|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
C |
|
|
1 |
101d |
106d
|
|
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
-1 |
|
|
|
4 |
106d |
108d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2)
bluetooth
|
19 |
|
|
|
6 |
115d |
150d
|
|
WARNING in hci_conn_drop (3)
bluetooth
|
-1 |
|
|
|
2 |
119d |
151d
|
|
WARNING in hci_send_cmd (3)
bluetooth
|
-1 |
|
|
|
1 |
82d |
78d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread (2)
bluetooth
|
19 |
|
|
|
2 |
124d |
172d
|
|
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync
bluetooth
|
6 |
|
|
|
1 |
84d |
84d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
130d |
522d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work (2)
bluetooth
|
19 |
|
|
|
27015 |
104d |
105d
|
|
WARNING in l2cap_unregister_user
bluetooth
|
-1 |
|
|
|
1 |
86d |
86d
|
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
129 |
123d |
498d
|
|
BUG: unable to handle kernel paging request in l2cap_conn_del
bluetooth
|
8 |
|
|
|
1 |
168d |
164d
|
|
KCSAN: data-race in hci_uart_open / hci_uart_tty_close
bluetooth
|
6 |
|
|
|
1 |
127d |
127d
|
|
WARNING: refcount bug in hci_conn_del_sysfs
bluetooth
|
13 |
|
|
|
1 |
165d |
161d
|
|
WARNING in hci_devcd_register (2)
bluetooth
|
-1 |
|
|
|
4 |
181d |
200d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
19 |
182d |
432d
|
|
KASAN: slab-use-after-free Read in skb_dequeue
bluetooth
|
19 |
|
|
|
4 |
173d |
269d
|
|
INFO: task hung in le_conn_complete_evt
bluetooth
|
1 |
|
|
|
1 |
190d |
190d
|
|
KASAN: slab-use-after-free Read in full_proxy_write (2)
bluetooth
|
19 |
|
|
|
3 |
190d |
189d
|
|
INFO: rcu detected stall in tty_release (3)
net
bluetooth
|
1 |
|
|
|
2 |
193d |
249d
|
|
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
31 |
204d |
417d
|
|
general protection fault in skb_queue_tail (4)
bluetooth
|
2 |
|
|
|
1 |
197d |
193d
|
|
KASAN: slab-use-after-free Read in force_suspend_read (2)
bluetooth
|
19 |
|
|
|
1 |
197d |
193d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
C |
inconclusive |
error |
153 |
181d |
659d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user (2)
bluetooth
|
19 |
|
|
|
1 |
177d |
173d
|
|
INFO: task hung in l2cap_unregister_user
bluetooth
|
1 |
|
|
|
2 |
208d |
296d
|
|
WARNING: kobject bug in hci_disconnect_all_sync
bluetooth
|
-1 |
|
|
|
1 |
221d |
217d
|
|
WARNING in l2cap_send_disconn_req (2)
bluetooth
|
-1 |
|
|
|
1 |
228d |
224d
|
|
KMSAN: uninit-value in hci_recv_frame
bluetooth
|
7 |
|
|
|
1 |
188d |
188d
|
|
INFO: task hung in hci_dev_close_sync (3)
bluetooth
|
1 |
|
|
|
8 |
229d |
444d
|
|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
21 |
|
|
|
1 |
258d |
253d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
C |
done |
|
3 |
385d |
388d
|
|
INFO: task hung in hci_conn_hash_flush (3)
bluetooth
|
1 |
|
|
|
1 |
259d |
259d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
C |
unreliable |
done |
39 |
289d |
669d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
286d |
481d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
294d |
622d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2)
bluetooth
|
12 |
|
|
|
2 |
227d |
229d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill (2)
bluetooth
|
19 |
|
|
|
1 |
236d |
236d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
302d |
298d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
305d |
676d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
309d |
370d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
314d |
309d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread
bluetooth
|
19 |
|
|
|
3 |
332d |
383d
|
|
WARNING in hci_devcd_register
bluetooth
|
-1 |
|
|
|
3 |
344d |
422d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
352d |
348d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
12 |
|
|
|
8 |
353d |
399d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
19 |
|
|
|
18 |
354d |
498d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
4 |
|
|
|
21 |
357d |
603d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
22 |
|
|
|
95 |
342d |
456d
|
|
WARNING in sco_conn_put
bluetooth
|
-1 |
|
|
|
2 |
376d |
436d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
13 |
|
|
|
1 |
379d |
375d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
19 |
|
|
|
8 |
381d |
409d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
19 |
|
|
|
3 |
383d |
400d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
C |
done |
|
94 |
371d |
390d
|
|
general protection fault in h5_close
bluetooth
|
2 |
C |
done |
|
5 |
373d |
376d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
C |
|
|
36 |
361d |
429d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
C |
done |
|
3 |
377d |
376d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
19 |
|
|
|
2 |
395d |
466d
|
|
INFO: task hung in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
419d |
419d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
19 |
|
|
|
1 |
429d |
425d
|
|
WARNING in hci_conn_drop
bluetooth
|
-1 |
|
|
|
1 |
431d |
427d
|
|
general protection fault in l2cap_conn_del
bluetooth
|
2 |
|
|
|
2 |
431d |
447d
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
22 |
|
|
|
2 |
432d |
475d
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
19 |
|
|
|
11 |
404d |
410d
|
|
INFO: task hung in hci_abort_conn_sync
bluetooth
|
1 |
|
|
|
1 |
429d |
429d
|
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
19 |
|
|
|
1 |
440d |
435d
|
|
general protection fault in hci_abort_conn
bluetooth
|
2 |
|
|
|
1 |
440d |
417d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb (2)
bluetooth
|
19 |
|
|
|
1 |
389d |
389d
|
|
INFO: rcu detected stall in hci_cmd_timeout (2)
bluetooth
|
1 |
|
|
|
1 |
442d |
442d
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
8 |
|
|
|
1 |
455d |
451d
|
|
INFO: task hung in hci_conn_hash_flush (2)
bluetooth
|
1 |
|
|
|
2 |
448d |
524d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
362d |
441d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
C |
done |
done |
1 |
462d |
461d
|
|
INFO: rcu detected stall in hci_rx_work (2)
bluetooth
|
1 |
|
|
|
1 |
463d |
463d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
461d |
653d
|
|
WARNING in sco_chan_del
bluetooth
|
-1 |
|
|
|
10 |
479d |
661d
|
|
WARNING in emon
bluetooth
|
-1 |
|
|
|
1 |
480d |
476d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
469d |
469d
|
|
INFO: task hung in hci_conn_failed (3)
bluetooth
|
1 |
|
|
|
18 |
452d |
524d
|
|
KASAN: slab-use-after-free Read in hci_send_acl (2)
bluetooth
|
19 |
|
|
|
1 |
493d |
488d
|
|
KASAN: slab-use-after-free Read in sco_chan_del (2)
bluetooth
|
19 |
|
|
|
2 |
497d |
526d
|
|
possible deadlock in touch_wq_lockdep_map (2)
bluetooth
|
4 |
|
|
|
5 |
498d |
508d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
13 |
|
|
|
10 |
499d |
979d
|
|
WARNING in hci_send_cmd
bluetooth
|
-1 |
|
|
|
8 |
502d |
750d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
C |
done |
|
87 |
491d |
1008d
|
|
KASAN: slab-use-after-free Read in hci_req_cmd_complete
bluetooth
|
19 |
|
|
|
1 |
513d |
505d
|
|
INFO: task hung in hci_remote_features_evt
bluetooth
|
1 |
|
|
|
9 |
510d |
606d
|
|
INFO: task hung in srso_alias_return_thunk
bluetooth
|
1 |
|
|
|
1 |
513d |
513d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
784d |
797d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
C |
error |
done |
13649 |
504d |
1138d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2)
bluetooth
|
12 |
|
|
|
1 |
471d |
471d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue
bluetooth
|
19 |
|
|
|
2 |
542d |
498d
|
|
KASAN: slab-use-after-free Write in mgmt_device_connected
bluetooth
|
22 |
|
|
|
1 |
544d |
522d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete
bluetooth
|
19 |
|
|
|
1 |
524d |
505d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
538d |
680d
|
|
KASAN: slab-use-after-free Read in l2cap_conn_unreliable
bluetooth
|
19 |
|
|
|
1 |
580d |
557d
|
|
WARNING in l2cap_send_cmd
bluetooth
|
-1 |
|
|
|
1 |
588d |
587d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
bluetooth
|
12 |
|
|
|
1 |
590d |
587d
|
|
WARNING in hci_send_acl (3)
bluetooth
|
-1 |
|
|
|
1 |
594d |
590d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
565d |
617d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
19 |
|
|
|
1 |
595d |
557d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
19 |
|
|
|
28 |
570d |
717d
|
|
WARNING in hci_conn_del (2)
bluetooth
|
-1 |
|
|
|
17 |
566d |
563d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
C |
|
|
28 |
575d |
602d
|
|
KASAN: slab-use-after-free Read in hci_req_sync_complete
bluetooth
|
19 |
|
|
|
8 |
609d |
633d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb
bluetooth
|
19 |
|
|
|
7 |
610d |
617d
|
|
WARNING: locking bug in sco_conn_del (2)
bluetooth
|
4 |
|
|
|
1 |
611d |
607d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
C |
|
|
5 |
611d |
625d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata
bluetooth
|
19 |
|
|
|
1 |
612d |
607d
|
|
KASAN: slab-use-after-free Read in skb_free_head
bluetooth
|
19 |
|
|
|
2 |
610d |
630d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
C |
|
|
6 |
623d |
623d
|
|
INFO: rcu detected stall in bt_err
bluetooth
|
1 |
|
|
|
1 |
617d |
617d
|
|
INFO: task hung in hci_conn_failed (2)
bluetooth
|
1 |
|
|
|
1 |
618d |
618d
|
|
WARNING in l2cap_send_disconn_req
bluetooth
|
-1 |
|
|
|
1 |
629d |
625d
|
|
INFO: task hung in l2cap_conn_del
bluetooth
|
1 |
|
|
|
1 |
622d |
622d
|
|
WARNING in lock_sock_nested
bluetooth
sctp
|
-1 |
|
|
|
6 |
552d |
559d
|
|
general protection fault in dequeue_task
bluetooth
|
22 |
|
|
|
783 |
552d |
560d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
C |
error |
done |
7 |
636d |
688d
|
|
KFENCE: invalid free in __hci_req_sync
bluetooth
|
23 |
|
|
|
35 |
607d |
668d
|
|
general protection fault in hci_release_dev (2)
bluetooth
|
2 |
|
|
|
1 |
628d |
624d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1204d |
2032d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2037d |
2037d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb
bluetooth
|
19 |
|
|
|
1 |
645d |
641d
|
|
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
-1 |
|
|
|
5 |
675d |
841d
|
|
KASAN: slab-use-after-free Read in hci_chan_sent
bluetooth
|
19 |
|
|
|
1 |
636d |
615d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
C |
error |
error |
8 |
683d |
697d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
C |
done |
unreliable |
5 |
692d |
697d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
C |
|
|
14 |
748d |
749d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
17 |
|
|
|
1 |
700d |
694d
|
|
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind
bluetooth
|
6 |
|
|
|
1 |
636d |
636d
|
|
WARNING in msft_do_close
bluetooth
|
-1 |
|
|
|
1 |
704d |
700d
|
|
INFO: rcu detected stall in l2cap_sock_connect
bluetooth
|
1 |
|
|
|
1 |
666d |
666d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
19 |
|
|
|
1 |
709d |
705d
|
|
possible deadlock in hci_dev_close
bluetooth
|
4 |
|
|
|
2 |
671d |
671d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
4 |
|
|
|
6 |
672d |
676d
|
|
WARNING: refcount bug in sco_conn_del (3)
bluetooth
|
13 |
|
|
|
1 |
702d |
698d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
C |
unreliable |
|
28 |
684d |
697d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
C |
|
|
36 |
687d |
697d
|
|
INFO: task hung in hci_cmd_sync_clear (2)
bluetooth
|
1 |
|
|
|
15 |
708d |
1113d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
C |
done |
|
7 |
720d |
851d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
C |
done |
|
1 |
722d |
765d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
C |
done |
|
10 |
671d |
676d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie
bluetooth
|
19 |
|
|
|
2 |
663d |
671d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
C |
done |
done |
3400 |
729d |
973d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
C |
|
|
22 |
730d |
792d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
C |
done |
|
18 |
758d |
755d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
C |
done |
done |
1323 |
752d |
925d
|
|
INFO: task hung in hci_dev_close_sync (2)
bluetooth
|
1 |
|
|
|
2 |
757d |
760d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
C |
done |
done |
63 |
768d |
914d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason
bluetooth
|
19 |
|
|
|
1 |
797d |
793d
|
|
possible deadlock in discov_off
bluetooth
|
4 |
|
|
|
127 |
791d |
1247d
|
|
possible deadlock in hci_unregister_dev
bluetooth
|
4 |
|
|
|
175 |
792d |
1289d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
C |
|
|
1 |
832d |
832d
|
|
KASAN: slab-use-after-free Read in l2cap_connect
bluetooth
|
19 |
|
|
|
1 |
847d |
839d
|
|
WARNING in hci_send_acl (2)
bluetooth
|
-1 |
|
|
|
1 |
846d |
842d
|
|
KASAN: slab-use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
860d |
854d
|
|
KASAN: slab-use-after-free Read in release_sock
bluetooth
|
19 |
|
|
|
1 |
864d |
860d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
C |
done |
error |
1067 |
847d |
1661d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
C |
|
|
65 |
854d |
912d
|
|
KASAN: slab-use-after-free Read in lookup_object_or_alloc
bluetooth
|
19 |
|
|
|
2 |
881d |
892d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb
bluetooth
|
12 |
|
|
|
1 |
901d |
894d
|
|
WARNING: ODEBUG bug in hci_abort_conn_sync
bluetooth
|
-1 |
|
|
|
1 |
894d |
890d
|
|
KASAN: use-after-free Read in hci_conn_security
bluetooth
|
19 |
|
|
|
1 |
914d |
910d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
C |
error |
done |
4 |
917d |
1295d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1623d |
2037d
|
|
WARNING: refcount bug in sco_conn_del (2)
bluetooth
|
13 |
|
|
|
1 |
965d |
961d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop
bluetooth
|
22 |
|
|
|
1 |
1020d |
1016d
|
|
WARNING in l2cap_do_send
bluetooth
|
-1 |
|
|
|
2 |
1046d |
1121d
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
bluetooth
|
4 |
|
|
|
2 |
1047d |
1051d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
C |
|
|
72 |
1023d |
1049d
|
|
WARNING in hci_send_acl
bluetooth
|
-1 |
|
|
|
1 |
1099d |
1095d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
C |
done |
unreliable |
50 |
1912d |
2038d
|
|
possible deadlock in hci_conn_hash_flush
bluetooth
|
4 |
|
|
|
4 |
1110d |
1240d
|
|
INFO: rcu detected stall in hci_rx_work
bluetooth
|
1 |
|
|
|
1 |
1066d |
1066d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
C |
done |
inconclusive |
131 |
1129d |
2240d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
C |
error |
done |
4 |
1269d |
1265d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
C |
done |
done |
166 |
1304d |
1389d
|
|
linux-next test error: possible deadlock in hci_cmd_sync_clear
bluetooth
|
-1 |
|
|
|
6 |
1103d |
1103d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
C |
unreliable |
inconclusive |
34 |
1249d |
1903d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
C |
error |
|
12 |
1223d |
1254d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1650d |
2416d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
C |
done |
inconclusive |
26 |
1674d |
2036d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
C |
done |
done |
87 |
1760d |
2038d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
C |
done |
error |
13 |
1224d |
1256d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
C |
done |
inconclusive |
37 |
1335d |
1370d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
C |
done |
done |
611 |
1355d |
2041d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
C |
|
|
5 |
1223d |
1240d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
C |
|
|
14 |
1223d |
1234d
|
|
possible deadlock in sco_sock_timeout
bluetooth
|
4 |
|
|
|
1 |
1240d |
1240d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
C |
|
|
1 |
1245d |
1245d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
C |
inconclusive |
inconclusive |
13 |
1329d |
1550d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
C |
inconclusive |
inconclusive |
3 |
1252d |
1789d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
C |
inconclusive |
done |
3 |
1660d |
1657d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
C |
|
|
1 |
1269d |
1265d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
C |
done |
unreliable |
26 |
1918d |
2192d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2034d |
2034d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2033d |
2033d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1755d |
2036d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
C |
|
|
10 |
1891d |
2038d
|
|
INFO: task hung in hci_cmd_sync_clear
bluetooth
|
1 |
|
|
|
4 |
1293d |
1440d
|
|
general protection fault in rcu_sync_func (3)
bluetooth
|
2 |
|
|
|
2 |
1269d |
1283d
|
|
upstream test error: WARNING in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
90 |
1299d |
1307d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1391d |
2034d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
C |
|
|
2 |
1793d |
2001d
|
|
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
41 |
1300d |
1307d
|
|
net test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
39 |
1302d |
1307d
|
|
general protection fault in klist_next
bluetooth
|
17 |
C |
error |
|
33 |
1245d |
1299d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
C |
inconclusive |
done |
9 |
1605d |
1689d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1590d |
2030d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
C |
done |
|
2256 |
1903d |
2205d
|
|
INFO: task hung in hci_dev_open
bluetooth
|
1 |
|
|
|
6 |
1343d |
1415d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1462d |
1528d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
C |
|
|
3 |
1520d |
1586d
|
|
general protection fault in skb_put
bluetooth
|
2 |
C |
done |
error |
43 |
2002d |
2584d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2034d |
2034d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
C |
|
|
3 |
1597d |
1594d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
C |
done |
inconclusive |
21 |
2084d |
2612d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
C |
|
|
10 |
1709d |
1800d
|
|
WARNING: refcount bug in sco_sock_timeout
bluetooth
|
13 |
|
|
|
24 |
1385d |
1628d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2068d |
2376d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
C |
|
|
3 |
2025d |
2026d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1756d |
2034d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
C |
done |
done |
8 |
2147d |
2688d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2193d |
2192d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
C |
|
|
8 |
1392d |
1388d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2026d |
2026d
|
|
WARNING: locking bug in sco_sock_timeout
bluetooth
|
4 |
|
|
|
13 |
1404d |
1628d
|
|
INFO: trying to register non-static key in sco_sock_timeout
bluetooth
|
-1 |
|
|
|
2 |
1409d |
1456d
|
|
KASAN: use-after-free Write in sco_conn_del
bluetooth
|
22 |
|
|
|
23 |
1463d |
1631d
|
|
general protection fault in rcu_sync_func (2)
bluetooth
|
2 |
|
|
|
1 |
1440d |
1436d
|
|
WARNING: ODEBUG bug in hci_dev_close_sync
bluetooth
|
-1 |
|
|
|
1 |
1484d |
1480d
|
|
KMSAN: uninit-value in hci_conn_complete_evt
bluetooth
|
7 |
|
|
|
3 |
1494d |
1556d
|
|
WARNING: ODEBUG bug in hci_release_dev
bluetooth
|
-1 |
|
|
|
1 |
1528d |
1520d
|
|
INFO: task hung in scan_update_work (2)
bluetooth
|
1 |
|
|
|
1 |
1474d |
1474d
|
|
BUG: spinlock bad magic in lock_sock_nested (2)
bluetooth
|
4 |
|
|
|
1 |
1505d |
1505d
|
|
KMSAN: uninit-value in hci_cmd_status_evt
bluetooth
|
7 |
|
|
|
1 |
1513d |
1513d
|
|
WARNING: locking bug in l2cap_sock_teardown_cb
bluetooth
|
4 |
|
|
|
129 |
1590d |
1883d
|
|
BUG: unable to handle kernel paging request in lock_sock_nested
bluetooth
|
17 |
|
|
|
43 |
1595d |
2036d
|
|
INFO: task can't die in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
1541d |
1537d
|
|
INFO: task hung in scan_update_work
bluetooth
|
1 |
|
|
|
17 |
1543d |
1582d
|
|
WARNING: locking bug in sco_conn_del
bluetooth
|
4 |
|
|
|
2 |
1605d |
1615d
|
|
INFO: task hung in hci_request_cancel_all
bluetooth
|
1 |
|
|
|
1 |
1548d |
1548d
|
|
KMSAN: uninit-value in hci_loglink_complete_evt
bluetooth
|
7 |
|
|
|
1 |
1610d |
1606d
|
|
WARNING: refcount bug in sco_conn_del
bluetooth
|
13 |
|
|
|
7 |
1620d |
1631d
|
|
INFO: trying to register non-static key in sco_conn_del
bluetooth
|
-1 |
|
|
|
1 |
1620d |
1616d
|
|
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping
bluetooth
|
6 |
|
|
|
1 |
1535d |
1535d
|
|
BUG: spinlock bad magic in lock_sock_nested
bluetooth
|
4 |
|
|
|
26 |
1647d |
2002d
|
|
KASAN: global-out-of-bounds Read in cancel_delayed_work
bluetooth
|
17 |
|
|
|
1 |
1625d |
1621d
|
|
INFO: task hung in rfcomm_process_sessions
bluetooth
|
1 |
|
|
|
1 |
1626d |
1626d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
C |
|
|
2 |
2514d |
2514d
|
|
INFO: task can't die in rfcomm_dlc_close
bluetooth
|
1 |
|
|
|
4 |
1637d |
1655d
|
|
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb
bluetooth
|
10 |
|
|
|
1 |
1641d |
1637d
|
|
WARNING: refcount bug in l2cap_sock_kill
bluetooth
|
13 |
|
|
|
1 |
1699d |
1695d
|
|
INFO: task can't die in rfcomm_dlc_open
bluetooth
|
1 |
|
|
|
1 |
1662d |
1658d
|
|
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested
bluetooth
|
-1 |
|
|
|
6 |
1671d |
1723d
|
|
general protection fault in release_sock
bluetooth
|
2 |
|
|
|
1 |
1643d |
1643d
|
|
general protection fault in l2cap_chan_timeout (2)
bluetooth
|
2 |
|
|
|
1 |
1741d |
1737d
|
|
INFO: task hung in hci_conn_hash_flush
bluetooth
|
1 |
|
|
|
1 |
1725d |
1725d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb (2)
bluetooth
|
7 |
|
|
|
1 |
1745d |
1745d
|
|
general protection fault in qca_power_shutdown
arm-msm
bluetooth
|
2 |
|
|
|
1 |
1779d |
1775d
|
|
KASAN: use-after-free Write in h4_recv_buf
bluetooth
|
22 |
|
|
|
2 |
1811d |
1820d
|
|
general protection fault in bt_accept_unlink (2)
bluetooth
|
2 |
|
|
|
1 |
1826d |
1822d
|
|
KASAN: wild-memory-access Write in l2cap_chan_put
bluetooth
|
21 |
|
|
|
2 |
1827d |
1851d
|
|
general protection fault in hci_chan_del
bluetooth
|
2 |
|
|
|
2 |
1867d |
1911d
|
|
KASAN: slab-out-of-bounds Write in hci_chan_del
bluetooth
|
21 |
|
|
|
1 |
1867d |
1863d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete
bluetooth
|
6 |
|
|
|
23 |
1786d |
1908d
|
|
KASAN: use-after-free Read in skb_release_head_state
bluetooth
|
19 |
|
|
|
1 |
1879d |
1875d
|
|
KASAN: use-after-free Read in hci_dev_do_open
bluetooth
|
19 |
|
|
|
1 |
1881d |
1877d
|
|
possible deadlock in lock_sock_nested
bluetooth
|
4 |
|
|
|
1 |
1882d |
1878d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb
bluetooth
|
7 |
|
|
|
1 |
1868d |
1868d
|
|
KASAN: out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
1 |
1921d |
1918d
|
|
general protection fault in l2cap_chan_timeout
bluetooth
|
2 |
|
|
|
1 |
1923d |
1919d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2)
bluetooth
|
6 |
|
|
|
1 |
1856d |
1856d
|
|
KMSAN: uninit-value in hci_event_packet (2)
bluetooth
|
7 |
|
|
|
4 |
1957d |
1989d
|
|
KASAN: use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
1927d |
1927d
|
|
KASAN: global-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
2 |
1977d |
1918d
|
|
KASAN: use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
1973d |
1969d
|
|
BUG: corrupted list in hci_chan_del
bluetooth
|
8 |
|
|
|
2 |
2027d |
2027d
|
|
general protection fault in bt_accept_unlink
bluetooth
|
2 |
|
|
|
1 |
2036d |
2036d
|
|
KMSAN: uninit-value in hci_cmd_timeout
bluetooth
|
7 |
|
|
|
3 |
2062d |
2206d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend
bluetooth
|
6 |
|
|
|
1 |
1992d |
1992d
|
|
INFO: task hung in hci_dev_do_open
bluetooth
|
1 |
|
|
|
1 |
2060d |
2060d
|
|
KMSAN: uninit-value in vhci_write
bluetooth
|
7 |
|
|
|
1 |
2050d |
2050d
|
|
WARNING in __queue_work (2)
bluetooth
|
-1 |
|
|
|
1 |
2115d |
2111d
|
|
INFO: trying to register non-static key in hci_uart_send_frame (2)
bluetooth
|
-1 |
|
|
|
1 |
2194d |
2191d
|
|
KASAN: use-after-free Read in rfcomm_dlc_exists
bluetooth
|
19 |
|
|
|
833 |
2165d |
2779d
|
|
KCSAN: data-race in do_enable_set / do_enable_set
bluetooth
|
6 |
|
|
|
3 |
2228d |
2232d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive (2)
bluetooth
|
-1 |
|
|
|
1 |
2288d |
2284d
|
|
KMSAN: use-after-free in hci_cmd_timeout
bluetooth
|
18 |
|
|
|
1 |
2264d |
2264d
|
|
KCSAN: data-race in flush_workqueue / flush_workqueue
bluetooth
|
6 |
|
|
|
3 |
2279d |
2297d
|
|
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2289d |
2289d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open (2)
bluetooth
|
19 |
|
|
|
19 |
2366d |
2506d
|
|
general protection fault in rfcomm_dlc_open
bluetooth
|
2 |
|
|
|
3 |
2395d |
2492d
|
|
general protection fault in rfcomm_dlc_exists
bluetooth
|
2 |
|
|
|
2 |
2409d |
2492d
|
|
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2310d |
2310d
|
|
general protection fault in rcu_sync_func
bluetooth
|
2 |
|
|
|
1 |
2404d |
2400d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive
bluetooth
|
-1 |
|
|
|
1 |
2378d |
2376d
|
|
BUG: unable to handle kernel paging request in rfcomm_dlc_exists
bluetooth
|
8 |
|
|
|
1 |
2410d |
2406d
|
|
INFO: trying to register non-static key in hci_uart_send_frame
bluetooth
|
-1 |
|
|
|
2 |
2511d |
2559d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
C |
|
|
11 |
2339d |
2397d
|
|
KMSAN: uninit-value in sock_rfree (2)
bluetooth
|
7 |
|
|
|
1 |
2347d |
2347d
|
|
KMSAN: uninit-value in skb_queue_purge
bluetooth
|
7 |
|
|
|
2 |
2343d |
2364d
|
|
WARNING in lockdep_register_key
bluetooth
|
-1 |
|
|
|
35 |
2542d |
2558d
|
|
WARNING: ODEBUG bug in hci_uart_tty_close
bluetooth
|
-1 |
|
|
|
1 |
2571d |
2570d
|
|
INFO: trying to register non-static key in hci_uart_flush
bluetooth
|
-1 |
|
|
|
1 |
2577d |
2577d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open
bluetooth
|
19 |
|
|
|
1 |
2765d |
2761d
|