From: bluez.test.bot@gmail.com
To: linux-bluetooth@vger.kernel.org, luiz.dentz@gmail.com
Subject: RE: monitor: Search the frames with a pager
Date: Fri, 18 Sep 2026 11:47:04 -0700 (PDT) [thread overview]
Message-ID: <6aad8728.65a66a5a.306c24.4cb2@mx.google.com> (raw)
In-Reply-To: <20260918161408.2464981-2-luiz.dentz@gmail.com>
[-- Attachment #1: Type: text/plain, Size: 153563 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/series/1168850/
---Test result---
Test Summary:
CheckPatch FAIL 3.57 seconds
GitLint PASS 2.60 seconds
BuildEll PASS 20.42 seconds
BluezMake PASS 389.64 seconds
MakeCheck PASS 14.27 seconds
MakeDistcheck PASS 139.79 seconds
CheckValgrind PASS 231.00 seconds
CheckSmatch WARNING 287.76 seconds
bluezmakeextell PASS 93.23 seconds
TestFunctional FAIL 1170.91 seconds
IncrementalBuild PASS 434.48 seconds
ScanBuild PASS 1120.58 seconds
Details
##############################
Test: CheckPatch - FAIL
Desc: Run checkpatch.pl script
Output:
[BlueZ,v2,4/9] monitor: Route the decoding output through a single function
WARNING:PREFER_DEFINED_ATTRIBUTE_MACRO: Prefer __printf(1, 2) over __attribute__((format(printf, 1, 2)))
#1116: FILE: monitor/display.h:24:
+ __attribute__((format(printf, 1, 2)));
/home/runner/work/bluez/bluez/src/patch/14829901.patch total: 0 errors, 1 warnings, 1158 lines checked
NOTE: For some of the reported defects, checkpatch may be able to
mechanically convert to the typical style using --fix or --fix-inplace.
/home/runner/work/bluez/bluez/src/patch/14829901.patch has style problems, please review.
NOTE: Ignored message types: COMMIT_MESSAGE COMPLEX_MACRO CONST_STRUCT FILE_PATH_CHANGES MISSING_SIGN_OFF PREFER_PACKED SPDX_LICENSE_TAG SPLIT_STRING SSCANF_TO_KSTRTO
NOTE: If any of the errors are false positives, please report
them to the maintainer, see CHECKPATCH in MAINTAINERS.
##############################
Test: CheckSmatch - WARNING
Desc: Run smatch tool with source
Output:
monitor/packet.c:2289:26: warning: Variable length array is used.monitor/packet.c: note: in included file:monitor/bt.h:3924:52: warning: array of flexible structuresmonitor/bt.h:3912:40: warning: array of flexible structures
##############################
Test: TestFunctional - FAIL
Desc: Run test-functional
Output:
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts8-vm3-sc]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts8.0-bluetoothd-1789755547-52.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 52]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7f4254179900 (LWP 52)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007f42548d4b7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007f42548b78ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 135524771696288, 9377323413854622976, 140733244855936, 140733244856224, 140733244856080, 22, 139922860018640, 0, 140733244856016, 139922876864022, 139922850713600, 4096, 0, 9377323413854622976, 139922851356696}}, sa_flags = 1438646272, sa_restorer = 0x16}
#5 0x00007f42554dfa0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007f4255605c2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007f42555da93c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7fff03115846) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7f4253d01000 '=' <repeats 65 times>, "\n==52==ERROR: AddressSanitizer: heap-use-after-free on address 0x7cb2535e040b at pc 0x7f425558f445 bp 0x7fff03116d40 sp 0x7fff031164e8\n"..., capacity_bytes_ = 4096, size_ = 3838}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007f42555d9e02 in __asan::ReportGenericError (pc=139922876462149, bp=140733244861760, sp=sp@entry=140733244859624, addr=addr@entry=137105344693259, is_write=is_write@entry=false, access_size=6, fatal=false, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, signal = {siginfo = 0xffffffff00000002, context = 0x7cb2535e040b, addr = 0, pc = 0, sp = 11849814771261, bp = 137105344693259, is_memory_access = 11, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = false}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, second_free_stack = 0xffffffff00000002, addr_description = {addr = 137105344693259, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1597, free_stack_id = 2759, chunk_access = {bad_addr = 137105344693259, offset = 11, chunk_begin = 137105344693248, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {addr = 137105344693259, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1597, free_stack_id = 2759, chunk_access = {bad_addr = 137105344693259, offset = 11, chunk_begin = 137105344693248, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 135524778155552, delete_alignment = 140733244857552}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {data = {kind = 1398670347, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11849814771261, alloc_stack_id = 1398670347, free_stack_id = 31922, chunk_access = {bad_addr = 11, offset = 137105344693248, chunk_begin = 752, chunk_size = 140733244858376, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11849814771261, frame_pc = 137105344693259, access_size = 11, frame_descr = 0x7cb2535e0400 "\307\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11849814771261, size_with_redzone = 137105344693259, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cb2535e0400 "\307\n", has_dynamic_init = 752, gcc_location = 0x7fff03116008, odr_indicator = 135524778155552}, {beg = 140733244857552, size = 139922875759391, size_with_redzone = 1, name = 0x7b4252429e20 "\240feS\242{", module_name = 0x7fff03116520 "0e\021\003\377\177", has_dynamic_init = 139922876716498, gcc_location = 0x7f4253dc30d0, odr_indicator = 128900488496}, {beg = 140733244857600, size = 3, size_with_redzone = 139922876716560, name = 0x7f4254925b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x557d32b2056b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733244860384, gcc_location = 0x7fff03115dc0, odr_indicator = 2}, {beg = 139922877431744, size = 135937114072528, size_with_redzone = 140733244857744, name = 0x7f42554e9738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135937114072528, gcc_location = 0x7f4253dc30d0, odr_indicator = 140733244857776}}, reg_sites = {1399154144, 31650, 81, 0}, access_size = 140733244859936, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, dealloc_stack = 0xffffffff00000002, alloc_type = 1398670347, dealloc_type = 31922, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (__asan::kShadowKindGap | unknown: 0x3c), shadow_byte = 6 '\006'}, heap = {addr = 0, alloc_tid = 11849814771261, free_tid = 137105344693259, alloc_stack_id = 11, free_stack_id = 0, chunk_access = {bad_addr = 137105344693248, offset = 752, chunk_begin = 140733244858376, chunk_size = 135524778155552, user_requested_alignment = 3280, access_type = 1, alloc_type = 1}}, stack = {addr = 0, tid = 11849814771261, offset = 137105344693259, frame_pc = 11, access_size = 137105344693248, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11849814771261, size = 137105344693259, size_with_redzone = 11, name = 0x7cb2535e0400 "\307\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140733244858376, gcc_location = 0x7b4252429e20, odr_indicator = 140733244857552}, {beg = 139922875759391, size = 1, size_with_redzone = 135524778155552, name = 0x7fff03116520 "0e\021\003\377\177", module_name = 0x7f42555cd5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 139922851508432, gcc_location = 0x1e03115d30, odr_indicator = 140733244857600}, {beg = 3, size = 139922876716560, size_with_redzone = 139922863446927, name = 0x557d32b2056b <bt_log_vprintf+171> "\205\300\017\210=\001", module_name = 0x7fff031167e0 "\204i\021\003\377\177", has_dynamic_init = 140733244857792, gcc_location = 0x2, odr_indicator = 139922877431744}, {beg = 135937114072528, size = 140733244857744, size_with_redzone = 139922875782968, name = 0x3e <error: Cannot access memory at address 0x3e>, module_name = 0x7ba2536565d0 "\003\021", has_dynamic_init = 139922851508432, gcc_location = 0x7fff03115db0, odr_indicator = 135937114072544}}, reg_sites = {81, 0, 51471904, 32767}, access_size = 139922876462149, size = 64 '@'}, wild = {addr = 0, access_size = 11849814771261}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 1398670347, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11849814771261, alloc_stack_id = 1398670347, free_stack_id = 31922, chunk_access = {bad_addr = 11, offset = 137105344693248, chunk_begin = 752, chunk_size = 140733244858376, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11849814771261, frame_pc = 137105344693259, access_size = 11, frame_descr = 0x7cb2535e0400 "\307\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11849814771261, size_with_redzone = 137105344693259, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cb2535e0400 "\307\n", has_dynamic_init = 752, gcc_location = 0x7fff03116008, odr_indicator = 135524778155552}, {beg = 140733244857552, size = 139922875759391, size_with_redzone = 1, name = 0x7b4252429e20 "\240feS\242{", module_name = 0x7fff03116520 "0e\021\003\377\177", has_dynamic_init = 139922876716498, gcc_location = 0x7f4253dc30d0, odr_indicator = 128900488496}, {beg = 140733244857600, size = 3, size_with_redzone = 139922876716560, name = 0x7f4254925b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x557d32b2056b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733244860384, gcc_location = 0x7fff03115dc0, odr_indicator = 2}, {beg = 139922877431744, size = 135937114072528, size_with_redzone = 140733244857744, name = 0x7f42554e9738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135937114072528, gcc_location = 0x7f4253dc30d0, odr_indicator = 140733244857776}}, reg_sites = {1399154144, 31650, 81, 0}, access_size = 140733244859936, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 1398670347, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11849814771261, alloc_stack_id = 1398670347, free_stack_id = 31922, chunk_access = {bad_addr = 11, offset = 137105344693248, chunk_begin = 752, chunk_size = 140733244858376, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11849814771261, frame_pc = 137105344693259, access_size = 11, frame_descr = 0x7cb2535e0400 "\307\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11849814771261, size_with_redzone = 137105344693259, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cb2535e0400 "\307\n", has_dynamic_init = 752, gcc_location = 0x7fff03116008, odr_indicator = 135524778155552}, {beg = 140733244857552, size = 139922875759391, size_with_redzone = 1, name = 0x7b4252429e20 "\240feS\242{", module_name = 0x7fff03116520 "0e\021\003\377\177", has_dynamic_init = 139922876716498, gcc_location = 0x7f4253dc30d0, odr_indicator = 128900488496}, {beg = 140733244857600, size = 3, size_with_redzone = 139922876716560, name = 0x7f4254925b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x557d32b2056b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733244860384, gcc_location = 0x7fff03115dc0, odr_indicator = 2}, {beg = 139922877431744, size = 135937114072528, size_with_redzone = 140733244857744, name = 0x7f42554e9738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135937114072528, gcc_location = 0x7f4253dc30d0, odr_indicator = 140733244857776}}, reg_sites = {1399154144, 31650, 81, 0}, access_size = 140733244859936, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137105344693259, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137105344693259, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137105344693259}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137105344693259}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137105344693259, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137105344693259}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, user_size = 137105344693259, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, requested_size = 137105344693259}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, length1 = 137105344693259, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11849814771261, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11849814771261, alloc_tid = 137105344693259, free_tid = 11, alloc_stack_id = 1398670336, free_stack_id = 31922, chunk_access = {bad_addr = 752, offset = 140733244858376, chunk_begin = 135524778155552, chunk_size = 140733244857552, user_requested_alignment = 2847, access_type = 3, alloc_type = 0}}, stack = {addr = 11849814771261, tid = 137105344693259, offset = 11, frame_pc = 137105344693248, access_size = 752, frame_descr = 0x7fff03116008 "\231\326\246TB\177"}, global = {addr = 11849814771261, static kMaxGlobals = 4, globals = {{beg = 137105344693259, size = 11, size_with_redzone = 137105344693248, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7fff03116008 "\231\326\246TB\177", has_dynamic_init = 135524778155552, gcc_location = 0x7fff03115cd0, odr_indicator = 139922875759391}, {beg = 1, size = 135524778155552, size_with_redzone = 140733244859680, name = 0x7f42555cd5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f4253dc30d0 "", has_dynamic_init = 128900488496, gcc_location = 0x7fff03115d00, odr_indicator = 3}, {beg = 139922876716560, size = 139922863446927, size_with_redzone = 93996209800555, name = 0x7fff031167e0 "\204i\021\003\377\177", module_name = 0x7fff03115dc0 "\030", has_dynamic_init = 2, gcc_location = 0x7f425567bfc0 <__asan::instance>, odr_indicator = 135937114072528}, {beg = 140733244857744, size = 139922875782968, size_with_redzone = 62, name = 0x7ba2536565d0 "\003\021", module_name = 0x7f4253dc30d0 "", has_dynamic_init = 140733244857776, gcc_location = 0x7ba2536565e0, odr_indicator = 81}}, reg_sites = {51471904, 32767, 1431893061, 32578}, access_size = 140733244861760, size = 232 '\350'}, wild = {addr = 11849814771261, access_size = 137105344693259}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 139922877142935, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 139922877142935, alloc_tid = 139922877447424, free_tid = 140733244861312, alloc_stack_id = 1432147410, free_stack_id = 32578, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140733244859232, chunk_size = 3, user_requested_alignment = 1552, access_type = 1, alloc_type = 3}}, stack = {addr = 139922877142935, tid = 139922877447424, offset = 140733244861312, frame_pc = 139922876716498, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 139922877142935, static kMaxGlobals = 4, globals = {{beg = 139922877447424, size = 140733244861312, size_with_redzone = 139922876716498, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140733244859232, gcc_location = 0x3, odr_indicator = 139922876716560}, {beg = 139922863446927, size = 93996209800555, size_with_redzone = 140733244862016, name = 0x7fff031163e0 "", module_name = 0x7f4255675f78 "\001", has_dynamic_init = 140733244859424, gcc_location = 0x557d32c615a0, odr_indicator = 139922855401656}, {beg = 65535, size = 140733244859344, size_with_redzone = 139922876547929, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b4252655a00 "\0166\340E", has_dynamic_init = 140733244859392, gcc_location = 0x7f42554f074a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140733244859392}, {beg = 139922876972925, size = 140733244859424, size_with_redzone = 139922876816742, name = 0x7fff031164a0 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 139922877431744, gcc_location = 0x7b825364c600, odr_indicator = 140733244859504}}, reg_sites = {1431213880, 32578, 40, 0}, access_size = 139922876922397, size = 208 '\320'}, wild = {addr = 139922877142935, access_size = 139922877447424}}}}, function = 0x7fff03116490 "@m\021\003\377\177"}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 1398670347, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11849814771261, alloc_stack_id = 1398670347, free_stack_id = 31922, chunk_access = {bad_addr = 11, offset = 137105344693248, chunk_begin = 752, chunk_size = 140733244858376, user_requested_alignment = 3616, access_type = 1, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11849814771261, frame_pc = 137105344693259, access_size = 11, frame_descr = 0x7cb2535e0400 "\307\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11849814771261, size_with_redzone = 137105344693259, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7cb2535e0400 "\307\n", has_dynamic_init = 752, gcc_location = 0x7fff03116008, odr_indicator = 135524778155552}, {beg = 140733244857552, size = 139922875759391, size_with_redzone = 1, name = 0x7b4252429e20 "\240feS\242{", module_name = 0x7fff03116520 "0e\021\003\377\177", has_dynamic_init = 139922876716498, gcc_location = 0x7f4253dc30d0, odr_indicator = 128900488496}, {beg = 140733244857600, size = 3, size_with_redzone = 139922876716560, name = 0x7f4254925b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x557d32b2056b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733244860384, gcc_location = 0x7fff03115dc0, odr_indicator = 2}, {beg = 139922877431744, size = 135937114072528, size_with_redzone = 140733244857744, name = 0x7f42554e9738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 135937114072528, gcc_location = 0x7f4253dc30d0, odr_indicator = 140733244857776}}, reg_sites = {1399154144, 31650, 81, 0}, access_size = 140733244859936, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}, size = 140733244861760}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, beg = 137105344693259, end = 0, old_mid = 0, new_mid = 11849814771261}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, storage_beg = 137105344693259, storage_end = 0, old_container_beg = 0, old_container_end = 11849814771261, new_container_beg = 137105344693259, new_container_end = 11}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, old_storage_beg = 137105344693259, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11849814771261}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, global1 = {beg = 18446744069414584322, size = 137105344693259, size_with_redzone = 0, name = 0x0, module_name = 0xac70000063d <error: Cannot access memory at address 0xac70000063d>, has_dynamic_init = 137105344693259, gcc_location = 0xb, odr_indicator = 137105344693248}, global2 = {beg = 752, size = 140733244858376, size_with_redzone = 135524778155552, name = 0x7fff03115cd0 " e\021\003\377\177", module_name = 0x7f42554e3b1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47> "H\205\300t\f\311\303f.\017\037\204", has_dynamic_init = 1, gcc_location = 0x7b4252429e20, odr_indicator = 140733244859680}, stack_id1 = 1432147410, stack_id2 = 32578}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, pc = 18446744069414584322, bp = 137105344693259, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11849814771261, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11849814771261, alloc_tid = 137105344693259, free_tid = 11, alloc_stack_id = 1398670336, free_stack_id = 31922, chunk_access = {bad_addr = 752, offset = 140733244858376, chunk_begin = 135524778155552, chunk_size = 140733244857552, user_requested_alignment = 2847, access_type = 3, alloc_type = 0}}, stack = {addr = 11849814771261, tid = 137105344693259, offset = 11, frame_pc = 137105344693248, access_size = 752, frame_descr = 0x7fff03116008 "\231\326\246TB\177"}, global = {addr = 11849814771261, static kMaxGlobals = 4, globals = {{beg = 137105344693259, size = 11, size_with_redzone = 137105344693248, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7fff03116008 "\231\326\246TB\177", has_dynamic_init = 135524778155552, gcc_location = 0x7fff03115cd0, odr_indicator = 139922875759391}, {beg = 1, size = 135524778155552, size_with_redzone = 140733244859680, name = 0x7f42555cd5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f4253dc30d0 "", has_dynamic_init = 128900488496, gcc_location = 0x7fff03115d00, odr_indicator = 3}, {beg = 139922876716560, size = 139922863446927, size_with_redzone = 93996209800555, name = 0x7fff031167e0 "\204i\021\003\377\177", module_name = 0x7fff03115dc0 "\030", has_dynamic_init = 2, gcc_location = 0x7f425567bfc0 <__asan::instance>, odr_indicator = 135937114072528}, {beg = 140733244857744, size = 139922875782968, size_with_redzone = 62, name = 0x7ba2536565d0 "\003\021", module_name = 0x7f4253dc30d0 "", has_dynamic_init = 140733244857776, gcc_location = 0x7ba2536565e0, odr_indicator = 81}}, reg_sites = {51471904, 32767, 1431893061, 32578}, access_size = 140733244861760, size = 232 '\350'}, wild = {addr = 11849814771261, access_size = 137105344693259}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 139922877142935, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 139922877142935, alloc_tid = 139922877447424, free_tid = 140733244861312, alloc_stack_id = 1432147410, free_stack_id = 32578, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140733244859232, chunk_size = 3, user_requested_alignment = 1552, access_type = 1, alloc_type = 3}}, stack = {addr = 139922877142935, tid = 139922877447424, offset = 140733244861312, frame_pc = 139922876716498, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 139922877142935, static kMaxGlobals = 4, globals = {{beg = 139922877447424, size = 140733244861312, size_with_redzone = 139922876716498, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140733244859232, gcc_location = 0x3, odr_indicator = 139922876716560}, {beg = 139922863446927, size = 93996209800555, size_with_redzone = 140733244862016, name = 0x7fff031163e0 "", module_name = 0x7f4255675f78 "\001", has_dynamic_init = 140733244859424, gcc_location = 0x557d32c615a0, odr_indicator = 139922855401656}, {beg = 65535, size = 140733244859344, size_with_redzone = 139922876547929, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b4252655a00 "\0166\340E", has_dynamic_init = 140733244859392, gcc_location = 0x7f42554f074a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140733244859392}, {beg = 139922876972925, size = 140733244859424, size_with_redzone = 139922876816742, name = 0x7fff031164a0 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 139922877431744, gcc_location = 0x7b825364c600, odr_indicator = 140733244859504}}, reg_sites = {1431213880, 32578, 40, 0}, access_size = 139922876922397, size = 208 '\320'}, wild = {addr = 139922877142935, access_size = 139922877447424}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137105344693259, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137105344693259, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1597, free_stack_id = 2759, chunk_access = {bad_addr = 137105344693259, offset = 11, chunk_begin = 137105344693248, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137105344693259, tid = 0, offset = 0, frame_pc = 11849814771261, access_size = 137105344693259, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137105344693259, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11849814771261, name = 0x7cb2535e040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137105344693248, gcc_location = 0x2f0, odr_indicator = 140733244858376}, {beg = 135524778155552, size = 140733244857552, size_with_redzone = 139922875759391, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b4252429e20 "\240feS\242{", has_dynamic_init = 140733244859680, gcc_location = 0x7f42555cd5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 139922851508432}, {beg = 128900488496, size = 140733244857600, size_with_redzone = 3, name = 0x7f42555cd610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f4254925b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 93996209800555, gcc_location = 0x7fff031167e0, odr_indicator = 140733244857792}, {beg = 2, size = 139922877431744, size_with_redzone = 135937114072528, name = 0x7fff03115d90 "@m\021\003\377\177", module_name = 0x7f42554e9738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7ba2536565d0, odr_indicator = 139922851508432}}, reg_sites = {51469744, 32767, 1399154144, 31650}, access_size = 81, size = 32 ' '}, wild = {addr = 137105344693259, access_size = 0}}}}, pc = 139922876462149, bp = 140733244861760, sp = 140733244859624, access_size = 6, bug_descr = 0x7f4255635797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[5\000\025\3022\366\361\"\202nal] org\020c\021\003\377\177\000\000\300X\021\003\377\177\000\000.|\233TB\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@a\021\003\377\177\000\000\211]\222TB\177\000\000\374X\021\003\377\177\000\000\374X\021\003\377\177\000\000\374`\021\003\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000B\177\000\000\002\000\000\000bluetoothd[52]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137105344693259, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137105344693259, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1597, free_stack_id = 2759, chunk_access = {bad_addr = 137105344693259, offset = 11, chunk_begin = 137105344693248, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137105344693259, tid = 0, offset = 0, frame_pc = 11849814771261, access_size = 137105344693259, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137105344693259, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11849814771261, name = 0x7cb2535e040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137105344693248, gcc_location = 0x2f0, odr_indicator = 140733244858376}, {beg = 135524778155552, size = 140733244857552, size_with_redzone = 139922875759391, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b4252429e20 "\240feS\242{", has_dynamic_init = 140733244859680, gcc_location = 0x7f42555cd5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 139922851508432}, {beg = 128900488496, size = 140733244857600, size_with_redzone = 3, name = 0x7f42555cd610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f4254925b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 93996209800555, gcc_location = 0x7fff031167e0, odr_indicator = 140733244857792}, {beg = 2, size = 139922877431744, size_with_redzone = 135937114072528, name = 0x7fff03115d90 "@m\021\003\377\177", module_name = 0x7f42554e9738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7ba2536565d0, odr_indicator = 139922851508432}}, reg_sites = {51469744, 32767, 1399154144, 31650}, access_size = 81, size = 32 ' '}, wild = {addr = 137105344693259, access_size = 0}}}}, pc = 139922876462149, bp = 140733244861760, sp = 140733244859624, access_size = 6, bug_descr = 0x7f4255635797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007f42555d9f8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140733244861760, sp=sp@entry=140733244859624, addr=addr@entry=137105344693259, is_write=is_write@entry=false, access_size=access_size@entry=6, exp=<optimized out>, fatal=false) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007f425558f468 in MemcmpInterceptorCommon (ctx=ctx@entry=0x7fff03116d50, real_fn=<optimized out>, a1=a1@entry=0x7cb2535e040b, a2=a2@entry=0x7b425238ad20, size=size@entry=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:848
bp = 140733244861760
pc = <optimized out>
local_stack = 136761747308608
sp = 140733244859624
_ctx = 0x7fff03116d50
suppressed = <optimized out>
__offset = 137105344693259
__size = 6
__bad = <optimized out>
result = <optimized out>
#11 0x00007f425558f835 in ___interceptor_memcmp (a1=0x7cb2535e040b, a2=0x7b425238ad20, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:880
ctx = 0x7fff03116d50
_ctx = {interceptor_name = 0x7f42556396b6 "memcmp"}
#12 ___interceptor_memcmp (a1=0x7cb2535e040b, a2=0x7b425238ad20, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:875
ctx = <optimized out>
_ctx = <optimized out>
#13 0x0000557d32a04038 in bacmp (ba1=0x7cb2535e040b, ba2=0x7b425238ad20) at ./lib/bluetooth/bluetooth.h:438
No locals.
#14 device_addr_type_cmp (a=0x7cb2535e0400, b=0x7b425238ad20) at src/device.c:5657
dev = 0x7cb2535e0400
addr = 0x7b425238ad20
cmp = <optimized out>
#15 0x00007f42553094c2 in g_slist_find_custom () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#16 0x0000557d329836f4 in btd_adapter_find_device (adapter=<optimized out>, dst=dst@entry=0x7b825360ec98, bdaddr_type=1 '\001') at src/adapter.c:1055
addr = <optimized out>
device = <optimized out>
list = <optimized out>
#17 0x0000557d32925c07 in att_disconnected (err=<optimized out>, user_data=0x7b825360ec90) at src/gatt-database.c:335
state = 0x7b825360ec90
device = <optimized out>
__func__ = "att_disconnected"
#18 0x0000557d3293cb34 in btd_gatt_database_att_disconnected (database=<optimized out>, device=<optimized out>) at src/gatt-database.c:4238
server = <optimized out>
att = <optimized out>
state = <optimized out>
addr = <optimized out>
type = <optimized out>
__func__ = "btd_gatt_database_att_disconnected"
#19 0x0000557d329e60e6 in gatt_server_cleanup (device=device@entry=0x7cb2535e0080) at src/device.c:842
No locals.
#20 0x0000557d329fa7dc in attio_cleanup (device=0x7cb2535e0080) at src/device.c:862
No locals.
#21 0x0000557d329fae27 in device_free (user_data=0x7cb2535e0080) at src/device.c:918
device = 0x7cb2535e0080
__func__ = "device_free"
#22 0x0000557d32a78a3a in remove_interface (data=0x7bb2535eb000, name=name@entry=0x557d32c85a60 "org.bluez.Device1") at gdbus/object.c:742
iface = 0x7ba2535fe380
#23 0x0000557d32a7b5fc in g_dbus_unregister_interface (connection=<optimized out>, path=<optimized out>, name=<optimized out>) at gdbus/object.c:1499
data = <optimized out>
#24 0x0000557d329b61b3 in adapter_remove (adapter=adapter@entry=0x7c72535e0200) at src/adapter.c:7307
l = 0x7b625360b3f0 = {0x7cb2535e0080}
db = <optimized out>
ranging_manager = <optimized out>
__func__ = "adapter_remove"
#25 0x0000557d329b6d48 in adapter_cleanup () at src/adapter.c:11263
adapter = 0x7c72535e0200
#26 0x0000557d327682f0 in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1723
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts8-vm3-legacy]: failed on setup with "pytest_bluezenv.rpc.RemoteTimeoutError: Connection recv timed out"
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts8-vm3-legacy]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts8.0-bluetoothd-1789755568-71.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 71]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7f89ef0fe900 (LWP 71)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007f89ef859b7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007f89ef83c8ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 0, 140732296284720, 140732296285008, 140732296284864, 22, 140230402661328, 0, 140732296284800, 140230419506710, 140230389817344, 4096, 0, 10074738043712474368, 140230393999384}}, sa_flags = -256356352, sa_restorer = 0x16}
#5 0x00007f89f0464a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007f89f058ac2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007f89f055f93c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7ffeca874bf6) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7f89ee916000 '=' <repeats 65 times>, "\n==71==ERROR: AddressSanitizer: heap-use-after-free on address 0x7cf9ee5e0208 at pc 0x561a6399ce9c bp 0x7ffeca875870 sp 0x7ffeca875860\n"..., capacity_bytes_ = 4096, size_ = 3419}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007f89f055ee02 in __asan::ReportGenericError (pc=94671340162716, bp=140732296288368, sp=sp@entry=140732296288352, addr=137412887839240, is_write=is_write@entry=false, access_size=8, fatal=true, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, signal = {siginfo = 0x7ffe00000002, context = 0x7cf9ee5e0208, addr = 0, pc = 0, sp = 11072425690612, bp = 137412887839240, is_memory_access = 136, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = 128}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, second_free_stack = 0x7ffe00000002, addr_description = {addr = 137412887839240, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2578, chunk_access = {bad_addr = 137412887839240, offset = 392, chunk_begin = 137412887838848, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, free_stack = 0x7ffe00000002, addr_description = {addr = 137412887839240, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2578, chunk_access = {bad_addr = 137412887839240, offset = 392, chunk_begin = 137412887838848, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 140230418402079, delete_alignment = 1}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, free_stack = 0x7ffe00000002, addr_description = {data = {kind = 3999138312, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11072425690612, alloc_stack_id = 3999138312, free_stack_id = 31993, chunk_access = {bad_addr = 392, offset = 137412887838848, chunk_begin = 752, chunk_size = 140732296290312, user_requested_alignment = 2847, access_type = 0, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11072425690612, frame_pc = 137412887839240, access_size = 392, frame_descr = 0x7cf9ee5e0080 "\022\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11072425690612, size_with_redzone = 137412887839240, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7cf9ee5e0080 "\022\n", has_dynamic_init = 752, gcc_location = 0x7ffeca876008, odr_indicator = 140230418402079}, {beg = 1, size = 136656973750016, size_with_redzone = 140732296288448, name = 0x7f89f05525d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 132855922688, gcc_location = 0x7ffeca8750a0, odr_indicator = 2}, {beg = 140230419359248, size = 94671340721814, size_with_redzone = 140732296286544, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7f89f0600fc0 <__asan::instance> "", has_dynamic_init = 135969779897408, gcc_location = 0x7ffeca875120, odr_indicator = 140230419459430}, {beg = 140732296286592, size = 6, size_with_redzone = 140230420074432, name = 0x7c49ee617ef0 "\003\021", module_name = 0x7ffeca875150 "\b", has_dynamic_init = 140230418425656, gcc_location = 0x78, odr_indicator = 136656973823728}}, reg_sites = {3397865792, 32766, 4019437934, 32649}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, dealloc_stack = 0x7ffe00000002, alloc_type = 3999138312, dealloc_type = 31993, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (unknown: 0xf4), shadow_byte = 5 '\005'}, heap = {addr = 0, alloc_tid = 11072425690612, free_tid = 137412887839240, alloc_stack_id = 392, free_stack_id = 0, chunk_access = {bad_addr = 137412887838848, offset = 752, chunk_begin = 140732296290312, chunk_size = 140230418402079, user_requested_alignment = 1, access_type = 0, alloc_type = 0}}, stack = {addr = 0, tid = 11072425690612, offset = 137412887839240, frame_pc = 392, access_size = 137412887838848, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11072425690612, size = 137412887839240, size_with_redzone = 392, name = 0x7cf9ee5e0080 "\022\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140732296290312, gcc_location = 0x7f89f0468b1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47>, odr_indicator = 1}, {beg = 136656973750016, size = 140732296288448, size_with_redzone = 140230419359186, name = 0x3 <error: Cannot access memory at address 0x3>, module_name = 0x1eeed48000 <error: Cannot access memory at address 0x1eeed48000>, has_dynamic_init = 140732296286368, gcc_location = 0x2, odr_indicator = 140230419359248}, {beg = 94671340721814, size = 140732296286544, size_with_redzone = 7, name = 0x7f89f0600fc0 <__asan::instance> "", module_name = 0x7ba9ee6e5440 "\003\021", has_dynamic_init = 140732296286496, gcc_location = 0x7f89f056ad66 <__sanitizer::RunFreeHooks(void*)+86>, odr_indicator = 140732296286592}, {beg = 6, size = 140230420074432, size_with_redzone = 136656973823728, name = 0x7ffeca875150 "\b", module_name = 0x7f89f046e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 120, gcc_location = 0x7c49ee617ef0, odr_indicator = 140732296286528}}, reg_sites = {4019437934, 32649, 0, 0}, access_size = 94671340162716, size = 112 'p'}, wild = {addr = 0, access_size = 11072425690612}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, addr_description = {data = {kind = 3999138312, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11072425690612, alloc_stack_id = 3999138312, free_stack_id = 31993, chunk_access = {bad_addr = 392, offset = 137412887838848, chunk_begin = 752, chunk_size = 140732296290312, user_requested_alignment = 2847, access_type = 0, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11072425690612, frame_pc = 137412887839240, access_size = 392, frame_descr = 0x7cf9ee5e0080 "\022\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11072425690612, size_with_redzone = 137412887839240, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7cf9ee5e0080 "\022\n", has_dynamic_init = 752, gcc_location = 0x7ffeca876008, odr_indicator = 140230418402079}, {beg = 1, size = 136656973750016, size_with_redzone = 140732296288448, name = 0x7f89f05525d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 132855922688, gcc_location = 0x7ffeca8750a0, odr_indicator = 2}, {beg = 140230419359248, size = 94671340721814, size_with_redzone = 140732296286544, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7f89f0600fc0 <__asan::instance> "", has_dynamic_init = 135969779897408, gcc_location = 0x7ffeca875120, odr_indicator = 140230419459430}, {beg = 140732296286592, size = 6, size_with_redzone = 140230420074432, name = 0x7c49ee617ef0 "\003\021", module_name = 0x7ffeca875150 "\b", has_dynamic_init = 140230418425656, gcc_location = 0x78, odr_indicator = 136656973823728}}, reg_sites = {3397865792, 32766, 4019437934, 32649}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, addr_description = {data = {kind = 3999138312, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11072425690612, alloc_stack_id = 3999138312, free_stack_id = 31993, chunk_access = {bad_addr = 392, offset = 137412887838848, chunk_begin = 752, chunk_size = 140732296290312, user_requested_alignment = 2847, access_type = 0, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11072425690612, frame_pc = 137412887839240, access_size = 392, frame_descr = 0x7cf9ee5e0080 "\022\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11072425690612, size_with_redzone = 137412887839240, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7cf9ee5e0080 "\022\n", has_dynamic_init = 752, gcc_location = 0x7ffeca876008, odr_indicator = 140230418402079}, {beg = 1, size = 136656973750016, size_with_redzone = 140732296288448, name = 0x7f89f05525d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 132855922688, gcc_location = 0x7ffeca8750a0, odr_indicator = 2}, {beg = 140230419359248, size = 94671340721814, size_with_redzone = 140732296286544, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7f89f0600fc0 <__asan::instance> "", has_dynamic_init = 135969779897408, gcc_location = 0x7ffeca875120, odr_indicator = 140230419459430}, {beg = 140732296286592, size = 6, size_with_redzone = 140230420074432, name = 0x7c49ee617ef0 "\003\021", module_name = 0x7ffeca875150 "\b", has_dynamic_init = 140230418425656, gcc_location = 0x78, odr_indicator = 136656973823728}}, reg_sites = {3397865792, 32766, 4019437934, 32649}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, count = 137412887839240, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, count = 137412887839240, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, size = 137412887839240}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, alignment = 137412887839240}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, size = 137412887839240, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, alignment = 137412887839240}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, user_size = 137412887839240, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, requested_size = 137412887839240}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, length1 = 137412887839240, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11072425690612, kind = (unknown: 0x8), shadow_byte = 2 '\002'}, heap = {addr = 11072425690612, alloc_tid = 137412887839240, free_tid = 392, alloc_stack_id = 3999137920, free_stack_id = 31993, chunk_access = {bad_addr = 752, offset = 140732296290312, chunk_begin = 140230418402079, chunk_size = 1, user_requested_alignment = 3840, access_type = 1, alloc_type = 1}}, stack = {addr = 11072425690612, tid = 137412887839240, offset = 392, frame_pc = 137412887838848, access_size = 752, frame_descr = 0x7ffeca876008 ""}, global = {addr = 11072425690612, static kMaxGlobals = 4, globals = {{beg = 137412887839240, size = 392, size_with_redzone = 137412887838848, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffeca876008 "", has_dynamic_init = 140230418402079, gcc_location = 0x1, odr_indicator = 136656973750016}, {beg = 140732296288448, size = 140230419359186, size_with_redzone = 3, name = 0x1eeed48000 <error: Cannot access memory at address 0x1eeed48000>, module_name = 0x7ffeca8750a0 "\020&U\360\211\177", has_dynamic_init = 2, gcc_location = 0x7f89f0552610 <___interceptor_malloc(__sanitizer::uptr)+192>, odr_indicator = 94671340721814}, {beg = 140732296286544, size = 7, size_with_redzone = 140230420074432, name = 0x7ba9ee6e5440 "\003\021", module_name = 0x7ffeca875120 "@Q\207\312\376\177", has_dynamic_init = 140230419459430, gcc_location = 0x7ffeca875180, odr_indicator = 6}, {beg = 140230420074432, size = 136656973823728, size_with_redzone = 140732296286544, name = 0x7f89f046e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x78 <error: Cannot access memory at address 0x78>, has_dynamic_init = 136656973823728, gcc_location = 0x7ffeca875140, odr_indicator = 140230406685038}}, reg_sites = {0, 0, 1671024284, 22042}, access_size = 140732296288368, size = 96 '`'}, wild = {addr = 11072425690612, access_size = 137412887839240}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 140230419785623, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140230419785623, alloc_tid = 140230416334080, free_tid = 140732296288016, alloc_stack_id = 4031899859, free_stack_id = 32649, chunk_access = {bad_addr = 140732296288016, offset = 4029274680, chunk_begin = 140732296288112, chunk_size = 140230416301654, user_requested_alignment = 384, access_type = 0, alloc_type = 0}}, stack = {addr = 140230419785623, tid = 140230416334080, offset = 140732296288016, frame_pc = 140230419146963, access_size = 140732296288016, frame_descr = 0xf029da38 <error: Cannot access memory at address 0xf029da38>}, global = {addr = 140230419785623, static kMaxGlobals = 4, globals = {{beg = 140230416334080, size = 140732296288016, size_with_redzone = 140230419146963, name = 0x7ffeca875710 "\200\001^\356\231|", module_name = 0xf029da38 <error: Cannot access memory at address 0xf029da38>, has_dynamic_init = 140732296288112, gcc_location = 0x7f89f0267e56, odr_indicator = 137000570978688}, {beg = 140230416301604, size = 140732296288064, size_with_redzone = 6953256225440, name = 0x23 <error: Cannot access memory at address 0x23>, module_name = 0x2e357977 <error: Cannot access memory at address 0x2e357977>, has_dynamic_init = 140732296288096, gcc_location = 0x7be9ee5e0aa0, odr_indicator = 140732296288128}, {beg = 136656973823744, size = 137000570978688, size_with_redzone = 136107218249744, name = 0x561a63b7d780 <watch_destroy> "\363\017\036\372SH\211\373H\203\354\020H\205\377\017\2049\002", module_name = 0x7f89f02ccdce "I\211\305L9\360tJH\205\300tUH\213E\310dH+\004%(", has_dynamic_init = 136656973823744, gcc_location = 0x7f89f02ccdce, odr_indicator = 94671342131072}, {beg = 0, size = 140732296288224, size_with_redzone = 140230416715214, name = 0x7c89ee5e0f40 "\001", module_name = 0x7bc9ee5f84d0 "\002", has_dynamic_init = 44, gcc_location = 0x0, odr_indicator = 136107217880280}}, reg_sites = {3999606824, 31689, 3999237360, 31689}, access_size = 94671342132942, size = 16 '\020'}, wild = {addr = 140230419785623, access_size = 140230416334080}}}}, function = 0x8bd0a8df5c988d00 <error: Cannot access memory at address 0x8bd0a8df5c988d00>}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, addr_description = {data = {kind = 3999138312, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11072425690612, alloc_stack_id = 3999138312, free_stack_id = 31993, chunk_access = {bad_addr = 392, offset = 137412887838848, chunk_begin = 752, chunk_size = 140732296290312, user_requested_alignment = 2847, access_type = 0, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11072425690612, frame_pc = 137412887839240, access_size = 392, frame_descr = 0x7cf9ee5e0080 "\022\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11072425690612, size_with_redzone = 137412887839240, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7cf9ee5e0080 "\022\n", has_dynamic_init = 752, gcc_location = 0x7ffeca876008, odr_indicator = 140230418402079}, {beg = 1, size = 136656973750016, size_with_redzone = 140732296288448, name = 0x7f89f05525d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 132855922688, gcc_location = 0x7ffeca8750a0, odr_indicator = 2}, {beg = 140230419359248, size = 94671340721814, size_with_redzone = 140732296286544, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7f89f0600fc0 <__asan::instance> "", has_dynamic_init = 135969779897408, gcc_location = 0x7ffeca875120, odr_indicator = 140230419459430}, {beg = 140732296286592, size = 6, size_with_redzone = 140230420074432, name = 0x7c49ee617ef0 "\003\021", module_name = 0x7ffeca875150 "\b", has_dynamic_init = 140230418425656, gcc_location = 0x78, odr_indicator = 136656973823728}}, reg_sites = {3397865792, 32766, 4019437934, 32649}, access_size = 0, size = 156 '\234'}, wild = {addr = 0, access_size = 0}}}}, size = 140732296288368}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, beg = 137412887839240, end = 0, old_mid = 0, new_mid = 11072425690612}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, storage_beg = 137412887839240, storage_end = 0, old_container_beg = 0, old_container_end = 11072425690612, new_container_beg = 137412887839240, new_container_end = 392}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, old_storage_beg = 137412887839240, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11072425690612}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, global1 = {beg = 140728898420738, size = 137412887839240, size_with_redzone = 0, name = 0x0, module_name = 0xa12000005f4 <error: Cannot access memory at address 0xa12000005f4>, has_dynamic_init = 137412887839240, gcc_location = 0x188, odr_indicator = 137412887838848}, global2 = {beg = 752, size = 140732296290312, size_with_redzone = 140230418402079, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7c49ee605f00 "\200\a^\356\371|", has_dynamic_init = 140732296288448, gcc_location = 0x7f89f05525d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 3}, stack_id1 = 4006903808, stack_id2 = 30}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, pc = 140728898420738, bp = 137412887839240, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11072425690612, kind = (unknown: 0x8), shadow_byte = 2 '\002'}, heap = {addr = 11072425690612, alloc_tid = 137412887839240, free_tid = 392, alloc_stack_id = 3999137920, free_stack_id = 31993, chunk_access = {bad_addr = 752, offset = 140732296290312, chunk_begin = 140230418402079, chunk_size = 1, user_requested_alignment = 3840, access_type = 1, alloc_type = 1}}, stack = {addr = 11072425690612, tid = 137412887839240, offset = 392, frame_pc = 137412887838848, access_size = 752, frame_descr = 0x7ffeca876008 ""}, global = {addr = 11072425690612, static kMaxGlobals = 4, globals = {{beg = 137412887839240, size = 392, size_with_redzone = 137412887838848, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffeca876008 "", has_dynamic_init = 140230418402079, gcc_location = 0x1, odr_indicator = 136656973750016}, {beg = 140732296288448, size = 140230419359186, size_with_redzone = 3, name = 0x1eeed48000 <error: Cannot access memory at address 0x1eeed48000>, module_name = 0x7ffeca8750a0 "\020&U\360\211\177", has_dynamic_init = 2, gcc_location = 0x7f89f0552610 <___interceptor_malloc(__sanitizer::uptr)+192>, odr_indicator = 94671340721814}, {beg = 140732296286544, size = 7, size_with_redzone = 140230420074432, name = 0x7ba9ee6e5440 "\003\021", module_name = 0x7ffeca875120 "@Q\207\312\376\177", has_dynamic_init = 140230419459430, gcc_location = 0x7ffeca875180, odr_indicator = 6}, {beg = 140230420074432, size = 136656973823728, size_with_redzone = 140732296286544, name = 0x7f89f046e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x78 <error: Cannot access memory at address 0x78>, has_dynamic_init = 136656973823728, gcc_location = 0x7ffeca875140, odr_indicator = 140230406685038}}, reg_sites = {0, 0, 1671024284, 22042}, access_size = 140732296288368, size = 96 '`'}, wild = {addr = 11072425690612, access_size = 137412887839240}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 140230419785623, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140230419785623, alloc_tid = 140230416334080, free_tid = 140732296288016, alloc_stack_id = 4031899859, free_stack_id = 32649, chunk_access = {bad_addr = 140732296288016, offset = 4029274680, chunk_begin = 140732296288112, chunk_size = 140230416301654, user_requested_alignment = 384, access_type = 0, alloc_type = 0}}, stack = {addr = 140230419785623, tid = 140230416334080, offset = 140732296288016, frame_pc = 140230419146963, access_size = 140732296288016, frame_descr = 0xf029da38 <error: Cannot access memory at address 0xf029da38>}, global = {addr = 140230419785623, static kMaxGlobals = 4, globals = {{beg = 140230416334080, size = 140732296288016, size_with_redzone = 140230419146963, name = 0x7ffeca875710 "\200\001^\356\231|", module_name = 0xf029da38 <error: Cannot access memory at address 0xf029da38>, has_dynamic_init = 140732296288112, gcc_location = 0x7f89f0267e56, odr_indicator = 137000570978688}, {beg = 140230416301604, size = 140732296288064, size_with_redzone = 6953256225440, name = 0x23 <error: Cannot access memory at address 0x23>, module_name = 0x2e357977 <error: Cannot access memory at address 0x2e357977>, has_dynamic_init = 140732296288096, gcc_location = 0x7be9ee5e0aa0, odr_indicator = 140732296288128}, {beg = 136656973823744, size = 137000570978688, size_with_redzone = 136107218249744, name = 0x561a63b7d780 <watch_destroy> "\363\017\036\372SH\211\373H\203\354\020H\205\377\017\2049\002", module_name = 0x7f89f02ccdce "I\211\305L9\360tJH\205\300tUH\213E\310dH+\004%(", has_dynamic_init = 136656973823744, gcc_location = 0x7f89f02ccdce, odr_indicator = 94671342131072}, {beg = 0, size = 140732296288224, size_with_redzone = 140230416715214, name = 0x7c89ee5e0f40 "\001", module_name = 0x7bc9ee5f84d0 "\002", has_dynamic_init = 44, gcc_location = 0x0, odr_indicator = 136107217880280}}, reg_sites = {3999606824, 31689, 3999237360, 31689}, access_size = 94671342132942, size = 16 '\020'}, wild = {addr = 140230419785623, access_size = 140230416334080}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137412887839240, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137412887839240, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2578, chunk_access = {bad_addr = 137412887839240, offset = 392, chunk_begin = 137412887838848, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137412887839240, tid = 0, offset = 0, frame_pc = 11072425690612, access_size = 137412887839240, frame_descr = 0x188 <error: Cannot access memory at address 0x188>}, global = {addr = 137412887839240, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11072425690612, name = 0x7cf9ee5e0208 "", module_name = 0x188 <error: Cannot access memory at address 0x188>, has_dynamic_init = 137412887838848, gcc_location = 0x2f0, odr_indicator = 140732296290312}, {beg = 140230418402079, size = 1, size_with_redzone = 136656973750016, name = 0x7ffeca8758c0 "\320Q\204c\032V", module_name = 0x7f89f05525d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 3, gcc_location = 0x1eeed48000, odr_indicator = 140732296286368}, {beg = 2, size = 140230419359248, size_with_redzone = 94671340721814, name = 0x7ffeca875150 "\b", module_name = 0x7 <error: Cannot access memory at address 0x7>, has_dynamic_init = 140230420074432, gcc_location = 0x7ba9ee6e5440, odr_indicator = 140732296286496}, {beg = 140230419459430, size = 140732296286592, size_with_redzone = 6, name = 0x7f89f0600fc0 <__asan::instance> "", module_name = 0x7c49ee617ef0 "\003\021", has_dynamic_init = 140732296286544, gcc_location = 0x7f89f046e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248>, odr_indicator = 120}}, reg_sites = {3999366896, 31817, 3397865792, 32766}, access_size = 140230406685038, size = 0 '\000'}, wild = {addr = 137412887839240, access_size = 0}}}}, pc = 94671340162716, bp = 140732296288368, sp = 140732296288352, access_size = 8, bug_descr = 0x7f89f05ba797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\000\211{\000\000\377\000\000\000\000\000\000\000\240G\307c\032V\000\000f\255V\360\211\177\000\000\340L\207\312\376\177\000\000\002\000\000\000\000\000\000\000\300\017`\360\211\177\000\000\220\375^\356\t|\000\000\260L\207\312\376\177\000\0008\347F\360\211\177\000\000^\000\000\000\000\000\000\000\220\375^\356\t|\000\000\320\200\324\356\211\177\000\000\320L\207\312\376\177\000\000\240\375^\356\t|\000\000q\000\000\000\000\000\000\000@U\207\312\376\177\000\000^\000\000\000\000\000\000\000\000U\207\312\376\177\000\000\301\023U\360\211\177\000\000\"j\300c\032V\000\000\270\377\377\377"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137412887839240, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137412887839240, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1524, free_stack_id = 2578, chunk_access = {bad_addr = 137412887839240, offset = 392, chunk_begin = 137412887838848, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137412887839240, tid = 0, offset = 0, frame_pc = 11072425690612, access_size = 137412887839240, frame_descr = 0x188 <error: Cannot access memory at address 0x188>}, global = {addr = 137412887839240, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11072425690612, name = 0x7cf9ee5e0208 "", module_name = 0x188 <error: Cannot access memory at address 0x188>, has_dynamic_init = 137412887838848, gcc_location = 0x2f0, odr_indicator = 140732296290312}, {beg = 140230418402079, size = 1, size_with_redzone = 136656973750016, name = 0x7ffeca8758c0 "\320Q\204c\032V", module_name = 0x7f89f05525d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 3, gcc_location = 0x1eeed48000, odr_indicator = 140732296286368}, {beg = 2, size = 140230419359248, size_with_redzone = 94671340721814, name = 0x7ffeca875150 "\b", module_name = 0x7 <error: Cannot access memory at address 0x7>, has_dynamic_init = 140230420074432, gcc_location = 0x7ba9ee6e5440, odr_indicator = 140732296286496}, {beg = 140230419459430, size = 140732296286592, size_with_redzone = 6, name = 0x7f89f0600fc0 <__asan::instance> "", module_name = 0x7c49ee617ef0 "\003\021", has_dynamic_init = 140732296286544, gcc_location = 0x7f89f046e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248>, odr_indicator = 120}}, reg_sites = {3999366896, 31817, 3397865792, 32766}, access_size = 140230406685038, size = 0 '\000'}, wild = {addr = 137412887839240, access_size = 0}}}}, pc = 94671340162716, bp = 140732296288368, sp = 140732296288352, access_size = 8, bug_descr = 0x7f89f05ba797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007f89f055ef8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140732296288368, sp=sp@entry=140732296288352, addr=<optimized out>, is_write=is_write@entry=false, access_size=access_size@entry=8, exp=<optimized out>, fatal=true) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007f89f05603f9 in __asan::__asan_report_load8 (addr=<optimized out>) at ../../../../src/libsanitizer/asan/asan_rtl.cpp:131
bp = 140732296288368
pc = <optimized out>
local_stack = 140732296288480
sp = 140732296288352
#11 0x0000561a6399ce9c in device_get_adapter (device=<optimized out>) at src/device.c:6917
No locals.
#12 0x0000561a6384520f in find_cig_session (data=0x7c49ee60ad00, match_data=0x7b89ed483f30) at profiles/audio/bap.c:2500
session = 0x7c49ee60ad00
info = 0x7b89ed483f30
#13 0x0000561a63a24071 in queue_find (queue=<optimized out>, function=function@entry=0x561a638451d0 <find_cig_session>, match_data=match_data@entry=0x7b89ed483f30) at src/shared/queue.c:230
entry = 0x7ba9ee698b10
#14 0x0000561a6384bcd4 in find_cig_enumerate (data=0x7c49ee605f00) at profiles/audio/bap.c:2539
info = <optimized out>
#15 bap_update_cigs_cb (user_data=0x7c49ee605f00) at profiles/audio/bap.c:2688
data = 0x7c49ee605f00
cigs = <optimized out>
unset = <optimized out>
#16 0x00007f89f026ab9b in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#17 0x00007f89f026c1d7 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#18 0x00007f89f026c577 in g_main_loop_run () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#19 0x0000561a63b7ffa9 in mainloop_run () at src/shared/mainloop-glib.c:65
No locals.
#20 0x0000561a63b808db in mainloop_run_with_signal (func=func@entry=0x561a639e59d0 <signal_callback>, user_data=user_data@entry=0x0) at src/shared/mainloop-notify.c:196
data = 0x7bb9ee5e3490
io = 0x7bc9ee5f9b10
ret = <optimized out>
#21 0x0000561a636fe2cb in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1713
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
FAIL functional.test_bap::test_bap_unicast_set_transport_acquire[hosts8-vm3]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts8.0-bluetoothd-1789755623-90.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 90]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7f9774748900 (LWP 90)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007f9774ea3b7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007f9774e868ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 135890387078816, 15754315135776397312, 140723325968256, 140723325968544, 140723325968400, 22, 140288475200464, 0, 140723325968336, 140288492045846, 140288466092032, 4096, 0, 15754315135776397312, 140288466538520}}, sa_flags = 1981607936, sa_restorer = 0x16}
#5 0x00007f9775aaea0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007f9775bd4c2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007f9775ba993c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7ffcb3db2146) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7f9774300000 '=' <repeats 65 times>, "\n==90==ERROR: AddressSanitizer: heap-use-after-free on address 0x7d0773be040b at pc 0x7f9775b5e445 bp 0x7ffcb3db3640 sp 0x7ffcb3db2de8\n"..., capacity_bytes_ = 4096, size_ = 3838}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007f9775ba8e02 in __asan::ReportGenericError (pc=140288491643973, bp=140723325974080, sp=sp@entry=140723325971944, addr=addr@entry=137470960075787, is_write=is_write@entry=false, access_size=6, fatal=false, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, signal = {siginfo = 0xffffffff00000002, context = 0x7d0773be040b, addr = 0, pc = 0, sp = 11901354378792, bp = 137470960075787, is_memory_access = 11, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = false}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, second_free_stack = 0xffffffff00000002, addr_description = {addr = 137470960075787, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2771, chunk_access = {bad_addr = 137470960075787, offset = 11, chunk_begin = 137470960075776, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {addr = 137470960075787, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2771, chunk_access = {bad_addr = 137470960075787, offset = 11, chunk_begin = 137470960075776, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 135890393569056, delete_alignment = 140723325969872}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {data = {kind = 1941832715, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11901354378792, alloc_stack_id = 1941832715, free_stack_id = 32007, chunk_access = {bad_addr = 11, offset = 137470960075776, chunk_begin = 752, chunk_size = 140723325984776, user_requested_alignment = 1824, access_type = 1, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 11901354378792, frame_pc = 137470960075787, access_size = 11, frame_descr = 0x7d0773be0400 "\323\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11901354378792, size_with_redzone = 137470960075787, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7d0773be0400 "\323\n", has_dynamic_init = 752, gcc_location = 0x7ffcb3db6008, odr_indicator = 135890393569056}, {beg = 140723325969872, size = 140288490941215, size_with_redzone = 1, name = 0x7b9772a31720 "@\201\305s\367{", module_name = 0x7ffcb3db2e20 "0.\333\263\374\177", has_dynamic_init = 140288491898322, gcc_location = 0x7f97743920d0, odr_indicator = 131866502704}, {beg = 140723325969920, size = 3, size_with_redzone = 140288491898384, name = 0x7f9774ef4b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55e7f6f9256b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723325972704, gcc_location = 0x7ffcb3db26c0, odr_indicator = 2}, {beg = 140288492613568, size = 136302729461872, size_with_redzone = 140723325970064, name = 0x7f9775ab8738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136302729461872, gcc_location = 0x7f97743920d0, odr_indicator = 140723325970096}}, reg_sites = {1942323328, 31735, 81, 0}, access_size = 140723325972256, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, dealloc_stack = 0xffffffff00000002, alloc_type = 1941832715, dealloc_type = 32007, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (unknown: 0x28), shadow_byte = 6 '\006'}, heap = {addr = 0, alloc_tid = 11901354378792, free_tid = 137470960075787, alloc_stack_id = 11, free_stack_id = 0, chunk_access = {bad_addr = 137470960075776, offset = 752, chunk_begin = 140723325984776, chunk_size = 135890393569056, user_requested_alignment = 1488, access_type = 2, alloc_type = 0}}, stack = {addr = 0, tid = 11901354378792, offset = 137470960075787, frame_pc = 11, access_size = 137470960075776, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11901354378792, size = 137470960075787, size_with_redzone = 11, name = 0x7d0773be0400 "\323\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140723325984776, gcc_location = 0x7b9772a31720, odr_indicator = 140723325969872}, {beg = 140288490941215, size = 1, size_with_redzone = 135890393569056, name = 0x7ffcb3db2e20 "0.\333\263\374\177", module_name = 0x7f9775b9c5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 140288466690256, gcc_location = 0x1eb3db2630, odr_indicator = 140723325969920}, {beg = 3, size = 140288491898384, size_with_redzone = 140288478628751, name = 0x55e7f6f9256b <bt_log_vprintf+171> "\205\300\017\210=\001", module_name = 0x7ffcb3db30e0 "\2042\333\263\374\177", has_dynamic_init = 140723325970112, gcc_location = 0x2, odr_indicator = 140288492613568}, {beg = 136302729461872, size = 140723325970064, size_with_redzone = 140288490964792, name = 0x3e <error: Cannot access memory at address 0x3e>, module_name = 0x7bf773c58070 "\003\021", has_dynamic_init = 140288466690256, gcc_location = 0x7ffcb3db26b0, odr_indicator = 136302729461888}}, reg_sites = {81, 0, 3017486112, 32764}, access_size = 140288491643973, size = 64 '@'}, wild = {addr = 0, access_size = 11901354378792}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 1941832715, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11901354378792, alloc_stack_id = 1941832715, free_stack_id = 32007, chunk_access = {bad_addr = 11, offset = 137470960075776, chunk_begin = 752, chunk_size = 140723325984776, user_requested_alignment = 1824, access_type = 1, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 11901354378792, frame_pc = 137470960075787, access_size = 11, frame_descr = 0x7d0773be0400 "\323\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11901354378792, size_with_redzone = 137470960075787, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7d0773be0400 "\323\n", has_dynamic_init = 752, gcc_location = 0x7ffcb3db6008, odr_indicator = 135890393569056}, {beg = 140723325969872, size = 140288490941215, size_with_redzone = 1, name = 0x7b9772a31720 "@\201\305s\367{", module_name = 0x7ffcb3db2e20 "0.\333\263\374\177", has_dynamic_init = 140288491898322, gcc_location = 0x7f97743920d0, odr_indicator = 131866502704}, {beg = 140723325969920, size = 3, size_with_redzone = 140288491898384, name = 0x7f9774ef4b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55e7f6f9256b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723325972704, gcc_location = 0x7ffcb3db26c0, odr_indicator = 2}, {beg = 140288492613568, size = 136302729461872, size_with_redzone = 140723325970064, name = 0x7f9775ab8738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136302729461872, gcc_location = 0x7f97743920d0, odr_indicator = 140723325970096}}, reg_sites = {1942323328, 31735, 81, 0}, access_size = 140723325972256, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 1941832715, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11901354378792, alloc_stack_id = 1941832715, free_stack_id = 32007, chunk_access = {bad_addr = 11, offset = 137470960075776, chunk_begin = 752, chunk_size = 140723325984776, user_requested_alignment = 1824, access_type = 1, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 11901354378792, frame_pc = 137470960075787, access_size = 11, frame_descr = 0x7d0773be0400 "\323\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11901354378792, size_with_redzone = 137470960075787, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7d0773be0400 "\323\n", has_dynamic_init = 752, gcc_location = 0x7ffcb3db6008, odr_indicator = 135890393569056}, {beg = 140723325969872, size = 140288490941215, size_with_redzone = 1, name = 0x7b9772a31720 "@\201\305s\367{", module_name = 0x7ffcb3db2e20 "0.\333\263\374\177", has_dynamic_init = 140288491898322, gcc_location = 0x7f97743920d0, odr_indicator = 131866502704}, {beg = 140723325969920, size = 3, size_with_redzone = 140288491898384, name = 0x7f9774ef4b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55e7f6f9256b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723325972704, gcc_location = 0x7ffcb3db26c0, odr_indicator = 2}, {beg = 140288492613568, size = 136302729461872, size_with_redzone = 140723325970064, name = 0x7f9775ab8738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136302729461872, gcc_location = 0x7f97743920d0, odr_indicator = 140723325970096}}, reg_sites = {1942323328, 31735, 81, 0}, access_size = 140723325972256, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137470960075787, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137470960075787, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137470960075787}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137470960075787}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137470960075787, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137470960075787}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, user_size = 137470960075787, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, requested_size = 137470960075787}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, length1 = 137470960075787, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11901354378792, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11901354378792, alloc_tid = 137470960075787, free_tid = 11, alloc_stack_id = 1941832704, free_stack_id = 32007, chunk_access = {bad_addr = 752, offset = 140723325984776, chunk_begin = 135890393569056, chunk_size = 140723325969872, user_requested_alignment = 2847, access_type = 2, alloc_type = 0}}, stack = {addr = 11901354378792, tid = 137470960075787, offset = 11, frame_pc = 137470960075776, access_size = 752, frame_descr = 0x7ffcb3db6008 <error: Cannot access memory at address 0x7ffcb3db6008>}, global = {addr = 11901354378792, static kMaxGlobals = 4, globals = {{beg = 137470960075787, size = 11, size_with_redzone = 137470960075776, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffcb3db6008 <error: Cannot access memory at address 0x7ffcb3db6008>, has_dynamic_init = 135890393569056, gcc_location = 0x7ffcb3db25d0, odr_indicator = 140288490941215}, {beg = 1, size = 135890393569056, size_with_redzone = 140723325972000, name = 0x7f9775b9c5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f97743920d0 "", has_dynamic_init = 131866502704, gcc_location = 0x7ffcb3db2600, odr_indicator = 3}, {beg = 140288491898384, size = 140288478628751, size_with_redzone = 94454769329515, name = 0x7ffcb3db30e0 "\2042\333\263\374\177", module_name = 0x7ffcb3db26c0 "\030", has_dynamic_init = 2, gcc_location = 0x7f9775c4afc0 <__asan::instance>, odr_indicator = 136302729461872}, {beg = 140723325970064, size = 140288490964792, size_with_redzone = 62, name = 0x7bf773c58070 "\003\021", module_name = 0x7f97743920d0 "", has_dynamic_init = 140723325970096, gcc_location = 0x7bf773c58080, odr_indicator = 81}}, reg_sites = {3017486112, 32764, 1974854725, 32663}, access_size = 140723325974080, size = 232 '\350'}, wild = {addr = 11901354378792, access_size = 137470960075787}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 140288492324759, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140288492324759, alloc_tid = 140288492633344, free_tid = 140723325973632, alloc_stack_id = 1975109074, free_stack_id = 32663, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140723325971552, chunk_size = 3, user_requested_alignment = 1552, access_type = 0, alloc_type = 3}}, stack = {addr = 140288492324759, tid = 140288492633344, offset = 140723325973632, frame_pc = 140288491898322, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 140288492324759, static kMaxGlobals = 4, globals = {{beg = 140288492633344, size = 140723325973632, size_with_redzone = 140288491898322, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140723325971552, gcc_location = 0x3, odr_indicator = 140288491898384}, {beg = 140288478628751, size = 94454769329515, size_with_redzone = 140723325974336, name = 0x7ffcb3db2ce0 "", module_name = 0x7f9775c44f78 "\001", has_dynamic_init = 140723325971744, gcc_location = 0x55e7f70d35a0, odr_indicator = 140288470583480}, {beg = 65535, size = 140723325971664, size_with_redzone = 140288491729753, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b9772c61e00 "\0166\340E", has_dynamic_init = 140723325971712, gcc_location = 0x7f9775abf74a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140723325971712}, {beg = 140288492154749, size = 140723325971744, size_with_redzone = 140288491998566, name = 0x7ffcb3db2da0 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 140288492613568, gcc_location = 0x7bd773c4cf40, odr_indicator = 140723325971824}}, reg_sites = {1974175544, 32663, 40, 0}, access_size = 140288492104221, size = 208 '\320'}, wild = {addr = 140288492324759, access_size = 140288492633344}}}}, function = 0x7ffcb3db2d90 "@6\333\263\374\177"}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 1941832715, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11901354378792, alloc_stack_id = 1941832715, free_stack_id = 32007, chunk_access = {bad_addr = 11, offset = 137470960075776, chunk_begin = 752, chunk_size = 140723325984776, user_requested_alignment = 1824, access_type = 1, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 11901354378792, frame_pc = 137470960075787, access_size = 11, frame_descr = 0x7d0773be0400 "\323\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11901354378792, size_with_redzone = 137470960075787, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7d0773be0400 "\323\n", has_dynamic_init = 752, gcc_location = 0x7ffcb3db6008, odr_indicator = 135890393569056}, {beg = 140723325969872, size = 140288490941215, size_with_redzone = 1, name = 0x7b9772a31720 "@\201\305s\367{", module_name = 0x7ffcb3db2e20 "0.\333\263\374\177", has_dynamic_init = 140288491898322, gcc_location = 0x7f97743920d0, odr_indicator = 131866502704}, {beg = 140723325969920, size = 3, size_with_redzone = 140288491898384, name = 0x7f9774ef4b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55e7f6f9256b <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140723325972704, gcc_location = 0x7ffcb3db26c0, odr_indicator = 2}, {beg = 140288492613568, size = 136302729461872, size_with_redzone = 140723325970064, name = 0x7f9775ab8738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136302729461872, gcc_location = 0x7f97743920d0, odr_indicator = 140723325970096}}, reg_sites = {1942323328, 31735, 81, 0}, access_size = 140723325972256, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}, size = 140723325974080}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, beg = 137470960075787, end = 0, old_mid = 0, new_mid = 11901354378792}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, storage_beg = 137470960075787, storage_end = 0, old_container_beg = 0, old_container_end = 11901354378792, new_container_beg = 137470960075787, new_container_end = 11}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, old_storage_beg = 137470960075787, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11901354378792}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, global1 = {beg = 18446744069414584322, size = 137470960075787, size_with_redzone = 0, name = 0x0, module_name = 0xad300000628 <error: Cannot access memory at address 0xad300000628>, has_dynamic_init = 137470960075787, gcc_location = 0xb, odr_indicator = 137470960075776}, global2 = {beg = 752, size = 140723325984776, size_with_redzone = 135890393569056, name = 0x7ffcb3db25d0 " .\333\263\374\177", module_name = 0x7f9775ab2b1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47> "H\205\300t\f\311\303f.\017\037\204", has_dynamic_init = 1, gcc_location = 0x7b9772a31720, odr_indicator = 140723325972000}, stack_id1 = 1975109074, stack_id2 = 32663}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, pc = 18446744069414584322, bp = 137470960075787, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11901354378792, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11901354378792, alloc_tid = 137470960075787, free_tid = 11, alloc_stack_id = 1941832704, free_stack_id = 32007, chunk_access = {bad_addr = 752, offset = 140723325984776, chunk_begin = 135890393569056, chunk_size = 140723325969872, user_requested_alignment = 2847, access_type = 2, alloc_type = 0}}, stack = {addr = 11901354378792, tid = 137470960075787, offset = 11, frame_pc = 137470960075776, access_size = 752, frame_descr = 0x7ffcb3db6008 <error: Cannot access memory at address 0x7ffcb3db6008>}, global = {addr = 11901354378792, static kMaxGlobals = 4, globals = {{beg = 137470960075787, size = 11, size_with_redzone = 137470960075776, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffcb3db6008 <error: Cannot access memory at address 0x7ffcb3db6008>, has_dynamic_init = 135890393569056, gcc_location = 0x7ffcb3db25d0, odr_indicator = 140288490941215}, {beg = 1, size = 135890393569056, size_with_redzone = 140723325972000, name = 0x7f9775b9c5d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7f97743920d0 "", has_dynamic_init = 131866502704, gcc_location = 0x7ffcb3db2600, odr_indicator = 3}, {beg = 140288491898384, size = 140288478628751, size_with_redzone = 94454769329515, name = 0x7ffcb3db30e0 "\2042\333\263\374\177", module_name = 0x7ffcb3db26c0 "\030", has_dynamic_init = 2, gcc_location = 0x7f9775c4afc0 <__asan::instance>, odr_indicator = 136302729461872}, {beg = 140723325970064, size = 140288490964792, size_with_redzone = 62, name = 0x7bf773c58070 "\003\021", module_name = 0x7f97743920d0 "", has_dynamic_init = 140723325970096, gcc_location = 0x7bf773c58080, odr_indicator = 81}}, reg_sites = {3017486112, 32764, 1974854725, 32663}, access_size = 140723325974080, size = 232 '\350'}, wild = {addr = 11901354378792, access_size = 137470960075787}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 140288492324759, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140288492324759, alloc_tid = 140288492633344, free_tid = 140723325973632, alloc_stack_id = 1975109074, free_stack_id = 32663, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140723325971552, chunk_size = 3, user_requested_alignment = 1552, access_type = 0, alloc_type = 3}}, stack = {addr = 140288492324759, tid = 140288492633344, offset = 140723325973632, frame_pc = 140288491898322, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 140288492324759, static kMaxGlobals = 4, globals = {{beg = 140288492633344, size = 140723325973632, size_with_redzone = 140288491898322, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140723325971552, gcc_location = 0x3, odr_indicator = 140288491898384}, {beg = 140288478628751, size = 94454769329515, size_with_redzone = 140723325974336, name = 0x7ffcb3db2ce0 "", module_name = 0x7f9775c44f78 "\001", has_dynamic_init = 140723325971744, gcc_location = 0x55e7f70d35a0, odr_indicator = 140288470583480}, {beg = 65535, size = 140723325971664, size_with_redzone = 140288491729753, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7b9772c61e00 "\0166\340E", has_dynamic_init = 140723325971712, gcc_location = 0x7f9775abf74a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140723325971712}, {beg = 140288492154749, size = 140723325971744, size_with_redzone = 140288491998566, name = 0x7ffcb3db2da0 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 140288492613568, gcc_location = 0x7bd773c4cf40, odr_indicator = 140723325971824}}, reg_sites = {1974175544, 32663, 40, 0}, access_size = 140288492104221, size = 208 '\320'}, wild = {addr = 140288492324759, access_size = 140288492633344}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137470960075787, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137470960075787, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2771, chunk_access = {bad_addr = 137470960075787, offset = 11, chunk_begin = 137470960075776, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137470960075787, tid = 0, offset = 0, frame_pc = 11901354378792, access_size = 137470960075787, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137470960075787, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11901354378792, name = 0x7d0773be040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137470960075776, gcc_location = 0x2f0, odr_indicator = 140723325984776}, {beg = 135890393569056, size = 140723325969872, size_with_redzone = 140288490941215, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b9772a31720 "@\201\305s\367{", has_dynamic_init = 140723325972000, gcc_location = 0x7f9775b9c5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 140288466690256}, {beg = 131866502704, size = 140723325969920, size_with_redzone = 3, name = 0x7f9775b9c610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f9774ef4b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 94454769329515, gcc_location = 0x7ffcb3db30e0, odr_indicator = 140723325970112}, {beg = 2, size = 140288492613568, size_with_redzone = 136302729461872, name = 0x7ffcb3db2690 "@6\333\263\374\177", module_name = 0x7f9775ab8738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7bf773c58070, odr_indicator = 140288466690256}}, reg_sites = {3017483952, 32764, 1942323328, 31735}, access_size = 81, size = 32 ' '}, wild = {addr = 137470960075787, access_size = 0}}}}, pc = 140288491643973, bp = 140723325974080, sp = 140723325971944, access_size = 6, bug_descr = 0x7f9775c04797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\374\177\000\000\002\000\000\000bluetoothd[9\000\030\203c%\222\242\332nal] org\020,\333\263\374\177\000\000\300!\333\263\374\177\000\000.l\370t\227\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000@*\333\263\374\177\000\000\211M\357t\227\177\000\000\374!\333\263\374\177\000\000\374!\333\263\374\177\000\000\374)\333\263\374\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\227\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137470960075787, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137470960075787, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2771, chunk_access = {bad_addr = 137470960075787, offset = 11, chunk_begin = 137470960075776, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137470960075787, tid = 0, offset = 0, frame_pc = 11901354378792, access_size = 137470960075787, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137470960075787, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11901354378792, name = 0x7d0773be040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137470960075776, gcc_location = 0x2f0, odr_indicator = 140723325984776}, {beg = 135890393569056, size = 140723325969872, size_with_redzone = 140288490941215, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7b9772a31720 "@\201\305s\367{", has_dynamic_init = 140723325972000, gcc_location = 0x7f9775b9c5d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 140288466690256}, {beg = 131866502704, size = 140723325969920, size_with_redzone = 3, name = 0x7f9775b9c610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7f9774ef4b8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 94454769329515, gcc_location = 0x7ffcb3db30e0, odr_indicator = 140723325970112}, {beg = 2, size = 140288492613568, size_with_redzone = 136302729461872, name = 0x7ffcb3db2690 "@6\333\263\374\177", module_name = 0x7f9775ab8738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7bf773c58070, odr_indicator = 140288466690256}}, reg_sites = {3017483952, 32764, 1942323328, 31735}, access_size = 81, size = 32 ' '}, wild = {addr = 137470960075787, access_size = 0}}}}, pc = 140288491643973, bp = 140723325974080, sp = 140723325971944, access_size = 6, bug_descr = 0x7f9775c04797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007f9775ba8f8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140723325974080, sp=sp@entry=140723325971944, addr=addr@entry=137470960075787, is_write=is_write@entry=false, access_size=access_size@entry=6, exp=<optimized out>, fatal=false) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007f9775b5e468 in MemcmpInterceptorCommon (ctx=ctx@entry=0x7ffcb3db3650, real_fn=<optimized out>, a1=a1@entry=0x7d0773be040b, a2=a2@entry=0x7b977298de60, size=size@entry=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:848
bp = 140723325974080
pc = <optimized out>
local_stack = 137127362691136
sp = 140723325971944
_ctx = 0x7ffcb3db3650
suppressed = <optimized out>
__offset = 137470960075787
__size = 6
__bad = <optimized out>
result = <optimized out>
#11 0x00007f9775b5e835 in ___interceptor_memcmp (a1=0x7d0773be040b, a2=0x7b977298de60, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:880
ctx = 0x7ffcb3db3650
_ctx = {interceptor_name = 0x7f9775c086b6 "memcmp"}
#12 ___interceptor_memcmp (a1=0x7d0773be040b, a2=0x7b977298de60, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:875
ctx = <optimized out>
_ctx = <optimized out>
#13 0x000055e7f6e76038 in bacmp (ba1=0x7d0773be040b, ba2=0x7b977298de60) at ./lib/bluetooth/bluetooth.h:438
No locals.
#14 device_addr_type_cmp (a=0x7d0773be0400, b=0x7b977298de60) at src/device.c:5657
dev = 0x7d0773be0400
addr = 0x7b977298de60
cmp = <optimized out>
#15 0x00007f97758d84c2 in g_slist_find_custom () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#16 0x000055e7f6df56f4 in btd_adapter_find_device (adapter=<optimized out>, dst=dst@entry=0x7bd773c23958, bdaddr_type=1 '\001') at src/adapter.c:1055
addr = <optimized out>
device = <optimized out>
list = <optimized out>
#17 0x000055e7f6d97c07 in att_disconnected (err=<optimized out>, user_data=0x7bd773c23950) at src/gatt-database.c:335
state = 0x7bd773c23950
device = <optimized out>
__func__ = "att_disconnected"
#18 0x000055e7f6daeb34 in btd_gatt_database_att_disconnected (database=<optimized out>, device=<optimized out>) at src/gatt-database.c:4238
server = <optimized out>
att = <optimized out>
state = <optimized out>
addr = <optimized out>
type = <optimized out>
__func__ = "btd_gatt_database_att_disconnected"
#19 0x000055e7f6e580e6 in gatt_server_cleanup (device=device@entry=0x7d0773be0080) at src/device.c:842
No locals.
#20 0x000055e7f6e6c7dc in attio_cleanup (device=0x7d0773be0080) at src/device.c:862
No locals.
#21 0x000055e7f6e6ce27 in device_free (user_data=0x7d0773be0080) at src/device.c:918
device = 0x7d0773be0080
__func__ = "device_free"
#22 0x000055e7f6eeaa3a in remove_interface (data=0x7c0773beac80, name=name@entry=0x55e7f70f7a60 "org.bluez.Device1") at gdbus/object.c:742
iface = 0x7bf773bfe560
#23 0x000055e7f6eed5fc in g_dbus_unregister_interface (connection=<optimized out>, path=<optimized out>, name=<optimized out>) at gdbus/object.c:1499
data = <optimized out>
#24 0x000055e7f6e281b3 in adapter_remove (adapter=adapter@entry=0x7cc773be0200) at src/adapter.c:7307
l = 0x7bb773c0b2f0 = {0x7d0773be0080}
db = <optimized out>
ranging_manager = <optimized out>
__func__ = "adapter_remove"
#25 0x000055e7f6e28d48 in adapter_cleanup () at src/adapter.c:11263
adapter = 0x7cc773be0200
#26 0x000055e7f6bda2f0 in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1723
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
https://github.com/bluez/bluez/pull/2549
---
Regards,
Linux Bluetooth
next prev parent reply other threads:[~2026-09-18 18:47 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-18 16:13 [PATCH BlueZ v2 0/9] monitor: Search the frames with a pager Luiz Augusto von Dentz
2026-09-18 16:14 ` [PATCH BlueZ v2 1/9] monitor/analyze: Free the channel latency plots Luiz Augusto von Dentz
2026-09-18 18:47 ` bluez.test.bot [this message]
2026-09-18 16:14 ` [PATCH BlueZ v2 2/9] monitor/l2cap: Report the channel latency deviation Luiz Augusto von Dentz
2026-09-18 16:14 ` [PATCH BlueZ v2 3/9] monitor/analyze: Drop a trailing space before a newline Luiz Augusto von Dentz
2026-09-18 16:14 ` [PATCH BlueZ v2 4/9] monitor: Route the decoding output through a single function Luiz Augusto von Dentz
2026-09-18 16:14 ` [PATCH BlueZ v2 5/9] monitor: Separate the frames for a pager reading records Luiz Augusto von Dentz
2026-09-18 16:14 ` [PATCH BlueZ v2 6/9] monitor: Hand the captured frames to the pager on Ctrl-R Luiz Augusto von Dentz
2026-09-18 16:14 ` [PATCH BlueZ v2 7/9] doc/btmon: Document searching the frames Luiz Augusto von Dentz
2026-09-18 16:14 ` [PATCH BlueZ v2 8/9] monitor: Prefer fzf as the pager when one is not set Luiz Augusto von Dentz
2026-09-18 16:14 ` [PATCH BlueZ v2 9/9] doc/btmon: Document the pager choice Luiz Augusto von Dentz
2026-09-21 14:40 ` [PATCH BlueZ v2 0/9] monitor: Search the frames with a pager patchwork-bot+bluetooth
-- strict thread matches above, loose matches on Subject: below --
2026-09-17 20:45 [PATCH BlueZ v1 1/6] monitor: Route the decoding output through a single function Luiz Augusto von Dentz
2026-09-17 23:55 ` monitor: Search the frames with a pager bluez.test.bot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6aad8728.65a66a5a.306c24.4cb2@mx.google.com \
--to=bluez.test.bot@gmail.com \
--cc=linux-bluetooth@vger.kernel.org \
--cc=luiz.dentz@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox