|
INFO: task hung in hci_connect_cfm
prio:high
bluetooth
|
1 |
|
|
|
1 |
90d |
90d
|
|
possible deadlock in l2cap_chan_connect
prio:high
bluetooth
|
4 |
syz, C |
|
|
4304 |
2d19h |
44d
|
|
INFO: task hung in hci_remote_features_evt (2)
prio:high
bluetooth
|
1 |
syz |
error |
inconclusive |
9 |
375d |
519d
|
|
INFO: trying to register non-static key in bt_accept_unlink
prio:high
bluetooth
|
-1 |
|
|
|
2 |
111d |
117d
|
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
92 |
117d |
1701d
|
|
WARNING in l2cap_send_conn_req
prio:low
bluetooth
|
-1 |
|
|
|
3 |
121d |
155d
|
|
WARNING: held lock freed in bt_accept_dequeue
prio:high
bluetooth
|
4 |
|
|
|
34 |
122d |
659d
|
|
INFO: rcu detected stall in l2cap_sock_release
prio:high
bluetooth
|
1 |
|
|
|
1 |
119d |
119d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
prio:high
bluetooth
|
19 |
syz |
error |
|
203 |
101d |
717d
|
|
WARNING in hci_recv_frame
prio:low
bluetooth
|
-1 |
syz, C |
error |
error |
266 |
100d |
895d
|
|
WARNING in hci_conn_drop (4)
prio:high
bluetooth
|
-1 |
|
|
|
4 |
132d |
146d
|
|
KASAN: slab-use-after-free Read in process_one_work (2)
bluetooth
prio:high
|
19 |
|
|
|
3 |
139d |
169d
|
|
WARNING in hci_send_acl (4)
prio:low
bluetooth
|
-1 |
|
|
|
1 |
144d |
140d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (4)
prio:high
bluetooth
|
12 |
|
|
|
4 |
142d |
147d
|
|
KASAN: slab-use-after-free Read in skb_pull (2)
prio:normal
bluetooth
|
19 |
|
|
|
1 |
162d |
161d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
19 |
syz, C |
|
|
448 |
399d |
652d
|
|
INFO: trying to register non-static key in l2cap_unregister_user
bluetooth
prio:high
|
-1 |
|
|
|
13 |
208d |
357d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
4 |
syz |
error |
error |
569 |
197d |
556d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (3)
bluetooth
prio:high
|
22 |
syz, C |
error |
|
1023 |
189d |
309d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
prio:high
|
4 |
|
|
|
94 |
196d |
590d
|
|
general protection fault in l2cap_conn_del (2)
bluetooth
|
2 |
|
|
|
1 |
199d |
195d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
19 |
syz, C |
error |
error |
3383 |
785d |
914d
|
|
general protection fault in skb_release_data (2)
bluetooth
net
|
22 |
syz, C |
done |
error |
703 |
555d |
2220d
|
|
WARNING: locking bug in l2cap_unregister_user
bluetooth
|
4 |
|
|
|
6 |
251d |
287d
|
|
WARNING in l2cap_unregister_user (2)
bluetooth
|
-1 |
|
|
|
1 |
247d |
247d
|
|
INFO: task hung in le_conn_complete_evt (2)
bluetooth
|
1 |
|
|
|
1 |
260d |
260d
|
|
general protection fault in h5_recv
bluetooth
|
10 |
syz, C |
done |
|
3515 |
243d |
606d
|
|
stack segment fault in kernfs_rename_ns
bluetooth
|
2 |
|
|
|
35 |
262d |
445d
|
|
KCSAN: data-race in bacpy / memcmp
race:harmful
bluetooth
|
6 |
|
|
|
1 |
240d |
229d
|
|
general protection fault in hci_abort_conn (2)
bluetooth
|
2 |
|
|
|
1 |
250d |
246d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (3)
bluetooth
|
12 |
|
|
|
3 |
293d |
303d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
1 |
syz |
|
|
17 |
307d |
484d
|
|
KASAN: slab-use-after-free Read in skb_pull
bluetooth
|
19 |
|
|
|
1 |
318d |
314d
|
|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
syz, C |
|
|
1 |
320d |
325d
|
|
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
-1 |
|
|
|
4 |
325d |
328d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2)
bluetooth
|
19 |
|
|
|
6 |
334d |
369d
|
|
WARNING in hci_conn_drop (3)
bluetooth
|
-1 |
|
|
|
2 |
338d |
370d
|
|
WARNING in hci_send_cmd (3)
bluetooth
|
-1 |
|
|
|
1 |
301d |
297d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread (2)
bluetooth
|
19 |
|
|
|
2 |
343d |
392d
|
|
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync
bluetooth
|
6 |
|
|
|
1 |
303d |
303d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
349d |
741d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work (2)
bluetooth
|
19 |
|
|
|
27015 |
323d |
324d
|
|
WARNING in l2cap_unregister_user
bluetooth
|
-1 |
|
|
|
1 |
305d |
305d
|
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
129 |
342d |
717d
|
|
BUG: unable to handle kernel paging request in l2cap_conn_del
bluetooth
|
8 |
|
|
|
1 |
387d |
383d
|
|
KCSAN: data-race in hci_uart_open / hci_uart_tty_close
bluetooth
|
6 |
|
|
|
1 |
346d |
346d
|
|
WARNING: refcount bug in hci_conn_del_sysfs
bluetooth
|
13 |
|
|
|
1 |
384d |
380d
|
|
WARNING in hci_devcd_register (2)
bluetooth
|
-1 |
|
|
|
4 |
400d |
419d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
19 |
402d |
651d
|
|
KASAN: slab-use-after-free Read in skb_dequeue
bluetooth
|
19 |
|
|
|
4 |
392d |
488d
|
|
INFO: task hung in le_conn_complete_evt
bluetooth
|
1 |
|
|
|
1 |
409d |
409d
|
|
KASAN: slab-use-after-free Read in full_proxy_write (2)
bluetooth
|
19 |
|
|
|
3 |
409d |
408d
|
|
INFO: rcu detected stall in tty_release (3)
net
bluetooth
|
1 |
|
|
|
2 |
412d |
468d
|
|
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
31 |
423d |
636d
|
|
general protection fault in skb_queue_tail (4)
bluetooth
|
2 |
|
|
|
1 |
416d |
412d
|
|
KASAN: slab-use-after-free Read in force_suspend_read (2)
bluetooth
|
19 |
|
|
|
1 |
416d |
412d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
syz, C |
inconclusive |
error |
153 |
400d |
878d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user (2)
bluetooth
|
19 |
|
|
|
1 |
396d |
392d
|
|
INFO: task hung in l2cap_unregister_user
bluetooth
|
1 |
|
|
|
2 |
427d |
515d
|
|
WARNING: kobject bug in hci_disconnect_all_sync
bluetooth
|
-1 |
|
|
|
1 |
440d |
436d
|
|
WARNING in l2cap_send_disconn_req (2)
bluetooth
|
-1 |
|
|
|
1 |
447d |
443d
|
|
KMSAN: uninit-value in hci_recv_frame
bluetooth
|
7 |
|
|
|
1 |
408d |
408d
|
|
INFO: task hung in hci_dev_close_sync (3)
bluetooth
|
1 |
|
|
|
8 |
448d |
663d
|
|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
21 |
|
|
|
1 |
477d |
472d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
syz, C |
done |
|
3 |
604d |
608d
|
|
INFO: task hung in hci_conn_hash_flush (3)
bluetooth
|
1 |
|
|
|
1 |
478d |
478d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
syz, C |
unreliable |
done |
39 |
508d |
888d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
506d |
700d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
514d |
841d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2)
bluetooth
|
12 |
|
|
|
2 |
446d |
449d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill (2)
bluetooth
|
19 |
|
|
|
1 |
455d |
455d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
521d |
517d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
524d |
895d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
528d |
589d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
533d |
528d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread
bluetooth
|
19 |
|
|
|
3 |
551d |
602d
|
|
WARNING in hci_devcd_register
bluetooth
|
-1 |
|
|
|
3 |
563d |
641d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
571d |
567d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
12 |
|
|
|
8 |
573d |
618d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
19 |
|
|
|
18 |
573d |
717d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
4 |
|
|
|
21 |
576d |
822d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
22 |
|
|
|
95 |
561d |
675d
|
|
WARNING in sco_conn_put
bluetooth
|
-1 |
|
|
|
2 |
596d |
655d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
13 |
|
|
|
1 |
598d |
594d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
19 |
|
|
|
8 |
601d |
628d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
19 |
|
|
|
3 |
602d |
619d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
syz, C |
done |
|
94 |
590d |
609d
|
|
general protection fault in h5_close
bluetooth
|
2 |
syz, C |
done |
|
5 |
592d |
595d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
syz, C |
|
|
36 |
580d |
648d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
syz, C |
done |
|
3 |
596d |
595d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
19 |
|
|
|
2 |
614d |
685d
|
|
INFO: task hung in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
638d |
638d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
19 |
|
|
|
1 |
648d |
644d
|
|
WARNING in hci_conn_drop
bluetooth
|
-1 |
|
|
|
1 |
650d |
646d
|
|
general protection fault in l2cap_conn_del
bluetooth
|
2 |
|
|
|
2 |
650d |
666d
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
22 |
|
|
|
2 |
651d |
694d
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
19 |
|
|
|
11 |
623d |
629d
|
|
INFO: task hung in hci_abort_conn_sync
bluetooth
|
1 |
|
|
|
1 |
648d |
648d
|
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
19 |
|
|
|
1 |
659d |
654d
|
|
general protection fault in hci_abort_conn
bluetooth
|
2 |
|
|
|
1 |
659d |
636d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb (2)
bluetooth
|
19 |
|
|
|
1 |
608d |
608d
|
|
INFO: rcu detected stall in hci_cmd_timeout (2)
bluetooth
|
1 |
|
|
|
1 |
661d |
661d
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
8 |
|
|
|
1 |
674d |
670d
|
|
INFO: task hung in hci_conn_hash_flush (2)
bluetooth
|
1 |
|
|
|
2 |
667d |
743d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
581d |
660d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
syz, C |
done |
done |
1 |
681d |
680d
|
|
INFO: rcu detected stall in hci_rx_work (2)
bluetooth
|
1 |
|
|
|
1 |
682d |
682d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
680d |
872d
|
|
WARNING in sco_chan_del
bluetooth
|
-1 |
|
|
|
10 |
698d |
880d
|
|
WARNING in emon
bluetooth
|
-1 |
|
|
|
1 |
699d |
695d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
688d |
688d
|
|
INFO: task hung in hci_conn_failed (3)
bluetooth
|
1 |
|
|
|
18 |
671d |
743d
|
|
KASAN: slab-use-after-free Read in hci_send_acl (2)
bluetooth
|
19 |
|
|
|
1 |
712d |
707d
|
|
KASAN: slab-use-after-free Read in sco_chan_del (2)
bluetooth
|
19 |
|
|
|
2 |
717d |
745d
|
|
possible deadlock in touch_wq_lockdep_map (2)
bluetooth
|
4 |
|
|
|
5 |
717d |
727d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
13 |
|
|
|
10 |
718d |
1198d
|
|
WARNING in hci_send_cmd
bluetooth
|
-1 |
|
|
|
8 |
721d |
969d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
syz, C |
done |
|
87 |
710d |
1227d
|
|
KASAN: slab-use-after-free Read in hci_req_cmd_complete
bluetooth
|
19 |
|
|
|
1 |
732d |
724d
|
|
INFO: task hung in hci_remote_features_evt
bluetooth
|
1 |
|
|
|
9 |
729d |
826d
|
|
INFO: task hung in srso_alias_return_thunk
bluetooth
|
1 |
|
|
|
1 |
733d |
733d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
1003d |
1016d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
syz, C |
error |
done |
13649 |
723d |
1357d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2)
bluetooth
|
12 |
|
|
|
1 |
691d |
691d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue
bluetooth
|
19 |
|
|
|
2 |
761d |
717d
|
|
KASAN: slab-use-after-free Write in mgmt_device_connected
bluetooth
|
22 |
|
|
|
1 |
763d |
741d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete
bluetooth
|
19 |
|
|
|
1 |
743d |
724d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
757d |
899d
|
|
KASAN: slab-use-after-free Read in l2cap_conn_unreliable
bluetooth
|
19 |
|
|
|
1 |
799d |
776d
|
|
WARNING in l2cap_send_cmd
bluetooth
|
-1 |
|
|
|
1 |
808d |
806d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
bluetooth
|
12 |
|
|
|
1 |
809d |
806d
|
|
WARNING in hci_send_acl (3)
bluetooth
|
-1 |
|
|
|
1 |
813d |
809d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
784d |
836d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
19 |
|
|
|
1 |
814d |
776d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
19 |
|
|
|
28 |
789d |
936d
|
|
WARNING in hci_conn_del (2)
bluetooth
|
-1 |
|
|
|
17 |
785d |
782d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
syz, C |
|
|
28 |
794d |
821d
|
|
KASAN: slab-use-after-free Read in hci_req_sync_complete
bluetooth
|
19 |
|
|
|
8 |
828d |
852d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb
bluetooth
|
19 |
|
|
|
7 |
829d |
836d
|
|
WARNING: locking bug in sco_conn_del (2)
bluetooth
|
4 |
|
|
|
1 |
830d |
826d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
syz, C |
|
|
5 |
830d |
844d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata
bluetooth
|
19 |
|
|
|
1 |
831d |
826d
|
|
KASAN: slab-use-after-free Read in skb_free_head
bluetooth
|
19 |
|
|
|
2 |
829d |
849d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
syz, C |
|
|
6 |
843d |
843d
|
|
INFO: rcu detected stall in bt_err
bluetooth
|
1 |
|
|
|
1 |
836d |
836d
|
|
INFO: task hung in hci_conn_failed (2)
bluetooth
|
1 |
|
|
|
1 |
837d |
837d
|
|
WARNING in l2cap_send_disconn_req
bluetooth
|
-1 |
|
|
|
1 |
848d |
844d
|
|
INFO: task hung in l2cap_conn_del
bluetooth
|
1 |
|
|
|
1 |
841d |
841d
|
|
WARNING in lock_sock_nested
bluetooth
sctp
|
-1 |
|
|
|
6 |
771d |
778d
|
|
general protection fault in dequeue_task
bluetooth
|
22 |
|
|
|
783 |
771d |
779d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
syz, C |
error |
done |
7 |
855d |
907d
|
|
KFENCE: invalid free in __hci_req_sync
bluetooth
|
23 |
|
|
|
35 |
826d |
887d
|
|
general protection fault in hci_release_dev (2)
bluetooth
|
2 |
|
|
|
1 |
847d |
843d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1423d |
2252d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2256d |
2256d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb
bluetooth
|
19 |
|
|
|
1 |
864d |
860d
|
|
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
-1 |
|
|
|
5 |
894d |
1060d
|
|
KASAN: slab-use-after-free Read in hci_chan_sent
bluetooth
|
19 |
|
|
|
1 |
855d |
834d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
syz, C |
error |
error |
8 |
903d |
916d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
syz, C |
done |
unreliable |
5 |
911d |
916d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
syz, C |
|
|
14 |
967d |
968d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
17 |
|
|
|
1 |
919d |
913d
|
|
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind
bluetooth
|
6 |
|
|
|
1 |
855d |
855d
|
|
WARNING in msft_do_close
bluetooth
|
-1 |
|
|
|
1 |
923d |
919d
|
|
INFO: rcu detected stall in l2cap_sock_connect
bluetooth
|
1 |
|
|
|
1 |
885d |
885d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
19 |
|
|
|
1 |
928d |
924d
|
|
possible deadlock in hci_dev_close
bluetooth
|
4 |
|
|
|
2 |
890d |
890d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
4 |
|
|
|
6 |
891d |
895d
|
|
WARNING: refcount bug in sco_conn_del (3)
bluetooth
|
13 |
|
|
|
1 |
921d |
917d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
syz, C |
unreliable |
|
28 |
903d |
916d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
syz, C |
|
|
36 |
906d |
916d
|
|
INFO: task hung in hci_cmd_sync_clear (2)
bluetooth
|
1 |
|
|
|
15 |
927d |
1333d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
syz, C |
done |
|
7 |
939d |
1070d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
syz, C |
done |
|
1 |
941d |
984d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
syz, C |
done |
|
10 |
890d |
895d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie
bluetooth
|
19 |
|
|
|
2 |
882d |
890d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
syz, C |
done |
done |
3400 |
948d |
1192d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
syz, C |
|
|
22 |
949d |
1011d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
syz, C |
done |
|
18 |
977d |
974d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
syz, C |
done |
done |
1323 |
971d |
1144d
|
|
INFO: task hung in hci_dev_close_sync (2)
bluetooth
|
1 |
|
|
|
2 |
976d |
979d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
syz, C |
done |
done |
63 |
987d |
1133d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason
bluetooth
|
19 |
|
|
|
1 |
1016d |
1012d
|
|
possible deadlock in discov_off
bluetooth
|
4 |
|
|
|
127 |
1010d |
1466d
|
|
possible deadlock in hci_unregister_dev
bluetooth
|
4 |
|
|
|
175 |
1011d |
1508d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
syz, C |
|
|
1 |
1051d |
1051d
|
|
KASAN: slab-use-after-free Read in l2cap_connect
bluetooth
|
19 |
|
|
|
1 |
1066d |
1058d
|
|
WARNING in hci_send_acl (2)
bluetooth
|
-1 |
|
|
|
1 |
1065d |
1061d
|
|
KASAN: slab-use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
1079d |
1073d
|
|
KASAN: slab-use-after-free Read in release_sock
bluetooth
|
19 |
|
|
|
1 |
1083d |
1079d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
syz, C |
done |
error |
1067 |
1066d |
1880d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
syz, C |
|
|
65 |
1073d |
1131d
|
|
KASAN: slab-use-after-free Read in lookup_object_or_alloc
bluetooth
|
19 |
|
|
|
2 |
1101d |
1111d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb
bluetooth
|
12 |
|
|
|
1 |
1120d |
1113d
|
|
WARNING: ODEBUG bug in hci_abort_conn_sync
bluetooth
|
-1 |
|
|
|
1 |
1113d |
1109d
|
|
KASAN: use-after-free Read in hci_conn_security
bluetooth
|
19 |
|
|
|
1 |
1133d |
1129d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
syz, C |
error |
done |
4 |
1136d |
1514d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1842d |
2256d
|
|
WARNING: refcount bug in sco_conn_del (2)
bluetooth
|
13 |
|
|
|
1 |
1184d |
1180d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop
bluetooth
|
22 |
|
|
|
1 |
1240d |
1235d
|
|
WARNING in l2cap_do_send
bluetooth
|
-1 |
|
|
|
2 |
1265d |
1340d
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
bluetooth
|
4 |
|
|
|
2 |
1266d |
1270d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
syz, C |
|
|
72 |
1242d |
1268d
|
|
WARNING in hci_send_acl
bluetooth
|
-1 |
|
|
|
1 |
1319d |
1315d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
syz, C |
done |
unreliable |
50 |
2131d |
2258d
|
|
possible deadlock in hci_conn_hash_flush
bluetooth
|
4 |
|
|
|
4 |
1329d |
1459d
|
|
INFO: rcu detected stall in hci_rx_work
bluetooth
|
1 |
|
|
|
1 |
1286d |
1286d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
syz, C |
done |
inconclusive |
131 |
1348d |
2460d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
syz, C |
error |
done |
4 |
1488d |
1484d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
syz, C |
done |
done |
166 |
1523d |
1608d
|
|
linux-next test error: possible deadlock in hci_cmd_sync_clear
bluetooth
|
-1 |
|
|
|
6 |
1322d |
1322d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
syz, C |
unreliable |
inconclusive |
34 |
1468d |
2122d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
syz, C |
error |
|
12 |
1442d |
1473d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1869d |
2635d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
syz, C |
done |
inconclusive |
26 |
1893d |
2255d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
syz, C |
done |
done |
87 |
1979d |
2258d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
syz, C |
done |
error |
13 |
1443d |
1475d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
syz, C |
done |
inconclusive |
37 |
1554d |
1589d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
syz, C |
done |
done |
611 |
1574d |
2260d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
syz, C |
|
|
5 |
1442d |
1459d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
syz, C |
|
|
14 |
1442d |
1453d
|
|
possible deadlock in sco_sock_timeout
bluetooth
|
4 |
|
|
|
1 |
1459d |
1459d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
syz, C |
|
|
1 |
1464d |
1464d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
syz, C |
inconclusive |
inconclusive |
13 |
1548d |
1769d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
3 |
1471d |
2008d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
syz, C |
inconclusive |
done |
3 |
1879d |
1876d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
syz, C |
|
|
1 |
1488d |
1484d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
syz, C |
done |
unreliable |
26 |
2137d |
2411d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2253d |
2253d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2253d |
2252d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1974d |
2255d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
syz, C |
|
|
10 |
2110d |
2258d
|
|
INFO: task hung in hci_cmd_sync_clear
bluetooth
|
1 |
|
|
|
4 |
1512d |
1659d
|
|
general protection fault in rcu_sync_func (3)
bluetooth
|
2 |
|
|
|
2 |
1489d |
1502d
|
|
upstream test error: WARNING in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
90 |
1519d |
1526d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1610d |
2253d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
syz, C |
|
|
2 |
2012d |
2220d
|
|
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
41 |
1519d |
1526d
|
|
net test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
39 |
1521d |
1526d
|
|
general protection fault in klist_next
bluetooth
|
17 |
syz, C |
error |
|
33 |
1464d |
1518d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
syz, C |
inconclusive |
done |
9 |
1824d |
1909d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1809d |
2249d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
syz, C |
done |
|
2256 |
2122d |
2424d
|
|
INFO: task hung in hci_dev_open
bluetooth
|
1 |
|
|
|
6 |
1562d |
1634d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1681d |
1747d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1739d |
1805d
|
|
general protection fault in skb_put
bluetooth
|
2 |
syz, C |
done |
error |
43 |
2221d |
2803d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2253d |
2253d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1816d |
1813d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
syz, C |
done |
inconclusive |
21 |
2304d |
2831d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
syz, C |
|
|
10 |
1928d |
2019d
|
|
WARNING: refcount bug in sco_sock_timeout
bluetooth
|
13 |
|
|
|
24 |
1604d |
1847d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2287d |
2596d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
syz, C |
|
|
3 |
2244d |
2245d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1975d |
2253d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
syz, C |
done |
done |
8 |
2366d |
2907d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2412d |
2412d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
syz, C |
|
|
8 |
1611d |
1607d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2246d |
2245d
|
|
WARNING: locking bug in sco_sock_timeout
bluetooth
|
4 |
|
|
|
13 |
1623d |
1847d
|
|
INFO: trying to register non-static key in sco_sock_timeout
bluetooth
|
-1 |
|
|
|
2 |
1628d |
1675d
|
|
KASAN: use-after-free Write in sco_conn_del
bluetooth
|
22 |
|
|
|
23 |
1682d |
1850d
|
|
general protection fault in rcu_sync_func (2)
bluetooth
|
2 |
|
|
|
1 |
1659d |
1655d
|
|
WARNING: ODEBUG bug in hci_dev_close_sync
bluetooth
|
-1 |
|
|
|
1 |
1703d |
1699d
|
|
KMSAN: uninit-value in hci_conn_complete_evt
bluetooth
|
7 |
|
|
|
3 |
1713d |
1775d
|
|
WARNING: ODEBUG bug in hci_release_dev
bluetooth
|
-1 |
|
|
|
1 |
1747d |
1739d
|
|
INFO: task hung in scan_update_work (2)
bluetooth
|
1 |
|
|
|
1 |
1693d |
1693d
|
|
BUG: spinlock bad magic in lock_sock_nested (2)
bluetooth
|
4 |
|
|
|
1 |
1724d |
1724d
|
|
KMSAN: uninit-value in hci_cmd_status_evt
bluetooth
|
7 |
|
|
|
1 |
1732d |
1732d
|
|
WARNING: locking bug in l2cap_sock_teardown_cb
bluetooth
|
4 |
|
|
|
129 |
1810d |
2102d
|
|
BUG: unable to handle kernel paging request in lock_sock_nested
bluetooth
|
17 |
|
|
|
43 |
1814d |
2255d
|
|
INFO: task can't die in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
1760d |
1756d
|
|
INFO: task hung in scan_update_work
bluetooth
|
1 |
|
|
|
17 |
1762d |
1801d
|
|
WARNING: locking bug in sco_conn_del
bluetooth
|
4 |
|
|
|
2 |
1824d |
1834d
|
|
INFO: task hung in hci_request_cancel_all
bluetooth
|
1 |
|
|
|
1 |
1768d |
1768d
|
|
KMSAN: uninit-value in hci_loglink_complete_evt
bluetooth
|
7 |
|
|
|
1 |
1829d |
1825d
|
|
WARNING: refcount bug in sco_conn_del
bluetooth
|
13 |
|
|
|
7 |
1839d |
1850d
|
|
INFO: trying to register non-static key in sco_conn_del
bluetooth
|
-1 |
|
|
|
1 |
1839d |
1835d
|
|
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping
bluetooth
|
6 |
|
|
|
1 |
1754d |
1754d
|
|
BUG: spinlock bad magic in lock_sock_nested
bluetooth
|
4 |
|
|
|
26 |
1866d |
2221d
|
|
KASAN: global-out-of-bounds Read in cancel_delayed_work
bluetooth
|
17 |
|
|
|
1 |
1844d |
1840d
|
|
INFO: task hung in rfcomm_process_sessions
bluetooth
|
1 |
|
|
|
1 |
1845d |
1845d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
syz, C |
|
|
2 |
2733d |
2733d
|
|
INFO: task can't die in rfcomm_dlc_close
bluetooth
|
1 |
|
|
|
4 |
1856d |
1874d
|
|
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb
bluetooth
|
10 |
|
|
|
1 |
1860d |
1856d
|
|
WARNING: refcount bug in l2cap_sock_kill
bluetooth
|
13 |
|
|
|
1 |
1918d |
1914d
|
|
INFO: task can't die in rfcomm_dlc_open
bluetooth
|
1 |
|
|
|
1 |
1881d |
1877d
|
|
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested
bluetooth
|
-1 |
|
|
|
6 |
1891d |
1942d
|
|
general protection fault in release_sock
bluetooth
|
2 |
|
|
|
1 |
1862d |
1862d
|
|
general protection fault in l2cap_chan_timeout (2)
bluetooth
|
2 |
|
|
|
1 |
1961d |
1956d
|
|
INFO: task hung in hci_conn_hash_flush
bluetooth
|
1 |
|
|
|
1 |
1944d |
1944d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb (2)
bluetooth
|
7 |
|
|
|
1 |
1964d |
1964d
|
|
general protection fault in qca_power_shutdown
arm-msm
bluetooth
|
2 |
|
|
|
1 |
1998d |
1994d
|
|
KASAN: use-after-free Write in h4_recv_buf
bluetooth
|
22 |
|
|
|
2 |
2030d |
2039d
|
|
general protection fault in bt_accept_unlink (2)
bluetooth
|
2 |
|
|
|
1 |
2045d |
2041d
|
|
KASAN: wild-memory-access Write in l2cap_chan_put
bluetooth
|
21 |
|
|
|
2 |
2046d |
2070d
|
|
general protection fault in hci_chan_del
bluetooth
|
2 |
|
|
|
2 |
2087d |
2130d
|
|
KASAN: slab-out-of-bounds Write in hci_chan_del
bluetooth
|
21 |
|
|
|
1 |
2087d |
2082d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete
bluetooth
|
6 |
|
|
|
23 |
2005d |
2127d
|
|
KASAN: use-after-free Read in skb_release_head_state
bluetooth
|
19 |
|
|
|
1 |
2098d |
2094d
|
|
KASAN: use-after-free Read in hci_dev_do_open
bluetooth
|
19 |
|
|
|
1 |
2100d |
2096d
|
|
possible deadlock in lock_sock_nested
bluetooth
|
4 |
|
|
|
1 |
2101d |
2097d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb
bluetooth
|
7 |
|
|
|
1 |
2087d |
2087d
|
|
KASAN: out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
1 |
2140d |
2137d
|
|
general protection fault in l2cap_chan_timeout
bluetooth
|
2 |
|
|
|
1 |
2142d |
2138d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2)
bluetooth
|
6 |
|
|
|
1 |
2075d |
2075d
|
|
KMSAN: uninit-value in hci_event_packet (2)
bluetooth
|
7 |
|
|
|
4 |
2177d |
2208d
|
|
KASAN: use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
2147d |
2147d
|
|
KASAN: global-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
2 |
2196d |
2137d
|
|
KASAN: use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
2192d |
2188d
|
|
BUG: corrupted list in hci_chan_del
bluetooth
|
8 |
|
|
|
2 |
2246d |
2246d
|
|
general protection fault in bt_accept_unlink
bluetooth
|
2 |
|
|
|
1 |
2255d |
2255d
|
|
KMSAN: uninit-value in hci_cmd_timeout
bluetooth
|
7 |
|
|
|
3 |
2281d |
2425d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend
bluetooth
|
6 |
|
|
|
1 |
2211d |
2211d
|
|
INFO: task hung in hci_dev_do_open
bluetooth
|
1 |
|
|
|
1 |
2279d |
2279d
|
|
KMSAN: uninit-value in vhci_write
bluetooth
|
7 |
|
|
|
1 |
2269d |
2269d
|
|
WARNING in __queue_work (2)
bluetooth
|
-1 |
|
|
|
1 |
2334d |
2330d
|
|
INFO: trying to register non-static key in hci_uart_send_frame (2)
bluetooth
|
-1 |
|
|
|
1 |
2413d |
2411d
|
|
KASAN: use-after-free Read in rfcomm_dlc_exists
bluetooth
|
19 |
|
|
|
833 |
2384d |
2998d
|
|
KCSAN: data-race in do_enable_set / do_enable_set
bluetooth
|
6 |
|
|
|
3 |
2447d |
2451d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive (2)
bluetooth
|
-1 |
|
|
|
1 |
2507d |
2503d
|
|
KMSAN: use-after-free in hci_cmd_timeout
bluetooth
|
18 |
|
|
|
1 |
2483d |
2483d
|
|
KCSAN: data-race in flush_workqueue / flush_workqueue
bluetooth
|
6 |
|
|
|
3 |
2498d |
2516d
|
|
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2508d |
2508d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open (2)
bluetooth
|
19 |
|
|
|
19 |
2585d |
2725d
|
|
general protection fault in rfcomm_dlc_open
bluetooth
|
2 |
|
|
|
3 |
2614d |
2711d
|
|
general protection fault in rfcomm_dlc_exists
bluetooth
|
2 |
|
|
|
2 |
2629d |
2711d
|
|
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2529d |
2529d
|
|
general protection fault in rcu_sync_func
bluetooth
|
2 |
|
|
|
1 |
2623d |
2619d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive
bluetooth
|
-1 |
|
|
|
1 |
2597d |
2596d
|
|
BUG: unable to handle kernel paging request in rfcomm_dlc_exists
bluetooth
|
8 |
|
|
|
1 |
2629d |
2625d
|
|
INFO: trying to register non-static key in hci_uart_send_frame
bluetooth
|
-1 |
|
|
|
2 |
2730d |
2779d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
syz, C |
|
|
11 |
2558d |
2616d
|
|
KMSAN: uninit-value in sock_rfree (2)
bluetooth
|
7 |
|
|
|
1 |
2566d |
2566d
|
|
KMSAN: uninit-value in skb_queue_purge
bluetooth
|
7 |
|
|
|
2 |
2563d |
2583d
|
|
WARNING in lockdep_register_key
bluetooth
|
-1 |
|
|
|
35 |
2762d |
2777d
|
|
WARNING: ODEBUG bug in hci_uart_tty_close
bluetooth
|
-1 |
|
|
|
1 |
2790d |
2789d
|
|
INFO: trying to register non-static key in hci_uart_flush
bluetooth
|
-1 |
|
|
|
1 |
2796d |
2796d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open
bluetooth
|
19 |
|
|
|
1 |
2984d |
2980d
|