|
INFO: task hung in hci_connect_cfm
prio:high
bluetooth
|
1 |
|
|
|
1 |
96d |
96d
|
|
possible deadlock in l2cap_chan_connect
prio:high
bluetooth
|
4 |
syz, C |
|
|
4304 |
8d17h |
50d
|
|
INFO: task hung in hci_remote_features_evt (2)
prio:high
bluetooth
|
1 |
syz |
error |
inconclusive |
9 |
381d |
525d
|
|
INFO: trying to register non-static key in bt_accept_unlink
prio:high
bluetooth
|
-1 |
|
|
|
2 |
117d |
123d
|
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
92 |
123d |
1707d
|
|
WARNING in l2cap_send_conn_req
prio:low
bluetooth
|
-1 |
|
|
|
3 |
127d |
161d
|
|
WARNING: held lock freed in bt_accept_dequeue
prio:high
bluetooth
|
4 |
|
|
|
34 |
128d |
665d
|
|
INFO: rcu detected stall in l2cap_sock_release
prio:high
bluetooth
|
1 |
|
|
|
1 |
125d |
125d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
prio:high
bluetooth
|
19 |
syz |
error |
|
203 |
107d |
723d
|
|
WARNING in hci_recv_frame
prio:low
bluetooth
|
-1 |
syz, C |
error |
error |
266 |
106d |
901d
|
|
WARNING in hci_conn_drop (4)
prio:high
bluetooth
|
-1 |
|
|
|
4 |
138d |
152d
|
|
KASAN: slab-use-after-free Read in process_one_work (2)
bluetooth
prio:high
|
19 |
|
|
|
3 |
145d |
175d
|
|
WARNING in hci_send_acl (4)
prio:low
bluetooth
|
-1 |
|
|
|
1 |
150d |
146d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (4)
prio:high
bluetooth
|
12 |
|
|
|
4 |
148d |
153d
|
|
KASAN: slab-use-after-free Read in skb_pull (2)
prio:normal
bluetooth
|
19 |
|
|
|
1 |
168d |
167d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
19 |
syz, C |
|
|
448 |
405d |
658d
|
|
INFO: trying to register non-static key in l2cap_unregister_user
bluetooth
prio:high
|
-1 |
|
|
|
13 |
214d |
363d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
4 |
syz |
error |
error |
569 |
202d |
561d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (3)
bluetooth
prio:high
|
22 |
syz, C |
error |
|
1023 |
195d |
315d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
prio:high
|
4 |
|
|
|
94 |
202d |
595d
|
|
general protection fault in l2cap_conn_del (2)
bluetooth
|
2 |
|
|
|
1 |
205d |
201d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
19 |
syz, C |
error |
error |
3383 |
791d |
920d
|
|
general protection fault in skb_release_data (2)
bluetooth
net
|
22 |
syz, C |
done |
error |
703 |
561d |
2226d
|
|
WARNING: locking bug in l2cap_unregister_user
bluetooth
|
4 |
|
|
|
6 |
257d |
293d
|
|
WARNING in l2cap_unregister_user (2)
bluetooth
|
-1 |
|
|
|
1 |
253d |
253d
|
|
INFO: task hung in le_conn_complete_evt (2)
bluetooth
|
1 |
|
|
|
1 |
266d |
266d
|
|
general protection fault in h5_recv
bluetooth
|
10 |
syz, C |
done |
|
3515 |
249d |
612d
|
|
stack segment fault in kernfs_rename_ns
bluetooth
|
2 |
|
|
|
35 |
268d |
451d
|
|
KCSAN: data-race in bacpy / memcmp
race:harmful
bluetooth
|
6 |
|
|
|
1 |
246d |
234d
|
|
general protection fault in hci_abort_conn (2)
bluetooth
|
2 |
|
|
|
1 |
256d |
252d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (3)
bluetooth
|
12 |
|
|
|
3 |
299d |
309d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
1 |
syz |
|
|
17 |
313d |
490d
|
|
KASAN: slab-use-after-free Read in skb_pull
bluetooth
|
19 |
|
|
|
1 |
324d |
320d
|
|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
syz, C |
|
|
1 |
326d |
331d
|
|
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
-1 |
|
|
|
4 |
331d |
333d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2)
bluetooth
|
19 |
|
|
|
6 |
340d |
375d
|
|
WARNING in hci_conn_drop (3)
bluetooth
|
-1 |
|
|
|
2 |
344d |
376d
|
|
WARNING in hci_send_cmd (3)
bluetooth
|
-1 |
|
|
|
1 |
307d |
303d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread (2)
bluetooth
|
19 |
|
|
|
2 |
349d |
397d
|
|
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync
bluetooth
|
6 |
|
|
|
1 |
309d |
309d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
355d |
747d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work (2)
bluetooth
|
19 |
|
|
|
27015 |
329d |
330d
|
|
WARNING in l2cap_unregister_user
bluetooth
|
-1 |
|
|
|
1 |
311d |
311d
|
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
129 |
348d |
723d
|
|
BUG: unable to handle kernel paging request in l2cap_conn_del
bluetooth
|
8 |
|
|
|
1 |
393d |
389d
|
|
KCSAN: data-race in hci_uart_open / hci_uart_tty_close
bluetooth
|
6 |
|
|
|
1 |
352d |
352d
|
|
WARNING: refcount bug in hci_conn_del_sysfs
bluetooth
|
13 |
|
|
|
1 |
390d |
386d
|
|
WARNING in hci_devcd_register (2)
bluetooth
|
-1 |
|
|
|
4 |
406d |
425d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
19 |
407d |
657d
|
|
KASAN: slab-use-after-free Read in skb_dequeue
bluetooth
|
19 |
|
|
|
4 |
398d |
494d
|
|
INFO: task hung in le_conn_complete_evt
bluetooth
|
1 |
|
|
|
1 |
415d |
415d
|
|
KASAN: slab-use-after-free Read in full_proxy_write (2)
bluetooth
|
19 |
|
|
|
3 |
415d |
414d
|
|
INFO: rcu detected stall in tty_release (3)
net
bluetooth
|
1 |
|
|
|
2 |
418d |
474d
|
|
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
31 |
429d |
642d
|
|
general protection fault in skb_queue_tail (4)
bluetooth
|
2 |
|
|
|
1 |
422d |
418d
|
|
KASAN: slab-use-after-free Read in force_suspend_read (2)
bluetooth
|
19 |
|
|
|
1 |
422d |
418d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
syz, C |
inconclusive |
error |
153 |
406d |
884d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user (2)
bluetooth
|
19 |
|
|
|
1 |
402d |
398d
|
|
INFO: task hung in l2cap_unregister_user
bluetooth
|
1 |
|
|
|
2 |
433d |
521d
|
|
WARNING: kobject bug in hci_disconnect_all_sync
bluetooth
|
-1 |
|
|
|
1 |
446d |
442d
|
|
WARNING in l2cap_send_disconn_req (2)
bluetooth
|
-1 |
|
|
|
1 |
453d |
449d
|
|
KMSAN: uninit-value in hci_recv_frame
bluetooth
|
7 |
|
|
|
1 |
413d |
413d
|
|
INFO: task hung in hci_dev_close_sync (3)
bluetooth
|
1 |
|
|
|
8 |
454d |
669d
|
|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
21 |
|
|
|
1 |
483d |
478d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
syz, C |
done |
|
3 |
610d |
613d
|
|
INFO: task hung in hci_conn_hash_flush (3)
bluetooth
|
1 |
|
|
|
1 |
484d |
484d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
syz, C |
unreliable |
done |
39 |
514d |
894d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
511d |
706d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
519d |
847d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2)
bluetooth
|
12 |
|
|
|
2 |
452d |
454d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill (2)
bluetooth
|
19 |
|
|
|
1 |
461d |
461d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
527d |
523d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
530d |
901d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
534d |
595d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
539d |
534d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread
bluetooth
|
19 |
|
|
|
3 |
557d |
608d
|
|
WARNING in hci_devcd_register
bluetooth
|
-1 |
|
|
|
3 |
569d |
647d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
577d |
573d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
12 |
|
|
|
8 |
578d |
624d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
19 |
|
|
|
18 |
579d |
723d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
4 |
|
|
|
21 |
582d |
828d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
22 |
|
|
|
95 |
567d |
681d
|
|
WARNING in sco_conn_put
bluetooth
|
-1 |
|
|
|
2 |
601d |
661d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
13 |
|
|
|
1 |
604d |
600d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
19 |
|
|
|
8 |
606d |
634d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
19 |
|
|
|
3 |
608d |
625d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
syz, C |
done |
|
94 |
596d |
615d
|
|
general protection fault in h5_close
bluetooth
|
2 |
syz, C |
done |
|
5 |
598d |
601d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
syz, C |
|
|
36 |
586d |
654d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
syz, C |
done |
|
3 |
602d |
601d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
19 |
|
|
|
2 |
620d |
691d
|
|
INFO: task hung in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
644d |
644d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
19 |
|
|
|
1 |
654d |
650d
|
|
WARNING in hci_conn_drop
bluetooth
|
-1 |
|
|
|
1 |
656d |
652d
|
|
general protection fault in l2cap_conn_del
bluetooth
|
2 |
|
|
|
2 |
656d |
672d
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
22 |
|
|
|
2 |
657d |
700d
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
19 |
|
|
|
11 |
629d |
635d
|
|
INFO: task hung in hci_abort_conn_sync
bluetooth
|
1 |
|
|
|
1 |
654d |
654d
|
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
19 |
|
|
|
1 |
665d |
660d
|
|
general protection fault in hci_abort_conn
bluetooth
|
2 |
|
|
|
1 |
665d |
642d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb (2)
bluetooth
|
19 |
|
|
|
1 |
614d |
614d
|
|
INFO: rcu detected stall in hci_cmd_timeout (2)
bluetooth
|
1 |
|
|
|
1 |
667d |
667d
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
8 |
|
|
|
1 |
680d |
676d
|
|
INFO: task hung in hci_conn_hash_flush (2)
bluetooth
|
1 |
|
|
|
2 |
673d |
749d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
587d |
666d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
syz, C |
done |
done |
1 |
687d |
686d
|
|
INFO: rcu detected stall in hci_rx_work (2)
bluetooth
|
1 |
|
|
|
1 |
688d |
688d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
686d |
878d
|
|
WARNING in sco_chan_del
bluetooth
|
-1 |
|
|
|
10 |
704d |
886d
|
|
WARNING in emon
bluetooth
|
-1 |
|
|
|
1 |
705d |
701d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
694d |
694d
|
|
INFO: task hung in hci_conn_failed (3)
bluetooth
|
1 |
|
|
|
18 |
677d |
749d
|
|
KASAN: slab-use-after-free Read in hci_send_acl (2)
bluetooth
|
19 |
|
|
|
1 |
718d |
713d
|
|
KASAN: slab-use-after-free Read in sco_chan_del (2)
bluetooth
|
19 |
|
|
|
2 |
722d |
751d
|
|
possible deadlock in touch_wq_lockdep_map (2)
bluetooth
|
4 |
|
|
|
5 |
723d |
733d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
13 |
|
|
|
10 |
724d |
1204d
|
|
WARNING in hci_send_cmd
bluetooth
|
-1 |
|
|
|
8 |
727d |
975d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
syz, C |
done |
|
87 |
716d |
1233d
|
|
KASAN: slab-use-after-free Read in hci_req_cmd_complete
bluetooth
|
19 |
|
|
|
1 |
738d |
730d
|
|
INFO: task hung in hci_remote_features_evt
bluetooth
|
1 |
|
|
|
9 |
735d |
831d
|
|
INFO: task hung in srso_alias_return_thunk
bluetooth
|
1 |
|
|
|
1 |
738d |
738d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
1009d |
1022d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
syz, C |
error |
done |
13649 |
729d |
1363d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2)
bluetooth
|
12 |
|
|
|
1 |
696d |
696d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue
bluetooth
|
19 |
|
|
|
2 |
767d |
723d
|
|
KASAN: slab-use-after-free Write in mgmt_device_connected
bluetooth
|
22 |
|
|
|
1 |
769d |
747d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete
bluetooth
|
19 |
|
|
|
1 |
749d |
730d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
763d |
905d
|
|
KASAN: slab-use-after-free Read in l2cap_conn_unreliable
bluetooth
|
19 |
|
|
|
1 |
805d |
782d
|
|
WARNING in l2cap_send_cmd
bluetooth
|
-1 |
|
|
|
1 |
813d |
812d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
bluetooth
|
12 |
|
|
|
1 |
815d |
812d
|
|
WARNING in hci_send_acl (3)
bluetooth
|
-1 |
|
|
|
1 |
819d |
815d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
790d |
842d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
19 |
|
|
|
1 |
820d |
782d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
19 |
|
|
|
28 |
795d |
942d
|
|
WARNING in hci_conn_del (2)
bluetooth
|
-1 |
|
|
|
17 |
791d |
788d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
syz, C |
|
|
28 |
800d |
827d
|
|
KASAN: slab-use-after-free Read in hci_req_sync_complete
bluetooth
|
19 |
|
|
|
8 |
834d |
858d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb
bluetooth
|
19 |
|
|
|
7 |
835d |
842d
|
|
WARNING: locking bug in sco_conn_del (2)
bluetooth
|
4 |
|
|
|
1 |
836d |
832d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
syz, C |
|
|
5 |
836d |
850d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata
bluetooth
|
19 |
|
|
|
1 |
837d |
832d
|
|
KASAN: slab-use-after-free Read in skb_free_head
bluetooth
|
19 |
|
|
|
2 |
835d |
855d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
syz, C |
|
|
6 |
848d |
848d
|
|
INFO: rcu detected stall in bt_err
bluetooth
|
1 |
|
|
|
1 |
842d |
842d
|
|
INFO: task hung in hci_conn_failed (2)
bluetooth
|
1 |
|
|
|
1 |
843d |
843d
|
|
WARNING in l2cap_send_disconn_req
bluetooth
|
-1 |
|
|
|
1 |
854d |
850d
|
|
INFO: task hung in l2cap_conn_del
bluetooth
|
1 |
|
|
|
1 |
847d |
847d
|
|
WARNING in lock_sock_nested
bluetooth
sctp
|
-1 |
|
|
|
6 |
777d |
784d
|
|
general protection fault in dequeue_task
bluetooth
|
22 |
|
|
|
783 |
777d |
785d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
syz, C |
error |
done |
7 |
861d |
913d
|
|
KFENCE: invalid free in __hci_req_sync
bluetooth
|
23 |
|
|
|
35 |
832d |
893d
|
|
general protection fault in hci_release_dev (2)
bluetooth
|
2 |
|
|
|
1 |
853d |
849d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1429d |
2257d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2262d |
2262d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb
bluetooth
|
19 |
|
|
|
1 |
870d |
866d
|
|
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
-1 |
|
|
|
5 |
900d |
1066d
|
|
KASAN: slab-use-after-free Read in hci_chan_sent
bluetooth
|
19 |
|
|
|
1 |
861d |
840d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
syz, C |
error |
error |
8 |
908d |
922d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
syz, C |
done |
unreliable |
5 |
917d |
922d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
syz, C |
|
|
14 |
973d |
974d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
17 |
|
|
|
1 |
925d |
919d
|
|
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind
bluetooth
|
6 |
|
|
|
1 |
861d |
861d
|
|
WARNING in msft_do_close
bluetooth
|
-1 |
|
|
|
1 |
929d |
925d
|
|
INFO: rcu detected stall in l2cap_sock_connect
bluetooth
|
1 |
|
|
|
1 |
891d |
891d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
19 |
|
|
|
1 |
934d |
930d
|
|
possible deadlock in hci_dev_close
bluetooth
|
4 |
|
|
|
2 |
896d |
896d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
4 |
|
|
|
6 |
897d |
901d
|
|
WARNING: refcount bug in sco_conn_del (3)
bluetooth
|
13 |
|
|
|
1 |
927d |
923d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
syz, C |
unreliable |
|
28 |
909d |
922d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
syz, C |
|
|
36 |
912d |
922d
|
|
INFO: task hung in hci_cmd_sync_clear (2)
bluetooth
|
1 |
|
|
|
15 |
933d |
1338d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
syz, C |
done |
|
7 |
945d |
1076d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
syz, C |
done |
|
1 |
947d |
990d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
syz, C |
done |
|
10 |
896d |
901d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie
bluetooth
|
19 |
|
|
|
2 |
888d |
896d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
syz, C |
done |
done |
3400 |
954d |
1198d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
syz, C |
|
|
22 |
955d |
1017d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
syz, C |
done |
|
18 |
983d |
980d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
syz, C |
done |
done |
1323 |
977d |
1150d
|
|
INFO: task hung in hci_dev_close_sync (2)
bluetooth
|
1 |
|
|
|
2 |
982d |
985d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
syz, C |
done |
done |
63 |
993d |
1139d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason
bluetooth
|
19 |
|
|
|
1 |
1022d |
1018d
|
|
possible deadlock in discov_off
bluetooth
|
4 |
|
|
|
127 |
1016d |
1472d
|
|
possible deadlock in hci_unregister_dev
bluetooth
|
4 |
|
|
|
175 |
1017d |
1514d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
syz, C |
|
|
1 |
1057d |
1057d
|
|
KASAN: slab-use-after-free Read in l2cap_connect
bluetooth
|
19 |
|
|
|
1 |
1072d |
1064d
|
|
WARNING in hci_send_acl (2)
bluetooth
|
-1 |
|
|
|
1 |
1071d |
1067d
|
|
KASAN: slab-use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
1085d |
1079d
|
|
KASAN: slab-use-after-free Read in release_sock
bluetooth
|
19 |
|
|
|
1 |
1089d |
1085d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
syz, C |
done |
error |
1067 |
1072d |
1886d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
syz, C |
|
|
65 |
1079d |
1137d
|
|
KASAN: slab-use-after-free Read in lookup_object_or_alloc
bluetooth
|
19 |
|
|
|
2 |
1106d |
1117d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb
bluetooth
|
12 |
|
|
|
1 |
1126d |
1119d
|
|
WARNING: ODEBUG bug in hci_abort_conn_sync
bluetooth
|
-1 |
|
|
|
1 |
1119d |
1115d
|
|
KASAN: use-after-free Read in hci_conn_security
bluetooth
|
19 |
|
|
|
1 |
1139d |
1135d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
syz, C |
error |
done |
4 |
1142d |
1520d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1848d |
2262d
|
|
WARNING: refcount bug in sco_conn_del (2)
bluetooth
|
13 |
|
|
|
1 |
1190d |
1186d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop
bluetooth
|
22 |
|
|
|
1 |
1245d |
1241d
|
|
WARNING in l2cap_do_send
bluetooth
|
-1 |
|
|
|
2 |
1271d |
1346d
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
bluetooth
|
4 |
|
|
|
2 |
1272d |
1276d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
syz, C |
|
|
72 |
1248d |
1274d
|
|
WARNING in hci_send_acl
bluetooth
|
-1 |
|
|
|
1 |
1324d |
1320d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
syz, C |
done |
unreliable |
50 |
2137d |
2263d
|
|
possible deadlock in hci_conn_hash_flush
bluetooth
|
4 |
|
|
|
4 |
1335d |
1465d
|
|
INFO: rcu detected stall in hci_rx_work
bluetooth
|
1 |
|
|
|
1 |
1291d |
1291d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
syz, C |
done |
inconclusive |
131 |
1354d |
2465d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
syz, C |
error |
done |
4 |
1494d |
1490d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
syz, C |
done |
done |
166 |
1529d |
1614d
|
|
linux-next test error: possible deadlock in hci_cmd_sync_clear
bluetooth
|
-1 |
|
|
|
6 |
1328d |
1328d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
syz, C |
unreliable |
inconclusive |
34 |
1474d |
2128d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
syz, C |
error |
|
12 |
1448d |
1479d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1875d |
2641d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
syz, C |
done |
inconclusive |
26 |
1899d |
2261d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
syz, C |
done |
done |
87 |
1985d |
2263d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
syz, C |
done |
error |
13 |
1449d |
1481d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
syz, C |
done |
inconclusive |
37 |
1560d |
1595d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
syz, C |
done |
done |
611 |
1580d |
2266d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
syz, C |
|
|
5 |
1448d |
1465d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
syz, C |
|
|
14 |
1448d |
1459d
|
|
possible deadlock in sco_sock_timeout
bluetooth
|
4 |
|
|
|
1 |
1465d |
1465d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
syz, C |
|
|
1 |
1470d |
1470d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
syz, C |
inconclusive |
inconclusive |
13 |
1554d |
1775d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
3 |
1477d |
2014d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
syz, C |
inconclusive |
done |
3 |
1885d |
1882d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
syz, C |
|
|
1 |
1494d |
1490d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
syz, C |
done |
unreliable |
26 |
2143d |
2417d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2259d |
2259d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2258d |
2258d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1980d |
2261d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
syz, C |
|
|
10 |
2116d |
2263d
|
|
INFO: task hung in hci_cmd_sync_clear
bluetooth
|
1 |
|
|
|
4 |
1518d |
1665d
|
|
general protection fault in rcu_sync_func (3)
bluetooth
|
2 |
|
|
|
2 |
1494d |
1508d
|
|
upstream test error: WARNING in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
90 |
1524d |
1532d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1616d |
2259d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
syz, C |
|
|
2 |
2018d |
2226d
|
|
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
41 |
1525d |
1532d
|
|
net test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
39 |
1527d |
1532d
|
|
general protection fault in klist_next
bluetooth
|
17 |
syz, C |
error |
|
33 |
1470d |
1524d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
syz, C |
inconclusive |
done |
9 |
1830d |
1914d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1815d |
2255d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
syz, C |
done |
|
2256 |
2128d |
2430d
|
|
INFO: task hung in hci_dev_open
bluetooth
|
1 |
|
|
|
6 |
1568d |
1640d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1687d |
1753d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1745d |
1811d
|
|
general protection fault in skb_put
bluetooth
|
2 |
syz, C |
done |
error |
43 |
2227d |
2809d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2259d |
2259d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1822d |
1819d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
syz, C |
done |
inconclusive |
21 |
2309d |
2837d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
syz, C |
|
|
10 |
1934d |
2025d
|
|
WARNING: refcount bug in sco_sock_timeout
bluetooth
|
13 |
|
|
|
24 |
1610d |
1853d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2293d |
2601d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
syz, C |
|
|
3 |
2250d |
2251d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1981d |
2259d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
syz, C |
done |
done |
8 |
2372d |
2913d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2418d |
2418d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
syz, C |
|
|
8 |
1617d |
1613d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2251d |
2251d
|
|
WARNING: locking bug in sco_sock_timeout
bluetooth
|
4 |
|
|
|
13 |
1629d |
1853d
|
|
INFO: trying to register non-static key in sco_sock_timeout
bluetooth
|
-1 |
|
|
|
2 |
1634d |
1681d
|
|
KASAN: use-after-free Write in sco_conn_del
bluetooth
|
22 |
|
|
|
23 |
1688d |
1856d
|
|
general protection fault in rcu_sync_func (2)
bluetooth
|
2 |
|
|
|
1 |
1665d |
1661d
|
|
WARNING: ODEBUG bug in hci_dev_close_sync
bluetooth
|
-1 |
|
|
|
1 |
1709d |
1705d
|
|
KMSAN: uninit-value in hci_conn_complete_evt
bluetooth
|
7 |
|
|
|
3 |
1719d |
1781d
|
|
WARNING: ODEBUG bug in hci_release_dev
bluetooth
|
-1 |
|
|
|
1 |
1753d |
1745d
|
|
INFO: task hung in scan_update_work (2)
bluetooth
|
1 |
|
|
|
1 |
1699d |
1699d
|
|
BUG: spinlock bad magic in lock_sock_nested (2)
bluetooth
|
4 |
|
|
|
1 |
1730d |
1730d
|
|
KMSAN: uninit-value in hci_cmd_status_evt
bluetooth
|
7 |
|
|
|
1 |
1738d |
1738d
|
|
WARNING: locking bug in l2cap_sock_teardown_cb
bluetooth
|
4 |
|
|
|
129 |
1815d |
2108d
|
|
BUG: unable to handle kernel paging request in lock_sock_nested
bluetooth
|
17 |
|
|
|
43 |
1820d |
2261d
|
|
INFO: task can't die in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
1766d |
1762d
|
|
INFO: task hung in scan_update_work
bluetooth
|
1 |
|
|
|
17 |
1768d |
1807d
|
|
WARNING: locking bug in sco_conn_del
bluetooth
|
4 |
|
|
|
2 |
1830d |
1840d
|
|
INFO: task hung in hci_request_cancel_all
bluetooth
|
1 |
|
|
|
1 |
1773d |
1773d
|
|
KMSAN: uninit-value in hci_loglink_complete_evt
bluetooth
|
7 |
|
|
|
1 |
1835d |
1831d
|
|
WARNING: refcount bug in sco_conn_del
bluetooth
|
13 |
|
|
|
7 |
1845d |
1856d
|
|
INFO: trying to register non-static key in sco_conn_del
bluetooth
|
-1 |
|
|
|
1 |
1845d |
1841d
|
|
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping
bluetooth
|
6 |
|
|
|
1 |
1760d |
1760d
|
|
BUG: spinlock bad magic in lock_sock_nested
bluetooth
|
4 |
|
|
|
26 |
1872d |
2227d
|
|
KASAN: global-out-of-bounds Read in cancel_delayed_work
bluetooth
|
17 |
|
|
|
1 |
1850d |
1846d
|
|
INFO: task hung in rfcomm_process_sessions
bluetooth
|
1 |
|
|
|
1 |
1851d |
1851d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
syz, C |
|
|
2 |
2739d |
2739d
|
|
INFO: task can't die in rfcomm_dlc_close
bluetooth
|
1 |
|
|
|
4 |
1862d |
1880d
|
|
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb
bluetooth
|
10 |
|
|
|
1 |
1866d |
1862d
|
|
WARNING: refcount bug in l2cap_sock_kill
bluetooth
|
13 |
|
|
|
1 |
1924d |
1920d
|
|
INFO: task can't die in rfcomm_dlc_open
bluetooth
|
1 |
|
|
|
1 |
1887d |
1883d
|
|
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested
bluetooth
|
-1 |
|
|
|
6 |
1896d |
1948d
|
|
general protection fault in release_sock
bluetooth
|
2 |
|
|
|
1 |
1868d |
1868d
|
|
general protection fault in l2cap_chan_timeout (2)
bluetooth
|
2 |
|
|
|
1 |
1966d |
1962d
|
|
INFO: task hung in hci_conn_hash_flush
bluetooth
|
1 |
|
|
|
1 |
1950d |
1950d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb (2)
bluetooth
|
7 |
|
|
|
1 |
1970d |
1970d
|
|
general protection fault in qca_power_shutdown
arm-msm
bluetooth
|
2 |
|
|
|
1 |
2004d |
2000d
|
|
KASAN: use-after-free Write in h4_recv_buf
bluetooth
|
22 |
|
|
|
2 |
2036d |
2045d
|
|
general protection fault in bt_accept_unlink (2)
bluetooth
|
2 |
|
|
|
1 |
2051d |
2047d
|
|
KASAN: wild-memory-access Write in l2cap_chan_put
bluetooth
|
21 |
|
|
|
2 |
2052d |
2076d
|
|
general protection fault in hci_chan_del
bluetooth
|
2 |
|
|
|
2 |
2092d |
2136d
|
|
KASAN: slab-out-of-bounds Write in hci_chan_del
bluetooth
|
21 |
|
|
|
1 |
2092d |
2088d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete
bluetooth
|
6 |
|
|
|
23 |
2011d |
2133d
|
|
KASAN: use-after-free Read in skb_release_head_state
bluetooth
|
19 |
|
|
|
1 |
2104d |
2100d
|
|
KASAN: use-after-free Read in hci_dev_do_open
bluetooth
|
19 |
|
|
|
1 |
2106d |
2102d
|
|
possible deadlock in lock_sock_nested
bluetooth
|
4 |
|
|
|
1 |
2107d |
2103d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb
bluetooth
|
7 |
|
|
|
1 |
2093d |
2093d
|
|
KASAN: out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
1 |
2146d |
2143d
|
|
general protection fault in l2cap_chan_timeout
bluetooth
|
2 |
|
|
|
1 |
2148d |
2144d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2)
bluetooth
|
6 |
|
|
|
1 |
2081d |
2081d
|
|
KMSAN: uninit-value in hci_event_packet (2)
bluetooth
|
7 |
|
|
|
4 |
2182d |
2214d
|
|
KASAN: use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
2152d |
2152d
|
|
KASAN: global-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
2 |
2202d |
2143d
|
|
KASAN: use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
2198d |
2194d
|
|
BUG: corrupted list in hci_chan_del
bluetooth
|
8 |
|
|
|
2 |
2252d |
2252d
|
|
general protection fault in bt_accept_unlink
bluetooth
|
2 |
|
|
|
1 |
2261d |
2261d
|
|
KMSAN: uninit-value in hci_cmd_timeout
bluetooth
|
7 |
|
|
|
3 |
2287d |
2431d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend
bluetooth
|
6 |
|
|
|
1 |
2217d |
2217d
|
|
INFO: task hung in hci_dev_do_open
bluetooth
|
1 |
|
|
|
1 |
2285d |
2285d
|
|
KMSAN: uninit-value in vhci_write
bluetooth
|
7 |
|
|
|
1 |
2275d |
2275d
|
|
WARNING in __queue_work (2)
bluetooth
|
-1 |
|
|
|
1 |
2340d |
2336d
|
|
INFO: trying to register non-static key in hci_uart_send_frame (2)
bluetooth
|
-1 |
|
|
|
1 |
2419d |
2416d
|
|
KASAN: use-after-free Read in rfcomm_dlc_exists
bluetooth
|
19 |
|
|
|
833 |
2390d |
3004d
|
|
KCSAN: data-race in do_enable_set / do_enable_set
bluetooth
|
6 |
|
|
|
3 |
2453d |
2457d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive (2)
bluetooth
|
-1 |
|
|
|
1 |
2513d |
2509d
|
|
KMSAN: use-after-free in hci_cmd_timeout
bluetooth
|
18 |
|
|
|
1 |
2489d |
2489d
|
|
KCSAN: data-race in flush_workqueue / flush_workqueue
bluetooth
|
6 |
|
|
|
3 |
2504d |
2522d
|
|
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2514d |
2514d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open (2)
bluetooth
|
19 |
|
|
|
19 |
2591d |
2731d
|
|
general protection fault in rfcomm_dlc_open
bluetooth
|
2 |
|
|
|
3 |
2620d |
2717d
|
|
general protection fault in rfcomm_dlc_exists
bluetooth
|
2 |
|
|
|
2 |
2634d |
2717d
|
|
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2535d |
2535d
|
|
general protection fault in rcu_sync_func
bluetooth
|
2 |
|
|
|
1 |
2629d |
2625d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive
bluetooth
|
-1 |
|
|
|
1 |
2603d |
2601d
|
|
BUG: unable to handle kernel paging request in rfcomm_dlc_exists
bluetooth
|
8 |
|
|
|
1 |
2635d |
2631d
|
|
INFO: trying to register non-static key in hci_uart_send_frame
bluetooth
|
-1 |
|
|
|
2 |
2736d |
2784d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
syz, C |
|
|
11 |
2564d |
2622d
|
|
KMSAN: uninit-value in sock_rfree (2)
bluetooth
|
7 |
|
|
|
1 |
2572d |
2572d
|
|
KMSAN: uninit-value in skb_queue_purge
bluetooth
|
7 |
|
|
|
2 |
2568d |
2589d
|
|
WARNING in lockdep_register_key
bluetooth
|
-1 |
|
|
|
35 |
2767d |
2783d
|
|
WARNING: ODEBUG bug in hci_uart_tty_close
bluetooth
|
-1 |
|
|
|
1 |
2796d |
2795d
|
|
INFO: trying to register non-static key in hci_uart_flush
bluetooth
|
-1 |
|
|
|
1 |
2802d |
2802d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open
bluetooth
|
19 |
|
|
|
1 |
2990d |
2986d
|