|
INFO: task hung in hci_connect_cfm
prio:high
bluetooth
|
1 |
|
|
|
1 |
95d |
95d
|
|
possible deadlock in l2cap_chan_connect
prio:high
bluetooth
|
4 |
syz, C |
|
|
4304 |
7d14h |
49d
|
|
INFO: task hung in hci_remote_features_evt (2)
prio:high
bluetooth
|
1 |
syz |
error |
inconclusive |
9 |
379d |
524d
|
|
INFO: trying to register non-static key in bt_accept_unlink
prio:high
bluetooth
|
-1 |
|
|
|
2 |
116d |
122d
|
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
92 |
122d |
1705d
|
|
WARNING in l2cap_send_conn_req
prio:low
bluetooth
|
-1 |
|
|
|
3 |
126d |
160d
|
|
WARNING: held lock freed in bt_accept_dequeue
prio:high
bluetooth
|
4 |
|
|
|
34 |
127d |
664d
|
|
INFO: rcu detected stall in l2cap_sock_release
prio:high
bluetooth
|
1 |
|
|
|
1 |
124d |
124d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
prio:high
bluetooth
|
19 |
syz |
error |
|
203 |
106d |
722d
|
|
WARNING in hci_recv_frame
prio:low
bluetooth
|
-1 |
syz, C |
error |
error |
266 |
105d |
900d
|
|
WARNING in hci_conn_drop (4)
prio:high
bluetooth
|
-1 |
|
|
|
4 |
136d |
151d
|
|
KASAN: slab-use-after-free Read in process_one_work (2)
bluetooth
prio:high
|
19 |
|
|
|
3 |
144d |
174d
|
|
WARNING in hci_send_acl (4)
prio:low
bluetooth
|
-1 |
|
|
|
1 |
149d |
145d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (4)
prio:high
bluetooth
|
12 |
|
|
|
4 |
147d |
151d
|
|
KASAN: slab-use-after-free Read in skb_pull (2)
prio:normal
bluetooth
|
19 |
|
|
|
1 |
167d |
166d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
19 |
syz, C |
|
|
448 |
404d |
657d
|
|
INFO: trying to register non-static key in l2cap_unregister_user
bluetooth
prio:high
|
-1 |
|
|
|
13 |
213d |
362d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
4 |
syz |
error |
error |
569 |
201d |
560d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (3)
bluetooth
prio:high
|
22 |
syz, C |
error |
|
1023 |
194d |
314d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
prio:high
|
4 |
|
|
|
94 |
201d |
594d
|
|
general protection fault in l2cap_conn_del (2)
bluetooth
|
2 |
|
|
|
1 |
204d |
200d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
19 |
syz, C |
error |
error |
3383 |
790d |
919d
|
|
general protection fault in skb_release_data (2)
bluetooth
net
|
22 |
syz, C |
done |
error |
703 |
560d |
2225d
|
|
WARNING: locking bug in l2cap_unregister_user
bluetooth
|
4 |
|
|
|
6 |
256d |
292d
|
|
WARNING in l2cap_unregister_user (2)
bluetooth
|
-1 |
|
|
|
1 |
252d |
252d
|
|
INFO: task hung in le_conn_complete_evt (2)
bluetooth
|
1 |
|
|
|
1 |
265d |
265d
|
|
general protection fault in h5_recv
bluetooth
|
10 |
syz, C |
done |
|
3515 |
248d |
611d
|
|
stack segment fault in kernfs_rename_ns
bluetooth
|
2 |
|
|
|
35 |
267d |
450d
|
|
KCSAN: data-race in bacpy / memcmp
race:harmful
bluetooth
|
6 |
|
|
|
1 |
244d |
233d
|
|
general protection fault in hci_abort_conn (2)
bluetooth
|
2 |
|
|
|
1 |
255d |
251d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (3)
bluetooth
|
12 |
|
|
|
3 |
298d |
308d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
1 |
syz |
|
|
17 |
312d |
489d
|
|
KASAN: slab-use-after-free Read in skb_pull
bluetooth
|
19 |
|
|
|
1 |
323d |
319d
|
|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
syz, C |
|
|
1 |
325d |
330d
|
|
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
-1 |
|
|
|
4 |
330d |
332d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2)
bluetooth
|
19 |
|
|
|
6 |
339d |
374d
|
|
WARNING in hci_conn_drop (3)
bluetooth
|
-1 |
|
|
|
2 |
343d |
375d
|
|
WARNING in hci_send_cmd (3)
bluetooth
|
-1 |
|
|
|
1 |
306d |
302d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread (2)
bluetooth
|
19 |
|
|
|
2 |
348d |
396d
|
|
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync
bluetooth
|
6 |
|
|
|
1 |
308d |
308d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
354d |
746d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work (2)
bluetooth
|
19 |
|
|
|
27015 |
328d |
329d
|
|
WARNING in l2cap_unregister_user
bluetooth
|
-1 |
|
|
|
1 |
310d |
310d
|
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
129 |
347d |
722d
|
|
BUG: unable to handle kernel paging request in l2cap_conn_del
bluetooth
|
8 |
|
|
|
1 |
392d |
387d
|
|
KCSAN: data-race in hci_uart_open / hci_uart_tty_close
bluetooth
|
6 |
|
|
|
1 |
351d |
351d
|
|
WARNING: refcount bug in hci_conn_del_sysfs
bluetooth
|
13 |
|
|
|
1 |
389d |
385d
|
|
WARNING in hci_devcd_register (2)
bluetooth
|
-1 |
|
|
|
4 |
405d |
424d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
19 |
406d |
655d
|
|
KASAN: slab-use-after-free Read in skb_dequeue
bluetooth
|
19 |
|
|
|
4 |
397d |
493d
|
|
INFO: task hung in le_conn_complete_evt
bluetooth
|
1 |
|
|
|
1 |
414d |
414d
|
|
KASAN: slab-use-after-free Read in full_proxy_write (2)
bluetooth
|
19 |
|
|
|
3 |
414d |
413d
|
|
INFO: rcu detected stall in tty_release (3)
net
bluetooth
|
1 |
|
|
|
2 |
417d |
473d
|
|
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
31 |
428d |
641d
|
|
general protection fault in skb_queue_tail (4)
bluetooth
|
2 |
|
|
|
1 |
421d |
417d
|
|
KASAN: slab-use-after-free Read in force_suspend_read (2)
bluetooth
|
19 |
|
|
|
1 |
421d |
417d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
syz, C |
inconclusive |
error |
153 |
405d |
883d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user (2)
bluetooth
|
19 |
|
|
|
1 |
401d |
397d
|
|
INFO: task hung in l2cap_unregister_user
bluetooth
|
1 |
|
|
|
2 |
432d |
520d
|
|
WARNING: kobject bug in hci_disconnect_all_sync
bluetooth
|
-1 |
|
|
|
1 |
445d |
441d
|
|
WARNING in l2cap_send_disconn_req (2)
bluetooth
|
-1 |
|
|
|
1 |
452d |
448d
|
|
KMSAN: uninit-value in hci_recv_frame
bluetooth
|
7 |
|
|
|
1 |
412d |
412d
|
|
INFO: task hung in hci_dev_close_sync (3)
bluetooth
|
1 |
|
|
|
8 |
453d |
668d
|
|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
21 |
|
|
|
1 |
482d |
477d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
syz, C |
done |
|
3 |
609d |
612d
|
|
INFO: task hung in hci_conn_hash_flush (3)
bluetooth
|
1 |
|
|
|
1 |
483d |
483d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
syz, C |
unreliable |
done |
39 |
513d |
893d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
510d |
705d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
518d |
845d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2)
bluetooth
|
12 |
|
|
|
2 |
451d |
453d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill (2)
bluetooth
|
19 |
|
|
|
1 |
460d |
460d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
526d |
522d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
529d |
900d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
533d |
594d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
537d |
533d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread
bluetooth
|
19 |
|
|
|
3 |
556d |
607d
|
|
WARNING in hci_devcd_register
bluetooth
|
-1 |
|
|
|
3 |
568d |
646d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
576d |
572d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
12 |
|
|
|
8 |
577d |
623d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
19 |
|
|
|
18 |
578d |
722d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
4 |
|
|
|
21 |
581d |
826d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
22 |
|
|
|
95 |
566d |
680d
|
|
WARNING in sco_conn_put
bluetooth
|
-1 |
|
|
|
2 |
600d |
660d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
13 |
|
|
|
1 |
603d |
599d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
19 |
|
|
|
8 |
605d |
633d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
19 |
|
|
|
3 |
607d |
624d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
syz, C |
done |
|
94 |
595d |
614d
|
|
general protection fault in h5_close
bluetooth
|
2 |
syz, C |
done |
|
5 |
597d |
600d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
syz, C |
|
|
36 |
585d |
653d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
syz, C |
done |
|
3 |
601d |
600d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
19 |
|
|
|
2 |
619d |
689d
|
|
INFO: task hung in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
643d |
643d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
19 |
|
|
|
1 |
653d |
649d
|
|
WARNING in hci_conn_drop
bluetooth
|
-1 |
|
|
|
1 |
655d |
651d
|
|
general protection fault in l2cap_conn_del
bluetooth
|
2 |
|
|
|
2 |
655d |
671d
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
22 |
|
|
|
2 |
656d |
699d
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
19 |
|
|
|
11 |
628d |
634d
|
|
INFO: task hung in hci_abort_conn_sync
bluetooth
|
1 |
|
|
|
1 |
653d |
653d
|
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
19 |
|
|
|
1 |
664d |
659d
|
|
general protection fault in hci_abort_conn
bluetooth
|
2 |
|
|
|
1 |
664d |
641d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb (2)
bluetooth
|
19 |
|
|
|
1 |
613d |
613d
|
|
INFO: rcu detected stall in hci_cmd_timeout (2)
bluetooth
|
1 |
|
|
|
1 |
666d |
666d
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
8 |
|
|
|
1 |
679d |
675d
|
|
INFO: task hung in hci_conn_hash_flush (2)
bluetooth
|
1 |
|
|
|
2 |
672d |
748d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
585d |
664d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
syz, C |
done |
done |
1 |
685d |
684d
|
|
INFO: rcu detected stall in hci_rx_work (2)
bluetooth
|
1 |
|
|
|
1 |
687d |
687d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
685d |
877d
|
|
WARNING in sco_chan_del
bluetooth
|
-1 |
|
|
|
10 |
703d |
885d
|
|
WARNING in emon
bluetooth
|
-1 |
|
|
|
1 |
704d |
700d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
693d |
693d
|
|
INFO: task hung in hci_conn_failed (3)
bluetooth
|
1 |
|
|
|
18 |
676d |
747d
|
|
KASAN: slab-use-after-free Read in hci_send_acl (2)
bluetooth
|
19 |
|
|
|
1 |
717d |
712d
|
|
KASAN: slab-use-after-free Read in sco_chan_del (2)
bluetooth
|
19 |
|
|
|
2 |
721d |
750d
|
|
possible deadlock in touch_wq_lockdep_map (2)
bluetooth
|
4 |
|
|
|
5 |
722d |
732d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
13 |
|
|
|
10 |
723d |
1203d
|
|
WARNING in hci_send_cmd
bluetooth
|
-1 |
|
|
|
8 |
726d |
974d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
syz, C |
done |
|
87 |
715d |
1232d
|
|
KASAN: slab-use-after-free Read in hci_req_cmd_complete
bluetooth
|
19 |
|
|
|
1 |
737d |
729d
|
|
INFO: task hung in hci_remote_features_evt
bluetooth
|
1 |
|
|
|
9 |
734d |
830d
|
|
INFO: task hung in srso_alias_return_thunk
bluetooth
|
1 |
|
|
|
1 |
737d |
737d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
1008d |
1021d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
syz, C |
error |
done |
13649 |
728d |
1362d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2)
bluetooth
|
12 |
|
|
|
1 |
695d |
695d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue
bluetooth
|
19 |
|
|
|
2 |
766d |
722d
|
|
KASAN: slab-use-after-free Write in mgmt_device_connected
bluetooth
|
22 |
|
|
|
1 |
768d |
746d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete
bluetooth
|
19 |
|
|
|
1 |
748d |
729d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
762d |
904d
|
|
KASAN: slab-use-after-free Read in l2cap_conn_unreliable
bluetooth
|
19 |
|
|
|
1 |
804d |
781d
|
|
WARNING in l2cap_send_cmd
bluetooth
|
-1 |
|
|
|
1 |
812d |
811d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
bluetooth
|
12 |
|
|
|
1 |
814d |
811d
|
|
WARNING in hci_send_acl (3)
bluetooth
|
-1 |
|
|
|
1 |
818d |
814d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
789d |
841d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
19 |
|
|
|
1 |
819d |
781d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
19 |
|
|
|
28 |
794d |
941d
|
|
WARNING in hci_conn_del (2)
bluetooth
|
-1 |
|
|
|
17 |
790d |
786d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
syz, C |
|
|
28 |
799d |
826d
|
|
KASAN: slab-use-after-free Read in hci_req_sync_complete
bluetooth
|
19 |
|
|
|
8 |
833d |
857d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb
bluetooth
|
19 |
|
|
|
7 |
834d |
841d
|
|
WARNING: locking bug in sco_conn_del (2)
bluetooth
|
4 |
|
|
|
1 |
835d |
831d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
syz, C |
|
|
5 |
835d |
849d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata
bluetooth
|
19 |
|
|
|
1 |
836d |
831d
|
|
KASAN: slab-use-after-free Read in skb_free_head
bluetooth
|
19 |
|
|
|
2 |
834d |
854d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
syz, C |
|
|
6 |
847d |
847d
|
|
INFO: rcu detected stall in bt_err
bluetooth
|
1 |
|
|
|
1 |
841d |
841d
|
|
INFO: task hung in hci_conn_failed (2)
bluetooth
|
1 |
|
|
|
1 |
842d |
842d
|
|
WARNING in l2cap_send_disconn_req
bluetooth
|
-1 |
|
|
|
1 |
852d |
848d
|
|
INFO: task hung in l2cap_conn_del
bluetooth
|
1 |
|
|
|
1 |
846d |
846d
|
|
WARNING in lock_sock_nested
bluetooth
sctp
|
-1 |
|
|
|
6 |
776d |
783d
|
|
general protection fault in dequeue_task
bluetooth
|
22 |
|
|
|
783 |
776d |
784d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
syz, C |
error |
done |
7 |
860d |
912d
|
|
KFENCE: invalid free in __hci_req_sync
bluetooth
|
23 |
|
|
|
35 |
831d |
892d
|
|
general protection fault in hci_release_dev (2)
bluetooth
|
2 |
|
|
|
1 |
852d |
847d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1428d |
2256d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2261d |
2261d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb
bluetooth
|
19 |
|
|
|
1 |
869d |
865d
|
|
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
-1 |
|
|
|
5 |
899d |
1065d
|
|
KASAN: slab-use-after-free Read in hci_chan_sent
bluetooth
|
19 |
|
|
|
1 |
860d |
839d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
syz, C |
error |
error |
8 |
907d |
921d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
syz, C |
done |
unreliable |
5 |
916d |
921d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
syz, C |
|
|
14 |
972d |
973d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
17 |
|
|
|
1 |
924d |
918d
|
|
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind
bluetooth
|
6 |
|
|
|
1 |
860d |
860d
|
|
WARNING in msft_do_close
bluetooth
|
-1 |
|
|
|
1 |
928d |
924d
|
|
INFO: rcu detected stall in l2cap_sock_connect
bluetooth
|
1 |
|
|
|
1 |
890d |
890d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
19 |
|
|
|
1 |
933d |
929d
|
|
possible deadlock in hci_dev_close
bluetooth
|
4 |
|
|
|
2 |
895d |
895d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
4 |
|
|
|
6 |
896d |
900d
|
|
WARNING: refcount bug in sco_conn_del (3)
bluetooth
|
13 |
|
|
|
1 |
926d |
922d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
syz, C |
unreliable |
|
28 |
908d |
921d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
syz, C |
|
|
36 |
910d |
921d
|
|
INFO: task hung in hci_cmd_sync_clear (2)
bluetooth
|
1 |
|
|
|
15 |
932d |
1337d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
syz, C |
done |
|
7 |
944d |
1075d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
syz, C |
done |
|
1 |
946d |
989d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
syz, C |
done |
|
10 |
894d |
900d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie
bluetooth
|
19 |
|
|
|
2 |
887d |
895d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
syz, C |
done |
done |
3400 |
953d |
1197d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
syz, C |
|
|
22 |
954d |
1016d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
syz, C |
done |
|
18 |
982d |
979d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
syz, C |
done |
done |
1323 |
976d |
1149d
|
|
INFO: task hung in hci_dev_close_sync (2)
bluetooth
|
1 |
|
|
|
2 |
981d |
984d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
syz, C |
done |
done |
63 |
992d |
1138d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason
bluetooth
|
19 |
|
|
|
1 |
1021d |
1017d
|
|
possible deadlock in discov_off
bluetooth
|
4 |
|
|
|
127 |
1015d |
1471d
|
|
possible deadlock in hci_unregister_dev
bluetooth
|
4 |
|
|
|
175 |
1016d |
1513d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
syz, C |
|
|
1 |
1056d |
1056d
|
|
KASAN: slab-use-after-free Read in l2cap_connect
bluetooth
|
19 |
|
|
|
1 |
1071d |
1063d
|
|
WARNING in hci_send_acl (2)
bluetooth
|
-1 |
|
|
|
1 |
1070d |
1066d
|
|
KASAN: slab-use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
1084d |
1078d
|
|
KASAN: slab-use-after-free Read in release_sock
bluetooth
|
19 |
|
|
|
1 |
1088d |
1084d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
syz, C |
done |
error |
1067 |
1071d |
1885d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
syz, C |
|
|
65 |
1078d |
1136d
|
|
KASAN: slab-use-after-free Read in lookup_object_or_alloc
bluetooth
|
19 |
|
|
|
2 |
1105d |
1116d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb
bluetooth
|
12 |
|
|
|
1 |
1125d |
1118d
|
|
WARNING: ODEBUG bug in hci_abort_conn_sync
bluetooth
|
-1 |
|
|
|
1 |
1118d |
1114d
|
|
KASAN: use-after-free Read in hci_conn_security
bluetooth
|
19 |
|
|
|
1 |
1138d |
1134d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
syz, C |
error |
done |
4 |
1141d |
1519d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1847d |
2261d
|
|
WARNING: refcount bug in sco_conn_del (2)
bluetooth
|
13 |
|
|
|
1 |
1189d |
1185d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop
bluetooth
|
22 |
|
|
|
1 |
1244d |
1240d
|
|
WARNING in l2cap_do_send
bluetooth
|
-1 |
|
|
|
2 |
1270d |
1345d
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
bluetooth
|
4 |
|
|
|
2 |
1271d |
1275d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
syz, C |
|
|
72 |
1247d |
1273d
|
|
WARNING in hci_send_acl
bluetooth
|
-1 |
|
|
|
1 |
1323d |
1319d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
syz, C |
done |
unreliable |
50 |
2135d |
2262d
|
|
possible deadlock in hci_conn_hash_flush
bluetooth
|
4 |
|
|
|
4 |
1334d |
1464d
|
|
INFO: rcu detected stall in hci_rx_work
bluetooth
|
1 |
|
|
|
1 |
1290d |
1290d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
syz, C |
done |
inconclusive |
131 |
1353d |
2464d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
syz, C |
error |
done |
4 |
1493d |
1489d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
syz, C |
done |
done |
166 |
1528d |
1613d
|
|
linux-next test error: possible deadlock in hci_cmd_sync_clear
bluetooth
|
-1 |
|
|
|
6 |
1327d |
1327d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
syz, C |
unreliable |
inconclusive |
34 |
1473d |
2127d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
syz, C |
error |
|
12 |
1447d |
1478d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1874d |
2640d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
syz, C |
done |
inconclusive |
26 |
1898d |
2260d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
syz, C |
done |
done |
87 |
1984d |
2262d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
syz, C |
done |
error |
13 |
1448d |
1480d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
syz, C |
done |
inconclusive |
37 |
1559d |
1594d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
syz, C |
done |
done |
611 |
1578d |
2265d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
syz, C |
|
|
5 |
1446d |
1464d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
syz, C |
|
|
14 |
1446d |
1458d
|
|
possible deadlock in sco_sock_timeout
bluetooth
|
4 |
|
|
|
1 |
1464d |
1464d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
syz, C |
|
|
1 |
1468d |
1468d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
syz, C |
inconclusive |
inconclusive |
13 |
1553d |
1774d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
3 |
1476d |
2013d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
syz, C |
inconclusive |
done |
3 |
1884d |
1881d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
syz, C |
|
|
1 |
1492d |
1488d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
syz, C |
done |
unreliable |
26 |
2142d |
2416d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2258d |
2258d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2257d |
2257d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1979d |
2260d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
syz, C |
|
|
10 |
2115d |
2262d
|
|
INFO: task hung in hci_cmd_sync_clear
bluetooth
|
1 |
|
|
|
4 |
1517d |
1663d
|
|
general protection fault in rcu_sync_func (3)
bluetooth
|
2 |
|
|
|
2 |
1493d |
1507d
|
|
upstream test error: WARNING in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
90 |
1523d |
1531d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1615d |
2258d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
syz, C |
|
|
2 |
2016d |
2225d
|
|
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
41 |
1524d |
1531d
|
|
net test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
39 |
1526d |
1531d
|
|
general protection fault in klist_next
bluetooth
|
17 |
syz, C |
error |
|
33 |
1469d |
1523d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
syz, C |
inconclusive |
done |
9 |
1829d |
1913d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1814d |
2254d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
syz, C |
done |
|
2256 |
2127d |
2429d
|
|
INFO: task hung in hci_dev_open
bluetooth
|
1 |
|
|
|
6 |
1566d |
1638d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1685d |
1752d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1744d |
1810d
|
|
general protection fault in skb_put
bluetooth
|
2 |
syz, C |
done |
error |
43 |
2226d |
2808d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2258d |
2258d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1821d |
1818d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
syz, C |
done |
inconclusive |
21 |
2308d |
2836d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
syz, C |
|
|
10 |
1932d |
2024d
|
|
WARNING: refcount bug in sco_sock_timeout
bluetooth
|
13 |
|
|
|
24 |
1609d |
1851d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2292d |
2600d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
syz, C |
|
|
3 |
2249d |
2249d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1980d |
2258d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
syz, C |
done |
done |
8 |
2371d |
2912d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2417d |
2416d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
syz, C |
|
|
8 |
1616d |
1612d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2250d |
2250d
|
|
WARNING: locking bug in sco_sock_timeout
bluetooth
|
4 |
|
|
|
13 |
1628d |
1851d
|
|
INFO: trying to register non-static key in sco_sock_timeout
bluetooth
|
-1 |
|
|
|
2 |
1633d |
1680d
|
|
KASAN: use-after-free Write in sco_conn_del
bluetooth
|
22 |
|
|
|
23 |
1686d |
1854d
|
|
general protection fault in rcu_sync_func (2)
bluetooth
|
2 |
|
|
|
1 |
1664d |
1660d
|
|
WARNING: ODEBUG bug in hci_dev_close_sync
bluetooth
|
-1 |
|
|
|
1 |
1708d |
1704d
|
|
KMSAN: uninit-value in hci_conn_complete_evt
bluetooth
|
7 |
|
|
|
3 |
1718d |
1780d
|
|
WARNING: ODEBUG bug in hci_release_dev
bluetooth
|
-1 |
|
|
|
1 |
1752d |
1743d
|
|
INFO: task hung in scan_update_work (2)
bluetooth
|
1 |
|
|
|
1 |
1697d |
1697d
|
|
BUG: spinlock bad magic in lock_sock_nested (2)
bluetooth
|
4 |
|
|
|
1 |
1729d |
1729d
|
|
KMSAN: uninit-value in hci_cmd_status_evt
bluetooth
|
7 |
|
|
|
1 |
1736d |
1736d
|
|
WARNING: locking bug in l2cap_sock_teardown_cb
bluetooth
|
4 |
|
|
|
129 |
1814d |
2107d
|
|
BUG: unable to handle kernel paging request in lock_sock_nested
bluetooth
|
17 |
|
|
|
43 |
1819d |
2260d
|
|
INFO: task can't die in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
1765d |
1761d
|
|
INFO: task hung in scan_update_work
bluetooth
|
1 |
|
|
|
17 |
1767d |
1806d
|
|
WARNING: locking bug in sco_conn_del
bluetooth
|
4 |
|
|
|
2 |
1829d |
1839d
|
|
INFO: task hung in hci_request_cancel_all
bluetooth
|
1 |
|
|
|
1 |
1772d |
1772d
|
|
KMSAN: uninit-value in hci_loglink_complete_evt
bluetooth
|
7 |
|
|
|
1 |
1834d |
1830d
|
|
WARNING: refcount bug in sco_conn_del
bluetooth
|
13 |
|
|
|
7 |
1844d |
1854d
|
|
INFO: trying to register non-static key in sco_conn_del
bluetooth
|
-1 |
|
|
|
1 |
1844d |
1840d
|
|
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping
bluetooth
|
6 |
|
|
|
1 |
1759d |
1759d
|
|
BUG: spinlock bad magic in lock_sock_nested
bluetooth
|
4 |
|
|
|
26 |
1871d |
2226d
|
|
KASAN: global-out-of-bounds Read in cancel_delayed_work
bluetooth
|
17 |
|
|
|
1 |
1849d |
1845d
|
|
INFO: task hung in rfcomm_process_sessions
bluetooth
|
1 |
|
|
|
1 |
1849d |
1849d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
syz, C |
|
|
2 |
2738d |
2738d
|
|
INFO: task can't die in rfcomm_dlc_close
bluetooth
|
1 |
|
|
|
4 |
1861d |
1879d
|
|
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb
bluetooth
|
10 |
|
|
|
1 |
1865d |
1861d
|
|
WARNING: refcount bug in l2cap_sock_kill
bluetooth
|
13 |
|
|
|
1 |
1923d |
1919d
|
|
INFO: task can't die in rfcomm_dlc_open
bluetooth
|
1 |
|
|
|
1 |
1886d |
1882d
|
|
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested
bluetooth
|
-1 |
|
|
|
6 |
1895d |
1947d
|
|
general protection fault in release_sock
bluetooth
|
2 |
|
|
|
1 |
1867d |
1867d
|
|
general protection fault in l2cap_chan_timeout (2)
bluetooth
|
2 |
|
|
|
1 |
1965d |
1961d
|
|
INFO: task hung in hci_conn_hash_flush
bluetooth
|
1 |
|
|
|
1 |
1949d |
1949d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb (2)
bluetooth
|
7 |
|
|
|
1 |
1969d |
1969d
|
|
general protection fault in qca_power_shutdown
arm-msm
bluetooth
|
2 |
|
|
|
1 |
2003d |
1999d
|
|
KASAN: use-after-free Write in h4_recv_buf
bluetooth
|
22 |
|
|
|
2 |
2035d |
2044d
|
|
general protection fault in bt_accept_unlink (2)
bluetooth
|
2 |
|
|
|
1 |
2050d |
2046d
|
|
KASAN: wild-memory-access Write in l2cap_chan_put
bluetooth
|
21 |
|
|
|
2 |
2051d |
2075d
|
|
general protection fault in hci_chan_del
bluetooth
|
2 |
|
|
|
2 |
2091d |
2135d
|
|
KASAN: slab-out-of-bounds Write in hci_chan_del
bluetooth
|
21 |
|
|
|
1 |
2091d |
2087d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete
bluetooth
|
6 |
|
|
|
23 |
2010d |
2132d
|
|
KASAN: use-after-free Read in skb_release_head_state
bluetooth
|
19 |
|
|
|
1 |
2103d |
2099d
|
|
KASAN: use-after-free Read in hci_dev_do_open
bluetooth
|
19 |
|
|
|
1 |
2105d |
2101d
|
|
possible deadlock in lock_sock_nested
bluetooth
|
4 |
|
|
|
1 |
2106d |
2102d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb
bluetooth
|
7 |
|
|
|
1 |
2092d |
2092d
|
|
KASAN: out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
1 |
2145d |
2142d
|
|
general protection fault in l2cap_chan_timeout
bluetooth
|
2 |
|
|
|
1 |
2147d |
2143d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2)
bluetooth
|
6 |
|
|
|
1 |
2079d |
2079d
|
|
KMSAN: uninit-value in hci_event_packet (2)
bluetooth
|
7 |
|
|
|
4 |
2181d |
2213d
|
|
KASAN: use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
2151d |
2151d
|
|
KASAN: global-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
2 |
2201d |
2142d
|
|
KASAN: use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
2197d |
2193d
|
|
BUG: corrupted list in hci_chan_del
bluetooth
|
8 |
|
|
|
2 |
2251d |
2251d
|
|
general protection fault in bt_accept_unlink
bluetooth
|
2 |
|
|
|
1 |
2260d |
2260d
|
|
KMSAN: uninit-value in hci_cmd_timeout
bluetooth
|
7 |
|
|
|
3 |
2286d |
2430d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend
bluetooth
|
6 |
|
|
|
1 |
2216d |
2216d
|
|
INFO: task hung in hci_dev_do_open
bluetooth
|
1 |
|
|
|
1 |
2284d |
2284d
|
|
KMSAN: uninit-value in vhci_write
bluetooth
|
7 |
|
|
|
1 |
2274d |
2274d
|
|
WARNING in __queue_work (2)
bluetooth
|
-1 |
|
|
|
1 |
2339d |
2335d
|
|
INFO: trying to register non-static key in hci_uart_send_frame (2)
bluetooth
|
-1 |
|
|
|
1 |
2418d |
2415d
|
|
KASAN: use-after-free Read in rfcomm_dlc_exists
bluetooth
|
19 |
|
|
|
833 |
2388d |
3003d
|
|
KCSAN: data-race in do_enable_set / do_enable_set
bluetooth
|
6 |
|
|
|
3 |
2452d |
2456d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive (2)
bluetooth
|
-1 |
|
|
|
1 |
2512d |
2508d
|
|
KMSAN: use-after-free in hci_cmd_timeout
bluetooth
|
18 |
|
|
|
1 |
2488d |
2488d
|
|
KCSAN: data-race in flush_workqueue / flush_workqueue
bluetooth
|
6 |
|
|
|
3 |
2503d |
2521d
|
|
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2513d |
2513d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open (2)
bluetooth
|
19 |
|
|
|
19 |
2590d |
2730d
|
|
general protection fault in rfcomm_dlc_open
bluetooth
|
2 |
|
|
|
3 |
2619d |
2716d
|
|
general protection fault in rfcomm_dlc_exists
bluetooth
|
2 |
|
|
|
2 |
2633d |
2716d
|
|
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2534d |
2534d
|
|
general protection fault in rcu_sync_func
bluetooth
|
2 |
|
|
|
1 |
2628d |
2623d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive
bluetooth
|
-1 |
|
|
|
1 |
2602d |
2600d
|
|
BUG: unable to handle kernel paging request in rfcomm_dlc_exists
bluetooth
|
8 |
|
|
|
1 |
2634d |
2630d
|
|
INFO: trying to register non-static key in hci_uart_send_frame
bluetooth
|
-1 |
|
|
|
2 |
2735d |
2783d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
syz, C |
|
|
11 |
2563d |
2621d
|
|
KMSAN: uninit-value in sock_rfree (2)
bluetooth
|
7 |
|
|
|
1 |
2571d |
2571d
|
|
KMSAN: uninit-value in skb_queue_purge
bluetooth
|
7 |
|
|
|
2 |
2567d |
2588d
|
|
WARNING in lockdep_register_key
bluetooth
|
-1 |
|
|
|
35 |
2766d |
2782d
|
|
WARNING: ODEBUG bug in hci_uart_tty_close
bluetooth
|
-1 |
|
|
|
1 |
2795d |
2794d
|
|
INFO: trying to register non-static key in hci_uart_flush
bluetooth
|
-1 |
|
|
|
1 |
2801d |
2800d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open
bluetooth
|
19 |
|
|
|
1 |
2989d |
2985d
|