|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
C |
|
|
1 |
100d |
105d
|
|
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
-1 |
|
|
|
4 |
105d |
108d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2)
bluetooth
|
19 |
|
|
|
6 |
114d |
149d
|
|
WARNING in hci_conn_drop (3)
bluetooth
|
-1 |
|
|
|
2 |
118d |
150d
|
|
WARNING in hci_send_cmd (3)
bluetooth
|
-1 |
|
|
|
1 |
81d |
77d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread (2)
bluetooth
|
19 |
|
|
|
2 |
123d |
172d
|
|
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync
bluetooth
|
6 |
|
|
|
1 |
83d |
83d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
129d |
521d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work (2)
bluetooth
|
19 |
|
|
|
27015 |
103d |
104d
|
|
WARNING in l2cap_unregister_user
bluetooth
|
-1 |
|
|
|
1 |
86d |
86d
|
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
129 |
122d |
497d
|
|
BUG: unable to handle kernel paging request in l2cap_conn_del
bluetooth
|
8 |
|
|
|
1 |
167d |
163d
|
|
KCSAN: data-race in hci_uart_open / hci_uart_tty_close
bluetooth
|
6 |
|
|
|
1 |
126d |
126d
|
|
WARNING: refcount bug in hci_conn_del_sysfs
bluetooth
|
13 |
|
|
|
1 |
165d |
161d
|
|
WARNING in hci_devcd_register (2)
bluetooth
|
-1 |
|
|
|
4 |
180d |
199d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
19 |
182d |
431d
|
|
KASAN: slab-use-after-free Read in skb_dequeue
bluetooth
|
19 |
|
|
|
4 |
172d |
269d
|
|
INFO: task hung in le_conn_complete_evt
bluetooth
|
1 |
|
|
|
1 |
189d |
189d
|
|
KASAN: slab-use-after-free Read in full_proxy_write (2)
bluetooth
|
19 |
|
|
|
3 |
189d |
188d
|
|
INFO: rcu detected stall in tty_release (3)
net
bluetooth
|
1 |
|
|
|
2 |
193d |
248d
|
|
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
31 |
203d |
416d
|
|
general protection fault in skb_queue_tail (4)
bluetooth
|
2 |
|
|
|
1 |
196d |
192d
|
|
KASAN: slab-use-after-free Read in force_suspend_read (2)
bluetooth
|
19 |
|
|
|
1 |
197d |
192d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
C |
inconclusive |
error |
153 |
180d |
658d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user (2)
bluetooth
|
19 |
|
|
|
1 |
177d |
173d
|
|
INFO: task hung in l2cap_unregister_user
bluetooth
|
1 |
|
|
|
2 |
208d |
295d
|
|
WARNING: kobject bug in hci_disconnect_all_sync
bluetooth
|
-1 |
|
|
|
1 |
221d |
216d
|
|
WARNING in l2cap_send_disconn_req (2)
bluetooth
|
-1 |
|
|
|
1 |
227d |
223d
|
|
KMSAN: uninit-value in hci_recv_frame
bluetooth
|
7 |
|
|
|
1 |
188d |
188d
|
|
INFO: task hung in hci_dev_close_sync (3)
bluetooth
|
1 |
|
|
|
8 |
229d |
443d
|
|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
21 |
|
|
|
1 |
257d |
252d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
C |
done |
|
3 |
384d |
388d
|
|
INFO: task hung in hci_conn_hash_flush (3)
bluetooth
|
1 |
|
|
|
1 |
258d |
258d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
C |
unreliable |
done |
39 |
288d |
669d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
286d |
480d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
294d |
621d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2)
bluetooth
|
12 |
|
|
|
2 |
226d |
229d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill (2)
bluetooth
|
19 |
|
|
|
1 |
236d |
236d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
302d |
298d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
304d |
675d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
308d |
369d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
313d |
308d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread
bluetooth
|
19 |
|
|
|
3 |
332d |
382d
|
|
WARNING in hci_devcd_register
bluetooth
|
-1 |
|
|
|
3 |
343d |
421d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
351d |
347d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
12 |
|
|
|
8 |
353d |
398d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
19 |
|
|
|
18 |
354d |
497d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
4 |
|
|
|
21 |
356d |
602d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
22 |
|
|
|
95 |
342d |
455d
|
|
WARNING in sco_conn_put
bluetooth
|
-1 |
|
|
|
2 |
376d |
435d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
13 |
|
|
|
1 |
378d |
374d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
19 |
|
|
|
8 |
381d |
408d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
19 |
|
|
|
3 |
383d |
399d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
C |
done |
|
94 |
370d |
389d
|
|
general protection fault in h5_close
bluetooth
|
2 |
C |
done |
|
5 |
372d |
375d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
C |
|
|
36 |
360d |
428d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
C |
done |
|
3 |
377d |
375d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
19 |
|
|
|
2 |
394d |
465d
|
|
INFO: task hung in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
418d |
418d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
19 |
|
|
|
1 |
428d |
424d
|
|
WARNING in hci_conn_drop
bluetooth
|
-1 |
|
|
|
1 |
430d |
426d
|
|
general protection fault in l2cap_conn_del
bluetooth
|
2 |
|
|
|
2 |
430d |
446d
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
22 |
|
|
|
2 |
431d |
474d
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
19 |
|
|
|
11 |
403d |
409d
|
|
INFO: task hung in hci_abort_conn_sync
bluetooth
|
1 |
|
|
|
1 |
429d |
429d
|
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
19 |
|
|
|
1 |
439d |
434d
|
|
general protection fault in hci_abort_conn
bluetooth
|
2 |
|
|
|
1 |
439d |
416d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb (2)
bluetooth
|
19 |
|
|
|
1 |
388d |
388d
|
|
INFO: rcu detected stall in hci_cmd_timeout (2)
bluetooth
|
1 |
|
|
|
1 |
442d |
442d
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
8 |
|
|
|
1 |
454d |
450d
|
|
INFO: task hung in hci_conn_hash_flush (2)
bluetooth
|
1 |
|
|
|
2 |
447d |
524d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
361d |
440d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
C |
done |
done |
1 |
461d |
460d
|
|
INFO: rcu detected stall in hci_rx_work (2)
bluetooth
|
1 |
|
|
|
1 |
463d |
463d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
460d |
652d
|
|
WARNING in sco_chan_del
bluetooth
|
-1 |
|
|
|
10 |
478d |
661d
|
|
WARNING in emon
bluetooth
|
-1 |
|
|
|
1 |
479d |
475d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
468d |
468d
|
|
INFO: task hung in hci_conn_failed (3)
bluetooth
|
1 |
|
|
|
18 |
451d |
523d
|
|
KASAN: slab-use-after-free Read in hci_send_acl (2)
bluetooth
|
19 |
|
|
|
1 |
493d |
487d
|
|
KASAN: slab-use-after-free Read in sco_chan_del (2)
bluetooth
|
19 |
|
|
|
2 |
497d |
525d
|
|
possible deadlock in touch_wq_lockdep_map (2)
bluetooth
|
4 |
|
|
|
5 |
497d |
507d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
13 |
|
|
|
10 |
498d |
978d
|
|
WARNING in hci_send_cmd
bluetooth
|
-1 |
|
|
|
8 |
501d |
749d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
C |
done |
|
87 |
491d |
1007d
|
|
KASAN: slab-use-after-free Read in hci_req_cmd_complete
bluetooth
|
19 |
|
|
|
1 |
512d |
504d
|
|
INFO: task hung in hci_remote_features_evt
bluetooth
|
1 |
|
|
|
9 |
510d |
606d
|
|
INFO: task hung in srso_alias_return_thunk
bluetooth
|
1 |
|
|
|
1 |
513d |
513d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
783d |
797d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
C |
error |
done |
13649 |
503d |
1137d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2)
bluetooth
|
12 |
|
|
|
1 |
471d |
471d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue
bluetooth
|
19 |
|
|
|
2 |
541d |
497d
|
|
KASAN: slab-use-after-free Write in mgmt_device_connected
bluetooth
|
22 |
|
|
|
1 |
543d |
521d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete
bluetooth
|
19 |
|
|
|
1 |
523d |
504d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
538d |
679d
|
|
KASAN: slab-use-after-free Read in l2cap_conn_unreliable
bluetooth
|
19 |
|
|
|
1 |
580d |
556d
|
|
WARNING in l2cap_send_cmd
bluetooth
|
-1 |
|
|
|
1 |
588d |
586d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
bluetooth
|
12 |
|
|
|
1 |
589d |
586d
|
|
WARNING in hci_send_acl (3)
bluetooth
|
-1 |
|
|
|
1 |
594d |
590d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
564d |
616d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
19 |
|
|
|
1 |
594d |
556d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
19 |
|
|
|
28 |
569d |
716d
|
|
WARNING in hci_conn_del (2)
bluetooth
|
-1 |
|
|
|
17 |
566d |
562d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
C |
|
|
28 |
575d |
602d
|
|
KASAN: slab-use-after-free Read in hci_req_sync_complete
bluetooth
|
19 |
|
|
|
8 |
608d |
633d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb
bluetooth
|
19 |
|
|
|
7 |
609d |
616d
|
|
WARNING: locking bug in sco_conn_del (2)
bluetooth
|
4 |
|
|
|
1 |
610d |
606d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
C |
|
|
5 |
610d |
624d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata
bluetooth
|
19 |
|
|
|
1 |
611d |
607d
|
|
KASAN: slab-use-after-free Read in skb_free_head
bluetooth
|
19 |
|
|
|
2 |
610d |
629d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
C |
|
|
6 |
623d |
623d
|
|
INFO: rcu detected stall in bt_err
bluetooth
|
1 |
|
|
|
1 |
617d |
617d
|
|
INFO: task hung in hci_conn_failed (2)
bluetooth
|
1 |
|
|
|
1 |
618d |
618d
|
|
WARNING in l2cap_send_disconn_req
bluetooth
|
-1 |
|
|
|
1 |
628d |
624d
|
|
INFO: task hung in l2cap_conn_del
bluetooth
|
1 |
|
|
|
1 |
621d |
621d
|
|
WARNING in lock_sock_nested
bluetooth
sctp
|
-1 |
|
|
|
6 |
551d |
559d
|
|
general protection fault in dequeue_task
bluetooth
|
22 |
|
|
|
783 |
551d |
559d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
C |
error |
done |
7 |
636d |
687d
|
|
KFENCE: invalid free in __hci_req_sync
bluetooth
|
23 |
|
|
|
35 |
607d |
668d
|
|
general protection fault in hci_release_dev (2)
bluetooth
|
2 |
|
|
|
1 |
627d |
623d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1203d |
2032d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2036d |
2036d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb
bluetooth
|
19 |
|
|
|
1 |
644d |
640d
|
|
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
-1 |
|
|
|
5 |
674d |
841d
|
|
KASAN: slab-use-after-free Read in hci_chan_sent
bluetooth
|
19 |
|
|
|
1 |
635d |
614d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
C |
error |
error |
8 |
683d |
696d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
C |
done |
unreliable |
5 |
692d |
696d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
C |
|
|
14 |
748d |
748d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
17 |
|
|
|
1 |
699d |
693d
|
|
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind
bluetooth
|
6 |
|
|
|
1 |
636d |
636d
|
|
WARNING in msft_do_close
bluetooth
|
-1 |
|
|
|
1 |
703d |
699d
|
|
INFO: rcu detected stall in l2cap_sock_connect
bluetooth
|
1 |
|
|
|
1 |
665d |
665d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
19 |
|
|
|
1 |
709d |
704d
|
|
possible deadlock in hci_dev_close
bluetooth
|
4 |
|
|
|
2 |
671d |
671d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
4 |
|
|
|
6 |
671d |
675d
|
|
WARNING: refcount bug in sco_conn_del (3)
bluetooth
|
13 |
|
|
|
1 |
701d |
697d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
C |
unreliable |
|
28 |
683d |
696d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
C |
|
|
36 |
686d |
696d
|
|
INFO: task hung in hci_cmd_sync_clear (2)
bluetooth
|
1 |
|
|
|
15 |
707d |
1113d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
C |
done |
|
7 |
720d |
851d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
C |
done |
|
1 |
721d |
765d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
C |
done |
|
10 |
670d |
675d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie
bluetooth
|
19 |
|
|
|
2 |
662d |
670d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
C |
done |
done |
3400 |
728d |
972d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
C |
|
|
22 |
730d |
791d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
C |
done |
|
18 |
757d |
755d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
C |
done |
done |
1323 |
751d |
924d
|
|
INFO: task hung in hci_dev_close_sync (2)
bluetooth
|
1 |
|
|
|
2 |
757d |
759d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
C |
done |
done |
63 |
767d |
913d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason
bluetooth
|
19 |
|
|
|
1 |
796d |
792d
|
|
possible deadlock in discov_off
bluetooth
|
4 |
|
|
|
127 |
790d |
1246d
|
|
possible deadlock in hci_unregister_dev
bluetooth
|
4 |
|
|
|
175 |
791d |
1288d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
C |
|
|
1 |
831d |
831d
|
|
KASAN: slab-use-after-free Read in l2cap_connect
bluetooth
|
19 |
|
|
|
1 |
846d |
838d
|
|
WARNING in hci_send_acl (2)
bluetooth
|
-1 |
|
|
|
1 |
846d |
842d
|
|
KASAN: slab-use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
859d |
853d
|
|
KASAN: slab-use-after-free Read in release_sock
bluetooth
|
19 |
|
|
|
1 |
864d |
859d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
C |
done |
error |
1067 |
846d |
1660d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
C |
|
|
65 |
853d |
911d
|
|
KASAN: slab-use-after-free Read in lookup_object_or_alloc
bluetooth
|
19 |
|
|
|
2 |
881d |
891d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb
bluetooth
|
12 |
|
|
|
1 |
900d |
894d
|
|
WARNING: ODEBUG bug in hci_abort_conn_sync
bluetooth
|
-1 |
|
|
|
1 |
893d |
889d
|
|
KASAN: use-after-free Read in hci_conn_security
bluetooth
|
19 |
|
|
|
1 |
913d |
909d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
C |
error |
done |
4 |
916d |
1294d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1623d |
2036d
|
|
WARNING: refcount bug in sco_conn_del (2)
bluetooth
|
13 |
|
|
|
1 |
965d |
961d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop
bluetooth
|
22 |
|
|
|
1 |
1020d |
1015d
|
|
WARNING in l2cap_do_send
bluetooth
|
-1 |
|
|
|
2 |
1045d |
1120d
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
bluetooth
|
4 |
|
|
|
2 |
1047d |
1050d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
C |
|
|
72 |
1022d |
1048d
|
|
WARNING in hci_send_acl
bluetooth
|
-1 |
|
|
|
1 |
1099d |
1095d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
C |
done |
unreliable |
50 |
1911d |
2038d
|
|
possible deadlock in hci_conn_hash_flush
bluetooth
|
4 |
|
|
|
4 |
1109d |
1239d
|
|
INFO: rcu detected stall in hci_rx_work
bluetooth
|
1 |
|
|
|
1 |
1066d |
1066d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
C |
done |
inconclusive |
131 |
1129d |
2240d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
C |
error |
done |
4 |
1269d |
1265d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
C |
done |
done |
166 |
1303d |
1388d
|
|
linux-next test error: possible deadlock in hci_cmd_sync_clear
bluetooth
|
-1 |
|
|
|
6 |
1102d |
1102d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
C |
unreliable |
inconclusive |
34 |
1249d |
1903d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
C |
error |
|
12 |
1223d |
1253d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1649d |
2415d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
C |
done |
inconclusive |
26 |
1673d |
2035d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
C |
done |
done |
87 |
1759d |
2038d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
C |
done |
error |
13 |
1224d |
1256d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
C |
done |
inconclusive |
37 |
1334d |
1369d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
C |
done |
done |
611 |
1354d |
2041d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
C |
|
|
5 |
1222d |
1239d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
C |
|
|
14 |
1222d |
1234d
|
|
possible deadlock in sco_sock_timeout
bluetooth
|
4 |
|
|
|
1 |
1239d |
1239d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
C |
|
|
1 |
1244d |
1244d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
C |
inconclusive |
inconclusive |
13 |
1329d |
1549d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
C |
inconclusive |
inconclusive |
3 |
1251d |
1788d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
C |
inconclusive |
done |
3 |
1659d |
1656d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
C |
|
|
1 |
1268d |
1264d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
C |
done |
unreliable |
26 |
1917d |
2191d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2034d |
2033d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2033d |
2032d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1754d |
2035d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
C |
|
|
10 |
1891d |
2038d
|
|
INFO: task hung in hci_cmd_sync_clear
bluetooth
|
1 |
|
|
|
4 |
1292d |
1439d
|
|
general protection fault in rcu_sync_func (3)
bluetooth
|
2 |
|
|
|
2 |
1269d |
1283d
|
|
upstream test error: WARNING in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
90 |
1299d |
1306d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1391d |
2034d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
C |
|
|
2 |
1792d |
2000d
|
|
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
41 |
1300d |
1306d
|
|
net test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
39 |
1301d |
1307d
|
|
general protection fault in klist_next
bluetooth
|
17 |
C |
error |
|
33 |
1244d |
1299d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
C |
inconclusive |
done |
9 |
1604d |
1689d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1589d |
2029d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
C |
done |
|
2256 |
1903d |
2204d
|
|
INFO: task hung in hci_dev_open
bluetooth
|
1 |
|
|
|
6 |
1342d |
1414d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1461d |
1527d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
C |
|
|
3 |
1520d |
1585d
|
|
general protection fault in skb_put
bluetooth
|
2 |
C |
done |
error |
43 |
2002d |
2583d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2034d |
2033d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
C |
|
|
3 |
1597d |
1593d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
C |
done |
inconclusive |
21 |
2084d |
2611d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
C |
|
|
10 |
1708d |
1799d
|
|
WARNING: refcount bug in sco_sock_timeout
bluetooth
|
13 |
|
|
|
24 |
1384d |
1627d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2067d |
2376d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
C |
|
|
3 |
2025d |
2025d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1755d |
2033d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
C |
done |
done |
8 |
2146d |
2687d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2192d |
2192d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
C |
|
|
8 |
1391d |
1388d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2026d |
2026d
|
|
WARNING: locking bug in sco_sock_timeout
bluetooth
|
4 |
|
|
|
13 |
1403d |
1627d
|
|
INFO: trying to register non-static key in sco_sock_timeout
bluetooth
|
-1 |
|
|
|
2 |
1409d |
1455d
|
|
KASAN: use-after-free Write in sco_conn_del
bluetooth
|
22 |
|
|
|
23 |
1462d |
1630d
|
|
general protection fault in rcu_sync_func (2)
bluetooth
|
2 |
|
|
|
1 |
1440d |
1436d
|
|
WARNING: ODEBUG bug in hci_dev_close_sync
bluetooth
|
-1 |
|
|
|
1 |
1484d |
1479d
|
|
KMSAN: uninit-value in hci_conn_complete_evt
bluetooth
|
7 |
|
|
|
3 |
1494d |
1555d
|
|
WARNING: ODEBUG bug in hci_release_dev
bluetooth
|
-1 |
|
|
|
1 |
1527d |
1519d
|
|
INFO: task hung in scan_update_work (2)
bluetooth
|
1 |
|
|
|
1 |
1473d |
1473d
|
|
BUG: spinlock bad magic in lock_sock_nested (2)
bluetooth
|
4 |
|
|
|
1 |
1505d |
1505d
|
|
KMSAN: uninit-value in hci_cmd_status_evt
bluetooth
|
7 |
|
|
|
1 |
1512d |
1512d
|
|
WARNING: locking bug in l2cap_sock_teardown_cb
bluetooth
|
4 |
|
|
|
129 |
1590d |
1882d
|
|
BUG: unable to handle kernel paging request in lock_sock_nested
bluetooth
|
17 |
|
|
|
43 |
1595d |
2035d
|
|
INFO: task can't die in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
1540d |
1536d
|
|
INFO: task hung in scan_update_work
bluetooth
|
1 |
|
|
|
17 |
1543d |
1581d
|
|
WARNING: locking bug in sco_conn_del
bluetooth
|
4 |
|
|
|
2 |
1605d |
1614d
|
|
INFO: task hung in hci_request_cancel_all
bluetooth
|
1 |
|
|
|
1 |
1548d |
1548d
|
|
KMSAN: uninit-value in hci_loglink_complete_evt
bluetooth
|
7 |
|
|
|
1 |
1610d |
1605d
|
|
WARNING: refcount bug in sco_conn_del
bluetooth
|
13 |
|
|
|
7 |
1619d |
1630d
|
|
INFO: trying to register non-static key in sco_conn_del
bluetooth
|
-1 |
|
|
|
1 |
1619d |
1615d
|
|
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping
bluetooth
|
6 |
|
|
|
1 |
1534d |
1534d
|
|
BUG: spinlock bad magic in lock_sock_nested
bluetooth
|
4 |
|
|
|
26 |
1646d |
2001d
|
|
KASAN: global-out-of-bounds Read in cancel_delayed_work
bluetooth
|
17 |
|
|
|
1 |
1624d |
1620d
|
|
INFO: task hung in rfcomm_process_sessions
bluetooth
|
1 |
|
|
|
1 |
1625d |
1625d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
C |
|
|
2 |
2514d |
2514d
|
|
INFO: task can't die in rfcomm_dlc_close
bluetooth
|
1 |
|
|
|
4 |
1637d |
1654d
|
|
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb
bluetooth
|
10 |
|
|
|
1 |
1641d |
1637d
|
|
WARNING: refcount bug in l2cap_sock_kill
bluetooth
|
13 |
|
|
|
1 |
1698d |
1694d
|
|
INFO: task can't die in rfcomm_dlc_open
bluetooth
|
1 |
|
|
|
1 |
1662d |
1658d
|
|
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested
bluetooth
|
-1 |
|
|
|
6 |
1671d |
1723d
|
|
general protection fault in release_sock
bluetooth
|
2 |
|
|
|
1 |
1642d |
1642d
|
|
general protection fault in l2cap_chan_timeout (2)
bluetooth
|
2 |
|
|
|
1 |
1741d |
1736d
|
|
INFO: task hung in hci_conn_hash_flush
bluetooth
|
1 |
|
|
|
1 |
1724d |
1724d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb (2)
bluetooth
|
7 |
|
|
|
1 |
1744d |
1744d
|
|
general protection fault in qca_power_shutdown
arm-msm
bluetooth
|
2 |
|
|
|
1 |
1779d |
1774d
|
|
KASAN: use-after-free Write in h4_recv_buf
bluetooth
|
22 |
|
|
|
2 |
1810d |
1819d
|
|
general protection fault in bt_accept_unlink (2)
bluetooth
|
2 |
|
|
|
1 |
1825d |
1821d
|
|
KASAN: wild-memory-access Write in l2cap_chan_put
bluetooth
|
21 |
|
|
|
2 |
1827d |
1850d
|
|
general protection fault in hci_chan_del
bluetooth
|
2 |
|
|
|
2 |
1867d |
1910d
|
|
KASAN: slab-out-of-bounds Write in hci_chan_del
bluetooth
|
21 |
|
|
|
1 |
1867d |
1862d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete
bluetooth
|
6 |
|
|
|
23 |
1786d |
1907d
|
|
KASAN: use-after-free Read in skb_release_head_state
bluetooth
|
19 |
|
|
|
1 |
1878d |
1874d
|
|
KASAN: use-after-free Read in hci_dev_do_open
bluetooth
|
19 |
|
|
|
1 |
1880d |
1876d
|
|
possible deadlock in lock_sock_nested
bluetooth
|
4 |
|
|
|
1 |
1881d |
1877d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb
bluetooth
|
7 |
|
|
|
1 |
1867d |
1867d
|
|
KASAN: out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
1 |
1921d |
1917d
|
|
general protection fault in l2cap_chan_timeout
bluetooth
|
2 |
|
|
|
1 |
1923d |
1918d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2)
bluetooth
|
6 |
|
|
|
1 |
1855d |
1855d
|
|
KMSAN: uninit-value in hci_event_packet (2)
bluetooth
|
7 |
|
|
|
4 |
1957d |
1988d
|
|
KASAN: use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
1927d |
1927d
|
|
KASAN: global-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
2 |
1976d |
1917d
|
|
KASAN: use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
1972d |
1968d
|
|
BUG: corrupted list in hci_chan_del
bluetooth
|
8 |
|
|
|
2 |
2026d |
2026d
|
|
general protection fault in bt_accept_unlink
bluetooth
|
2 |
|
|
|
1 |
2035d |
2035d
|
|
KMSAN: uninit-value in hci_cmd_timeout
bluetooth
|
7 |
|
|
|
3 |
2062d |
2206d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend
bluetooth
|
6 |
|
|
|
1 |
1991d |
1991d
|
|
INFO: task hung in hci_dev_do_open
bluetooth
|
1 |
|
|
|
1 |
2060d |
2060d
|
|
KMSAN: uninit-value in vhci_write
bluetooth
|
7 |
|
|
|
1 |
2049d |
2049d
|
|
WARNING in __queue_work (2)
bluetooth
|
-1 |
|
|
|
1 |
2114d |
2110d
|
|
INFO: trying to register non-static key in hci_uart_send_frame (2)
bluetooth
|
-1 |
|
|
|
1 |
2193d |
2191d
|
|
KASAN: use-after-free Read in rfcomm_dlc_exists
bluetooth
|
19 |
|
|
|
833 |
2164d |
2778d
|
|
KCSAN: data-race in do_enable_set / do_enable_set
bluetooth
|
6 |
|
|
|
3 |
2227d |
2232d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive (2)
bluetooth
|
-1 |
|
|
|
1 |
2288d |
2284d
|
|
KMSAN: use-after-free in hci_cmd_timeout
bluetooth
|
18 |
|
|
|
1 |
2263d |
2263d
|
|
KCSAN: data-race in flush_workqueue / flush_workqueue
bluetooth
|
6 |
|
|
|
3 |
2278d |
2296d
|
|
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2288d |
2288d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open (2)
bluetooth
|
19 |
|
|
|
19 |
2366d |
2505d
|
|
general protection fault in rfcomm_dlc_open
bluetooth
|
2 |
|
|
|
3 |
2394d |
2491d
|
|
general protection fault in rfcomm_dlc_exists
bluetooth
|
2 |
|
|
|
2 |
2409d |
2491d
|
|
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2309d |
2309d
|
|
general protection fault in rcu_sync_func
bluetooth
|
2 |
|
|
|
1 |
2403d |
2399d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive
bluetooth
|
-1 |
|
|
|
1 |
2377d |
2376d
|
|
BUG: unable to handle kernel paging request in rfcomm_dlc_exists
bluetooth
|
8 |
|
|
|
1 |
2409d |
2405d
|
|
INFO: trying to register non-static key in hci_uart_send_frame
bluetooth
|
-1 |
|
|
|
2 |
2510d |
2559d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
C |
|
|
11 |
2338d |
2396d
|
|
KMSAN: uninit-value in sock_rfree (2)
bluetooth
|
7 |
|
|
|
1 |
2346d |
2346d
|
|
KMSAN: uninit-value in skb_queue_purge
bluetooth
|
7 |
|
|
|
2 |
2343d |
2364d
|
|
WARNING in lockdep_register_key
bluetooth
|
-1 |
|
|
|
35 |
2542d |
2557d
|
|
WARNING: ODEBUG bug in hci_uart_tty_close
bluetooth
|
-1 |
|
|
|
1 |
2570d |
2569d
|
|
INFO: trying to register non-static key in hci_uart_flush
bluetooth
|
-1 |
|
|
|
1 |
2576d |
2576d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open
bluetooth
|
19 |
|
|
|
1 |
2765d |
2761d
|