|
KASAN: slab-use-after-free Read in skb_pull
bluetooth
|
19 |
|
|
|
1 |
106d |
102d
|
|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
C |
|
|
1 |
108d |
113d
|
|
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
-1 |
|
|
|
4 |
113d |
116d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2)
bluetooth
|
19 |
|
|
|
6 |
122d |
157d
|
|
WARNING in hci_conn_drop (3)
bluetooth
|
-1 |
|
|
|
2 |
126d |
158d
|
|
WARNING in hci_send_cmd (3)
bluetooth
|
-1 |
|
|
|
1 |
89d |
85d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread (2)
bluetooth
|
19 |
|
|
|
2 |
131d |
180d
|
|
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync
bluetooth
|
6 |
|
|
|
1 |
91d |
91d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
137d |
529d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work (2)
bluetooth
|
19 |
|
|
|
27015 |
111d |
112d
|
|
WARNING in l2cap_unregister_user
bluetooth
|
-1 |
|
|
|
1 |
93d |
93d
|
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
129 |
130d |
505d
|
|
BUG: unable to handle kernel paging request in l2cap_conn_del
bluetooth
|
8 |
|
|
|
1 |
175d |
171d
|
|
KCSAN: data-race in hci_uart_open / hci_uart_tty_close
bluetooth
|
6 |
|
|
|
1 |
134d |
134d
|
|
WARNING: refcount bug in hci_conn_del_sysfs
bluetooth
|
13 |
|
|
|
1 |
172d |
168d
|
|
WARNING in hci_devcd_register (2)
bluetooth
|
-1 |
|
|
|
4 |
188d |
207d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
19 |
190d |
439d
|
|
KASAN: slab-use-after-free Read in skb_dequeue
bluetooth
|
19 |
|
|
|
4 |
180d |
276d
|
|
INFO: task hung in le_conn_complete_evt
bluetooth
|
1 |
|
|
|
1 |
197d |
197d
|
|
KASAN: slab-use-after-free Read in full_proxy_write (2)
bluetooth
|
19 |
|
|
|
3 |
197d |
196d
|
|
INFO: rcu detected stall in tty_release (3)
net
bluetooth
|
1 |
|
|
|
2 |
200d |
256d
|
|
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
31 |
211d |
424d
|
|
general protection fault in skb_queue_tail (4)
bluetooth
|
2 |
|
|
|
1 |
204d |
200d
|
|
KASAN: slab-use-after-free Read in force_suspend_read (2)
bluetooth
|
19 |
|
|
|
1 |
204d |
200d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
C |
inconclusive |
error |
153 |
188d |
666d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user (2)
bluetooth
|
19 |
|
|
|
1 |
184d |
180d
|
|
INFO: task hung in l2cap_unregister_user
bluetooth
|
1 |
|
|
|
2 |
215d |
303d
|
|
WARNING: kobject bug in hci_disconnect_all_sync
bluetooth
|
-1 |
|
|
|
1 |
228d |
224d
|
|
WARNING in l2cap_send_disconn_req (2)
bluetooth
|
-1 |
|
|
|
1 |
235d |
231d
|
|
KMSAN: uninit-value in hci_recv_frame
bluetooth
|
7 |
|
|
|
1 |
196d |
196d
|
|
INFO: task hung in hci_dev_close_sync (3)
bluetooth
|
1 |
|
|
|
8 |
236d |
451d
|
|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
21 |
|
|
|
1 |
265d |
260d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
C |
done |
|
3 |
392d |
396d
|
|
INFO: task hung in hci_conn_hash_flush (3)
bluetooth
|
1 |
|
|
|
1 |
266d |
266d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
C |
unreliable |
done |
39 |
296d |
676d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
294d |
488d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
302d |
629d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2)
bluetooth
|
12 |
|
|
|
2 |
234d |
237d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill (2)
bluetooth
|
19 |
|
|
|
1 |
243d |
243d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
309d |
305d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
312d |
683d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
316d |
377d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
321d |
316d
|
|
KASAN: slab-use-after-free Read in hidp_session_thread
bluetooth
|
19 |
|
|
|
3 |
339d |
390d
|
|
WARNING in hci_devcd_register
bluetooth
|
-1 |
|
|
|
3 |
351d |
429d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
359d |
355d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
12 |
|
|
|
8 |
361d |
406d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
19 |
|
|
|
18 |
361d |
505d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
4 |
|
|
|
21 |
364d |
610d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
22 |
|
|
|
95 |
349d |
463d
|
|
WARNING in sco_conn_put
bluetooth
|
-1 |
|
|
|
2 |
384d |
443d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
13 |
|
|
|
1 |
386d |
382d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
19 |
|
|
|
8 |
389d |
416d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
19 |
|
|
|
3 |
390d |
407d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
C |
done |
|
94 |
378d |
397d
|
|
general protection fault in h5_close
bluetooth
|
2 |
C |
done |
|
5 |
380d |
383d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
C |
|
|
36 |
368d |
436d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
C |
done |
|
3 |
384d |
383d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
19 |
|
|
|
2 |
402d |
473d
|
|
INFO: task hung in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
426d |
426d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
19 |
|
|
|
1 |
436d |
432d
|
|
WARNING in hci_conn_drop
bluetooth
|
-1 |
|
|
|
1 |
438d |
434d
|
|
general protection fault in l2cap_conn_del
bluetooth
|
2 |
|
|
|
2 |
438d |
454d
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
22 |
|
|
|
2 |
439d |
482d
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
19 |
|
|
|
11 |
411d |
417d
|
|
INFO: task hung in hci_abort_conn_sync
bluetooth
|
1 |
|
|
|
1 |
436d |
436d
|
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
19 |
|
|
|
1 |
447d |
442d
|
|
general protection fault in hci_abort_conn
bluetooth
|
2 |
|
|
|
1 |
447d |
424d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb (2)
bluetooth
|
19 |
|
|
|
1 |
396d |
396d
|
|
INFO: rcu detected stall in hci_cmd_timeout (2)
bluetooth
|
1 |
|
|
|
1 |
449d |
449d
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
8 |
|
|
|
1 |
462d |
458d
|
|
INFO: task hung in hci_conn_hash_flush (2)
bluetooth
|
1 |
|
|
|
2 |
455d |
531d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
369d |
448d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
C |
done |
done |
1 |
469d |
468d
|
|
INFO: rcu detected stall in hci_rx_work (2)
bluetooth
|
1 |
|
|
|
1 |
470d |
470d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
468d |
660d
|
|
WARNING in sco_chan_del
bluetooth
|
-1 |
|
|
|
10 |
486d |
668d
|
|
WARNING in emon
bluetooth
|
-1 |
|
|
|
1 |
487d |
483d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
476d |
476d
|
|
INFO: task hung in hci_conn_failed (3)
bluetooth
|
1 |
|
|
|
18 |
459d |
531d
|
|
KASAN: slab-use-after-free Read in hci_send_acl (2)
bluetooth
|
19 |
|
|
|
1 |
500d |
495d
|
|
KASAN: slab-use-after-free Read in sco_chan_del (2)
bluetooth
|
19 |
|
|
|
2 |
505d |
533d
|
|
possible deadlock in touch_wq_lockdep_map (2)
bluetooth
|
4 |
|
|
|
5 |
505d |
515d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
13 |
|
|
|
10 |
506d |
986d
|
|
WARNING in hci_send_cmd
bluetooth
|
-1 |
|
|
|
8 |
509d |
757d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
C |
done |
|
87 |
498d |
1015d
|
|
KASAN: slab-use-after-free Read in hci_req_cmd_complete
bluetooth
|
19 |
|
|
|
1 |
520d |
512d
|
|
INFO: task hung in hci_remote_features_evt
bluetooth
|
1 |
|
|
|
9 |
517d |
614d
|
|
INFO: task hung in srso_alias_return_thunk
bluetooth
|
1 |
|
|
|
1 |
521d |
521d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
791d |
804d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
C |
error |
done |
13649 |
511d |
1145d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2)
bluetooth
|
12 |
|
|
|
1 |
479d |
479d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue
bluetooth
|
19 |
|
|
|
2 |
549d |
505d
|
|
KASAN: slab-use-after-free Write in mgmt_device_connected
bluetooth
|
22 |
|
|
|
1 |
551d |
529d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete
bluetooth
|
19 |
|
|
|
1 |
531d |
512d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
545d |
687d
|
|
KASAN: slab-use-after-free Read in l2cap_conn_unreliable
bluetooth
|
19 |
|
|
|
1 |
587d |
564d
|
|
WARNING in l2cap_send_cmd
bluetooth
|
-1 |
|
|
|
1 |
596d |
594d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
bluetooth
|
12 |
|
|
|
1 |
597d |
594d
|
|
WARNING in hci_send_acl (3)
bluetooth
|
-1 |
|
|
|
1 |
601d |
597d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
572d |
624d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
19 |
|
|
|
1 |
602d |
564d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
19 |
|
|
|
28 |
577d |
724d
|
|
WARNING in hci_conn_del (2)
bluetooth
|
-1 |
|
|
|
17 |
573d |
570d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
C |
|
|
28 |
582d |
609d
|
|
KASAN: slab-use-after-free Read in hci_req_sync_complete
bluetooth
|
19 |
|
|
|
8 |
616d |
640d
|
|
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb
bluetooth
|
19 |
|
|
|
7 |
617d |
624d
|
|
WARNING: locking bug in sco_conn_del (2)
bluetooth
|
4 |
|
|
|
1 |
618d |
614d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
C |
|
|
5 |
618d |
632d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata
bluetooth
|
19 |
|
|
|
1 |
619d |
614d
|
|
KASAN: slab-use-after-free Read in skb_free_head
bluetooth
|
19 |
|
|
|
2 |
617d |
637d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
C |
|
|
6 |
631d |
631d
|
|
INFO: rcu detected stall in bt_err
bluetooth
|
1 |
|
|
|
1 |
624d |
624d
|
|
INFO: task hung in hci_conn_failed (2)
bluetooth
|
1 |
|
|
|
1 |
625d |
625d
|
|
WARNING in l2cap_send_disconn_req
bluetooth
|
-1 |
|
|
|
1 |
636d |
632d
|
|
INFO: task hung in l2cap_conn_del
bluetooth
|
1 |
|
|
|
1 |
629d |
629d
|
|
WARNING in lock_sock_nested
bluetooth
sctp
|
-1 |
|
|
|
6 |
559d |
566d
|
|
general protection fault in dequeue_task
bluetooth
|
22 |
|
|
|
783 |
559d |
567d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
C |
error |
done |
7 |
643d |
695d
|
|
KFENCE: invalid free in __hci_req_sync
bluetooth
|
23 |
|
|
|
35 |
614d |
675d
|
|
general protection fault in hci_release_dev (2)
bluetooth
|
2 |
|
|
|
1 |
635d |
631d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1211d |
2040d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2044d |
2044d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb
bluetooth
|
19 |
|
|
|
1 |
652d |
648d
|
|
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
-1 |
|
|
|
5 |
682d |
848d
|
|
KASAN: slab-use-after-free Read in hci_chan_sent
bluetooth
|
19 |
|
|
|
1 |
643d |
622d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
C |
error |
error |
8 |
691d |
704d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
C |
done |
unreliable |
5 |
699d |
704d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
C |
|
|
14 |
755d |
756d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
17 |
|
|
|
1 |
707d |
701d
|
|
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind
bluetooth
|
6 |
|
|
|
1 |
643d |
643d
|
|
WARNING in msft_do_close
bluetooth
|
-1 |
|
|
|
1 |
711d |
707d
|
|
INFO: rcu detected stall in l2cap_sock_connect
bluetooth
|
1 |
|
|
|
1 |
673d |
673d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
19 |
|
|
|
1 |
716d |
712d
|
|
possible deadlock in hci_dev_close
bluetooth
|
4 |
|
|
|
2 |
678d |
678d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
4 |
|
|
|
6 |
679d |
683d
|
|
WARNING: refcount bug in sco_conn_del (3)
bluetooth
|
13 |
|
|
|
1 |
709d |
705d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
C |
unreliable |
|
28 |
691d |
704d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
C |
|
|
36 |
694d |
704d
|
|
INFO: task hung in hci_cmd_sync_clear (2)
bluetooth
|
1 |
|
|
|
15 |
715d |
1121d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
C |
done |
|
7 |
727d |
858d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
C |
done |
|
1 |
729d |
772d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
C |
done |
|
10 |
678d |
683d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie
bluetooth
|
19 |
|
|
|
2 |
670d |
678d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
C |
done |
done |
3400 |
736d |
980d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
C |
|
|
22 |
737d |
799d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
C |
done |
|
18 |
765d |
762d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
C |
done |
done |
1323 |
759d |
932d
|
|
INFO: task hung in hci_dev_close_sync (2)
bluetooth
|
1 |
|
|
|
2 |
764d |
767d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
C |
done |
done |
63 |
775d |
921d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason
bluetooth
|
19 |
|
|
|
1 |
804d |
800d
|
|
possible deadlock in discov_off
bluetooth
|
4 |
|
|
|
127 |
798d |
1254d
|
|
possible deadlock in hci_unregister_dev
bluetooth
|
4 |
|
|
|
175 |
799d |
1296d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
C |
|
|
1 |
839d |
839d
|
|
KASAN: slab-use-after-free Read in l2cap_connect
bluetooth
|
19 |
|
|
|
1 |
854d |
846d
|
|
WARNING in hci_send_acl (2)
bluetooth
|
-1 |
|
|
|
1 |
853d |
849d
|
|
KASAN: slab-use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
867d |
861d
|
|
KASAN: slab-use-after-free Read in release_sock
bluetooth
|
19 |
|
|
|
1 |
871d |
867d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
C |
done |
error |
1067 |
854d |
1668d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
C |
|
|
65 |
861d |
919d
|
|
KASAN: slab-use-after-free Read in lookup_object_or_alloc
bluetooth
|
19 |
|
|
|
2 |
889d |
899d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb
bluetooth
|
12 |
|
|
|
1 |
908d |
901d
|
|
WARNING: ODEBUG bug in hci_abort_conn_sync
bluetooth
|
-1 |
|
|
|
1 |
901d |
897d
|
|
KASAN: use-after-free Read in hci_conn_security
bluetooth
|
19 |
|
|
|
1 |
921d |
917d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
C |
error |
done |
4 |
924d |
1302d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1630d |
2044d
|
|
WARNING: refcount bug in sco_conn_del (2)
bluetooth
|
13 |
|
|
|
1 |
972d |
968d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop
bluetooth
|
22 |
|
|
|
1 |
1028d |
1023d
|
|
WARNING in l2cap_do_send
bluetooth
|
-1 |
|
|
|
2 |
1053d |
1128d
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
bluetooth
|
4 |
|
|
|
2 |
1054d |
1058d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
C |
|
|
72 |
1030d |
1056d
|
|
WARNING in hci_send_acl
bluetooth
|
-1 |
|
|
|
1 |
1107d |
1103d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
C |
done |
unreliable |
50 |
1919d |
2046d
|
|
possible deadlock in hci_conn_hash_flush
bluetooth
|
4 |
|
|
|
4 |
1117d |
1247d
|
|
INFO: rcu detected stall in hci_rx_work
bluetooth
|
1 |
|
|
|
1 |
1074d |
1074d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
C |
done |
inconclusive |
131 |
1136d |
2248d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
C |
error |
done |
4 |
1276d |
1272d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
C |
done |
done |
166 |
1311d |
1396d
|
|
linux-next test error: possible deadlock in hci_cmd_sync_clear
bluetooth
|
-1 |
|
|
|
6 |
1110d |
1110d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
C |
unreliable |
inconclusive |
34 |
1256d |
1910d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
C |
error |
|
12 |
1230d |
1261d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1657d |
2423d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
C |
done |
inconclusive |
26 |
1681d |
2043d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
C |
done |
done |
87 |
1767d |
2046d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
C |
done |
error |
13 |
1231d |
1263d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
C |
done |
inconclusive |
37 |
1342d |
1377d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
C |
done |
done |
611 |
1362d |
2048d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
C |
|
|
5 |
1230d |
1247d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
C |
|
|
14 |
1230d |
1241d
|
|
possible deadlock in sco_sock_timeout
bluetooth
|
4 |
|
|
|
1 |
1247d |
1247d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
C |
|
|
1 |
1252d |
1252d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
C |
inconclusive |
inconclusive |
13 |
1336d |
1557d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
C |
inconclusive |
inconclusive |
3 |
1259d |
1796d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
C |
inconclusive |
done |
3 |
1667d |
1664d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
C |
|
|
1 |
1276d |
1272d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
C |
done |
unreliable |
26 |
1925d |
2199d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2041d |
2041d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2041d |
2040d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1762d |
2043d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
C |
|
|
10 |
1898d |
2046d
|
|
INFO: task hung in hci_cmd_sync_clear
bluetooth
|
1 |
|
|
|
4 |
1300d |
1447d
|
|
general protection fault in rcu_sync_func (3)
bluetooth
|
2 |
|
|
|
2 |
1277d |
1290d
|
|
upstream test error: WARNING in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
90 |
1307d |
1314d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1398d |
2041d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
C |
|
|
2 |
1800d |
2008d
|
|
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
41 |
1307d |
1314d
|
|
net test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
39 |
1309d |
1314d
|
|
general protection fault in klist_next
bluetooth
|
17 |
C |
error |
|
33 |
1252d |
1306d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
C |
inconclusive |
done |
9 |
1612d |
1697d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1597d |
2037d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
C |
done |
|
2256 |
1910d |
2212d
|
|
INFO: task hung in hci_dev_open
bluetooth
|
1 |
|
|
|
6 |
1350d |
1422d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1469d |
1535d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
C |
|
|
3 |
1527d |
1593d
|
|
general protection fault in skb_put
bluetooth
|
2 |
C |
done |
error |
43 |
2009d |
2591d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2041d |
2041d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
C |
|
|
3 |
1604d |
1601d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
C |
done |
inconclusive |
21 |
2092d |
2619d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
C |
|
|
10 |
1716d |
1807d
|
|
WARNING: refcount bug in sco_sock_timeout
bluetooth
|
13 |
|
|
|
24 |
1392d |
1635d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2075d |
2384d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
C |
|
|
3 |
2032d |
2033d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1763d |
2041d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
C |
done |
done |
8 |
2154d |
2695d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2200d |
2200d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
C |
|
|
8 |
1399d |
1395d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2034d |
2033d
|
|
WARNING: locking bug in sco_sock_timeout
bluetooth
|
4 |
|
|
|
13 |
1411d |
1635d
|
|
INFO: trying to register non-static key in sco_sock_timeout
bluetooth
|
-1 |
|
|
|
2 |
1416d |
1463d
|
|
KASAN: use-after-free Write in sco_conn_del
bluetooth
|
22 |
|
|
|
23 |
1470d |
1638d
|
|
general protection fault in rcu_sync_func (2)
bluetooth
|
2 |
|
|
|
1 |
1447d |
1443d
|
|
WARNING: ODEBUG bug in hci_dev_close_sync
bluetooth
|
-1 |
|
|
|
1 |
1491d |
1487d
|
|
KMSAN: uninit-value in hci_conn_complete_evt
bluetooth
|
7 |
|
|
|
3 |
1501d |
1563d
|
|
WARNING: ODEBUG bug in hci_release_dev
bluetooth
|
-1 |
|
|
|
1 |
1535d |
1527d
|
|
INFO: task hung in scan_update_work (2)
bluetooth
|
1 |
|
|
|
1 |
1481d |
1481d
|
|
BUG: spinlock bad magic in lock_sock_nested (2)
bluetooth
|
4 |
|
|
|
1 |
1512d |
1512d
|
|
KMSAN: uninit-value in hci_cmd_status_evt
bluetooth
|
7 |
|
|
|
1 |
1520d |
1520d
|
|
WARNING: locking bug in l2cap_sock_teardown_cb
bluetooth
|
4 |
|
|
|
129 |
1598d |
1890d
|
|
BUG: unable to handle kernel paging request in lock_sock_nested
bluetooth
|
17 |
|
|
|
43 |
1602d |
2043d
|
|
INFO: task can't die in hci_unregister_dev
bluetooth
|
1 |
|
|
|
1 |
1548d |
1544d
|
|
INFO: task hung in scan_update_work
bluetooth
|
1 |
|
|
|
17 |
1550d |
1589d
|
|
WARNING: locking bug in sco_conn_del
bluetooth
|
4 |
|
|
|
2 |
1612d |
1622d
|
|
INFO: task hung in hci_request_cancel_all
bluetooth
|
1 |
|
|
|
1 |
1556d |
1556d
|
|
KMSAN: uninit-value in hci_loglink_complete_evt
bluetooth
|
7 |
|
|
|
1 |
1617d |
1613d
|
|
WARNING: refcount bug in sco_conn_del
bluetooth
|
13 |
|
|
|
7 |
1627d |
1638d
|
|
INFO: trying to register non-static key in sco_conn_del
bluetooth
|
-1 |
|
|
|
1 |
1627d |
1623d
|
|
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping
bluetooth
|
6 |
|
|
|
1 |
1542d |
1542d
|
|
BUG: spinlock bad magic in lock_sock_nested
bluetooth
|
4 |
|
|
|
26 |
1654d |
2009d
|
|
KASAN: global-out-of-bounds Read in cancel_delayed_work
bluetooth
|
17 |
|
|
|
1 |
1632d |
1628d
|
|
INFO: task hung in rfcomm_process_sessions
bluetooth
|
1 |
|
|
|
1 |
1633d |
1633d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
C |
|
|
2 |
2521d |
2521d
|
|
INFO: task can't die in rfcomm_dlc_close
bluetooth
|
1 |
|
|
|
4 |
1644d |
1662d
|
|
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb
bluetooth
|
10 |
|
|
|
1 |
1648d |
1644d
|
|
WARNING: refcount bug in l2cap_sock_kill
bluetooth
|
13 |
|
|
|
1 |
1706d |
1702d
|
|
INFO: task can't die in rfcomm_dlc_open
bluetooth
|
1 |
|
|
|
1 |
1669d |
1665d
|
|
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested
bluetooth
|
-1 |
|
|
|
6 |
1679d |
1730d
|
|
general protection fault in release_sock
bluetooth
|
2 |
|
|
|
1 |
1650d |
1650d
|
|
general protection fault in l2cap_chan_timeout (2)
bluetooth
|
2 |
|
|
|
1 |
1749d |
1744d
|
|
INFO: task hung in hci_conn_hash_flush
bluetooth
|
1 |
|
|
|
1 |
1732d |
1732d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb (2)
bluetooth
|
7 |
|
|
|
1 |
1752d |
1752d
|
|
general protection fault in qca_power_shutdown
arm-msm
bluetooth
|
2 |
|
|
|
1 |
1786d |
1782d
|
|
KASAN: use-after-free Write in h4_recv_buf
bluetooth
|
22 |
|
|
|
2 |
1818d |
1827d
|
|
general protection fault in bt_accept_unlink (2)
bluetooth
|
2 |
|
|
|
1 |
1833d |
1829d
|
|
KASAN: wild-memory-access Write in l2cap_chan_put
bluetooth
|
21 |
|
|
|
2 |
1834d |
1858d
|
|
general protection fault in hci_chan_del
bluetooth
|
2 |
|
|
|
2 |
1875d |
1918d
|
|
KASAN: slab-out-of-bounds Write in hci_chan_del
bluetooth
|
21 |
|
|
|
1 |
1875d |
1870d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete
bluetooth
|
6 |
|
|
|
23 |
1793d |
1915d
|
|
KASAN: use-after-free Read in skb_release_head_state
bluetooth
|
19 |
|
|
|
1 |
1886d |
1882d
|
|
KASAN: use-after-free Read in hci_dev_do_open
bluetooth
|
19 |
|
|
|
1 |
1888d |
1884d
|
|
possible deadlock in lock_sock_nested
bluetooth
|
4 |
|
|
|
1 |
1889d |
1885d
|
|
KMSAN: uninit-value in l2cap_sock_teardown_cb
bluetooth
|
7 |
|
|
|
1 |
1875d |
1875d
|
|
KASAN: out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
1 |
1928d |
1925d
|
|
general protection fault in l2cap_chan_timeout
bluetooth
|
2 |
|
|
|
1 |
1930d |
1926d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2)
bluetooth
|
6 |
|
|
|
1 |
1863d |
1863d
|
|
KMSAN: uninit-value in hci_event_packet (2)
bluetooth
|
7 |
|
|
|
4 |
1965d |
1996d
|
|
KASAN: use-after-free Read in l2cap_sock_kill
bluetooth
|
19 |
|
|
|
1 |
1935d |
1935d
|
|
KASAN: global-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
|
|
|
2 |
1984d |
1925d
|
|
KASAN: use-after-free Read in sco_chan_del
bluetooth
|
19 |
|
|
|
1 |
1980d |
1976d
|
|
BUG: corrupted list in hci_chan_del
bluetooth
|
8 |
|
|
|
2 |
2034d |
2034d
|
|
general protection fault in bt_accept_unlink
bluetooth
|
2 |
|
|
|
1 |
2043d |
2043d
|
|
KMSAN: uninit-value in hci_cmd_timeout
bluetooth
|
7 |
|
|
|
3 |
2069d |
2213d
|
|
KCSAN: data-race in __hci_req_sync / hci_req_status_pend
bluetooth
|
6 |
|
|
|
1 |
1999d |
1999d
|
|
INFO: task hung in hci_dev_do_open
bluetooth
|
1 |
|
|
|
1 |
2067d |
2067d
|
|
KMSAN: uninit-value in vhci_write
bluetooth
|
7 |
|
|
|
1 |
2057d |
2057d
|
|
WARNING in __queue_work (2)
bluetooth
|
-1 |
|
|
|
1 |
2122d |
2118d
|
|
INFO: trying to register non-static key in hci_uart_send_frame (2)
bluetooth
|
-1 |
|
|
|
1 |
2201d |
2199d
|
|
KASAN: use-after-free Read in rfcomm_dlc_exists
bluetooth
|
19 |
|
|
|
833 |
2172d |
2786d
|
|
KCSAN: data-race in do_enable_set / do_enable_set
bluetooth
|
6 |
|
|
|
3 |
2235d |
2239d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive (2)
bluetooth
|
-1 |
|
|
|
1 |
2295d |
2291d
|
|
KMSAN: use-after-free in hci_cmd_timeout
bluetooth
|
18 |
|
|
|
1 |
2271d |
2271d
|
|
KCSAN: data-race in flush_workqueue / flush_workqueue
bluetooth
|
6 |
|
|
|
3 |
2286d |
2304d
|
|
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2296d |
2296d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open (2)
bluetooth
|
19 |
|
|
|
19 |
2373d |
2513d
|
|
general protection fault in rfcomm_dlc_open
bluetooth
|
2 |
|
|
|
3 |
2402d |
2499d
|
|
general protection fault in rfcomm_dlc_exists
bluetooth
|
2 |
|
|
|
2 |
2417d |
2499d
|
|
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown
bluetooth
|
6 |
|
|
|
1 |
2317d |
2317d
|
|
general protection fault in rcu_sync_func
bluetooth
|
2 |
|
|
|
1 |
2411d |
2407d
|
|
INFO: trying to register non-static key in hci_uart_tty_receive
bluetooth
|
-1 |
|
|
|
1 |
2385d |
2384d
|
|
BUG: unable to handle kernel paging request in rfcomm_dlc_exists
bluetooth
|
8 |
|
|
|
1 |
2417d |
2413d
|
|
INFO: trying to register non-static key in hci_uart_send_frame
bluetooth
|
-1 |
|
|
|
2 |
2518d |
2567d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
C |
|
|
11 |
2346d |
2404d
|
|
KMSAN: uninit-value in sock_rfree (2)
bluetooth
|
7 |
|
|
|
1 |
2354d |
2354d
|
|
KMSAN: uninit-value in skb_queue_purge
bluetooth
|
7 |
|
|
|
2 |
2351d |
2371d
|
|
WARNING in lockdep_register_key
bluetooth
|
-1 |
|
|
|
35 |
2550d |
2565d
|
|
WARNING: ODEBUG bug in hci_uart_tty_close
bluetooth
|
-1 |
|
|
|
1 |
2578d |
2577d
|
|
INFO: trying to register non-static key in hci_uart_flush
bluetooth
|
-1 |
|
|
|
1 |
2584d |
2584d
|
|
KASAN: use-after-free Read in rfcomm_dlc_open
bluetooth
|
19 |
|
|
|
1 |
2772d |
2768d
|