|
WARNING in hci_send_acl (4)
prio:low
bluetooth
|
-1 |
|
|
|
1 |
100d |
96d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (4)
prio:high
bluetooth
|
12 |
|
|
|
4 |
98d |
103d
|
|
KASAN: slab-use-after-free Read in skb_pull (2)
prio:normal
bluetooth
|
19 |
|
|
|
1 |
118d |
117d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
19 |
syz, C |
|
|
448 |
355d |
608d
|
|
INFO: trying to register non-static key in l2cap_unregister_user
bluetooth
prio:high
|
-1 |
|
|
|
13 |
164d |
313d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
4 |
syz |
error |
error |
569 |
153d |
512d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (3)
bluetooth
prio:high
|
22 |
syz, C |
error |
|
1023 |
145d |
265d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
prio:high
|
4 |
|
|
|
94 |
152d |
546d
|
|
general protection fault in l2cap_conn_del (2)
bluetooth
|
2 |
|
|
|
1 |
155d |
151d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
19 |
syz, C |
error |
error |
3383 |
741d |
870d
|
|
general protection fault in skb_release_data (2)
bluetooth
net
|
22 |
syz, C |
done |
error |
703 |
511d |
2176d
|
|
WARNING: locking bug in l2cap_unregister_user
bluetooth
|
4 |
|
|
|
6 |
207d |
243d
|
|
WARNING in l2cap_unregister_user (2)
bluetooth
|
-1 |
|
|
|
1 |
203d |
203d
|
|
INFO: task hung in le_conn_complete_evt (2)
bluetooth
|
1 |
|
|
|
1 |
216d |
216d
|
|
general protection fault in h5_recv
bluetooth
|
10 |
syz, C |
done |
|
3515 |
199d |
562d
|
|
stack segment fault in kernfs_rename_ns
bluetooth
|
2 |
|
|
|
35 |
218d |
401d
|
|
KCSAN: data-race in bacpy / memcmp
race:harmful
bluetooth
|
6 |
|
|
|
1 |
196d |
185d
|
|
general protection fault in hci_abort_conn (2)
bluetooth
|
2 |
|
|
|
1 |
206d |
202d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (3)
bluetooth
|
12 |
|
|
|
3 |
249d |
259d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
1 |
syz |
|
|
17 |
263d |
440d
|
|
KASAN: slab-use-after-free Read in skb_pull
bluetooth
|
19 |
|
|
|
1 |
274d |
270d
|
|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
syz, C |
|
|
1 |
276d |
281d
|
|
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
-1 |
|
|
|
4 |
281d |
284d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2)
bluetooth
|
19 |
|
|
|
6 |
290d |
325d
|
|
WARNING in hci_conn_drop (3)
bluetooth
|
-1 |
|
|
|
2 |
294d |
326d
|
|
WARNING in hci_send_cmd (3)
bluetooth
|
-1 |
|
|
|
1 |
257d |
253d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread (2)
bluetooth
|
19 |
|
|
|
2 |
299d |
348d
|
|
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync
bluetooth
|
6 |
|
|
|
1 |
259d |
259d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
305d |
697d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work (2)
bluetooth
|
19 |
|
|
|
27015 |
279d |
280d
|
|
WARNING in l2cap_unregister_user
bluetooth
|
-1 |
|
|
|
1 |
261d |
261d
|
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
129 |
298d |
673d
|
|
BUG: unable to handle kernel paging request in l2cap_conn_del
bluetooth
|
8 |
|
|
|
1 |
343d |
339d
|
|
KCSAN: data-race in hci_uart_open / hci_uart_tty_close
bluetooth
|
6 |
|
|
|
1 |
302d |
302d
|
|
WARNING: refcount bug in hci_conn_del_sysfs
bluetooth
|
13 |
|
|
|
1 |
340d |
336d
|
|
WARNING in hci_devcd_register (2)
bluetooth
|
-1 |
|
|
|
4 |
356d |
375d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
19 |
358d |
607d
|
|
KASAN: slab-use-after-free Read in skb_dequeue
bluetooth
|
19 |
|
|
|
4 |
348d |
444d
|
|
INFO: task hung in le_conn_complete_evt
bluetooth
|
1 |
|
|
|
1 |
365d |
365d
|
|
KASAN: slab-use-after-free Read in full_proxy_write (2)
bluetooth
|
19 |
|
|
|
3 |
365d |
364d
|
|
INFO: rcu detected stall in tty_release (3)
net
bluetooth
|
1 |
|
|
|
2 |
368d |
424d
|
|
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
31 |
379d |
592d
|
|
general protection fault in skb_queue_tail (4)
bluetooth
|
2 |
|
|
|
1 |
372d |
368d
|
|
KASAN: slab-use-after-free Read in force_suspend_read (2)
bluetooth
|
19 |
|
|
|
1 |
372d |
368d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
syz, C |
inconclusive |
error |
153 |
356d |
834d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user (2)
bluetooth
|
19 |
|
|
|
1 |
352d |
348d
|
|
INFO: task hung in l2cap_unregister_user
bluetooth
|
1 |
|
|
|
2 |
383d |
471d
|
|
WARNING: kobject bug in hci_disconnect_all_sync
bluetooth
|
-1 |
|
|
|
1 |
396d |
392d
|
|
WARNING in l2cap_send_disconn_req (2)
bluetooth
|
-1 |
|
|
|
1 |
403d |
399d
|
|
KMSAN: uninit-value in hci_recv_frame
bluetooth
|
7 |
|
|
|
1 |
364d |
364d
|
|
INFO: task hung in hci_dev_close_sync (3)
bluetooth
|
1 |
|
|
|
8 |
404d |
619d
|
|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
21 |
|
|
|
1 |
433d |
428d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
syz, C |
done |
|
3 |
560d |
564d
|
|
INFO: task hung in hci_conn_hash_flush (3)
bluetooth
|
1 |
|
|
|
1 |
434d |
434d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
syz, C |
unreliable |
done |
39 |
464d |
844d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
462d |
656d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
470d |
797d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2)
bluetooth
|
12 |
|
|
|
2 |
402d |
405d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill (2)
bluetooth
|
19 |
|
|
|
1 |
411d |
411d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
478d |
474d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
480d |
851d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
484d |
545d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
489d |
484d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread
bluetooth
|
19 |
|
|
|
3 |
507d |
558d
|
|
WARNING in hci_devcd_register
bluetooth
|
-1 |
|
|
|
3 |
519d |
597d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
527d |
523d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
12 |
|
|
|
8 |
529d |
574d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
19 |
|
|
|
18 |
529d |
673d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
4 |
|
|
|
21 |
532d |
778d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
22 |
|
|
|
95 |
517d |
631d
|
|
WARNING in sco_conn_put
bluetooth
|
-1 |
|
|
|
2 |
552d |
611d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
13 |
|
|
|
1 |
554d |
550d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
19 |
|
|
|
8 |
557d |
584d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
19 |
|
|
|
3 |
558d |
575d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
syz, C |
done |
|
94 |
546d |
565d
|
|
general protection fault in h5_close
bluetooth
|
2 |
syz, C |
done |
|
5 |
548d |
551d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
syz, C |
|
|
36 |
536d |
604d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
syz, C |
done |
|
3 |
553d |
551d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
19 |
|
|
|
2 |
570d |
641d
|
|
INFO: task hung in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
594d |
594d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
19 |
|
|
|
1 |
604d |
600d
|
|
WARNING in hci_conn_drop
bluetooth
|
-1 |
|
|
|
1 |
606d |
602d
|
|
general protection fault in l2cap_conn_del
bluetooth
|
2 |
|
|
|
2 |
606d |
622d
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
22 |
|
|
|
2 |
607d |
650d
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
19 |
|
|
|
11 |
579d |
585d
|
|
INFO: task hung in hci_abort_conn_sync
bluetooth
|
1 |
|
|
|
1 |
604d |
604d
|
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
19 |
|
|
|
1 |
615d |
610d
|
|
general protection fault in hci_abort_conn
bluetooth
|
2 |
|
|
|
1 |
615d |
592d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb (2)
bluetooth
|
19 |
|
|
|
1 |
564d |
564d
|
|
INFO: rcu detected stall in hci_cmd_timeout (2)
bluetooth
|
1 |
|
|
|
1 |
617d |
617d
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
8 |
|
|
|
1 |
630d |
626d
|
|
INFO: task hung in hci_conn_hash_flush (2)
bluetooth
|
1 |
|
|
|
2 |
623d |
699d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
537d |
616d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
syz, C |
done |
done |
1 |
637d |
636d
|
|
INFO: rcu detected stall in hci_rx_work (2)
bluetooth
|
1 |
|
|
|
1 |
638d |
638d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
636d |
828d
|
|
WARNING in sco_chan_del
bluetooth
|
-1 |
|
|
|
10 |
654d |
836d
|
|
WARNING in emon
bluetooth
|
-1 |
|
|
|
1 |
655d |
651d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
644d |
644d
|
|
INFO: task hung in hci_conn_failed (3)
bluetooth
|
1 |
|
|
|
18 |
627d |
699d
|
|
KASAN: slab-use-after-free Read in hci_send_acl (2)
bluetooth
|
19 |
|
|
|
1 |
668d |
663d
|
|
KASAN: slab-use-after-free Read in sco_chan_del (2)
bluetooth
|
19 |
|
|
|
2 |
673d |
701d
|
|
possible deadlock in touch_wq_lockdep_map (2)
bluetooth
|
4 |
|
|
|
5 |
673d |
683d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
13 |
|
|
|
10 |
674d |
1154d
|
|
WARNING in hci_send_cmd
bluetooth
|
-1 |
|
|
|
8 |
677d |
925d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
syz, C |
done |
|
87 |
666d |
1183d
|
|
KASAN: slab-use-after-free Read in hci_req_cmd_complete
bluetooth
|
19 |
|
|
|
1 |
688d |
680d
|
|
INFO: task hung in hci_remote_features_evt
bluetooth
|
1 |
|
|
|
9 |
685d |
782d
|
|
INFO: task hung in srso_alias_return_thunk
bluetooth
|
1 |
|
|
|
1 |
689d |
689d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
959d |
972d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
syz, C |
error |
done |
13649 |
679d |
1313d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2)
bluetooth
|
12 |
|
|
|
1 |
647d |
647d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue
bluetooth
|
19 |
|
|
|
2 |
717d |
673d
|
|
KASAN: slab-use-after-free Write in mgmt_device_connected
bluetooth
|
22 |
|
|
|
1 |
719d |
697d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete
bluetooth
|
19 |
|
|
|
1 |
699d |
680d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
713d |
855d
|
|
KASAN: slab-use-after-free Read in l2cap_conn_unreliable
bluetooth
|
19 |
|
|
|
1 |
755d |
732d
|
|
WARNING in l2cap_send_cmd
bluetooth
|
-1 |
|
|
|
1 |
764d |
762d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
bluetooth
|
12 |
|
|
|
1 |
765d |
762d
|
|
WARNING in hci_send_acl (3)
bluetooth
|
-1 |
|
|
|
1 |
769d |
765d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
740d |
792d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
19 |
|
|
|
1 |
770d |
732d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
19 |
|
|
|
28 |
745d |
892d
|
|
WARNING in hci_conn_del (2)
bluetooth
|
-1 |
|
|
|
17 |
741d |
738d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
syz, C |
|
|
28 |
750d |
777d
|
|
KASAN: slab-use-after-free Read in hci_req_sync_complete
bluetooth
|
19 |
|
|
|
8 |
784d |
808d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb
bluetooth
|
19 |
|
|
|
7 |
785d |
792d
|
|
WARNING: locking bug in sco_conn_del (2)
bluetooth
|
4 |
|
|
|
1 |
786d |
782d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
syz, C |
|
|
5 |
786d |
800d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata
bluetooth
|
19 |
|
|
|
1 |
787d |
783d
|
|
KASAN: slab-use-after-free Read in skb_free_head
bluetooth
|
19 |
|
|
|
2 |
786d |
805d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
syz, C |
|
|
6 |
799d |
799d
|
|
INFO: rcu detected stall in bt_err
bluetooth
|
1 |
|
|
|
1 |
792d |
792d
|
|
INFO: task hung in hci_conn_failed (2)
bluetooth
|
1 |
|
|
|
1 |
794d |
794d
|
|
WARNING in l2cap_send_disconn_req
bluetooth
|
-1 |
|
|
|
1 |
804d |
800d
|
|
INFO: task hung in l2cap_conn_del
bluetooth
|
1 |
|
|
|
1 |
797d |
797d
|
|
WARNING in lock_sock_nested
bluetooth
sctp
|
-1 |
|
|
|
6 |
727d |
734d
|
|
general protection fault in dequeue_task
bluetooth
|
22 |
|
|
|
783 |
727d |
735d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
syz, C |
error |
done |
7 |
811d |
863d
|
|
KFENCE: invalid free in __hci_req_sync
bluetooth
|
23 |
|
|
|
35 |
782d |
843d
|
|
general protection fault in hci_release_dev (2)
bluetooth
|
2 |
|
|
|
1 |
803d |
799d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1379d |
2208d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2212d |
2212d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb
bluetooth
|
19 |
|
|
|
1 |
820d |
816d
|
|
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
-1 |
|
|
|
5 |
850d |
1016d
|
|
KASAN: slab-use-after-free Read in hci_chan_sent
bluetooth
|
19 |
|
|
|
1 |
811d |
790d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
syz, C |
error |
error |
8 |
859d |
872d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
syz, C |
done |
unreliable |
5 |
867d |
872d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
syz, C |
|
|
14 |
924d |
924d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
17 |
|
|
|
1 |
875d |
869d
|
|
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind
bluetooth
|
6 |
|
|
|
1 |
811d |
811d
|
|
WARNING in msft_do_close
bluetooth
|
-1 |
|
|
|
1 |
879d |
875d
|
|
INFO: rcu detected stall in l2cap_sock_connect
bluetooth
|
1 |
|
|
|
1 |
841d |
841d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
19 |
|
|
|
1 |
884d |
880d
|
|
possible deadlock in hci_dev_close
bluetooth
|
4 |
|
|
|
2 |
846d |
846d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
4 |
|
|
|
6 |
847d |
851d
|
|
WARNING: refcount bug in sco_conn_del (3)
bluetooth
|
13 |
|
|
|
1 |
877d |
873d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
syz, C |
unreliable |
|
28 |
859d |
872d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
syz, C |
|
|
36 |
862d |
872d
|
|
INFO: task hung in hci_cmd_sync_clear (2)
bluetooth
|
1 |
|
|
|
15 |
883d |
1289d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
syz, C |
done |
|
7 |
895d |
1027d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
syz, C |
done |
|
1 |
897d |
940d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
syz, C |
done |
|
10 |
846d |
851d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie
bluetooth
|
19 |
|
|
|
2 |
838d |
846d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
syz, C |
done |
done |
3400 |
904d |
1148d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
syz, C |
|
|
22 |
905d |
967d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
syz, C |
done |
|
18 |
933d |
930d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
syz, C |
done |
done |
1323 |
927d |
1100d
|
|
INFO: task hung in hci_dev_close_sync (2)
bluetooth
|
1 |
|
|
|
2 |
932d |
935d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
syz, C |
done |
done |
63 |
943d |
1089d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason
bluetooth
|
19 |
|
|
|
1 |
972d |
968d
|
|
possible deadlock in discov_off
bluetooth
|
4 |
|
|
|
127 |
966d |
1422d
|
|
possible deadlock in hci_unregister_dev
bluetooth
|
4 |
|
|
|
175 |
967d |
1464d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
syz, C |
|
|
1 |
1007d |
1007d
|
|
KASAN: slab-use-after-free Read in l2cap_connect
bluetooth
|
19 |
|
|
|
1 |
1022d |
1014d
|
|
WARNING in hci_send_acl (2)
bluetooth
|
-1 |
|
|
|
1 |
1021d |
1017d
|
|
KASAN: slab-use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
1035d |
1029d
|
|
KASAN: slab-use-after-free Read in release_sock
bluetooth
|
19 |
|
|
|
1 |
1040d |
1035d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
syz, C |
done |
error |
1067 |
1022d |
1836d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
syz, C |
|
|
65 |
1029d |
1087d
|
|
KASAN: slab-use-after-free Read in lookup_object_or_alloc
bluetooth
|
19 |
|
|
|
2 |
1057d |
1067d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb
bluetooth
|
12 |
|
|
|
1 |
1076d |
1069d
|
|
WARNING: ODEBUG bug in hci_abort_conn_sync
bluetooth
|
-1 |
|
|
|
1 |
1069d |
1065d
|
|
KASAN: use-after-free Read in hci_conn_security
bluetooth
|
19 |
|
|
|
1 |
1089d |
1085d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
syz, C |
error |
done |
4 |
1092d |
1470d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1799d |
2212d
|
|
WARNING: refcount bug in sco_conn_del (2)
bluetooth
|
13 |
|
|
|
1 |
1140d |
1136d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop
bluetooth
|
22 |
|
|
|
1 |
1196d |
1191d
|
|
WARNING in l2cap_do_send
bluetooth
|
-1 |
|
|
|
2 |
1221d |
1296d
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
bluetooth
|
4 |
|
|
|
2 |
1222d |
1226d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
syz, C |
|
|
72 |
1198d |
1224d
|
|
WARNING in hci_send_acl
bluetooth
|
-1 |
|
|
|
1 |
1275d |
1271d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
syz, C |
done |
unreliable |
50 |
2087d |
2214d
|
|
possible deadlock in hci_conn_hash_flush
bluetooth
|
4 |
|
|
|
4 |
1285d |
1415d
|
|
INFO: rcu detected stall in hci_rx_work
bluetooth
|
1 |
|
|
|
1 |
1242d |
1242d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
syz, C |
done |
inconclusive |
131 |
1304d |
2416d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
syz, C |
error |
done |
4 |
1444d |
1440d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
syz, C |
done |
done |
166 |
1479d |
1564d
|
|
linux-next test error: possible deadlock in hci_cmd_sync_clear
bluetooth
|
-1 |
|
|
|
6 |
1278d |
1278d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
syz, C |
unreliable |
inconclusive |
34 |
1424d |
2078d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
syz, C |
error |
|
12 |
1399d |
1429d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1825d |
2591d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
syz, C |
done |
inconclusive |
26 |
1849d |
2211d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
syz, C |
done |
done |
87 |
1935d |
2214d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
syz, C |
done |
error |
13 |
1400d |
1431d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
syz, C |
done |
inconclusive |
37 |
1510d |
1545d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
syz, C |
done |
done |
611 |
1530d |
2216d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
syz, C |
|
|
5 |
1398d |
1415d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
syz, C |
|
|
14 |
1398d |
1409d
|
|
possible deadlock in sco_sock_timeout
bluetooth
|
4 |
|
|
|
1 |
1415d |
1415d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
syz, C |
|
|
1 |
1420d |
1420d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
syz, C |
inconclusive |
inconclusive |
13 |
1505d |
1725d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
3 |
1427d |
1964d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
syz, C |
inconclusive |
done |
3 |
1835d |
1832d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
syz, C |
|
|
1 |
1444d |
1440d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
syz, C |
done |
unreliable |
26 |
2093d |
2367d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2209d |
2209d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2209d |
2208d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1930d |
2211d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
syz, C |
|
|
10 |
2066d |
2214d
|
|
INFO: task hung in hci_cmd_sync_clear
bluetooth
|
1 |
|
|
|
4 |
1468d |
1615d
|
|
general protection fault in rcu_sync_func (3)
bluetooth
|
2 |
|
|
|
2 |
1445d |
1458d
|
|
upstream test error: WARNING in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
90 |
1475d |
1482d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1566d |
2209d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
syz, C |
|
|
2 |
1968d |
2176d
|
|
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
41 |
1475d |
1482d
|
|
net test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
39 |
1477d |
1482d
|
|
general protection fault in klist_next
bluetooth
|
17 |
syz, C |
error |
|
33 |
1420d |
1474d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
syz, C |
inconclusive |
done |
9 |
1780d |
1865d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1765d |
2205d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
syz, C |
done |
|
2256 |
2078d |
2380d
|
|
INFO: task hung in hci_dev_open
bluetooth
|
1 |
|
|
|
6 |
1518d |
1590d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1637d |
1703d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1696d |
1761d
|
|
general protection fault in skb_put
bluetooth
|
2 |
syz, C |
done |
error |
43 |
2177d |
2759d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2209d |
2209d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1773d |
1769d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
syz, C |
done |
inconclusive |
21 |
2260d |
2787d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
syz, C |
|
|
10 |
1884d |
1975d
|
|
WARNING: refcount bug in sco_sock_timeout
bluetooth
|
13 |
|
|
|
24 |
1560d |
1803d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2243d |
2552d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
syz, C |
|
|
3 |
2200d |
2201d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1931d |
2209d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
syz, C |
done |
done |
8 |
2322d |
2863d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2368d |
2368d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
syz, C |
|
|
8 |
1567d |
1563d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2202d |
2201d
|
|
WARNING: locking bug in sco_sock_timeout
bluetooth
|
4 |
|
|
|
13 |
1579d |
1803d
|
|
INFO: trying to register non-static key in sco_sock_timeout
bluetooth
|
-1 |
|
|
|
2 |
1584d |
1631d
|
|
KASAN: use-after-free Write in sco_conn_del
bluetooth
|
22 |
|
|
|
23 |
1638d |
1806d
|
|
general protection fault in rcu_sync_func (2)
bluetooth
|
2 |
|
|
|
1 |
1615d |
1611d
|
|
WARNING: ODEBUG bug in hci_dev_close_sync
bluetooth
|
-1 |
|
|
|
1 |
1659d |
1655d
|
|
KMSAN: uninit-value in hci_conn_complete_evt
bluetooth
|
7 |
|
|
|
3 |
1669d |
1731d
|
|
WARNING: ODEBUG bug in hci_release_dev
bluetooth
|
-1 |
|
|
|
1 |
1703d |
1695d
|
|
INFO: task hung in scan_update_work (2)
bluetooth
|
1 |
|
|
|
1 |
1649d |
1649d
|
|
BUG: spinlock bad magic in lock_sock_nested (2)
bluetooth
|
4 |
|
|
|
1 |
1680d |
1680d
|
|
KMSAN: uninit-value in hci_cmd_status_evt
bluetooth
|
7 |
|
|
|
1 |
1688d |
1688d
|
|
WARNING: locking bug in l2cap_sock_teardown_cb
bluetooth
|
4 |
|
|
|
129 |
1766d |
2058d
|
|
BUG: unable to handle kernel paging request in lock_sock_nested
bluetooth
|
17 |
|
|
|
43 |
1771d |
2211d
|
|
INFO: task can't die in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
1716d |
1712d
|
|
INFO: task hung in scan_update_work
bluetooth
|
1 |
|
|
|
17 |
1718d |
1757d
|
|
WARNING: locking bug in sco_conn_del
bluetooth
|
4 |
|
|
|
2 |
1780d |
1790d
|
|
INFO: task hung in hci_request_cancel_all
bluetooth
|
1 |
|
|
|
1 |
1724d |
1724d
|
|
KMSAN: uninit-value in hci_loglink_complete_evt
bluetooth
|
7 |
|
|
|
1 |
1785d |
1781d
|
|
WARNING: refcount bug in sco_conn_del
bluetooth
|
13 |
|
|
|
7 |
1795d |
1806d
|
|
INFO: trying to register non-static key in sco_conn_del
bluetooth
|
-1 |
|
|
|
1 |
1795d |
1791d
|
|
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping
bluetooth
|
6 |
|
|
|
1 |
1710d |
1710d
|
|
BUG: spinlock bad magic in lock_sock_nested
bluetooth
|
4 |
|
|
|
26 |
1822d |
2177d
|
|
KASAN: global-out-of-bounds Read in cancel_delayed_work
bluetooth
|
17 |
|
|
|
1 |
1800d |
1796d
|
|
INFO: task hung in rfcomm_process_sessions
bluetooth
|
1 |
|
|
|
1 |
1801d |
1801d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
syz, C |
|
|
2 |
2689d |
2689d
|
|
INFO: task can't die in rfcomm_dlc_close
bluetooth
|
1 |
|
|
|
4 |
1812d |
1830d
|
|
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb
bluetooth
|
10 |
|
|
|
1 |
1816d |
1812d
|
|
WARNING: refcount bug in l2cap_sock_kill
bluetooth
|
13 |
|
|
|
1 |
1874d |
1870d
|
|
INFO: task can't die in rfcomm_dlc_open
bluetooth
|
1 |
|
|
|
1 |
1838d |
1834d
|
|
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested
bluetooth
|
-1 |
|
|
|
6 |
1847d |
1898d
|
|
general protection fault in release_sock
bluetooth
|
2 |
|
|
|
1 |
1818d |
1818d
|
|
general protection fault in l2cap_chan_timeout (2)
bluetooth
|
2 |
|
|
|
1 |
1917d |
1912d
|
|
INFO: task hung in hci_conn_hash_flush
bluetooth
|
1 |
|
|
|
1 |
1900d |
1900d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb (2)
bluetooth
|
7 |
|
|
|
1 |
1920d |
1920d
|
|
general protection fault in qca_power_shutdown
arm-msm
bluetooth
|
2 |
|
|
|
1 |
1954d |
1950d
|
|
KASAN: use-after-free Write in h4_recv_buf
bluetooth
|
22 |
|
|
|
2 |
1986d |
1995d
|
|
general protection fault in bt_accept_unlink (2)
bluetooth
|
2 |
|
|
|
1 |
2001d |
1997d
|
|
KASAN: wild-memory-access Write in l2cap_chan_put
bluetooth
|
21 |
|
|
|
2 |
2002d |
2026d
|
|
general protection fault in hci_chan_del
bluetooth
|
2 |
|
|
|
2 |
2043d |
2086d
|
|
KASAN: slab-out-of-bounds Write in hci_chan_del
bluetooth
|
21 |
|
|
|
1 |
2043d |
2038d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete
bluetooth
|
6 |
|
|
|
23 |
1961d |
2083d
|
|
KASAN: use-after-free Read in skb_release_head_state
bluetooth
|
19 |
|
|
|
1 |
2054d |
2050d
|
|
KASAN: use-after-free Read in hci_dev_do_open
bluetooth
|
19 |
|
|
|
1 |
2056d |
2052d
|
|
possible deadlock in lock_sock_nested
bluetooth
|
4 |
|
|
|
1 |
2057d |
2053d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb
bluetooth
|
7 |
|
|
|
1 |
2043d |
2043d
|
|
KASAN: out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
1 |
2096d |
2093d
|
|
general protection fault in l2cap_chan_timeout
bluetooth
|
2 |
|
|
|
1 |
2098d |
2094d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2)
bluetooth
|
6 |
|
|
|
1 |
2031d |
2031d
|
|
KMSAN: uninit-value in hci_event_packet (2)
bluetooth
|
7 |
|
|
|
4 |
2133d |
2164d
|
|
KASAN: use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
2103d |
2103d
|
|
KASAN: global-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
2 |
2152d |
2093d
|
|
KASAN: use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
2148d |
2144d
|
|
BUG: corrupted list in hci_chan_del
bluetooth
|
8 |
|
|
|
2 |
2202d |
2202d
|
|
general protection fault in bt_accept_unlink
bluetooth
|
2 |
|
|
|
1 |
2211d |
2211d
|
|
KMSAN: uninit-value in hci_cmd_timeout
bluetooth
|
7 |
|
|
|
3 |
2237d |
2381d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend
bluetooth
|
6 |
|
|
|
1 |
2167d |
2167d
|
|
INFO: task hung in hci_dev_do_open
bluetooth
|
1 |
|
|
|
1 |
2236d |
2236d
|
|
KMSAN: uninit-value in vhci_write
bluetooth
|
7 |
|
|
|
1 |
2225d |
2225d
|
|
WARNING in __queue_work (2)
bluetooth
|
-1 |
|
|
|
1 |
2290d |
2286d
|
|
INFO: trying to register non-static key in hci_uart_send_frame (2)
bluetooth
|
-1 |
|
|
|
1 |
2369d |
2367d
|
|
KASAN: use-after-free Read in rfcomm_dlc_exists
bluetooth
|
19 |
|
|
|
833 |
2340d |
2954d
|
|
KCSAN: data-race in do_enable_set / do_enable_set
bluetooth
|
6 |
|
|
|
3 |
2403d |
2407d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive (2)
bluetooth
|
-1 |
|
|
|
1 |
2463d |
2459d
|
|
KMSAN: use-after-free in hci_cmd_timeout
bluetooth
|
18 |
|
|
|
1 |
2439d |
2439d
|
|
KCSAN: data-race in flush_workqueue / flush_workqueue
bluetooth
|
6 |
|
|
|
3 |
2454d |
2472d
|
|
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2464d |
2464d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open (2)
bluetooth
|
19 |
|
|
|
19 |
2542d |
2681d
|
|
general protection fault in rfcomm_dlc_open
bluetooth
|
2 |
|
|
|
3 |
2570d |
2667d
|
|
general protection fault in rfcomm_dlc_exists
bluetooth
|
2 |
|
|
|
2 |
2585d |
2667d
|
|
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2485d |
2485d
|
|
general protection fault in rcu_sync_func
bluetooth
|
2 |
|
|
|
1 |
2579d |
2575d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive
bluetooth
|
-1 |
|
|
|
1 |
2553d |
2552d
|
|
BUG: unable to handle kernel paging request in rfcomm_dlc_exists
bluetooth
|
8 |
|
|
|
1 |
2585d |
2581d
|
|
INFO: trying to register non-static key in hci_uart_send_frame
bluetooth
|
-1 |
|
|
|
2 |
2686d |
2735d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
syz, C |
|
|
11 |
2514d |
2572d
|
|
KMSAN: uninit-value in sock_rfree (2)
bluetooth
|
7 |
|
|
|
1 |
2522d |
2522d
|
|
KMSAN: uninit-value in skb_queue_purge
bluetooth
|
7 |
|
|
|
2 |
2519d |
2539d
|
|
WARNING in lockdep_register_key
bluetooth
|
-1 |
|
|
|
35 |
2718d |
2733d
|
|
WARNING: ODEBUG bug in hci_uart_tty_close
bluetooth
|
-1 |
|
|
|
1 |
2746d |
2745d
|
|
INFO: trying to register non-static key in hci_uart_flush
bluetooth
|
-1 |
|
|
|
1 |
2752d |
2752d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open
bluetooth
|
19 |
|
|
|
1 |
2940d |
2936d
|