, {beg = 139747693158336, size = 135761930584368, size_with_redzone = 140733469020208, name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135761930584368, gcc_location = 0x7f198a1050d0, odr_indicator = 140733469020240}}, reg_sites = {2309325120, 31609, 81, 0}, access_size = 140733469022400, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 136930161198091, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 136930161198091, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 136930161198091}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 136930161198091}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 136930161198091, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 136930161198091}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, user_size = 136930161198091, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, requested_size = 136930161198091}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, length1 = 136930161198091, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11626476471848, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11626476471848, alloc_tid = 136930161198091, free_tid = 11, alloc_stack_id = 2308834304, free_stack_id = 31881, chunk_access = {bad_addr = 752, offset = 140733468991496, chunk_begin = 135349594681376, chunk_size = 140733469020016, user_requested_alignment = 2847, access_type = 1, alloc_type = 1}}, stack = {addr = 11626476471848, tid = 136930161198091, offset = 11, frame_pc = 136930161198080, access_size = 752, frame_descr = 0x7fff106d6008 ""}, global = {addr = 11626476471848, static kMaxGlobals = 4, globals = {{beg = 136930161198091, size = 11, size_with_redzone = 136930161198080, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7fff106d6008 "", has_dynamic_init = 135349594681376, gcc_location = 0x7fff106dcf70, odr_indicator = 139747691485983}, {beg = 1, size = 135349594681376, size_with_redzone = 140733469022144, name = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f198a1050d0 "", has_dynamic_init = 129124650960, gcc_location = 0x7fff106dcfa0, odr_indicator = 3}, {beg = 139747692443152, size = 139747679173519, size_with_redzone = 94332613956971, name = 0x7fff106dda80 "$\334m\020\377\177", module_name = 0x7fff106dd060 "\030", has_dynamic_init = 2, gcc_location = 0x7f198b9bdfc0 <__asan::instance>, odr_indicator = 135761930584368}, {beg = 140733469020208, size = 139747691509560, size_with_redzone = 62, name = 0x7b7989a58130 "\003\021", module_name = 0x7f198a1050d0 "", has_dynamic_init = 140733469020240, gcc_location = 0x7b7989a58140, odr_indicator = 81}}, reg_sites = {275634368, 32767, 2341278789, 32537}, access_size = 140733469024224, size = 136 '\210'}, wild = {addr = 11626476471848, access_size = 136930161198091}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 139747692869527, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 139747692869527, alloc_tid = 139747693165824, free_tid = 140733469023776, alloc_stack_id = 2341533138, free_stack_id = 32537, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140733469021696, chunk_size = 3, user_requested_alignment = 1552, access_type = 3, alloc_type = 3}}, stack = {addr = 139747692869527, tid = 139747693165824, offset = 140733469023776, frame_pc = 139747692443090, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 139747692869527, static kMaxGlobals = 4, globals = {{beg = 139747693165824, size = 140733469023776, size_with_redzone = 139747692443090, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140733469021696, gcc_location = 0x3, odr_indicator = 139747692443152}, {beg = 139747679173519, size = 94332613956971, size_with_redzone = 140733469024480, name = 0x7fff106dd680 "\240\326m\020\377\177", module_name = 0x7f198b9b7f78 "\001", has_dynamic_init = 140733469021888, gcc_location = 0x55cb86062560, odr_indicator = 139747671128248}, {beg = 65535, size = 140733469021808, size_with_redzone = 139747692274521, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b1988a59200 "\0166\340E", has_dynamic_init = 140733469021856, gcc_location = 0x7f198b83274a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140733469021856}, {beg = 139747692699517, size = 140733469021888, size_with_redzone = 139747692543334, name = 0x7fff106dd740 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 139747693158336, gcc_location = 0x7b5989a4a200, odr_indicator = 140733469021968}}, reg_sites = {2340599608, 32537, 40, 0}, access_size = 139747692648989, size = 208 '\320'}, wild = {addr = 139747692869527, access_size = 139747693165824}}}}, function = 0x7fff106dd730 "\340\337m\020\377\177"}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 2308834315, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11626476471848, alloc_stack_id = 2308834315, free_stack_id = 31881, chunk_access = {bad_addr = 11, offset = 136930161198080, chunk_begin = 752, chunk_size = 140733468991496, user_requested_alignment = 32, access_type = 3, alloc_type = 3}}, stack = {addr = 0, tid = 0, offset = 11626476471848, frame_pc = 136930161198091, access_size = 11, frame_descr = 0x7c89899e0400 "\223\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11626476471848, size_with_redzone = 136930161198091, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7c89899e0400 "\223\n", has_dynamic_init = 752, gcc_location = 0x7fff106d6008, odr_indicator = 135349594681376}, {beg = 140733469020016, size = 139747691485983, size_with_redzone = 1, name = 0x7b198882f020 "", module_name = 0x7fff106dd7c0 "\320\327m\020\377\177", has_dynamic_init = 139747692443090, gcc_location = 0x7f198a1050d0, odr_indicator = 129124650960}, {beg = 140733469020064, size = 3, size_with_redzone = 139747692443152, name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55cb85f2156b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733469022848, gcc_location = 0x7fff106dd060, odr_indicator = 2}, {beg = 139747693158336, size = 135761930584368, size_with_redzone = 140733469020208, name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135761930584368, gcc_location = 0x7f198a1050d0, odr_indicator = 140733469020240}}, reg_sites = {2309325120, 31609, 81, 0}, access_size = 140733469022400, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}, size = 140733469024224}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, beg = 136930161198091, end = 0, old_mid = 0, new_mid = 11626476471848}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, storage_beg = 136930161198091, storage_end = 0, old_container_beg = 0, old_container_end = 11626476471848, new_container_beg = 136930161198091, new_container_end = 11}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, old_storage_beg = 136930161198091, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11626476471848}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, global1 = {beg = 18446744069414584322, size = 136930161198091, size_with_redzone = 0, name = 0x0, module_name = 0xa9300000628 <error: Cannot access memory at address 0xa9300000628>, has_dynamic_init = 136930161198091, gcc_location = 0xb, odr_indicator = 136930161198080}, global2 = {beg = 752, size = 140733468991496, size_with_redzone = 135349594681376, name = 0x7fff106dcf70 "\300\327m\020\377\177", module_name = 0x7f198b825b1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47> "H\205\300t\f\311\303f.\017\037\204", has_dynamic_init = 1, gcc_location = 0x7b198882f020, odr_indicator = 140733469022144}, stack_id1 = 2341533138, stack_id2 = 32537}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, pc = 18446744069414584322, bp = 136930161198091, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11626476471848, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11626476471848, alloc_tid = 136930161198091, free_tid = 11, alloc_stack_id = 2308834304, free_stack_id = 31881, chunk_access = {bad_addr = 752, offset = 140733468991496, chunk_begin = 135349594681376, chunk_size = 140733469020016, user_requested_alignment = 2847, access_type = 1, alloc_type = 1}}, stack = {addr = 11626476471848, tid = 136930161198091, offset = 11, frame_pc = 136930161198080, access_size = 752, frame_descr = 0x7fff106d6008 ""}, global = {addr = 11626476471848, static kMaxGlobals = 4, globals = {{beg = 136930161198091, size = 11, size_with_redzone = 136930161198080, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7fff106d6008 "", has_dynamic_init = 135349594681376, gcc_location = 0x7fff106dcf70, odr_indicator = 139747691485983}, {beg = 1, size = 135349594681376, size_with_redzone = 140733469022144, name = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f198a1050d0 "", has_dynamic_init = 129124650960, gcc_location = 0x7fff106dcfa0, odr_indicator = 3}, {beg = 139747692443152, size = 139747679173519, size_with_redzone = 94332613956971, name = 0x7fff106dda80 "$\334m\020\377\177", module_name = 0x7fff106dd060 "\030", has_dynamic_init = 2, gcc_location = 0x7f198b9bdfc0 <__asan::instance>, odr_indicator = 135761930584368}, {beg = 140733469020208, size = 139747691509560, size_with_redzone = 62, name = 0x7b7989a58130 "\003\021", module_name = 0x7f198a1050d0 "", has_dynamic_init = 140733469020240, gcc_location = 0x7b7989a58140, odr_indicator = 81}}, reg_sites = {275634368, 32767, 2341278789, 32537}, access_size = 140733469024224, size = 136 '\210'}, wild = {addr = 11626476471848, access_size = 136930161198091}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 139747692869527, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 139747692869527, alloc_tid = 139747693165824, free_tid = 140733469023776, alloc_stack_id = 2341533138, free_stack_id = 32537, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140733469021696, chunk_size = 3, user_requested_alignment = 1552, access_type = 3, alloc_type = 3}}, stack = {addr = 139747692869527, tid = 139747693165824, offset = 140733469023776, frame_pc = 139747692443090, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 139747692869527, static kMaxGlobals = 4, globals = {{beg = 139747693165824, size = 140733469023776, size_with_redzone = 139747692443090, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140733469021696, gcc_location = 0x3, odr_indicator = 139747692443152}, {beg = 139747679173519, size = 94332613956971, size_with_redzone = 140733469024480, name = 0x7fff106dd680 "\240\326m\020\377\177", module_name = 0x7f198b9b7f78 "\001", has_dynamic_init = 140733469021888, gcc_location = 0x55cb86062560, odr_indicator = 139747671128248}, {beg = 65535, size = 140733469021808, size_with_redzone = 139747692274521, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b1988a59200 "\0166\340E", has_dynamic_init = 140733469021856, gcc_location = 0x7f198b83274a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140733469021856}, {beg = 139747692699517, size = 140733469021888, size_with_redzone = 139747692543334, name = 0x7fff106dd740 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 139747693158336, gcc_location = 0x7b5989a4a200, odr_indicator = 140733469021968}}, reg_sites = {2340599608, 32537, 40, 0}, access_size = 139747692648989, size = 208 '\320'}, wild = {addr = 139747692869527, access_size = 139747693165824}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 136930161198091, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 136930161198091, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2707, chunk_access = {bad_addr = 136930161198091, offset = 11, chunk_begin = 136930161198080, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 136930161198091, tid = 0, offset = 0, frame_pc = 11626476471848, access_size = 136930161198091, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 136930161198091, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11626476471848, name = 0x7c89899e040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 136930161198080, gcc_location = 0x2f0, odr_indicator = 140733468991496}, {beg = 135349594681376, size = 140733469020016, size_with_redzone = 139747691485983, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b198882f020 "", has_dynamic_init = 140733469022144, gcc_location = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 139747667235024}, {beg = 129124650960, size = 140733469020064, size_with_redzone = 3, name = 0x7f198b90f610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 94332613956971, gcc_location = 0x7fff106dda80, odr_indicator = 140733469020256}, {beg = 2, size = 139747693158336, size_with_redzone = 135761930584368, name = 0x7fff106dd030 "\340\337m\020\377\177", module_name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7b7989a58130, odr_indicator = 139747667235024}}, reg_sites = {275632208, 32767, 2309325120, 31609}, access_size = 81, size = 192 '\300'}, wild = {addr = 136930161198091, access_size = 0}}}}, pc = 139747692188741, bp = 140733469024224, sp = 140733469022088, access_size = 6, bug_descr = 0x7f198b977797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000<n Cl\002\341nal] org\260\325m\020\377\177\000\000`\313m\020\377\177\000\000.\234\317\212\031\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000\340\323m\020\377\177\000\000\211}\306\212\031\177\000\000\234\313m\020\377\177\000\000\234\313m\020\377\177\000\000\234\323m\020\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\031\177\000\000\002\000\000\000bluetoothd[91]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 136930161198091, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 136930161198091, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2707, chunk_access = {bad_addr = 136930161198091, offset = 11, chunk_begin = 136930161198080, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 136930161198091, tid = 0, offset = 0, frame_pc = 11626476471848, access_size = 136930161198091, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 136930161198091, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11626476471848, name = 0x7c89899e040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 136930161198080, gcc_location = 0x2f0, odr_indicator = 140733468991496}, {beg = 135349594681376, size = 140733469020016, size_with_redzone = 139747691485983, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b198882f020 "", has_dynamic_init = 140733469022144, gcc_location = 0x7f198b90f5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 139747667235024}, {beg = 129124650960, size = 140733469020064, size_with_redzone = 3, name = 0x7f198b90f610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f198ac67b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 94332613956971, gcc_location = 0x7fff106dda80, odr_indicator = 140733469020256}, {beg = 2, size = 139747693158336, size_with_redzone = 135761930584368, name = 0x7fff106dd030 "\340\337m\020\377\177", module_name = 0x7f198b82b738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7b7989a58130, odr_indicator = 139747667235024}}, reg_sites = {275632208, 32767, 2309325120, 31609}, access_size = 81, size = 192 '\300'}, wild = {addr = 136930161198091, access_size = 0}}}}, pc = 139747692188741, bp = 140733469024224, sp = 140733469022088, access_size = 6, bug_descr = 0x7f198b977797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007f198b91bf8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140733469024224, sp=sp@entry=140733469022088, addr=addr@entry=136930161198091, is_write=is_write@entry=false, access_size=access_size@entry=6, exp=<optimized out>, fatal=false) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007f198b8d1468 in MemcmpInterceptorCommon (ctx=ctx@entry=0x7fff106ddff0, real_fn=<optimized out>, a1=a1@entry=0x7c89899e040b, a2=a2@entry=0x7b198878d4e0, size=size@entry=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:848
bp = 140733469024224
pc = <optimized out>
local_stack = 136586563813440
sp = 140733469022088
_ctx = 0x7fff106ddff0
suppressed = <optimized out>
__offset = 136930161198091
__size = 6
__bad = <optimized out>
result = <optimized out>
#11 0x00007f198b8d1835 in ___interceptor_memcmp (a1=0x7c89899e040b, a2=0x7b198878d4e0, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:880
ctx = 0x7fff106ddff0
_ctx = {interceptor_name = 0x7f198b97b6b6 "memcmp"}
#12 ___interceptor_memcmp (a1=0x7c89899e040b, a2=0x7b198878d4e0, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:875
ctx = <optimized out>
_ctx = <optimized out>
#13 0x000055cb85e05038 in bacmp (ba1=0x7c89899e040b, ba2=0x7b198878d4e0) at ./lib/bluetooth/bluetooth.h:438
No locals.
#14 device_addr_type_cmp (a=0x7c89899e0400, b=0x7b198878d4e0) at src/device.c:5657
dev = 0x7c89899e0400
addr = 0x7b198878d4e0
cmp = <optimized out>
#15 0x00007f198b64b4c2 in g_slist_find_custom () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#16 0x000055cb85d846f4 in btd_adapter_find_device (adapter=<optimized out>, dst=dst@entry=0x7b5989a23bd8, bdaddr_type=1 '\001') at src/adapter.c:1055
addr = <optimized out>
device = <optimized out>
list = <optimized out>
#17 0x000055cb85d26c07 in att_disconnected (err=<optimized out>, user_data=0x7b5989a23bd0) at src/gatt-database.c:335
state = 0x7b5989a23bd0
device = <optimized out>
__func__ = "att_disconnected"
#18 0x000055cb85d3db34 in btd_gatt_database_att_disconnected (database=<optimized out>, device=<optimized out>) at src/gatt-database.c:4238
server = <optimized out>
att = <optimized out>
state = <optimized out>
addr = <optimized out>
type = <optimized out>
__func__ = "btd_gatt_database_att_disconnected"
#19 0x000055cb85de70e6 in gatt_server_cleanup (device=device@entry=0x7c89899e0080) at src/device.c:842
No locals.
#20 0x000055cb85dfb7dc in attio_cleanup (device=0x7c89899e0080) at src/device.c:862
No locals.
#21 0x000055cb85dfbe27 in device_free (user_data=0x7c89899e0080) at src/device.c:918
device = 0x7c89899e0080
__func__ = "device_free"
#22 0x000055cb85e79a3a in remove_interface (data=0x7b89899eac80, name=name@entry=0x55cb86086a20 "org.bluez.Device1") at gdbus/object.c:742
iface = 0x7b79899fe560
#23 0x000055cb85e7c5fc in g_dbus_unregister_interface (connection=<optimized out>, path=<optimized out>, name=<optimized out>) at gdbus/object.c:1499
data = <optimized out>
#24 0x000055cb85db71b3 in adapter_remove (adapter=adapter@entry=0x7c49899e0200) at src/adapter.c:7307
l = 0x7b3989a0b2f0 = {0x7c89899e0080}
db = <optimized out>
ranging_manager = <optimized out>
__func__ = "adapter_remove"
#25 0x000055cb85db7d48 in adapter_cleanup () at src/adapter.c:11263
adapter = 0x7c49899e0200
#26 0x000055cb85b692e0 in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1723
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
https://github.com/bluez/bluez/pull/2544
---
Regards,
Linux Bluetooth
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections
2026-09-18 0:02 [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
` (3 preceding siblings ...)
2026-09-18 0:02 ` [PATCH BlueZ 4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing Pauli Virtanen
@ 2026-09-18 16:30 ` patchwork-bot+bluetooth
4 siblings, 0 replies; 7+ messages in thread
From: patchwork-bot+bluetooth @ 2026-09-18 16:30 UTC (permalink / raw)
To: Pauli Virtanen; +Cc: linux-bluetooth
Hello:
This series was applied to bluetooth/bluez.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:
On Fri, 18 Sep 2026 03:02:25 +0300 you wrote:
> CSIP coordinator was not finding its LTKs with Secure Connections, as
> the fix in 9251e630efdd to make legacy pairing to work doesn't work with
> SC.
>
> Fix by keeping track of what kind of LTK we have, and not distinguishing
> between central/peripheral key slots for SC, which kernel doesn't do and
> AFAIK the role difference doesn't exist in SC.
>
> [...]
Here is the summary with links:
- [BlueZ,1/4] mgmt: Add defines for the long term key types
https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=37e483b0687e
- [BlueZ,2/4] device: Remove unused central field from struct ltk_info
https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=a82606b8e1f8
- [BlueZ,3/4] device: Fix resolving a coordinated set over Secure Connections
https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=4d97be27a1fb
- [BlueZ,4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing
https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=c67833ce2ff8
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2026-09-18 16:31 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-18 0:02 [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 1/4] mgmt: Add defines for the long term key types Pauli Virtanen
2026-09-18 1:58 ` device: Fix resolving a coordinated set over Secure Connections bluez.test.bot
2026-09-18 0:02 ` [PATCH BlueZ 2/4] device: Remove unused central field from struct ltk_info Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 3/4] device: Fix resolving a coordinated set over Secure Connections Pauli Virtanen
2026-09-18 0:02 ` [PATCH BlueZ 4/4] test: functional: run CSIP test for Secure Connections & Legacy Pairing Pauli Virtanen
2026-09-18 16:30 ` [PATCH BlueZ 0/4] device: Fix resolving a coordinated set over Secure Connections patchwork-bot+bluetooth
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox