Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 2 files:

Smatch caller information:

net/bluetooth/mgmt.c mesh_device_found() -> mgmt_alloc_skb()

Type Parameter Key Value
PARAM_VALUE 0 hdev 4096-ptr_max
PARAM_VALUE 0 hdev->dev_flags 4096-ptr_max
PARAM_VALUE 0 hdev->lock->first_waiter->task->blocked_lock.owner (-4611686018427387904)-4611686018427387903
PARAM_VALUE 0 hdev->lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner_cpu 4294967295
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.first_waiter->task->usage.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 hdev->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.wait_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->mesh_ad_types 4096-ptr_max
PARAM_VALUE 0 hdev->recv_event 0,4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->req_skb 0,4096-ptr_max
PARAM_VALUE 1 opcode 49
PARAM_VALUE 2 size 22-65812
BUF_SIZE 0 hdev->recv_event (-1),1-s32max
DATA_SOURCE 0 hdev $0
RX_PATH
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->len
UNITS 2 size unit_byte
USER_PTR 0 hdev->recv_event->data
LOCK2 0 &hdev->lock
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct hci_dev)->lock

net/bluetooth/mgmt.c mgmt_device_connected() -> mgmt_alloc_skb()

Type Parameter Key Value
PARAM_VALUE 0 hdev 4096-ptr_max
PARAM_VALUE 0 hdev->dev_flags 4096-ptr_max
PARAM_VALUE 0 hdev->lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner_cpu 4294967295
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.first_waiter->task->usage.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 hdev->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.wait_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->recv_event 0,4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev 4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.owner (-1)
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.raw_lock.cnts.counter 0-s32max
PARAM_VALUE 0 hdev->req_skb 0,4096-ptr_max
PARAM_VALUE 1 opcode 11
PARAM_VALUE 2 size 14-268
BUF_SIZE 0 hdev->recv_event (-1)-s32max
DATA_SOURCE 0 hdev $0
RX_PATH
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->end
UNITS 2 size unit_byte
USER_PTR 0 hdev->recv_event->data
LOCK2 &pool->lock
LOCK2 0 &hdev->lock
TYPE_LOCK (struct hci_dev)->lock

net/bluetooth/mgmt.c mgmt_device_connected() -> mgmt_alloc_skb()

Type Parameter Key Value
PARAM_VALUE 0 hdev 4096-ptr_max
PARAM_VALUE 0 hdev->dev_flags 4096-ptr_max
PARAM_VALUE 0 hdev->lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner_cpu 4294967295
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.first_waiter->task->usage.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 hdev->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.wait_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->recv_event 0,4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev 4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.owner (-1)
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.raw_lock.cnts.counter 0-s32max
PARAM_VALUE 0 hdev->req_skb 0,4096-ptr_max
PARAM_VALUE 1 opcode 11
PARAM_VALUE 2 size 18,20-268
BUF_SIZE 0 hdev->recv_event (-1)-s32max
DATA_SOURCE 0 hdev $0
RX_PATH
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->end
UNITS 2 size unit_byte
USER_PTR 0 hdev->recv_event->data
LOCK2 &pool->lock
LOCK2 0 &hdev->lock
TYPE_LOCK (struct hci_dev)->lock

net/bluetooth/mgmt.c mgmt_device_found() -> mgmt_alloc_skb()

Type Parameter Key Value
PARAM_VALUE 0 hdev 4096-ptr_max
PARAM_VALUE 0 hdev->dev_flags 4096-ptr_max
PARAM_VALUE 0 hdev->lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner_cpu 4294967295
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.first_waiter->task->usage.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 hdev->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.wait_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->recv_event 0,4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->req_skb 0,4096-ptr_max
PARAM_VALUE 1 opcode 18
PARAM_VALUE 2 size 19-65809
BUF_SIZE 0 hdev->recv_event (-1),1-s32max
DATA_SOURCE 0 hdev $0
RX_PATH
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->len
UNITS 2 size unit_byte
USER_PTR 0 hdev->recv_event->data
LOCK2 &pool->lock
LOCK2 0 &hdev->lock
TYPE_LOCK (struct hci_dev)->lock

net/bluetooth/mgmt.c mgmt_remote_name() -> mgmt_alloc_skb()

Type Parameter Key Value
PARAM_VALUE 0 hdev 4096-ptr_max
PARAM_VALUE 0 hdev->dev_flags 4096-ptr_max
PARAM_VALUE 0 hdev->discovery.state 3
PARAM_VALUE 0 hdev->lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner_cpu 4294967295
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.first_waiter->task->usage.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 hdev->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.wait_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->recv_event 0,4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev 4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.owner (-1)
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->recv_event->sk->sk_callback_lock.raw_lock.cnts.counter 0-s32max
PARAM_VALUE 0 hdev->req_skb 0,4096-ptr_max
PARAM_VALUE 1 opcode 18
PARAM_VALUE 2 size 14,16-264
BUF_SIZE 0 hdev->recv_event (-1)-s32max
DATA_SOURCE 0 hdev $0
RX_PATH
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->end
UNITS 2 size unit_byte
USER_PTR 0 hdev->recv_event->data
LOCK2 &pool->lock
LOCK2 0 &hdev->lock
TYPE_LOCK (struct hci_dev)->lock

net/bluetooth/mgmt.c mgmt_send_adv_monitor_device_found() -> mgmt_alloc_skb()

Type Parameter Key Value
PARAM_VALUE 0 hdev 4096-ptr_max
PARAM_VALUE 0 hdev->dev_flags 4096-ptr_max
PARAM_VALUE 0 hdev->lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.owner_cpu 4294967295
PARAM_VALUE 0 hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.first_waiter->task->usage.refs.counter s32min-s32max
PARAM_VALUE 0 hdev->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 hdev->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 hdev->lock.wait_lock.owner (-1)
PARAM_VALUE 0 hdev->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 0 hdev->recv_event 0,4096-ptr_max
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 hdev->recv_event->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 hdev->req_skb 0,4096-ptr_max
PARAM_VALUE 0 hdev->workqueue->flags 0-4294967295
PARAM_VALUE 1 opcode 47
BUF_SIZE 0 hdev->recv_event (-1),1-s32max
DATA_SOURCE 0 hdev $0
RX_PATH
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->truesize
UNITS 2 size unit_byte
USER_PTR 0 hdev->recv_event->data
LOCK2 0 &hdev->lock
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct hci_dev)->lock

net/bluetooth/mgmt_util.c mgmt_send_event() -> mgmt_alloc_skb()

Type Parameter Key Value
PARAM_VALUE 0 hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 hdev->debugfs->d_inode->i_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 hdev->debugfs->d_parent->d_sb->__s_d_op->d_init 0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE 0 hdev->debugfs->d_parent->d_sb->__s_d_op->d_iput 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE 0 hdev->debugfs->d_parent->d_sb->__s_d_op->d_manage 0,1859587847549206528
PARAM_VALUE 0 hdev->debugfs->d_parent->d_sb->__s_d_op->d_prune 0,2225594340392566784,7225953709177749504
PARAM_VALUE 0 hdev->debugfs->d_parent->d_sb->__s_d_op->d_real 0,4509355519306412032
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_automount 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_init 0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_iput 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_manage 0,1859587847549206528
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_prune 0,2225594340392566784,7225953709177749504
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_real 0,4509355519306412032
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_unalias_trylock 0,6635409759016140800
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_unalias_unlock 0,6336447517789900800
PARAM_VALUE 0 hdev->debugfs->d_sb->__s_d_op->d_weak_revalidate 0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328
PARAM_VALUE 0 hdev->hci_drv->specific_handler_count 0,2
PARAM_VALUE 1 opcode 4-10,12-17,19-39,42-46,48,50-51
BUF_SIZE 0 hdev (-1)-s32max
BUF_SIZE 0 hdev (-1)-s32max
BUF_SIZE 0 hdev->dev.parent (-1),1616
BUF_SIZE 0 hdev->recv_event (-1),1-s32max
CAPPED_DATA 2 size 1
DATA_SOURCE 0 hdev $1
DATA_SOURCE 1 opcode $0
DATA_SOURCE 2 size $4
HARD_MAX 1 opcode 51
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 hdev->appearance 0-u16max[u]
USER_DATA 0 hdev->pkt_type 0-u16max
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->data_len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->end
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->len
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->tail
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->tail
NO_OVERFLOW_SIMPLE 0 hdev->cmd_q.next->truesize
UNITS 2 size unit_byte
USER_PTR 0 hdev->irk
USER_PTR 0 hdev->recv_event->data
HALF_LOCKED2 global &mgmt_chan_list_lock
HALF_LOCKED2 0 &hdev->cmd_sync_work_lock
HALF_LOCKED2 0 &hdev->lock
HALF_LOCKED2 0 &hdev->req_lock