Out of 335 bugs, 308 were automatically obsoleted (89 due to revoked reproducers), 27 were invalidated by users.
Applied filters: Label=subsystems:bluetooth (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
general protection fault in l2cap_chan_timeout (3) bluetooth 19 syz, C inconclusive inconclusive 92 100d 1684d
WARNING in l2cap_send_conn_req prio:low bluetooth -1 3 104d 138d
WARNING: held lock freed in bt_accept_dequeue prio:high bluetooth 4 34 105d 642d
INFO: rcu detected stall in l2cap_sock_release prio:high bluetooth 1 1 102d 102d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb prio:high bluetooth 19 syz error 203 84d 700d
WARNING in hci_recv_frame prio:low bluetooth -1 syz, C error error 266 83d 878d
WARNING in hci_conn_drop (4) prio:high bluetooth -1 4 115d 129d
KASAN: slab-use-after-free Read in process_one_work (2) bluetooth prio:high 19 3 122d 152d
WARNING in hci_send_acl (4) prio:low bluetooth -1 1 127d 123d
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (4) prio:high bluetooth 12 4 125d 130d
KASAN: slab-use-after-free Read in skb_pull (2) prio:normal bluetooth 19 1 145d 144d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth 19 syz, C 448 382d 635d
INFO: trying to register non-static key in l2cap_unregister_user bluetooth prio:high -1 13 191d 340d
possible deadlock in l2cap_conn_del bluetooth 4 syz error error 569 180d 539d
KASAN: slab-use-after-free Write in hci_conn_drop (3) bluetooth prio:high 22 syz, C error 1023 172d 292d
possible deadlock in l2cap_info_timeout bluetooth prio:high 4 94 179d 573d
general protection fault in l2cap_conn_del (2) bluetooth 2 1 182d 178d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth 19 syz, C error error 3383 769d 897d
general protection fault in skb_release_data (2) bluetooth net 22 syz, C done error 703 538d 2203d
WARNING: locking bug in l2cap_unregister_user bluetooth 4 6 234d 270d
WARNING in l2cap_unregister_user (2) bluetooth -1 1 230d 230d
INFO: task hung in le_conn_complete_evt (2) bluetooth 1 1 243d 243d
general protection fault in h5_recv bluetooth 10 syz, C done 3515 226d 589d
stack segment fault in kernfs_rename_ns bluetooth 2 35 245d 428d
KCSAN: data-race in bacpy / memcmp race:harmful bluetooth 6 1 223d 212d
general protection fault in hci_abort_conn (2) bluetooth 2 1 233d 229d
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (3) bluetooth 12 3 276d 286d
INFO: task hung in hci_conn_failed (4) bluetooth 1 syz 17 290d 467d
KASAN: slab-use-after-free Read in skb_pull bluetooth 19 1 301d 297d
memory leak in __hci_cmd_sync_sk bluetooth usb 3 syz, C 1 303d 308d
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work bluetooth -1 4 308d 311d
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2) bluetooth 19 6 317d 352d
WARNING in hci_conn_drop (3) bluetooth -1 2 321d 353d
WARNING in hci_send_cmd (3) bluetooth -1 1 284d 280d
KASAN: slab-use-after-free Read in hidp_session_thread (2) bluetooth 19 2 326d 375d
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync bluetooth 6 1 286d 286d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 8 syz error error 46 332d 724d
KASAN: slab-use-after-free Read in hci_cmd_work (2) bluetooth 19 27015 306d 307d
WARNING in l2cap_unregister_user bluetooth -1 1 288d 288d
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 8 129 325d 700d
BUG: unable to handle kernel paging request in l2cap_conn_del bluetooth 8 1 370d 366d
KCSAN: data-race in hci_uart_open / hci_uart_tty_close bluetooth 6 1 329d 329d
WARNING: refcount bug in hci_conn_del_sysfs bluetooth 13 1 367d 363d
WARNING in hci_devcd_register (2) bluetooth -1 4 383d 402d
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 19 19 385d 634d
KASAN: slab-use-after-free Read in skb_dequeue bluetooth 19 4 375d 471d
INFO: task hung in le_conn_complete_evt bluetooth 1 1 392d 392d
KASAN: slab-use-after-free Read in full_proxy_write (2) bluetooth 19 3 392d 391d
INFO: rcu detected stall in tty_release (3) net bluetooth 1 2 395d 451d
general protection fault in hci_devcd_register bluetooth 17 31 406d 619d
general protection fault in skb_queue_tail (4) bluetooth 2 1 399d 395d
KASAN: slab-use-after-free Read in force_suspend_read (2) bluetooth 19 1 399d 395d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth 19 syz, C inconclusive error 153 383d 861d
KASAN: slab-use-after-free Read in l2cap_register_user (2) bluetooth 19 1 379d 375d
INFO: task hung in l2cap_unregister_user bluetooth 1 2 410d 498d
WARNING: kobject bug in hci_disconnect_all_sync bluetooth -1 1 424d 419d
WARNING in l2cap_send_disconn_req (2) bluetooth -1 1 430d 426d
KMSAN: uninit-value in hci_recv_frame bluetooth 7 1 391d 391d
INFO: task hung in hci_dev_close_sync (3) bluetooth 1 8 431d 646d
KASAN: slab-out-of-bounds Write in enqueue_timer bluetooth 21 1 460d 455d
general protection fault in __timer_delete_sync bluetooth 2 syz, C done 3 587d 591d
INFO: task hung in hci_conn_hash_flush (3) bluetooth 1 1 461d 461d
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 4 syz, C unreliable done 39 491d 871d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 19 12 489d 683d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 19 47 497d 824d
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2) bluetooth 12 2 429d 432d
KASAN: slab-use-after-free Read in l2cap_sock_kill (2) bluetooth 19 1 439d 439d
WARNING in hci_conn_drop (2) bluetooth -1 1 505d 501d
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 19 27 507d 878d
WARNING in hci_send_cmd (2) bluetooth -1 2 511d 572d
KASAN: slab-use-after-free Read in bt_accept_dequeue (2) bluetooth 19 1 516d 511d
KASAN: slab-use-after-free Read in hidp_session_thread bluetooth 19 3 534d 585d
WARNING in hci_devcd_register bluetooth -1 3 546d 624d
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb 1 syz 1 554d 550d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3) bluetooth 12 8 556d 601d
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 19 18 556d 700d
possible deadlock in sco_connect_cfm bluetooth 4 21 559d 805d
KASAN: slab-use-after-free Write in sco_conn_put bluetooth 22 95 544d 658d
WARNING in sco_conn_put bluetooth -1 2 579d 638d
WARNING: refcount bug in sco_conn_put bluetooth 13 1 581d 577d
KASAN: slab-use-after-free Read in force_suspend_read bluetooth 19 8 584d 611d
KASAN: slab-use-after-free Read in sock_def_readable bluetooth net 19 3 585d 602d
general protection fault in qca_close arm-msm bluetooth 2 syz, C done 94 573d 592d
general protection fault in h5_close bluetooth 2 syz, C done 5 575d 578d
KASAN: slab-use-after-free Read in full_proxy_write bluetooth 19 syz, C 36 563d 631d
general protection fault in bcsp_close bluetooth 2 syz, C done 3 580d 578d
KASAN: slab-use-after-free Read in l2cap_disconn_ind bluetooth 19 2 597d 668d
INFO: task hung in hci_unregister_dev bluetooth 1 1 621d 621d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2) bluetooth 19 1 631d 627d
WARNING in hci_conn_drop bluetooth -1 1 633d 629d
general protection fault in l2cap_conn_del bluetooth 2 2 633d 649d
KASAN: slab-use-after-free Write in sk_skb_reason_drop bluetooth net 22 2 634d 677d
KASAN: slab-use-after-free Read in full_proxy_read bluetooth 19 11 606d 612d
INFO: task hung in hci_abort_conn_sync bluetooth 1 1 631d 631d
KASAN: slab-use-after-free Read in hci_tx_work bluetooth 19 1 642d 637d
general protection fault in hci_abort_conn bluetooth 2 1 642d 619d
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb (2) bluetooth 19 1 591d 591d
INFO: rcu detected stall in hci_cmd_timeout (2) bluetooth 1 1 644d 644d
BUG: unable to handle kernel paging request in hci_release_dev bluetooth 8 1 657d 653d
INFO: task hung in hci_conn_hash_flush (2) bluetooth 1 2 650d 726d
KASAN: slab-use-after-free Read in l2cap_connect_cfm bluetooth 19 syz inconclusive 36 564d 643d
KASAN: slab-use-after-free Read in __timer_delete bluetooth 19 syz, C done done 1 664d 663d
INFO: rcu detected stall in hci_rx_work (2) bluetooth 1 1 665d 665d
possible deadlock in mgmt_set_connectable_complete bluetooth 4 syz 44 663d 855d
WARNING in sco_chan_del bluetooth -1 10 681d 863d
WARNING in emon bluetooth -1 1 682d 678d
KASAN: slab-use-after-free Read in l2cap_sock_kill bluetooth 19 1 671d 671d
INFO: task hung in hci_conn_failed (3) bluetooth 1 18 654d 726d
KASAN: slab-use-after-free Read in hci_send_acl (2) bluetooth 19 1 696d 690d
KASAN: slab-use-after-free Read in sco_chan_del (2) bluetooth 19 2 700d 728d
possible deadlock in touch_wq_lockdep_map (2) bluetooth 4 5 700d 710d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 13 10 701d 1181d
WARNING in hci_send_cmd bluetooth -1 8 704d 952d
KASAN: slab-use-after-free Write in sco_conn_del bluetooth 22 syz, C done 87 693d 1210d
KASAN: slab-use-after-free Read in hci_req_cmd_complete bluetooth 19 1 715d 707d
INFO: task hung in hci_remote_features_evt bluetooth 1 9 712d 809d
INFO: task hung in srso_alias_return_thunk bluetooth 1 1 716d 716d
WARNING in l2cap_do_send (2) bluetooth -1 syz 1 986d 1000d
possible deadlock in rfcomm_dlc_exists bluetooth 4 syz, C error done 13649 706d 1340d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2) bluetooth 12 1 674d 674d
KASAN: slab-use-after-free Read in bt_accept_dequeue bluetooth 19 2 744d 700d
KASAN: slab-use-after-free Write in mgmt_device_connected bluetooth 22 1 746d 724d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete bluetooth 19 1 726d 707d
KASAN: slab-use-after-free Read in skb_release_head_state bluetooth 19 syz error error 135 740d 882d
KASAN: slab-use-after-free Read in l2cap_conn_unreliable bluetooth 19 1 782d 759d
WARNING in l2cap_send_cmd bluetooth -1 1 791d 789d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb bluetooth 12 1 792d 789d
WARNING in hci_send_acl (3) bluetooth -1 1 797d 793d
KASAN: slab-use-after-free Read in sk_skb_reason_drop bluetooth 19 syz error error 412 767d 819d
KASAN: slab-use-after-free Read in hci_cmd_work bluetooth 19 1 797d 759d
KASAN: slab-use-after-free Read in hci_cmd_timeout bluetooth 19 28 772d 919d
WARNING in hci_conn_del (2) bluetooth -1 17 768d 765d
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM] bluetooth -1 syz, C 28 777d 804d
KASAN: slab-use-after-free Read in hci_req_sync_complete bluetooth 19 8 811d 836d
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb bluetooth 19 7 812d 819d
WARNING: locking bug in sco_conn_del (2) bluetooth 4 1 813d 809d
KASAN: slab-use-after-free Read in __lock_sock (2) bluetooth 19 syz, C 5 813d 827d
KASAN: slab-use-after-free Read in l2cap_recv_acldata bluetooth 19 1 814d 810d
KASAN: slab-use-after-free Read in skb_free_head bluetooth 19 2 813d 832d
general protection fault in l2cap_publish_rx_avail bluetooth 2 syz, C 6 826d 826d
INFO: rcu detected stall in bt_err bluetooth 1 1 819d 819d
INFO: task hung in hci_conn_failed (2) bluetooth 1 1 821d 821d
WARNING in l2cap_send_disconn_req bluetooth -1 1 831d 827d
INFO: task hung in l2cap_conn_del bluetooth 1 1 824d 824d
WARNING in lock_sock_nested bluetooth sctp -1 6 754d 761d
general protection fault in dequeue_task bluetooth 22 783 754d 762d
WARNING in hci_conn_set_handle bluetooth -1 syz, C error done 7 838d 890d
KFENCE: invalid free in __hci_req_sync bluetooth 23 35 809d 870d
general protection fault in hci_release_dev (2) bluetooth 2 1 830d 826d
KASAN: use-after-free Read in __queue_work (3) bluetooth 19 syz done done 83 1406d 2235d
KASAN: use-after-free Read in __sco_sock_close bluetooth 19 syz error error 1 2239d 2239d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb bluetooth 19 1 847d 843d
INFO: trying to register non-static key in sco_sock_timeout (2) bluetooth -1 5 877d 1043d
KASAN: slab-use-after-free Read in hci_chan_sent bluetooth 19 1 838d 817d
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt bluetooth 17 syz, C error error 8 886d 899d
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt bluetooth 17 syz, C done unreliable 5 894d 899d
WARNING in ida_free (2) bluetooth -1 syz, C 14 951d 951d
KASAN: global-out-of-bounds Read in __timer_delete bluetooth 17 1 902d 896d
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind bluetooth 6 1 838d 838d
WARNING in msft_do_close bluetooth -1 1 906d 902d
INFO: rcu detected stall in l2cap_sock_connect bluetooth 1 1 868d 868d
KASAN: slab-use-after-free Read in mgmt_pending_foreach bluetooth 19 1 911d 907d
possible deadlock in hci_dev_close bluetooth 4 2 873d 874d
possible deadlock in hci_unregister_dev (2) bluetooth 4 6 874d 878d
WARNING: refcount bug in sco_conn_del (3) bluetooth 13 1 904d 900d
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt bluetooth 17 syz, C unreliable 28 886d 899d
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt bluetooth 17 syz, C 36 889d 899d
INFO: task hung in hci_cmd_sync_clear (2) bluetooth 1 15 910d 1316d
KASAN: slab-use-after-free Write in hci_conn_drop (2) bluetooth 22 syz, C done 7 922d 1054d
INFO: task hung in hci_conn_failed bluetooth 1 syz, C done 1 924d 967d
possible deadlock in hci_dev_do_close (2) bluetooth 4 syz, C done 10 873d 878d
KASAN: slab-use-after-free Read in hci_sock_get_cookie bluetooth 19 2 865d 873d
BUG: sleeping function called from invalid context in hci_cmd_sync_submit bluetooth 19 syz, C done done 3400 931d 1175d
KMSAN: uninit-value in eir_get_service_data bluetooth 7 syz, C 22 932d 994d
INFO: task hung in hci_release_dev bluetooth 1 syz, C done 18 960d 957d
KASAN: slab-use-after-free Read in hci_send_acl bluetooth 19 syz, C done done 1323 954d 1127d
INFO: task hung in hci_dev_close_sync (2) bluetooth 1 2 959d 962d
KASAN: slab-use-after-free Write in __sco_sock_close bluetooth 22 syz, C done done 63 970d 1116d
KASAN: slab-use-after-free Read in skb_queue_purge_reason bluetooth 19 1 999d 995d
possible deadlock in discov_off bluetooth 4 127 993d 1449d
possible deadlock in hci_unregister_dev bluetooth 4 175 994d 1491d
KASAN: slab-use-after-free Read in __lock_sock bluetooth 19 syz, C 1 1034d 1034d
KASAN: slab-use-after-free Read in l2cap_connect bluetooth 19 1 1049d 1041d
WARNING in hci_send_acl (2) bluetooth -1 1 1048d 1044d
KASAN: slab-use-after-free Read in sco_chan_del bluetooth 19 1 1062d 1056d
KASAN: slab-use-after-free Read in release_sock bluetooth 19 1 1067d 1062d
INFO: task can't die in __lock_sock bluetooth 1 syz, C done error 1067 1049d 1863d
memory leak in hci_conn_add (2) bluetooth 3 syz, C 65 1056d 1114d
KASAN: slab-use-after-free Read in lookup_object_or_alloc bluetooth 19 2 1084d 1094d
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb bluetooth 12 1 1103d 1096d
WARNING: ODEBUG bug in hci_abort_conn_sync bluetooth -1 1 1096d 1092d
KASAN: use-after-free Read in hci_conn_security bluetooth 19 1 1116d 1112d
general protection fault in hci_uart_tty_ioctl bluetooth 2 syz, C error done 4 1119d 1497d
KASAN: use-after-free Write in hci_conn_del bluetooth 22 syz done inconclusive 3 1826d 2239d
WARNING: refcount bug in sco_conn_del (2) bluetooth 13 1 1167d 1163d
KASAN: slab-use-after-free Write in hci_conn_drop bluetooth 22 1 1223d 1218d
WARNING in l2cap_do_send bluetooth -1 2 1248d 1323d
WARNING: bad unlock balance in l2cap_bredr_sig_cmd bluetooth 4 2 1249d 1253d
WARNING: bad unlock balance in l2cap_disconnect_rsp bluetooth 4 syz, C 72 1225d 1251d
WARNING in hci_send_acl bluetooth -1 1 1302d 1298d
general protection fault in hci_phy_link_complete_evt bluetooth 2 syz, C done unreliable 50 2114d 2241d
possible deadlock in hci_conn_hash_flush bluetooth 4 4 1312d 1442d
INFO: rcu detected stall in hci_rx_work bluetooth 1 1 1269d 1269d
WARNING: locking bug in finish_task_switch bluetooth net 4 syz, C done inconclusive 131 1331d 2443d
BUG: corrupted list in kobject_add_internal (4) bluetooth 8 syz, C error done 4 1471d 1467d
INFO: task hung in hci_dev_do_open (2) bluetooth 1 syz, C done done 166 1506d 1591d
linux-next test error: possible deadlock in hci_cmd_sync_clear bluetooth -1 6 1305d 1305d
BUG: corrupted list in klist_release bluetooth 19 syz, C unreliable inconclusive 34 1451d 2106d
KASAN: use-after-free Read in l2cap_conn_del bluetooth 19 syz, C error 12 1426d 1456d
KASAN: use-after-free Read in h5_rx_3wire_hdr bluetooth 19 syz error 3 1852d 2618d
WARNING: refcount bug in l2cap_global_chan_by_psm bluetooth 13 syz, C done inconclusive 26 1876d 2238d
KASAN: use-after-free Read in hci_chan_del bluetooth 19 syz, C done done 87 1962d 2241d
WARNING: held lock freed in l2cap_conn_del bluetooth 4 syz, C done error 13 1427d 1458d
INFO: task hung in hci_power_on bluetooth 1 syz, C done inconclusive 37 1537d 1572d
WARNING in cancel_delayed_work bluetooth -1 syz, C done done 611 1557d 2243d
BUG: unable to handle kernel NULL pointer dereference in device_find_child bluetooth 10 syz, C 5 1425d 1442d
BUG: corrupted list in hci_conn_del_sysfs bluetooth 8 syz, C 14 1425d 1436d
possible deadlock in sco_sock_timeout bluetooth 4 1 1442d 1442d
BUG: unable to handle kernel NULL pointer dereference in klist_next bluetooth 10 syz, C 1 1447d 1447d
WARNING: ODEBUG bug in cancel_delayed_work (2) bluetooth -1 syz, C inconclusive inconclusive 13 1532d 1752d
BUG: corrupted list in klist_dec_and_del bluetooth 19 syz, C inconclusive inconclusive 3 1454d 1991d
KASAN: use-after-free Read in h4_recv_buf bluetooth 19 syz, C inconclusive done 3 1862d 1859d
BUG: corrupted list in kobj_kset_join bluetooth 8 syz, C 1 1471d 1467d
KASAN: use-after-free Write in hci_sock_bind (2) bluetooth 22 syz, C done unreliable 26 2120d 2394d
INFO: trying to register non-static key in l2cap_chan_close bluetooth -1 syz done 1 2236d 2236d
KASAN: use-after-free Read in hci_get_auth_info bluetooth 19 syz error error 1 2236d 2235d
WARNING: locking bug in hci_dev_reset bluetooth 4 syz done inconclusive 1 1957d 2238d
KMSAN: uninit-value in process_adv_report bluetooth 7 syz, C 10 2093d 2241d
INFO: task hung in hci_cmd_sync_clear bluetooth 1 4 1495d 1642d
general protection fault in rcu_sync_func (3) bluetooth 2 2 1472d 1485d
upstream test error: WARNING in mgmt_index_removed bluetooth -1 90 1502d 1509d
WARNING: refcount bug in bt_accept_dequeue bluetooth 13 syz error error 2 1593d 2236d
memory leak in mgmt_cmd_status bluetooth 3 syz, C 2 1995d 2203d
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed bluetooth -1 41 1502d 1509d
net test error: WARNING: ODEBUG bug in mgmt_index_removed bluetooth -1 39 1504d 1509d
general protection fault in klist_next bluetooth 17 syz, C error 33 1447d 1501d
general protection fault in skb_dequeue (2) bluetooth 19 syz, C inconclusive done 9 1807d 1892d
KASAN: slab-out-of-bounds Read in lock_sock_nested bluetooth 17 syz unreliable done 23 1792d 2232d
general protection fault in sco_sock_getsockopt bluetooth 2 syz, C done 2256 2105d 2407d
INFO: task hung in hci_dev_open bluetooth 1 6 1545d 1617d
KMSAN: uninit-value in vsscanf bluetooth 7 syz 9 1664d 1730d
KMSAN: uninit-value in hci_conn_request_evt bluetooth 7 syz, C 3 1723d 1788d
general protection fault in skb_put bluetooth 2 syz, C done error 43 2204d 2786d
memory leak in hci_conn_add bluetooth 3 syz 1 2236d 2236d
KMSAN: uninit-value in hci_phy_link_complete_evt bluetooth 7 syz, C 3 1800d 1796d
KASAN: slab-out-of-bounds Read in bacpy bluetooth 17 syz, C done inconclusive 21 2287d 2814d
KMSAN: uninit-value in hci_event_packet (3) bluetooth 7 syz, C 10 1911d 2002d
WARNING: refcount bug in sco_sock_timeout bluetooth 13 24 1587d 1830d
memory leak in hci_inquiry_cache_update bluetooth 3 syz 5 2270d 2579d
KMSAN: uninit-value in hci_chan_lookup_handle bluetooth 7 syz, C 3 2227d 2228d
WARNING: locking bug in l2cap_chan_del bluetooth 4 syz inconclusive inconclusive 83 1958d 2236d
KASAN: use-after-free Write in hci_sock_release bluetooth 22 syz, C done done 8 2349d 2890d
KASAN: use-after-free Read in skb_release_data (2) bluetooth 19 syz done done 1 2395d 2395d
WARNING: refcount bug in l2cap_chan_hold bluetooth 13 syz, C 8 1594d 1590d
BUG: corrupted list in bt_accept_unlink bluetooth 8 syz error error 1 2229d 2228d
WARNING: locking bug in sco_sock_timeout bluetooth 4 13 1606d 1830d
INFO: trying to register non-static key in sco_sock_timeout bluetooth -1 2 1611d 1658d
KASAN: use-after-free Write in sco_conn_del bluetooth 22 23 1665d 1833d
general protection fault in rcu_sync_func (2) bluetooth 2 1 1642d 1638d
WARNING: ODEBUG bug in hci_dev_close_sync bluetooth -1 1 1686d 1682d
KMSAN: uninit-value in hci_conn_complete_evt bluetooth 7 3 1696d 1758d
WARNING: ODEBUG bug in hci_release_dev bluetooth -1 1 1730d 1722d
INFO: task hung in scan_update_work (2) bluetooth 1 1 1676d 1676d
BUG: spinlock bad magic in lock_sock_nested (2) bluetooth 4 1 1707d 1707d
KMSAN: uninit-value in hci_cmd_status_evt bluetooth 7 1 1715d 1715d
WARNING: locking bug in l2cap_sock_teardown_cb bluetooth 4 129 1793d 2085d
BUG: unable to handle kernel paging request in lock_sock_nested bluetooth 17 43 1798d 2238d
INFO: task can't die in hci_unregister_dev bluetooth 1 1 1743d 1739d
INFO: task hung in scan_update_work bluetooth 1 17 1746d 1784d
WARNING: locking bug in sco_conn_del bluetooth 4 2 1807d 1817d
INFO: task hung in hci_request_cancel_all bluetooth 1 1 1751d 1751d
KMSAN: uninit-value in hci_loglink_complete_evt bluetooth 7 1 1812d 1808d
WARNING: refcount bug in sco_conn_del bluetooth 13 7 1822d 1833d
INFO: trying to register non-static key in sco_conn_del bluetooth -1 1 1822d 1818d
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping bluetooth 6 1 1737d 1737d
BUG: spinlock bad magic in lock_sock_nested bluetooth 4 26 1849d 2204d
KASAN: global-out-of-bounds Read in cancel_delayed_work bluetooth 17 1 1827d 1823d
INFO: task hung in rfcomm_process_sessions bluetooth 1 1 1828d 1828d
KMSAN: uninit-value in hci_inquiry_cache_update bluetooth 7 syz, C 2 2716d 2716d
INFO: task can't die in rfcomm_dlc_close bluetooth 1 4 1839d 1857d
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb bluetooth 10 1 1843d 1839d
WARNING: refcount bug in l2cap_sock_kill bluetooth 13 1 1901d 1897d
INFO: task can't die in rfcomm_dlc_open bluetooth 1 1 1865d 1861d
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested bluetooth -1 6 1874d 1926d
general protection fault in release_sock bluetooth 2 1 1845d 1845d
general protection fault in l2cap_chan_timeout (2) bluetooth 2 1 1944d 1939d
INFO: task hung in hci_conn_hash_flush bluetooth 1 1 1927d 1927d
KMSAN: uninit-value in l2cap_sock_teardown_cb (2) bluetooth 7 1 1947d 1947d
general protection fault in qca_power_shutdown arm-msm bluetooth 2 1 1982d 1977d
KASAN: use-after-free Write in h4_recv_buf bluetooth 22 2 2013d 2022d
general protection fault in bt_accept_unlink (2) bluetooth 2 1 2028d 2024d
KASAN: wild-memory-access Write in l2cap_chan_put bluetooth 21 2 2029d 2053d
general protection fault in hci_chan_del bluetooth 2 2 2070d 2113d
KASAN: slab-out-of-bounds Write in hci_chan_del bluetooth 21 1 2070d 2065d
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete bluetooth 6 23 1988d 2110d
KASAN: use-after-free Read in skb_release_head_state bluetooth 19 1 2081d 2077d
KASAN: use-after-free Read in hci_dev_do_open bluetooth 19 1 2083d 2079d
possible deadlock in lock_sock_nested bluetooth 4 1 2084d 2080d
KMSAN: uninit-value in l2cap_sock_teardown_cb bluetooth 7 1 2070d 2070d
KASAN: out-of-bounds Read in lock_sock_nested bluetooth 17 1 2123d 2120d
general protection fault in l2cap_chan_timeout bluetooth 2 1 2125d 2121d
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2) bluetooth 6 1 2058d 2058d
KMSAN: uninit-value in hci_event_packet (2) bluetooth 7 4 2160d 2191d
KASAN: use-after-free Read in l2cap_sock_kill bluetooth 19 1 2130d 2130d
KASAN: global-out-of-bounds Read in lock_sock_nested bluetooth 17 2 2179d 2120d
KASAN: use-after-free Read in sco_chan_del bluetooth 19 1 2175d 2171d
BUG: corrupted list in hci_chan_del bluetooth 8 2 2229d 2229d
general protection fault in bt_accept_unlink bluetooth 2 1 2238d 2238d
KMSAN: uninit-value in hci_cmd_timeout bluetooth 7 3 2264d 2408d
KCSAN: data-race in __hci_req_sync / hci_req_status_pend bluetooth 6 1 2194d 2194d
INFO: task hung in hci_dev_do_open bluetooth 1 1 2263d 2263d
KMSAN: uninit-value in vhci_write bluetooth 7 1 2252d 2252d
WARNING in __queue_work (2) bluetooth -1 1 2317d 2313d
INFO: trying to register non-static key in hci_uart_send_frame (2) bluetooth -1 1 2396d 2394d
KASAN: use-after-free Read in rfcomm_dlc_exists bluetooth 19 833 2367d 2981d
KCSAN: data-race in do_enable_set / do_enable_set bluetooth 6 3 2430d 2434d
INFO: trying to register non-static key in hci_uart_tty_receive (2) bluetooth -1 1 2490d 2486d
KMSAN: use-after-free in hci_cmd_timeout bluetooth 18 1 2466d 2466d
KCSAN: data-race in flush_workqueue / flush_workqueue bluetooth 6 3 2481d 2499d
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown bluetooth 6 1 2491d 2491d
KASAN: use-after-free Read in rfcomm_dlc_open (2) bluetooth 19 19 2569d 2708d
general protection fault in rfcomm_dlc_open bluetooth 2 3 2597d 2694d
general protection fault in rfcomm_dlc_exists bluetooth 2 2 2612d 2694d
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown bluetooth 6 1 2512d 2512d
general protection fault in rcu_sync_func bluetooth 2 1 2606d 2602d
INFO: trying to register non-static key in hci_uart_tty_receive bluetooth -1 1 2580d 2579d
BUG: unable to handle kernel paging request in rfcomm_dlc_exists bluetooth 8 1 2612d 2608d
INFO: trying to register non-static key in hci_uart_send_frame bluetooth -1 2 2713d 2762d
KMSAN: uninit-value in kfree_skb bluetooth 7 syz, C 11 2541d 2599d
KMSAN: uninit-value in sock_rfree (2) bluetooth 7 1 2549d 2549d
KMSAN: uninit-value in skb_queue_purge bluetooth 7 2 2546d 2567d
WARNING in lockdep_register_key bluetooth -1 35 2745d 2760d
WARNING: ODEBUG bug in hci_uart_tty_close bluetooth -1 1 2773d 2772d
INFO: trying to register non-static key in hci_uart_flush bluetooth -1 1 2779d 2779d
KASAN: use-after-free Read in rfcomm_dlc_open bluetooth 19 1 2967d 2963d