* [PATCH BlueZ] a2dp: Fix crash on NULL stream in transport_cb
@ 2026-09-19 18:44 Iaroslav Voitovych
2026-09-19 22:10 ` [BlueZ] " bluez.test.bot
0 siblings, 1 reply; 2+ messages in thread
From: Iaroslav Voitovych @ 2026-09-19 18:44 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Iaroslav Voitovych
transport_cb() runs from bt_io_accept() and begins by confirming that
the a2dp_setup it was handed still exists:
if (!g_slist_find(setups, setup)) {
warn("bt_io_accept: setup %p no longer valid", setup);
...
}
That establishes the lifetime of the setup, not of the stream it
points at. Several paths in a2dp.c clear setup->stream while leaving
the setup itself on the list, so by the time the accept completes the
setup can be valid and its stream NULL. confirm_cb() already refuses
to start the accept when setup->stream is NULL; nothing re-checks it
when the accept completes, and it is then passed on unchecked:
if (!avdtp_stream_set_transport(setup->stream,
g_io_channel_unix_get_fd(io),
imtu, omtu))
and avdtp_stream_set_transport() dereferences it immediately:
gboolean avdtp_stream_set_transport(struct avdtp_stream *stream, ...)
{
GIOChannel *io = g_io_channel_unix_new(fd);
if (stream != stream->session->pending_open) {
Observed as a crash on a QCA9377 (13d3:3503) whose controller stops
answering HCI during audio use. From the retained core, %r13 held NULL
and the faulting instruction was the first field load off it:
bluetoothd[398112]: segfault at 10 ip 0000635d944b47e5 sp 00007ffefcba28d0 \
error 4 in bluetoothd[367e5,635d944a3000+f3000]
r13 0x0
=> 0x635d944b47e5: mov 0x10(%r13),%rdi
With the check in place and the daemon logging before it bails, the
guard fired four times in 19 days of ordinary use on the same machine
(once on 2026-08-26, three times on 2026-09-02, across two daemon
lifetimes and three distinct setup pointers). Each of those is an
accept that completed after the stream had been cleared; unpatched,
each is the dereference above.
Check the stream immediately before it is used, so every existing path
keeps its current behaviour up to the point that was previously
unsafe. In particular a bt_io_accept() error or a bt_io_get() failure
still reports the real I/O error rather than this secondary lifecycle
condition.
commit 125a2e237e7c ("a2dp: Fix possible crash when accepting stream
transport") previously hardened this same asynchronous accept window
against the whole setup disappearing while the accept was pending.
This covers the remaining case where the setup survives and its stream
does not.
commit 90a600895d80 ("avdtp: Handle case where remote send L2CAP
connect ahead of Open") also changed avdtp_stream_set_transport()
itself, to handle a transport arriving before Open. The function still
dereferences stream before reaching that handling, so it does not
cover a NULL argument from transport_cb().
---
Context, not part of the change: the crash was recorded on a QCA9377
(13d3:3503) laptop under Ubuntu 24.04 / bluez 5.72-0ubuntu5.5 and the
site was resolved from the stripped distro binary, then checked against
a retained core. The record, including the four logged firings of this
guard and the crash-site method, is public:
https://github.com/ivoitovych/qca9377-bt-hang (patches/bluez/README.md)
profiles/audio/a2dp.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/profiles/audio/a2dp.c b/profiles/audio/a2dp.c
--- a/profiles/audio/a2dp.c
+++ b/profiles/audio/a2dp.c
@@ -2672,6 +2672,11 @@
goto drop;
}
+ if (!setup->stream) {
+ error("bt_io_accept: setup %p has no stream", setup);
+ goto drop;
+ }
+
if (!avdtp_stream_set_transport(setup->stream,
g_io_channel_unix_get_fd(io),
imtu, omtu))
--
2.43.0
^ permalink raw reply [flat|nested] 2+ messages in thread
* RE: [BlueZ] a2dp: Fix crash on NULL stream in transport_cb
2026-09-19 18:44 [PATCH BlueZ] a2dp: Fix crash on NULL stream in transport_cb Iaroslav Voitovych
@ 2026-09-19 22:10 ` bluez.test.bot
0 siblings, 0 replies; 2+ messages in thread
From: bluez.test.bot @ 2026-09-19 22:10 UTC (permalink / raw)
To: linux-bluetooth, yaroslav.voytovych
[-- Attachment #1: Type: text/plain, Size: 102714 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/series/1169363/
---Test result---
Test Summary:
CheckPatch FAIL 0.52 seconds
GitLint FAIL 0.35 seconds
BuildEll PASS 19.45 seconds
BluezMake PASS 383.65 seconds
MakeCheck PASS 2.99 seconds
MakeDistcheck PASS 143.15 seconds
CheckValgrind PASS 150.67 seconds
CheckSmatch PASS 290.47 seconds
bluezmakeextell PASS 94.16 seconds
TestFunctional FAIL 1143.46 seconds
IncrementalBuild PASS 390.29 seconds
ScanBuild PASS 1140.86 seconds
Details
##############################
Test: CheckPatch - FAIL
Desc: Run checkpatch.pl script
Output:
[BlueZ] a2dp: Fix crash on NULL stream in transport_cb
WARNING:COMMIT_LOG_LONG_LINE: Prefer a maximum 75 chars per line (possible unwrapped commit description?)
#126:
bluetoothd[398112]: segfault at 10 ip 0000635d944b47e5 sp 00007ffefcba28d0 \
/home/runner/work/bluez/bluez/src/patch/14831547.patch total: 0 errors, 1 warnings, 11 lines checked
NOTE: For some of the reported defects, checkpatch may be able to
mechanically convert to the typical style using --fix or --fix-inplace.
/home/runner/work/bluez/bluez/src/patch/14831547.patch has style problems, please review.
NOTE: Ignored message types: COMMIT_MESSAGE COMPLEX_MACRO CONST_STRUCT FILE_PATH_CHANGES MISSING_SIGN_OFF PREFER_PACKED SPDX_LICENSE_TAG SPLIT_STRING SSCANF_TO_KSTRTO
NOTE: If any of the errors are false positives, please report
them to the maintainer, see CHECKPATCH in MAINTAINERS.
##############################
Test: GitLint - FAIL
Desc: Run gitlint
Output:
[BlueZ] a2dp: Fix crash on NULL stream in transport_cb
6: B3 Line contains hard tab characters (\t): " if (!g_slist_find(setups, setup)) {"
7: B3 Line contains hard tab characters (\t): " warn("bt_io_accept: setup %p no longer valid", setup);"
8: B3 Line contains hard tab characters (\t): " ..."
9: B3 Line contains hard tab characters (\t): " }"
18: B3 Line contains hard tab characters (\t): " if (!avdtp_stream_set_transport(setup->stream,"
19: B3 Line contains hard tab characters (\t): " g_io_channel_unix_get_fd(io),"
20: B3 Line contains hard tab characters (\t): " imtu, omtu))"
24: B3 Line contains hard tab characters (\t): " gboolean avdtp_stream_set_transport(struct avdtp_stream *stream, ...)"
25: B3 Line contains hard tab characters (\t): " {"
26: B3 Line contains hard tab characters (\t): " GIOChannel *io = g_io_channel_unix_new(fd);"
28: B3 Line contains hard tab characters (\t): " if (stream != stream->session->pending_open) {"
##############################
Test: TestFunctional - FAIL
Desc: Run test-functional
Output:
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts8-vm3-legacy]: failed on setup with "pytest_bluezenv.rpc.RemoteTimeoutError: Connection recv timed out"
FAIL functional.test_bap::test_bap_unicast_set_transport_created[hosts8-vm3-legacy]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts8.0-bluetoothd-1789854182-71.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 71]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7f336f321900 (LWP 71)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007f336fa7cb7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007f336fa5f8ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 0, 0, 0, 140731103688880, 22, 139858890230736, 0, 140731103688816, 139858907076118, 139858881282048, 4096, 0, 11432273293547065088, 139858881568792}}, sa_flags = 1893367808, sa_restorer = 0x16}
#5 0x00007f3370687a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007f33707adc2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007f337078293c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7ffe8371b9e6) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7f336ef00000 '=' <repeats 65 times>, "\n==71==ERROR: AddressSanitizer: heap-use-after-free on address 0x7ca36e7e0208 at pc 0x55577d44af1c bp 0x7ffe8371c660 sp 0x7ffe8371c650\n"..., capacity_bytes_ = 4096, size_ = 3419}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007f3370781e02 in __asan::ReportGenericError (pc=93834252168988, bp=140731103692384, sp=sp@entry=140731103692368, addr=137041375265288, is_write=is_write@entry=false, access_size=8, fatal=true, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, signal = {siginfo = 0x7ffe00000002, context = 0x7ca36e7e0208, addr = 0, pc = 0, sp = 11033770984949, bp = 137041375265288, is_memory_access = 136, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = 128}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, second_free_stack = 0x7ffe00000002, addr_description = {addr = 137041375265288, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1525, free_stack_id = 2569, chunk_access = {bad_addr = 137041375265288, offset = 392, chunk_begin = 137041375264896, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, free_stack = 0x7ffe00000002, addr_description = {addr = 137041375265288, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1525, free_stack_id = 2569, chunk_access = {bad_addr = 137041375265288, offset = 392, chunk_begin = 137041375264896, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 139858905971487, delete_alignment = 1}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, free_stack = 0x7ffe00000002, addr_description = {data = {kind = 1853751816, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11033770984949, alloc_stack_id = 1853751816, free_stack_id = 31907, chunk_access = {bad_addr = 392, offset = 137041375264896, chunk_begin = 752, chunk_size = 140731103666184, user_requested_alignment = 2847, access_type = 3, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11033770984949, frame_pc = 137041375265288, access_size = 392, frame_descr = 0x7ca36e7e0080 "\t\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11033770984949, size_with_redzone = 137041375265288, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7ca36e7e0080 "\t\n", has_dynamic_init = 752, gcc_location = 0x7ffe83716008, odr_indicator = 139858905971487}, {beg = 1, size = 136285461188736, size_with_redzone = 140731103692464, name = 0x7f33707755d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 130710679552, gcc_location = 0x7ffe8371be90, odr_indicator = 2}, {beg = 139858906928656, size = 93834252728086, size_with_redzone = 140731103690560, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7f3370823fc0 <__asan::instance> "", has_dynamic_init = 135598267335680, gcc_location = 0x7ffe8371bf10, odr_indicator = 139858907028838}, {beg = 140731103690608, size = 6, size_with_redzone = 139858907643840, name = 0x7bf36e818af0 "\003\021", module_name = 0x7ffe8371bf40 "\b", has_dynamic_init = 139858905995064, gcc_location = 0x78, odr_indicator = 136285461252848}}, reg_sites = {2205269808, 32766, 1874194798, 32563}, access_size = 0, size = 28 '\034'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, dealloc_stack = 0x7ffe00000002, alloc_type = 1853751816, dealloc_type = 31907, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (__asan::kShadowKindGap | unknown: 0xf4), shadow_byte = 5 '\005'}, heap = {addr = 0, alloc_tid = 11033770984949, free_tid = 137041375265288, alloc_stack_id = 392, free_stack_id = 0, chunk_access = {bad_addr = 137041375264896, offset = 752, chunk_begin = 140731103666184, chunk_size = 139858905971487, user_requested_alignment = 1, access_type = 0, alloc_type = 0}}, stack = {addr = 0, tid = 11033770984949, offset = 137041375265288, frame_pc = 392, access_size = 137041375264896, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11033770984949, size = 137041375265288, size_with_redzone = 392, name = 0x7ca36e7e0080 "\t\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140731103666184, gcc_location = 0x7f337068bb1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47>, odr_indicator = 1}, {beg = 136285461188736, size = 140731103692464, size_with_redzone = 139858906928594, name = 0x3 <error: Cannot access memory at address 0x3>, module_name = 0x1e6ef6b000 <error: Cannot access memory at address 0x1e6ef6b000>, has_dynamic_init = 140731103690384, gcc_location = 0x2, odr_indicator = 139858906928656}, {beg = 93834252728086, size = 140731103690560, size_with_redzone = 7, name = 0x7f3370823fc0 <__asan::instance> "", module_name = 0x7b536e8e8400 "\003\021", has_dynamic_init = 140731103690512, gcc_location = 0x7f337078dd66 <__sanitizer::RunFreeHooks(void*)+86>, odr_indicator = 140731103690608}, {beg = 6, size = 139858907643840, size_with_redzone = 136285461252848, name = 0x7ffe8371bf40 "\b", module_name = 0x7f3370691738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 120, gcc_location = 0x7bf36e818af0, odr_indicator = 140731103690544}}, reg_sites = {1874194798, 32563, 0, 0}, access_size = 93834252168988, size = 96 '`'}, wild = {addr = 0, access_size = 11033770984949}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, addr_description = {data = {kind = 1853751816, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11033770984949, alloc_stack_id = 1853751816, free_stack_id = 31907, chunk_access = {bad_addr = 392, offset = 137041375264896, chunk_begin = 752, chunk_size = 140731103666184, user_requested_alignment = 2847, access_type = 3, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11033770984949, frame_pc = 137041375265288, access_size = 392, frame_descr = 0x7ca36e7e0080 "\t\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11033770984949, size_with_redzone = 137041375265288, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7ca36e7e0080 "\t\n", has_dynamic_init = 752, gcc_location = 0x7ffe83716008, odr_indicator = 139858905971487}, {beg = 1, size = 136285461188736, size_with_redzone = 140731103692464, name = 0x7f33707755d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 130710679552, gcc_location = 0x7ffe8371be90, odr_indicator = 2}, {beg = 139858906928656, size = 93834252728086, size_with_redzone = 140731103690560, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7f3370823fc0 <__asan::instance> "", has_dynamic_init = 135598267335680, gcc_location = 0x7ffe8371bf10, odr_indicator = 139858907028838}, {beg = 140731103690608, size = 6, size_with_redzone = 139858907643840, name = 0x7bf36e818af0 "\003\021", module_name = 0x7ffe8371bf40 "\b", has_dynamic_init = 139858905995064, gcc_location = 0x78, odr_indicator = 136285461252848}}, reg_sites = {2205269808, 32766, 1874194798, 32563}, access_size = 0, size = 28 '\034'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, addr_description = {data = {kind = 1853751816, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11033770984949, alloc_stack_id = 1853751816, free_stack_id = 31907, chunk_access = {bad_addr = 392, offset = 137041375264896, chunk_begin = 752, chunk_size = 140731103666184, user_requested_alignment = 2847, access_type = 3, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11033770984949, frame_pc = 137041375265288, access_size = 392, frame_descr = 0x7ca36e7e0080 "\t\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11033770984949, size_with_redzone = 137041375265288, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7ca36e7e0080 "\t\n", has_dynamic_init = 752, gcc_location = 0x7ffe83716008, odr_indicator = 139858905971487}, {beg = 1, size = 136285461188736, size_with_redzone = 140731103692464, name = 0x7f33707755d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 130710679552, gcc_location = 0x7ffe8371be90, odr_indicator = 2}, {beg = 139858906928656, size = 93834252728086, size_with_redzone = 140731103690560, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7f3370823fc0 <__asan::instance> "", has_dynamic_init = 135598267335680, gcc_location = 0x7ffe8371bf10, odr_indicator = 139858907028838}, {beg = 140731103690608, size = 6, size_with_redzone = 139858907643840, name = 0x7bf36e818af0 "\003\021", module_name = 0x7ffe8371bf40 "\b", has_dynamic_init = 139858905995064, gcc_location = 0x78, odr_indicator = 136285461252848}}, reg_sites = {2205269808, 32766, 1874194798, 32563}, access_size = 0, size = 28 '\034'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, count = 137041375265288, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, count = 137041375265288, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, size = 137041375265288}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, alignment = 137041375265288}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, size = 137041375265288, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, alignment = 137041375265288}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, user_size = 137041375265288, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, requested_size = 137041375265288}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, length1 = 137041375265288, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11033770984949, kind = (unknown: 0x8), shadow_byte = 2 '\002'}, heap = {addr = 11033770984949, alloc_tid = 137041375265288, free_tid = 392, alloc_stack_id = 1853751424, free_stack_id = 31907, chunk_access = {bad_addr = 752, offset = 140731103666184, chunk_begin = 139858905971487, chunk_size = 1, user_requested_alignment = 128, access_type = 1, alloc_type = 2}}, stack = {addr = 11033770984949, tid = 137041375265288, offset = 392, frame_pc = 137041375264896, access_size = 752, frame_descr = 0x7ffe83716008 ""}, global = {addr = 11033770984949, static kMaxGlobals = 4, globals = {{beg = 137041375265288, size = 392, size_with_redzone = 137041375264896, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffe83716008 "", has_dynamic_init = 139858905971487, gcc_location = 0x1, odr_indicator = 136285461188736}, {beg = 140731103692464, size = 139858906928594, size_with_redzone = 3, name = 0x1e6ef6b000 <error: Cannot access memory at address 0x1e6ef6b000>, module_name = 0x7ffe8371be90 "\020Vwp3\177", has_dynamic_init = 2, gcc_location = 0x7f3370775610 <___interceptor_malloc(__sanitizer::uptr)+192>, odr_indicator = 93834252728086}, {beg = 140731103690560, size = 7, size_with_redzone = 139858907643840, name = 0x7b536e8e8400 "\003\021", module_name = 0x7ffe8371bf10 "0\277q\203\376\177", has_dynamic_init = 139858907028838, gcc_location = 0x7ffe8371bf70, odr_indicator = 6}, {beg = 139858907643840, size = 136285461252848, size_with_redzone = 140731103690560, name = 0x7f3370691738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x78 <error: Cannot access memory at address 0x78>, has_dynamic_init = 136285461252848, gcc_location = 0x7ffe8371bf30, odr_indicator = 139858894254446}}, reg_sites = {0, 0, 2101653276, 21847}, access_size = 140731103692384, size = 80 'P'}, wild = {addr = 11033770984949, access_size = 137041375265288}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 139858907355031, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 139858907355031, alloc_tid = 139858903891200, free_tid = 140731103692032, alloc_stack_id = 1886656723, free_stack_id = 32563, chunk_access = {bad_addr = 140731103692032, offset = 1884031544, chunk_begin = 140731103692128, chunk_size = 139858903871062, user_requested_alignment = 384, access_type = 0, alloc_type = 0}}, stack = {addr = 139858907355031, tid = 139858903891200, offset = 140731103692032, frame_pc = 139858906716371, access_size = 140731103692032, frame_descr = 0x704c0a38 <error: Cannot access memory at address 0x704c0a38>}, global = {addr = 139858907355031, static kMaxGlobals = 4, globals = {{beg = 139858903891200, size = 140731103692032, size_with_redzone = 139858906716371, name = 0x7ffe8371c500 "\200\001~nC|", module_name = 0x704c0a38 <error: Cannot access memory at address 0x704c0a38>, has_dynamic_init = 140731103692128, gcc_location = 0x7f337048ae56, odr_indicator = 136629058404736}, {beg = 139858903871012, size = 140731103692080, size_with_redzone = 6976880642720, name = 0x15 <error: Cannot access memory at address 0x15>, module_name = 0x2fa5d740 <error: Cannot access memory at address 0x2fa5d740>, has_dynamic_init = 140731103692112, gcc_location = 0x7b936e7e0aa0, odr_indicator = 140731103692144}, {beg = 136285461252864, size = 136629058404736, size_with_redzone = 135735705679312, name = 0x55577d62b800 <watch_destroy> "\363\017\036\372SH\211\373H\203\354\020H\205\377\017\2049\002", module_name = 0x7f33704efdce "I\211\305L9\360tJH\205\300tUH\213E\310dH+\004%(", has_dynamic_init = 136285461252864, gcc_location = 0x7f33704efdce, odr_indicator = 93834254137344}, {beg = 0, size = 140731103692240, size_with_redzone = 139858904284622, name = 0x7c336e7e0440 "\001", module_name = 0x7b736e7f84d0 "\002", has_dynamic_init = 44, gcc_location = 0x0, odr_indicator = 135735705306328}}, reg_sites = {1854223848, 31603, 1853850864, 31603}, access_size = 93834254139214, size = 208 '\320'}, wild = {addr = 139858907355031, access_size = 139858903891200}}}}, function = 0x9ea797fd5d0ecf00 <error: Cannot access memory at address 0x9ea797fd5d0ecf00>}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, addr_description = {data = {kind = 1853751816, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11033770984949, alloc_stack_id = 1853751816, free_stack_id = 31907, chunk_access = {bad_addr = 392, offset = 137041375264896, chunk_begin = 752, chunk_size = 140731103666184, user_requested_alignment = 2847, access_type = 3, alloc_type = 2}}, stack = {addr = 0, tid = 0, offset = 11033770984949, frame_pc = 137041375265288, access_size = 392, frame_descr = 0x7ca36e7e0080 "\t\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11033770984949, size_with_redzone = 137041375265288, name = 0x188 <error: Cannot access memory at address 0x188>, module_name = 0x7ca36e7e0080 "\t\n", has_dynamic_init = 752, gcc_location = 0x7ffe83716008, odr_indicator = 139858905971487}, {beg = 1, size = 136285461188736, size_with_redzone = 140731103692464, name = 0x7f33707755d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x3 <error: Cannot access memory at address 0x3>, has_dynamic_init = 130710679552, gcc_location = 0x7ffe8371be90, odr_indicator = 2}, {beg = 139858906928656, size = 93834252728086, size_with_redzone = 140731103690560, name = 0x7 <error: Cannot access memory at address 0x7>, module_name = 0x7f3370823fc0 <__asan::instance> "", has_dynamic_init = 135598267335680, gcc_location = 0x7ffe8371bf10, odr_indicator = 139858907028838}, {beg = 140731103690608, size = 6, size_with_redzone = 139858907643840, name = 0x7bf36e818af0 "\003\021", module_name = 0x7ffe8371bf40 "\b", has_dynamic_init = 139858905995064, gcc_location = 0x78, odr_indicator = 136285461252848}}, reg_sites = {2205269808, 32766, 1874194798, 32563}, access_size = 0, size = 28 '\034'}, wild = {addr = 0, access_size = 0}}}}, size = 140731103692384}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, beg = 137041375265288, end = 0, old_mid = 0, new_mid = 11033770984949}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, storage_beg = 137041375265288, storage_end = 0, old_container_beg = 0, old_container_end = 11033770984949, new_container_beg = 137041375265288, new_container_end = 392}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, stack = 0x7ffe00000002, old_storage_beg = 137041375265288, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11033770984949}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, global1 = {beg = 140728898420738, size = 137041375265288, size_with_redzone = 0, name = 0x0, module_name = 0xa09000005f5 <error: Cannot access memory at address 0xa09000005f5>, has_dynamic_init = 137041375265288, gcc_location = 0x188, odr_indicator = 137041375264896}, global2 = {beg = 752, size = 140731103666184, size_with_redzone = 139858905971487, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7bf36e809080 "", has_dynamic_init = 140731103692464, gcc_location = 0x7f33707755d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 3}, stack_id1 = 1861660672, stack_id2 = 30}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, pc = 140728898420738, bp = 137041375265288, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11033770984949, kind = (unknown: 0x8), shadow_byte = 2 '\002'}, heap = {addr = 11033770984949, alloc_tid = 137041375265288, free_tid = 392, alloc_stack_id = 1853751424, free_stack_id = 31907, chunk_access = {bad_addr = 752, offset = 140731103666184, chunk_begin = 139858905971487, chunk_size = 1, user_requested_alignment = 128, access_type = 1, alloc_type = 2}}, stack = {addr = 11033770984949, tid = 137041375265288, offset = 392, frame_pc = 137041375264896, access_size = 752, frame_descr = 0x7ffe83716008 ""}, global = {addr = 11033770984949, static kMaxGlobals = 4, globals = {{beg = 137041375265288, size = 392, size_with_redzone = 137041375264896, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7ffe83716008 "", has_dynamic_init = 139858905971487, gcc_location = 0x1, odr_indicator = 136285461188736}, {beg = 140731103692464, size = 139858906928594, size_with_redzone = 3, name = 0x1e6ef6b000 <error: Cannot access memory at address 0x1e6ef6b000>, module_name = 0x7ffe8371be90 "\020Vwp3\177", has_dynamic_init = 2, gcc_location = 0x7f3370775610 <___interceptor_malloc(__sanitizer::uptr)+192>, odr_indicator = 93834252728086}, {beg = 140731103690560, size = 7, size_with_redzone = 139858907643840, name = 0x7b536e8e8400 "\003\021", module_name = 0x7ffe8371bf10 "0\277q\203\376\177", has_dynamic_init = 139858907028838, gcc_location = 0x7ffe8371bf70, odr_indicator = 6}, {beg = 139858907643840, size = 136285461252848, size_with_redzone = 140731103690560, name = 0x7f3370691738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x78 <error: Cannot access memory at address 0x78>, has_dynamic_init = 136285461252848, gcc_location = 0x7ffe8371bf30, odr_indicator = 139858894254446}}, reg_sites = {0, 0, 2101653276, 21847}, access_size = 140731103692384, size = 80 'P'}, wild = {addr = 11033770984949, access_size = 137041375265288}}}}, addr2_description = {data = {kind = 8, {shadow = {addr = 139858907355031, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 139858907355031, alloc_tid = 139858903891200, free_tid = 140731103692032, alloc_stack_id = 1886656723, free_stack_id = 32563, chunk_access = {bad_addr = 140731103692032, offset = 1884031544, chunk_begin = 140731103692128, chunk_size = 139858903871062, user_requested_alignment = 384, access_type = 0, alloc_type = 0}}, stack = {addr = 139858907355031, tid = 139858903891200, offset = 140731103692032, frame_pc = 139858906716371, access_size = 140731103692032, frame_descr = 0x704c0a38 <error: Cannot access memory at address 0x704c0a38>}, global = {addr = 139858907355031, static kMaxGlobals = 4, globals = {{beg = 139858903891200, size = 140731103692032, size_with_redzone = 139858906716371, name = 0x7ffe8371c500 "\200\001~nC|", module_name = 0x704c0a38 <error: Cannot access memory at address 0x704c0a38>, has_dynamic_init = 140731103692128, gcc_location = 0x7f337048ae56, odr_indicator = 136629058404736}, {beg = 139858903871012, size = 140731103692080, size_with_redzone = 6976880642720, name = 0x15 <error: Cannot access memory at address 0x15>, module_name = 0x2fa5d740 <error: Cannot access memory at address 0x2fa5d740>, has_dynamic_init = 140731103692112, gcc_location = 0x7b936e7e0aa0, odr_indicator = 140731103692144}, {beg = 136285461252864, size = 136629058404736, size_with_redzone = 135735705679312, name = 0x55577d62b800 <watch_destroy> "\363\017\036\372SH\211\373H\203\354\020H\205\377\017\2049\002", module_name = 0x7f33704efdce "I\211\305L9\360tJH\205\300tUH\213E\310dH+\004%(", has_dynamic_init = 136285461252864, gcc_location = 0x7f33704efdce, odr_indicator = 93834254137344}, {beg = 0, size = 140731103692240, size_with_redzone = 139858904284622, name = 0x7c336e7e0440 "\001", module_name = 0x7b736e7f84d0 "\002", has_dynamic_init = 44, gcc_location = 0x0, odr_indicator = 135735705306328}}, reg_sites = {1854223848, 31603, 1853850864, 31603}, access_size = 93834254139214, size = 208 '\320'}, wild = {addr = 139858907355031, access_size = 139858903891200}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137041375265288, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137041375265288, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1525, free_stack_id = 2569, chunk_access = {bad_addr = 137041375265288, offset = 392, chunk_begin = 137041375264896, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137041375265288, tid = 0, offset = 0, frame_pc = 11033770984949, access_size = 137041375265288, frame_descr = 0x188 <error: Cannot access memory at address 0x188>}, global = {addr = 137041375265288, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11033770984949, name = 0x7ca36e7e0208 "", module_name = 0x188 <error: Cannot access memory at address 0x188>, has_dynamic_init = 137041375264896, gcc_location = 0x2f0, odr_indicator = 140731103666184}, {beg = 139858905971487, size = 1, size_with_redzone = 136285461188736, name = 0x7ffe8371c6b0 "P2/}WU", module_name = 0x7f33707755d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 3, gcc_location = 0x1e6ef6b000, odr_indicator = 140731103690384}, {beg = 2, size = 139858906928656, size_with_redzone = 93834252728086, name = 0x7ffe8371bf40 "\b", module_name = 0x7 <error: Cannot access memory at address 0x7>, has_dynamic_init = 139858907643840, gcc_location = 0x7b536e8e8400, odr_indicator = 140731103690512}, {beg = 139858907028838, size = 140731103690608, size_with_redzone = 6, name = 0x7f3370823fc0 <__asan::instance> "", module_name = 0x7bf36e818af0 "\003\021", has_dynamic_init = 140731103690560, gcc_location = 0x7f3370691738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248>, odr_indicator = 120}}, reg_sites = {1853983472, 31731, 2205269808, 32766}, access_size = 139858894254446, size = 0 '\000'}, wild = {addr = 137041375265288, access_size = 0}}}}, pc = 93834252168988, bp = 140731103692384, sp = 140731103692368, access_size = 8, bug_descr = 0x7f33707dd797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 51, descr = "8-byte-read-heap-use-after-free\0003{\000\000\377\000\000\000\000\000\000\000\000(r}WU\000\000f\335xp3\177\000\000\320\272q\203\376\177\000\000\002\000\000\000\000\000\000\000\300?\202p3\177\000\000\020\n\177n\263{\000\000\240\272q\203\376\177\000\0008\027ip3\177\000\000^\000\000\000\000\000\000\000\020\n\177n\263{\000\000\320\260\366n3\177\000\000\300\272q\203\376\177\000\000 \n\177n\263{\000\000q\000\000\000\000\000\000\0000\303q\203\376\177\000\000^\000\000\000\000\000\000\000\360\302q\203\376\177\000\000\301Cwp3\177\000\000\202Jk}WU\000\000\270\377\377\377"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137041375265288, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137041375265288, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1525, free_stack_id = 2569, chunk_access = {bad_addr = 137041375265288, offset = 392, chunk_begin = 137041375264896, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137041375265288, tid = 0, offset = 0, frame_pc = 11033770984949, access_size = 137041375265288, frame_descr = 0x188 <error: Cannot access memory at address 0x188>}, global = {addr = 137041375265288, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11033770984949, name = 0x7ca36e7e0208 "", module_name = 0x188 <error: Cannot access memory at address 0x188>, has_dynamic_init = 137041375264896, gcc_location = 0x2f0, odr_indicator = 140731103666184}, {beg = 139858905971487, size = 1, size_with_redzone = 136285461188736, name = 0x7ffe8371c6b0 "P2/}WU", module_name = 0x7f33707755d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 3, gcc_location = 0x1e6ef6b000, odr_indicator = 140731103690384}, {beg = 2, size = 139858906928656, size_with_redzone = 93834252728086, name = 0x7ffe8371bf40 "\b", module_name = 0x7 <error: Cannot access memory at address 0x7>, has_dynamic_init = 139858907643840, gcc_location = 0x7b536e8e8400, odr_indicator = 140731103690512}, {beg = 139858907028838, size = 140731103690608, size_with_redzone = 6, name = 0x7f3370823fc0 <__asan::instance> "", module_name = 0x7bf36e818af0 "\003\021", has_dynamic_init = 140731103690560, gcc_location = 0x7f3370691738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248>, odr_indicator = 120}}, reg_sites = {1853983472, 31731, 2205269808, 32766}, access_size = 139858894254446, size = 0 '\000'}, wild = {addr = 137041375265288, access_size = 0}}}}, pc = 93834252168988, bp = 140731103692384, sp = 140731103692368, access_size = 8, bug_descr = 0x7f33707dd797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007f3370781f8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140731103692384, sp=sp@entry=140731103692368, addr=<optimized out>, is_write=is_write@entry=false, access_size=access_size@entry=8, exp=<optimized out>, fatal=true) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007f33707833f9 in __asan::__asan_report_load8 (addr=<optimized out>) at ../../../../src/libsanitizer/asan/asan_rtl.cpp:131
bp = 140731103692384
pc = <optimized out>
local_stack = 140731103692496
sp = 140731103692368
#11 0x000055577d44af1c in device_get_adapter (device=<optimized out>) at src/device.c:6917
No locals.
#12 0x000055577d2f328f in find_cig_session (data=0x7bf36e807a00, match_data=0x7b336d683f30) at profiles/audio/bap.c:2500
session = 0x7bf36e807a00
info = 0x7b336d683f30
#13 0x000055577d4d20f1 in queue_find (queue=<optimized out>, function=function@entry=0x55577d2f3250 <find_cig_session>, match_data=match_data@entry=0x7b336d683f30) at src/shared/queue.c:230
entry = 0x7b536e859b10
#14 0x000055577d2f9d54 in find_cig_enumerate (data=0x7bf36e809080) at profiles/audio/bap.c:2539
info = <optimized out>
#15 bap_update_cigs_cb (user_data=0x7bf36e809080) at profiles/audio/bap.c:2688
data = 0x7bf36e809080
cigs = <optimized out>
unset = <optimized out>
#16 0x00007f337048db9b in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#17 0x00007f337048f1d7 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#18 0x00007f337048f577 in g_main_loop_run () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#19 0x000055577d62e029 in mainloop_run () at src/shared/mainloop-glib.c:65
No locals.
#20 0x000055577d62e95b in mainloop_run_with_signal (func=func@entry=0x55577d493a50 <signal_callback>, user_data=user_data@entry=0x0) at src/shared/mainloop-notify.c:196
data = 0x7b636e7e3490
io = 0x7b736e7f9b10
ret = <optimized out>
#21 0x000055577d1ac2cb in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1713
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
FAIL functional.test_bap::test_bap_unicast_set_transport_acquire[hosts8-vm3]: failed on teardown with "pytest_bluezenv.plugin.CoredumpWarning: Core dump: test-bluezenv-hosts8.0-bluetoothd-1789854236-90.core
/usr/bin/gdb: warning: Couldn't determine a path for the index cache directory.
[New LWP 90]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/runner/work/bluez/bluez/src/src/src/bluetoothd --nodetach -f /run/bluetoo'.
Program terminated with signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
warning: 44 ./nptl/pthread_kill.c: No such file or directory
Thread 1 (Thread 0x7ff41c22e900 (LWP 90)):
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
tid = <optimized out>
ret = 0
pd = <optimized out>
old_mask = {__val = {4412750543122677053}}
ret = <optimized out>
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
No locals.
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
No locals.
#3 0x00007ff41c989b7e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
ret = <optimized out>
#4 0x00007ff41c96c8ec in __GI_abort () at ./stdlib/abort.c:77
act = {__sigaction_handler = {sa_handler = 0x4, sa_sigaction = 0x4}, sa_mask = {__val = {136288337399600, 136288337399456, 16356312889622200064, 140733496263824, 140733496264112, 140733496263968, 22, 140686425414608, 0, 140733496263904, 140686442259990, 140686412570624, 4096, 0, 16356312889622200064, 140686416752664}}, sa_flags = 499863552, sa_restorer = 0x16}
#5 0x00007ff41d594a0f in __sanitizer::Abort () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix_libcdep.cpp:165
No locals.
#6 0x00007ff41d6bac2d in __sanitizer::Die () at ../../../../src/libsanitizer/sanitizer_common/sanitizer_termination.cpp:58
No locals.
#7 0x00007ff41d68f93c in __asan::ScopedInErrorReport::~ScopedInErrorReport (this=0x7fff120d8656) at ../../../../src/libsanitizer/asan/asan_report.cpp:221
buffer_copy = {buffer_ = {<__sanitizer::InternalMmapVectorNoCtor<char, false>> = {data_ = 0x7ff41ba46000 '=' <repeats 65 times>, "\n==90==ERROR: AddressSanitizer: heap-use-after-free on address 0x7d641b6e040b at pc 0x7ff41d644445 bp 0x7fff120d9b50 sp 0x7fff120d92f8\n"..., capacity_bytes_ = 4096, size_ = 3838}, <No data fields>}}
buffer_copy = <optimized out>
l = <optimized out>
#8 0x00007ff41d68ee02 in __asan::ReportGenericError (pc=140686441858117, bp=140733496269648, sp=sp@entry=140733496267512, addr=addr@entry=137868910396427, is_write=is_write@entry=false, access_size=6, fatal=false, exp=<optimized out>) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = {error_report_lock_ = {<No data fields>}, static current_error_ = {kind = __asan::kErrorKindGeneric, {Base = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, DeadlySignal = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, signal = {siginfo = 0xffffffff00000002, context = 0x7d641b6e040b, addr = 0, pc = 0, sp = 11940009084456, bp = 137868910396427, is_memory_access = 11, write_flag = __sanitizer::SignalContext::Unknown, is_true_faulting_addr = false}}, DoubleFree = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, second_free_stack = 0xffffffff00000002, addr_description = {addr = 137868910396427, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2780, chunk_access = {bad_addr = 137868910396427, offset = 11, chunk_begin = 137868910396416, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}}, NewDeleteTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {addr = 137868910396427, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2780, chunk_access = {bad_addr = 137868910396427, offset = 11, chunk_begin = 137868910396416, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, delete_size = 136288343889696, delete_alignment = 140733496265440}, FreeNotMalloced = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, free_stack = 0xffffffff00000002, addr_description = {data = {kind = 460194827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11940009084456, alloc_stack_id = 460194827, free_stack_id = 32100, chunk_access = {bad_addr = 11, offset = 137868910396416, chunk_begin = 752, chunk_size = 140733496254472, user_requested_alignment = 1824, access_type = 1, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 11940009084456, frame_pc = 137868910396427, access_size = 11, frame_descr = 0x7d641b6e0400 "\334\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11940009084456, size_with_redzone = 137868910396427, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7d641b6e0400 "\334\n", has_dynamic_init = 752, gcc_location = 0x7fff120d6008, odr_indicator = 136288343889696}, {beg = 140733496265440, size = 140686441155359, size_with_redzone = 1, name = 0x7bf41a531720 "", module_name = 0x7fff120d9330 "@\223\r\022\377\177", has_dynamic_init = 140686442112466, gcc_location = 0x7ff41be780d0, odr_indicator = 129151896384}, {beg = 140733496265488, size = 3, size_with_redzone = 140686442112528, name = 0x7ff41c9dab8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55d6a1e815eb <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733496268272, gcc_location = 0x7fff120d8bd0, odr_indicator = 2}, {beg = 140686442827712, size = 136700679782704, size_with_redzone = 140733496265632, name = 0x7ff41d59e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136700679782704, gcc_location = 0x7ff41be780d0, odr_indicator = 140733496265664}}, reg_sites = {460685632, 31828, 81, 0}, access_size = 140733496267824, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, AllocTypeMismatch = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, dealloc_stack = 0xffffffff00000002, alloc_type = 460194827, dealloc_type = 32100, addr_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 0, kind = (unknown: 0x28), shadow_byte = 6 '\006'}, heap = {addr = 0, alloc_tid = 11940009084456, free_tid = 137868910396427, alloc_stack_id = 11, free_stack_id = 0, chunk_access = {bad_addr = 137868910396416, offset = 752, chunk_begin = 140733496254472, chunk_size = 136288343889696, user_requested_alignment = 2784, access_type = 0, alloc_type = 2}}, stack = {addr = 0, tid = 11940009084456, offset = 137868910396427, frame_pc = 11, access_size = 137868910396416, frame_descr = 0x2f0 <error: Cannot access memory at address 0x2f0>}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 11940009084456, size = 137868910396427, size_with_redzone = 11, name = 0x7d641b6e0400 "\334\n", module_name = 0x2f0 <error: Cannot access memory at address 0x2f0>, has_dynamic_init = 140733496254472, gcc_location = 0x7bf41a531720, odr_indicator = 140733496265440}, {beg = 140686441155359, size = 1, size_with_redzone = 136288343889696, name = 0x7fff120d9330 "@\223\r\022\377\177", module_name = 0x7ff41d6825d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", has_dynamic_init = 140686416904400, gcc_location = 0x1e120d8b40, odr_indicator = 140733496265488}, {beg = 3, size = 140686442112528, size_with_redzone = 140686428842895, name = 0x55d6a1e815eb <bt_log_vprintf+171> "\205\300\017\210=\001", module_name = 0x7fff120d95f0 "\224\227\r\022\377\177", has_dynamic_init = 140733496265680, gcc_location = 0x2, odr_indicator = 140686442827712}, {beg = 136700679782704, size = 140733496265632, size_with_redzone = 140686441178936, name = 0x3e <error: Cannot access memory at address 0x3e>, module_name = 0x7c541b758130 "\003\021", has_dynamic_init = 140686416904400, gcc_location = 0x7fff120d8bc0, odr_indicator = 136700679782720}}, reg_sites = {81, 0, 302879792, 32767}, access_size = 140686441858117, size = 80 'P'}, wild = {addr = 0, access_size = 11940009084456}}}}}, MallocUsableSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 460194827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11940009084456, alloc_stack_id = 460194827, free_stack_id = 32100, chunk_access = {bad_addr = 11, offset = 137868910396416, chunk_begin = 752, chunk_size = 140733496254472, user_requested_alignment = 1824, access_type = 1, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 11940009084456, frame_pc = 137868910396427, access_size = 11, frame_descr = 0x7d641b6e0400 "\334\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11940009084456, size_with_redzone = 137868910396427, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7d641b6e0400 "\334\n", has_dynamic_init = 752, gcc_location = 0x7fff120d6008, odr_indicator = 136288343889696}, {beg = 140733496265440, size = 140686441155359, size_with_redzone = 1, name = 0x7bf41a531720 "", module_name = 0x7fff120d9330 "@\223\r\022\377\177", has_dynamic_init = 140686442112466, gcc_location = 0x7ff41be780d0, odr_indicator = 129151896384}, {beg = 140733496265488, size = 3, size_with_redzone = 140686442112528, name = 0x7ff41c9dab8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55d6a1e815eb <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733496268272, gcc_location = 0x7fff120d8bd0, odr_indicator = 2}, {beg = 140686442827712, size = 136700679782704, size_with_redzone = 140733496265632, name = 0x7ff41d59e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136700679782704, gcc_location = 0x7ff41be780d0, odr_indicator = 140733496265664}}, reg_sites = {460685632, 31828, 81, 0}, access_size = 140733496267824, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, SanitizerGetAllocatedSizeNotOwned = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 460194827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11940009084456, alloc_stack_id = 460194827, free_stack_id = 32100, chunk_access = {bad_addr = 11, offset = 137868910396416, chunk_begin = 752, chunk_size = 140733496254472, user_requested_alignment = 1824, access_type = 1, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 11940009084456, frame_pc = 137868910396427, access_size = 11, frame_descr = 0x7d641b6e0400 "\334\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11940009084456, size_with_redzone = 137868910396427, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7d641b6e0400 "\334\n", has_dynamic_init = 752, gcc_location = 0x7fff120d6008, odr_indicator = 136288343889696}, {beg = 140733496265440, size = 140686441155359, size_with_redzone = 1, name = 0x7bf41a531720 "", module_name = 0x7fff120d9330 "@\223\r\022\377\177", has_dynamic_init = 140686442112466, gcc_location = 0x7ff41be780d0, odr_indicator = 129151896384}, {beg = 140733496265488, size = 3, size_with_redzone = 140686442112528, name = 0x7ff41c9dab8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55d6a1e815eb <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733496268272, gcc_location = 0x7fff120d8bd0, odr_indicator = 2}, {beg = 140686442827712, size = 136700679782704, size_with_redzone = 140733496265632, name = 0x7ff41d59e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136700679782704, gcc_location = 0x7ff41be780d0, odr_indicator = 140733496265664}}, reg_sites = {460685632, 31828, 81, 0}, access_size = 140733496267824, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}}, CallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137868910396427, size = 0}, ReallocArrayOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, count = 137868910396427, size = 0}, PvallocOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137868910396427}, InvalidAllocationAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137868910396427}, InvalidAlignedAllocAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, size = 137868910396427, alignment = 0}, InvalidPosixMemalignAlignment = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, alignment = 137868910396427}, AllocationSizeTooBig = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, user_size = 137868910396427, total_size = 0, max_size = 0}, RssLimitExceeded = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002}, OutOfMemory = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, requested_size = 137868910396427}, StringFunctionMemoryRangesOverlap = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, length1 = 137868910396427, length2 = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11940009084456, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11940009084456, alloc_tid = 137868910396427, free_tid = 11, alloc_stack_id = 460194816, free_stack_id = 32100, chunk_access = {bad_addr = 752, offset = 140733496254472, chunk_begin = 136288343889696, chunk_size = 140733496265440, user_requested_alignment = 2847, access_type = 0, alloc_type = 2}}, stack = {addr = 11940009084456, tid = 137868910396427, offset = 11, frame_pc = 137868910396416, access_size = 752, frame_descr = 0x7fff120d6008 ""}, global = {addr = 11940009084456, static kMaxGlobals = 4, globals = {{beg = 137868910396427, size = 11, size_with_redzone = 137868910396416, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7fff120d6008 "", has_dynamic_init = 136288343889696, gcc_location = 0x7fff120d8ae0, odr_indicator = 140686441155359}, {beg = 1, size = 136288343889696, size_with_redzone = 140733496267568, name = 0x7ff41d6825d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7ff41be780d0 "", has_dynamic_init = 129151896384, gcc_location = 0x7fff120d8b10, odr_indicator = 3}, {beg = 140686442112528, size = 140686428842895, size_with_redzone = 94380327704043, name = 0x7fff120d95f0 "\224\227\r\022\377\177", module_name = 0x7fff120d8bd0 "\030", has_dynamic_init = 2, gcc_location = 0x7ff41d730fc0 <__asan::instance>, odr_indicator = 136700679782704}, {beg = 140733496265632, size = 140686441178936, size_with_redzone = 62, name = 0x7c541b758130 "\003\021", module_name = 0x7ff41be780d0 "", has_dynamic_init = 140733496265664, gcc_location = 0x7c541b758140, odr_indicator = 81}}, reg_sites = {302879792, 32767, 493110341, 32756}, access_size = 140733496269648, size = 248 '\370'}, wild = {addr = 11940009084456, access_size = 137868910396427}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 140686442538903, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140686442538903, alloc_tid = 140686442888448, free_tid = 140733496269200, alloc_stack_id = 493364690, free_stack_id = 32756, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140733496267120, chunk_size = 3, user_requested_alignment = 1552, access_type = 2, alloc_type = 0}}, stack = {addr = 140686442538903, tid = 140686442888448, offset = 140733496269200, frame_pc = 140686442112466, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 140686442538903, static kMaxGlobals = 4, globals = {{beg = 140686442888448, size = 140733496269200, size_with_redzone = 140686442112466, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140733496267120, gcc_location = 0x3, odr_indicator = 140686442112528}, {beg = 140686428842895, size = 94380327704043, size_with_redzone = 140733496269904, name = 0x7fff120d91f0 "\020\222\r\022\377\177", module_name = 0x7ff41d72af78 "\001", has_dynamic_init = 140733496267312, gcc_location = 0x55d6a1fc2600, odr_indicator = 140686420797624}, {beg = 65535, size = 140733496267232, size_with_redzone = 140686441943897, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7bf41a761e00 "\0166\340E", has_dynamic_init = 140733496267280, gcc_location = 0x7ff41d5a574a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140733496267280}, {beg = 140686442368893, size = 140733496267312, size_with_redzone = 140686442212710, name = 0x7fff120d92b0 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 140686442827712, gcc_location = 0x7c341b74d780, odr_indicator = 140733496267392}}, reg_sites = {492431160, 32756, 40, 0}, access_size = 140686442318365, size = 208 '\320'}, wild = {addr = 140686442538903, access_size = 140686442888448}}}}, function = 0x7fff120d92a0 "P\233\r\022\377\177"}, StringFunctionSizeOverflow = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, addr_description = {data = {kind = 460194827, {shadow = {addr = 0, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 0, alloc_tid = 0, free_tid = 11940009084456, alloc_stack_id = 460194827, free_stack_id = 32100, chunk_access = {bad_addr = 11, offset = 137868910396416, chunk_begin = 752, chunk_size = 140733496254472, user_requested_alignment = 1824, access_type = 1, alloc_type = 0}}, stack = {addr = 0, tid = 0, offset = 11940009084456, frame_pc = 137868910396427, access_size = 11, frame_descr = 0x7d641b6e0400 "\334\n"}, global = {addr = 0, static kMaxGlobals = 4, globals = {{beg = 0, size = 11940009084456, size_with_redzone = 137868910396427, name = 0xb <error: Cannot access memory at address 0xb>, module_name = 0x7d641b6e0400 "\334\n", has_dynamic_init = 752, gcc_location = 0x7fff120d6008, odr_indicator = 136288343889696}, {beg = 140733496265440, size = 140686441155359, size_with_redzone = 1, name = 0x7bf41a531720 "", module_name = 0x7fff120d9330 "@\223\r\022\377\177", has_dynamic_init = 140686442112466, gcc_location = 0x7ff41be780d0, odr_indicator = 129151896384}, {beg = 140733496265488, size = 3, size_with_redzone = 140686442112528, name = 0x7ff41c9dab8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", module_name = 0x55d6a1e815eb <bt_log_vprintf+171> "\205\300\017\210=\001", has_dynamic_init = 140733496268272, gcc_location = 0x7fff120d8bd0, odr_indicator = 2}, {beg = 140686442827712, size = 136700679782704, size_with_redzone = 140733496265632, name = 0x7ff41d59e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", module_name = 0x3e <error: Cannot access memory at address 0x3e>, has_dynamic_init = 136700679782704, gcc_location = 0x7ff41be780d0, odr_indicator = 140733496265664}}, reg_sites = {460685632, 31828, 81, 0}, access_size = 140733496267824, size = 69 'E'}, wild = {addr = 0, access_size = 0}}}}, size = 140733496269648}, BadParamsToAnnotateContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, beg = 137868910396427, end = 0, old_mid = 0, new_mid = 11940009084456}, BadParamsToAnnotateDoubleEndedContiguousContainer = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, storage_beg = 137868910396427, storage_end = 0, old_container_beg = 0, old_container_end = 11940009084456, new_container_beg = 137868910396427, new_container_end = 11}, BadParamsToCopyContiguousContainerAnnotations = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, stack = 0xffffffff00000002, old_storage_beg = 137868910396427, old_storage_end = 0, new_storage_beg = 0, new_storage_end = 11940009084456}, ODRViolation = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, global1 = {beg = 18446744069414584322, size = 137868910396427, size_with_redzone = 0, name = 0x0, module_name = 0xadc00000628 <error: Cannot access memory at address 0xadc00000628>, has_dynamic_init = 137868910396427, gcc_location = 0xb, odr_indicator = 137868910396416}, global2 = {beg = 752, size = 140733496254472, size_with_redzone = 136288343889696, name = 0x7fff120d8ae0 "0\223\r\022\377\177", module_name = 0x7ff41d598b1f <__asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*)+47> "H\205\300t\f\311\303f.\017\037\204", has_dynamic_init = 1, gcc_location = 0x7bf41a531720, odr_indicator = 140733496267568}, stack_id1 = 493364690, stack_id2 = 32756}, InvalidPointerPair = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, pc = 18446744069414584322, bp = 137868910396427, sp = 0, addr1_description = {data = {kind = __asan::kAddressKindWild, {shadow = {addr = 11940009084456, kind = (__asan::kShadowKindGap | __asan::kShadowKindHigh | unknown: 0x8), shadow_byte = 4 '\004'}, heap = {addr = 11940009084456, alloc_tid = 137868910396427, free_tid = 11, alloc_stack_id = 460194816, free_stack_id = 32100, chunk_access = {bad_addr = 752, offset = 140733496254472, chunk_begin = 136288343889696, chunk_size = 140733496265440, user_requested_alignment = 2847, access_type = 0, alloc_type = 2}}, stack = {addr = 11940009084456, tid = 137868910396427, offset = 11, frame_pc = 137868910396416, access_size = 752, frame_descr = 0x7fff120d6008 ""}, global = {addr = 11940009084456, static kMaxGlobals = 4, globals = {{beg = 137868910396427, size = 11, size_with_redzone = 137868910396416, name = 0x2f0 <error: Cannot access memory at address 0x2f0>, module_name = 0x7fff120d6008 "", has_dynamic_init = 136288343889696, gcc_location = 0x7fff120d8ae0, odr_indicator = 140686441155359}, {beg = 1, size = 136288343889696, size_with_redzone = 140733496267568, name = 0x7ff41d6825d2 <___interceptor_malloc(__sanitizer::uptr)+130> "H\213U\350dH+\024%(", module_name = 0x7ff41be780d0 "", has_dynamic_init = 129151896384, gcc_location = 0x7fff120d8b10, odr_indicator = 3}, {beg = 140686442112528, size = 140686428842895, size_with_redzone = 94380327704043, name = 0x7fff120d95f0 "\224\227\r\022\377\177", module_name = 0x7fff120d8bd0 "\030", has_dynamic_init = 2, gcc_location = 0x7ff41d730fc0 <__asan::instance>, odr_indicator = 136700679782704}, {beg = 140733496265632, size = 140686441178936, size_with_redzone = 62, name = 0x7c541b758130 "\003\021", module_name = 0x7ff41be780d0 "", has_dynamic_init = 140733496265664, gcc_location = 0x7c541b758140, odr_indicator = 81}}, reg_sites = {302879792, 32767, 493110341, 32756}, access_size = 140733496269648, size = 248 '\370'}, wild = {addr = 11940009084456, access_size = 137868910396427}}}}, addr2_description = {data = {kind = 6, {shadow = {addr = 140686442538903, kind = __asan::kShadowKindLow, shadow_byte = 253 '\375'}, heap = {addr = 140686442538903, alloc_tid = 140686442888448, free_tid = 140733496269200, alloc_stack_id = 493364690, free_stack_id = 32756, chunk_access = {bad_addr = 8315162673665959470, offset = 130735371371, chunk_begin = 140733496267120, chunk_size = 3, user_requested_alignment = 1552, access_type = 2, alloc_type = 0}}, stack = {addr = 140686442538903, tid = 140686442888448, offset = 140733496269200, frame_pc = 140686442112466, access_size = 8315162673665959470, frame_descr = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>}, global = {addr = 140686442538903, static kMaxGlobals = 4, globals = {{beg = 140686442888448, size = 140733496269200, size_with_redzone = 140686442112466, name = 0x736564656572662e <error: Cannot access memory at address 0x736564656572662e>, module_name = 0x1e706f746b <error: Cannot access memory at address 0x1e706f746b>, has_dynamic_init = 140733496267120, gcc_location = 0x3, odr_indicator = 140686442112528}, {beg = 140686428842895, size = 94380327704043, size_with_redzone = 140733496269904, name = 0x7fff120d91f0 "\020\222\r\022\377\177", module_name = 0x7ff41d72af78 "\001", has_dynamic_init = 140733496267312, gcc_location = 0x55d6a1fc2600, odr_indicator = 140686420797624}, {beg = 65535, size = 140733496267232, size_with_redzone = 140686441943897, name = 0x40 <error: Cannot access memory at address 0x40>, module_name = 0x7bf41a761e00 "\0166\340E", has_dynamic_init = 140733496267280, gcc_location = 0x7ff41d5a574a <__asan_stack_malloc_0(__sanitizer::uptr)+234>, odr_indicator = 140733496267280}, {beg = 140686442368893, size = 140733496267312, size_with_redzone = 140686442212710, name = 0x7fff120d92b0 "", module_name = 0x2 <error: Cannot access memory at address 0x2>, has_dynamic_init = 140686442827712, gcc_location = 0x7c341b74d780, odr_indicator = 140733496267392}}, reg_sites = {492431160, 32756, 40, 0}, access_size = 140686442318365, size = 208 '\320'}, wild = {addr = 140686442538903, access_size = 140686442888448}}}}}, Generic = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137868910396427, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137868910396427, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2780, chunk_access = {bad_addr = 137868910396427, offset = 11, chunk_begin = 137868910396416, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137868910396427, tid = 0, offset = 0, frame_pc = 11940009084456, access_size = 137868910396427, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137868910396427, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11940009084456, name = 0x7d641b6e040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137868910396416, gcc_location = 0x2f0, odr_indicator = 140733496254472}, {beg = 136288343889696, size = 140733496265440, size_with_redzone = 140686441155359, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7bf41a531720 "", has_dynamic_init = 140733496267568, gcc_location = 0x7ff41d6825d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 140686416904400}, {beg = 129151896384, size = 140733496265488, size_with_redzone = 3, name = 0x7ff41d682610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7ff41c9dab8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 94380327704043, gcc_location = 0x7fff120d95f0, odr_indicator = 140733496265680}, {beg = 2, size = 140686442827712, size_with_redzone = 136700679782704, name = 0x7fff120d8ba0 "P\233\r\022\377\177", module_name = 0x7ff41d59e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7c541b758130, odr_indicator = 140686416904400}}, reg_sites = {302877632, 32767, 460685632, 31828}, access_size = 81, size = 48 '0'}, wild = {addr = 137868910396427, access_size = 0}}}}, pc = 140686441858117, bp = 140733496269648, sp = 140733496267512, access_size = 6, bug_descr = 0x7ff41d6ea797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}}}, halt_on_error_ = true}
error = {<__asan::ErrorBase> = {scariness = {score = 48, descr = "6-byte-read-heap-use-after-free\000\377\177\000\000\002\000\000\000bluetoothd[9\000\377\022\345\351K\375\342nal] org \221\r\022\377\177\000\000\320\206\r\022\377\177\000\000.\314\246\034\364\177\000\000\001\000\000\000\000\000\000\000=\000\000\000\000\000\000\000P\217\r\022\377\177\000\000\211\255\235\034\364\177\000\000\f\207\r\022\377\177\000\000\f\207\r\022\377\177\000\000\f\217\r\022\377\177\000\000N\000\000\000\000\000\000\000\006\000\000\000\364\177\000\000\002\000\000\000bluetoothd[90]: [signal] org.fre"...}, tid = 0}, addr_description = {data = {kind = __asan::kAddressKindHeap, {shadow = {addr = 137868910396427, kind = __asan::kShadowKindLow, shadow_byte = 0 '\000'}, heap = {addr = 137868910396427, alloc_tid = 0, free_tid = 0, alloc_stack_id = 1576, free_stack_id = 2780, chunk_access = {bad_addr = 137868910396427, offset = 11, chunk_begin = 137868910396416, chunk_size = 752, user_requested_alignment = 8, access_type = 2, alloc_type = 1}}, stack = {addr = 137868910396427, tid = 0, offset = 0, frame_pc = 11940009084456, access_size = 137868910396427, frame_descr = 0xb <error: Cannot access memory at address 0xb>}, global = {addr = 137868910396427, static kMaxGlobals = 4, globals = {{beg = 0, size = 0, size_with_redzone = 11940009084456, name = 0x7d641b6e040b "B", module_name = 0xb <error: Cannot access memory at address 0xb>, has_dynamic_init = 137868910396416, gcc_location = 0x2f0, odr_indicator = 140733496254472}, {beg = 136288343889696, size = 140733496265440, size_with_redzone = 140686441155359, name = 0x1 <error: Cannot access memory at address 0x1>, module_name = 0x7bf41a531720 "", has_dynamic_init = 140733496267568, gcc_location = 0x7ff41d6825d2 <___interceptor_malloc(__sanitizer::uptr)+130>, odr_indicator = 140686416904400}, {beg = 129151896384, size = 140733496265488, size_with_redzone = 3, name = 0x7ff41d682610 <___interceptor_malloc(__sanitizer::uptr)+192> "D\213\215\314\367\377\377E\205\311tTH\211m\330A\203\371\001t*E\017\276\3061\311H\211\352H\211\306H\215\275\320\367\377\377\350\"\004\001", module_name = 0x7ff41c9dab8f <__vasprintf_internal+255> "I\211\004$H\205\300t(H\213\265\330\376\377\377L\211\352H\211\307\350\366\032\371\377H\211\301\353\212\350\254\346\n", has_dynamic_init = 94380327704043, gcc_location = 0x7fff120d95f0, odr_indicator = 140733496265680}, {beg = 2, size = 140686442827712, size_with_redzone = 136700679782704, name = 0x7fff120d8ba0 "P\233\r\022\377\177", module_name = 0x7ff41d59e738 <__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Put(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback, __asan::AsanChunk*, unsigned long)+248> "H\203;", has_dynamic_init = 62, gcc_location = 0x7c541b758130, odr_indicator = 140686416904400}}, reg_sites = {302877632, 32767, 460685632, 31828}, access_size = 81, size = 48 '0'}, wild = {addr = 137868910396427, access_size = 0}}}}, pc = 140686441858117, bp = 140733496269648, sp = 140733496267512, access_size = 6, bug_descr = 0x7ff41d6ea797 "heap-use-after-free", is_write = false, shadow_val = 253 '\375'}
#9 0x00007ff41d68ef8d in __asan::ReportGenericError (pc=<optimized out>, bp=bp@entry=140733496269648, sp=sp@entry=140733496267512, addr=addr@entry=137868910396427, is_write=is_write@entry=false, access_size=access_size@entry=6, exp=<optimized out>, fatal=false) at ../../../../src/libsanitizer/asan/asan_report.cpp:536
in_report = <optimized out>
error = <optimized out>
enable_fp = <optimized out>
#10 0x00007ff41d644468 in MemcmpInterceptorCommon (ctx=ctx@entry=0x7fff120d9b60, real_fn=<optimized out>, a1=a1@entry=0x7d641b6e040b, a2=a2@entry=0x7bf41a48e160, size=size@entry=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:848
bp = 140733496269648
pc = <optimized out>
local_stack = 137525313011776
sp = 140733496267512
_ctx = 0x7fff120d9b60
suppressed = <optimized out>
__offset = 137868910396427
__size = 6
__bad = <optimized out>
result = <optimized out>
#11 0x00007ff41d644835 in ___interceptor_memcmp (a1=0x7d641b6e040b, a2=0x7bf41a48e160, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:880
ctx = 0x7fff120d9b60
_ctx = {interceptor_name = 0x7ff41d6ee6b6 "memcmp"}
#12 ___interceptor_memcmp (a1=0x7d641b6e040b, a2=0x7bf41a48e160, size=6) at ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:875
ctx = <optimized out>
_ctx = <optimized out>
#13 0x000055d6a1d650b8 in bacmp (ba1=0x7d641b6e040b, ba2=0x7bf41a48e160) at ./lib/bluetooth/bluetooth.h:438
No locals.
#14 device_addr_type_cmp (a=0x7d641b6e0400, b=0x7bf41a48e160) at src/device.c:5657
dev = 0x7d641b6e0400
addr = 0x7bf41a48e160
cmp = <optimized out>
#15 0x00007ff41d3be4c2 in g_slist_find_custom () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#16 0x000055d6a1ce4774 in btd_adapter_find_device (adapter=<optimized out>, dst=dst@entry=0x7c341b723898, bdaddr_type=1 '\001') at src/adapter.c:1055
addr = <optimized out>
device = <optimized out>
list = <optimized out>
#17 0x000055d6a1c86c87 in att_disconnected (err=<optimized out>, user_data=0x7c341b723890) at src/gatt-database.c:335
state = 0x7c341b723890
device = <optimized out>
__func__ = "att_disconnected"
#18 0x000055d6a1c9dbb4 in btd_gatt_database_att_disconnected (database=<optimized out>, device=<optimized out>) at src/gatt-database.c:4238
server = <optimized out>
att = <optimized out>
state = <optimized out>
addr = <optimized out>
type = <optimized out>
__func__ = "btd_gatt_database_att_disconnected"
#19 0x000055d6a1d47166 in gatt_server_cleanup (device=device@entry=0x7d641b6e0080) at src/device.c:842
No locals.
#20 0x000055d6a1d5b85c in attio_cleanup (device=0x7d641b6e0080) at src/device.c:862
No locals.
#21 0x000055d6a1d5bea7 in device_free (user_data=0x7d641b6e0080) at src/device.c:918
device = 0x7d641b6e0080
__func__ = "device_free"
#22 0x000055d6a1dd9aba in remove_interface (data=0x7c641b6eac80, name=name@entry=0x55d6a1fe6ac0 "org.bluez.Device1") at gdbus/object.c:742
iface = 0x7c541b6fe560
#23 0x000055d6a1ddc67c in g_dbus_unregister_interface (connection=<optimized out>, path=<optimized out>, name=<optimized out>) at gdbus/object.c:1499
data = <optimized out>
#24 0x000055d6a1d17233 in adapter_remove (adapter=adapter@entry=0x7d241b6e0200) at src/adapter.c:7307
l = 0x7c141b70b2f0 = {0x7d641b6e0080}
db = <optimized out>
ranging_manager = <optimized out>
__func__ = "adapter_remove"
#25 0x000055d6a1d17dc8 in adapter_cleanup () at src/adapter.c:11263
adapter = 0x7d241b6e0200
#26 0x000055d6a1ac92f0 in main (argc=<optimized out>, argv=<optimized out>) at src/main.c:1723
context = <optimized out>
err = <optimized out>
sdp_mtu = 0
sdp_flags = <optimized out>
gdbus_flags = <optimized out>
__func__ = "main""
https://github.com/bluez/bluez/pull/2555
---
Regards,
Linux Bluetooth
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-09-19 22:10 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-19 18:44 [PATCH BlueZ] a2dp: Fix crash on NULL stream in transport_cb Iaroslav Voitovych
2026-09-19 22:10 ` [BlueZ] " bluez.test.bot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox