__hci_cmd_send identifier - Linux source code next-20260811

Projects

linux

Versions

FIXME
- FIXME
  - next-20260811

Defined in 1 files as a prototype:

include/net/bluetooth/hci_core.h, line 2359 (as a prototype)

Defined in 1 files as a function:

net/bluetooth/hci_core.c, line 3080 (as a function)

Referenced in 9 files:

Smatch caller information:

drivers/bluetooth/hci_qca.c hci_coredump_qca() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	1	opcode	64524
PARAM_VALUE	2	plen	1
PARAM_VALUE	3	param	4096-ptr_max
BUF_SIZE	3	param	1
DATA_SOURCE	0	hdev	$0

drivers/bluetooth/btmtkuart.c mtk_hci_wmt_sync() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	0	hdev	4096-ptr_max
PARAM_VALUE	0	hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set	0-1
PARAM_VALUE	0	hdev->debugfs->d_inode->i_rwsem.first_waiter->type	0-1
PARAM_VALUE	0	hdev->dev.driver_data	4096-ptr_max
PARAM_VALUE	0	hdev->dev_flags	4096-ptr_max
PARAM_VALUE	0	hdev->hci_drv->specific_handler_count	0,2
PARAM_VALUE	0	hdev->req_lock.first_waiter	0,4096-ptr_max
PARAM_VALUE	0	hdev->req_lock.first_waiter->list.prev->next	5159360019465732096
PARAM_VALUE	0	hdev->req_lock.osq.tail.counter	0-s32max
PARAM_VALUE	0	hdev->req_lock.wait_lock.owner	(-1)
PARAM_VALUE	0	hdev->req_lock.wait_lock.owner_cpu	u32max
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->workqueue->flags	0-4294967295
PARAM_VALUE	0	hdev->workqueue->flush_color	s32min-s32max
PARAM_VALUE	0	hdev->workqueue->nr_drainers	s32min-s32max
PARAM_VALUE	0	hdev->workqueue->work_color	s32min-s32max
PARAM_VALUE	1	opcode	64623
PARAM_VALUE	2	plen	5-255
PARAM_VALUE	3	param	4096-ptr_max
BUF_SIZE	0	hdev	(-1)-s32max
BUF_SIZE	0	hdev	(-1)-s32max
BUF_SIZE	3	param	5-255
CAPPED_DATA	0	hdev	1
DATA_SOURCE	0	hdev	$0
DATA_SOURCE	3	param	r _kzalloc_noprof
FUZZY_MAX	2	plen	255
STR_LEN	0	hdev	(-1),23
STR_LEN	0	hdev	(-1),23
HARD_MAX	2	plen	255
RX_PATH
TASK_NOT_RUNNING
UNITS	2	plen	unit_byte
LOCK2	0	&hdev->req_lock
TYPE_LOCK		(struct hci_dev)->req_lock

drivers/bluetooth/btqca.c qca_tlv_send_segment() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	0	hdev	4096-ptr_max
PARAM_VALUE	0	hdev->dev.devres_head.prev	4096-ptr_max
PARAM_VALUE	0	hdev->dev.devres_head.prev->next	4096-ptr_max
PARAM_VALUE	0	hdev->dev.devres_head.prev->next->next	4096-ptr_max
PARAM_VALUE	0	hdev->dev.driver_data	4096-ptr_max
PARAM_VALUE	0	hdev->quirk_flags	4096-ptr_max
PARAM_VALUE	0	hdev->req_result	0
PARAM_VALUE	0	hdev->req_rsp	0
PARAM_VALUE	0	hdev->req_rsp->_nfct	0
PARAM_VALUE	0	hdev->req_rsp->_skb_refdst	0
PARAM_VALUE	0	hdev->req_rsp->active_extensions	0
PARAM_VALUE	0	hdev->req_rsp->destructor	0
PARAM_VALUE	0	hdev->req_rsp->sk	0
PARAM_VALUE	0	hdev->req_rsp->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead	1
PARAM_VALUE	0	hdev->req_rsp->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev	4096-ptr_max
PARAM_VALUE	0	hdev->req_rsp->sk->__sk_common.skc_net.net->refcnt_tracker.dead	1
PARAM_VALUE	0	hdev->req_rsp->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_rsp->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->req_rsp->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_rsp->sk->sk_bpf_storage->owner_refcnt.refs.counter	s32min-s32max
PARAM_VALUE	0	hdev->req_rsp->sk->sk_callback_lock.owner	(-1)
PARAM_VALUE	0	hdev->req_rsp->sk->sk_callback_lock.owner_cpu	u32max
PARAM_VALUE	0	hdev->req_rsp->sk->sk_callback_lock.raw_lock.cnts.counter	0-s32max
PARAM_VALUE	0	hdev->req_rsp->sk->sk_rcu.func	1-u64max
PARAM_VALUE	0	hdev->req_status	0-1
PARAM_VALUE	1	opcode	64512
PARAM_VALUE	2	plen	3-245
PARAM_VALUE	3	param	4096-ptr_max
BUF_SIZE	3	param	245
CAPPED_DATA	0	hdev	1
CAPPED_DATA	2	plen	1
DATA_SOURCE	0	hdev	$0
RX_PATH
TASK_NOT_RUNNING
UNITS	2	plen	unit_byte
LOCK2		&hdev->req_lock
TYPE_LOCK		(struct hci_dev)->req_lock

drivers/bluetooth/btusb.c btusb_coredump_qca() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	0	hdev	4096-ptr_max
PARAM_VALUE	0	hdev->dump.coredump	1-u64max
PARAM_VALUE	1	opcode	64524
PARAM_VALUE	2	plen	1
PARAM_VALUE	3	param	4096-ptr_max
BUF_SIZE	3	param	1
DATA_SOURCE	0	hdev	$0
RX_PATH
TASK_NOT_RUNNING
LOCK2		&dev->mutex
LOCK2		&of->mutex
HALF_LOCKED2		&of->prealloc_mutex
HALF_LOCKED2		&pool->lock
TYPE_LOCK		(struct device)->mutex
TYPE_LOCK		(struct kernfs_open_file)->mutex

drivers/bluetooth/btrtl.c btrtl_coredump() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	0	hdev	4096-ptr_max
PARAM_VALUE	0	hdev->dump.coredump	1-u64max
PARAM_VALUE	1	opcode	64767
PARAM_VALUE	2	plen	2
PARAM_VALUE	3	param	4096-ptr_max
BUF_SIZE	3	param	2
DATA_SOURCE	0	hdev	$0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS	2	plen	unit_byte
LOCK2		&dev->mutex
LOCK2		&of->mutex
HALF_LOCKED2		&of->prealloc_mutex
HALF_LOCKED2		&pool->lock
TYPE_LOCK		(struct device)->mutex
TYPE_LOCK		(struct kernfs_open_file)->mutex

drivers/bluetooth/btmtksdio.c mtk_hci_wmt_sync() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	0	hdev	4096-ptr_max
PARAM_VALUE	0	hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set	0-1
PARAM_VALUE	0	hdev->debugfs->d_inode->i_rwsem.first_waiter->type	0-1
PARAM_VALUE	0	hdev->dev_flags	4096-ptr_max
PARAM_VALUE	0	hdev->hci_drv->specific_handler_count	0,2
PARAM_VALUE	0	hdev->req_lock.first_waiter	0,4096-ptr_max
PARAM_VALUE	0	hdev->req_lock.first_waiter->list.prev->next	5159360019465732096
PARAM_VALUE	0	hdev->req_lock.osq.tail.counter	0-s32max
PARAM_VALUE	0	hdev->req_lock.wait_lock.owner	(-1)
PARAM_VALUE	0	hdev->req_lock.wait_lock.owner_cpu	u32max
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->workqueue->flags	0-4294967295
PARAM_VALUE	0	hdev->workqueue->flush_color	s32min-s32max
PARAM_VALUE	0	hdev->workqueue->nr_drainers	s32min-s32max
PARAM_VALUE	0	hdev->workqueue->work_color	s32min-s32max
PARAM_VALUE	1	opcode	64623
PARAM_VALUE	2	plen	5-255
PARAM_VALUE	3	param	4096-ptr_max
BUF_SIZE	0	hdev	(-1)-s32max
BUF_SIZE	0	hdev	(-1)-s32max
BUF_SIZE	3	param	5-255
CAPPED_DATA	0	hdev	1
DATA_SOURCE	0	hdev	$0
DATA_SOURCE	3	param	r _kzalloc_noprof
FUZZY_MAX	2	plen	255
STR_LEN	0	hdev	(-1),23,63
STR_LEN	0	hdev	(-1),23,63
HARD_MAX	2	plen	255
RX_PATH
TASK_NOT_RUNNING
UNITS	2	plen	unit_byte
LOCK2	0	&hdev->req_lock
TYPE_LOCK		(struct hci_dev)->req_lock

drivers/bluetooth/btmtk.c btmtk_coredump() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	0	hdev	4096-ptr_max
PARAM_VALUE	0	hdev->dump.coredump	1-u64max
PARAM_VALUE	1	opcode	64859
PARAM_VALUE	2	plen	0
PARAM_VALUE	3	param	0
DATA_SOURCE	0	hdev	$0
RX_PATH
TASK_NOT_RUNNING
LOCK2		&dev->mutex
LOCK2		&of->mutex
HALF_LOCKED2		&of->prealloc_mutex
HALF_LOCKED2		&pool->lock
TYPE_LOCK		(struct device)->mutex
TYPE_LOCK		(struct kernfs_open_file)->mutex

drivers/bluetooth/btmtk.c btmtk_usb_hci_wmt_sync() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	0	hdev	4096-ptr_max
PARAM_VALUE	0	hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set	0-1
PARAM_VALUE	0	hdev->debugfs->d_inode->i_rwsem.first_waiter->type	0-1
PARAM_VALUE	0	hdev->debugfs->d_parent->d_sb->__s_d_op->d_init	0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE	0	hdev->debugfs->d_parent->d_sb->__s_d_op->d_iput	0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE	0	hdev->debugfs->d_parent->d_sb->__s_d_op->d_manage	0,1859587847549206528
PARAM_VALUE	0	hdev->debugfs->d_parent->d_sb->__s_d_op->d_prune	0,2225594340392566784,7225953709177749504
PARAM_VALUE	0	hdev->debugfs->d_parent->d_sb->__s_d_op->d_real	0,4509355519306412032
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_automount	0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_init	0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_iput	0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_manage	0,1859587847549206528
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_prune	0,2225594340392566784,7225953709177749504
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_real	0,4509355519306412032
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_unalias_trylock	0,6635409759016140800
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_unalias_unlock	0,6336447517789900800
PARAM_VALUE	0	hdev->debugfs->d_sb->__s_d_op->d_weak_revalidate	0,1549882712720502784,5632434648052031488,5669063523602272256,7231033168839651328
PARAM_VALUE	0	hdev->dev_flags	4096-ptr_max
PARAM_VALUE	0	hdev->hci_drv->specific_handler_count	0,2
PARAM_VALUE	0	hdev->req_lock.first_waiter	0,4096-ptr_max
PARAM_VALUE	0	hdev->req_lock.first_waiter->list.prev->next	5159360019465732096
PARAM_VALUE	0	hdev->req_lock.osq.tail.counter	0-s32max
PARAM_VALUE	0	hdev->req_lock.wait_lock.owner	(-1)
PARAM_VALUE	0	hdev->req_lock.wait_lock.owner_cpu	u32max
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->workqueue->flags	0-4294967295
PARAM_VALUE	0	hdev->workqueue->flush_color	s32min-s32max
PARAM_VALUE	0	hdev->workqueue->nr_drainers	s32min-s32max
PARAM_VALUE	0	hdev->workqueue->work_color	s32min-s32max
PARAM_VALUE	1	opcode	64623
PARAM_VALUE	2	plen	5-255
PARAM_VALUE	3	param	4096-ptr_max
BUF_SIZE	0	hdev	(-1)-s32max
BUF_SIZE	0	hdev	(-1)-s32max
BUF_SIZE	0	hdev->dev.parent	(-1),1616
BUF_SIZE	3	param	5-255
CAPPED_DATA	0	hdev	1
DATA_SOURCE	0	hdev	$0
DATA_SOURCE	3	param	r _kzalloc_noprof
FUZZY_MAX	2	plen	255
STR_LEN	0	hdev	(-1),23,63
STR_LEN	0	hdev	(-1),23,63
HARD_MAX	2	plen	255
RX_PATH
TASK_NOT_RUNNING
UNITS	2	plen	unit_byte
LOCK2	0	&hdev->req_lock
TYPE_LOCK		(struct hci_dev)->req_lock

drivers/bluetooth/btnxpuart.c nxp_drv_send_cmd() -> __hci_cmd_send()

Type	Parameter	Key	Value
PARAM_VALUE	0	hdev	4096-ptr_max
PARAM_VALUE	0	hdev->adv_instance_timeout	0
PARAM_VALUE	0	hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set	0-1
PARAM_VALUE	0	hdev->debugfs->d_inode->i_rwsem.first_waiter->type	0-1
PARAM_VALUE	0	hdev->dev_flags	4096-ptr_max
PARAM_VALUE	0	hdev->hci_drv->specific_handler_count	0,2
PARAM_VALUE	0	hdev->interleave_scan.work.lockdep_map->name	0-255
PARAM_VALUE	0	hdev->interleave_scan_state	0
PARAM_VALUE	0	hdev->req_lock.first_waiter	0,4096-ptr_max
PARAM_VALUE	0	hdev->req_lock.first_waiter->list.prev->next	5159360019465732096
PARAM_VALUE	0	hdev->req_lock.osq.tail.counter	0-s32max
PARAM_VALUE	0	hdev->req_lock.wait_lock.owner	(-1)
PARAM_VALUE	0	hdev->req_lock.wait_lock.owner_cpu	u32max
PARAM_VALUE	0	hdev->req_result	1-s32max
PARAM_VALUE	0	hdev->req_rsp->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_rsp->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->req_rsp->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->req_skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->req_status	0,2-u32max
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	hdev->sent_cmd->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	hdev->shutdown	1-u64max
PARAM_VALUE	0	hdev->workqueue->flags	0-4294967295
PARAM_VALUE	0	hdev->workqueue->flush_color	s32min-s32max
PARAM_VALUE	0	hdev->workqueue->nr_drainers	s32min-s32max
PARAM_VALUE	0	hdev->workqueue->work_color	s32min-s32max
PARAM_VALUE	1	opcode	64764
PARAM_VALUE	2	plen	1
PARAM_VALUE	3	param	5690820242573443072
PARAM_VALUE	3	*param	0
BUF_SIZE	0	hdev	(-1)-s32max
BUF_SIZE	0	hdev	(-1)-s32max
CAPPED_DATA	0	hdev	1
DATA_SOURCE	0	hdev	$0
DATA_SOURCE	1	opcode	$1
DATA_SOURCE	2	plen	$2
DATA_SOURCE	3	param	$3
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2	0	&hdev->req_lock
HALF_LOCKED2		&pool->lock
TYPE_LOCK		(struct hci_dev)->req_lock