[PW_SID:1040193] Bluetooth: Perform careful capability checks in hci_sock_bind() #3258

BluezTestBot · 2026-01-09T03:16:55Z

Previously, the HCI_SOCK_TRUSTED flag was set in hci_sock_bind() by
checking capable(CAP_NET_ADMIN). This function verifies that the
current caller of the bind system call has the required capability.

However, this approach is vulnerable to a "confused deputy" attack. A
malicious unprivileged program can open an HCI socket and deliberately
share it with a privileged task (e.g., via file descriptor passing).
If the privileged task is tricked into calling bind() on that socket,
the capable() check will pass, and the socket will be marked as
trusted. The original unprivileged program then retains access to this
now-trusted socket, allowing it to perform privileged operations.

This issue mirrors the vulnerability previously identified and fixed
in hci_sock_ioctl().

Fix this by using sk_capable() instead of capable(). This ensures that
both the task performing the bind and the socket opener must have the
CAP_NET_ADMIN capability before the socket is granted the
HCI_SOCK_TRUSTED status.

Fixes: `f4cdbb3` ("Bluetooth: Handle HCI raw socket transition from unbound to bound")
Signed-off-by: Jerry Wu w.7erry@foxmail.com

Commit 25c150a ("bluetooth: Perform careful capability checks in hci_sock_ioctl()")
fixed CVE-2023-2002. hci_sock_bind contains a similar logic. Would it make sense to
fix it in the same way?

Thank you for spending time reading this. Apologies if I missed anything.

net/bluetooth/hci_sock.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

This patch adds workflow files for ci: [sync.yml] - The workflow file for scheduled work - Sync the repo with upstream repo and rebase the workflow branch - Review the patches in the patchwork and creates the PR if needed [ci.yml] - The workflow file for CI tasks - Run CI tests when PR is created Signed-off-by: Tedd Ho-Jeong An <tedd.an@intel.com>

Previously, the HCI_SOCK_TRUSTED flag was set in hci_sock_bind() by checking capable(CAP_NET_ADMIN). This function verifies that the current caller of the bind system call has the required capability. However, this approach is vulnerable to a "confused deputy" attack. A malicious unprivileged program can open an HCI socket and deliberately share it with a privileged task (e.g., via file descriptor passing). If the privileged task is tricked into calling bind() on that socket, the capable() check will pass, and the socket will be marked as trusted. The original unprivileged program then retains access to this now-trusted socket, allowing it to perform privileged operations. This issue mirrors the vulnerability previously identified and fixed in hci_sock_ioctl(). Fix this by using sk_capable() instead of capable(). This ensures that both the task performing the bind and the socket opener must have the CAP_NET_ADMIN capability before the socket is granted the HCI_SOCK_TRUSTED status. Fixes: f4cdbb3 ("Bluetooth: Handle HCI raw socket transition from unbound to bound") Signed-off-by: Jerry Wu <w.7erry@foxmail.com>

github-actions · 2026-01-09T03:20:14Z

CheckPatch
Desc: Run checkpatch.pl script
Duration: 0.37 seconds
Result: PENDING

github-actions · 2026-01-09T03:20:15Z

GitLint
Desc: Run gitlint
Duration: 0.27 seconds
Result: PENDING

github-actions · 2026-01-09T03:20:15Z

SubjectPrefix
Desc: Check subject contains "Bluetooth" prefix
Duration: 0.08 seconds
Result: PASS

github-actions · 2026-01-09T03:20:39Z

BuildKernel
Desc: Build Kernel for Bluetooth
Duration: 19.71 seconds
Result: FAIL
Output:


In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
net/bluetooth/hci_sock.c: In function ‘hci_sock_bind’:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1262:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1262:7: error: too few arguments to function ‘sk_capable’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1430:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1430:7: error: too few arguments to function ‘sk_capable’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
make[4]: *** [scripts/Makefile.build:287: net/bluetooth/hci_sock.o] Error 1
make[4]: *** Waiting for unfinished jobs....
make[3]: *** [scripts/Makefile.build:556: net/bluetooth] Error 2
make[2]: *** [scripts/Makefile.build:556: net] Error 2
make[2]: *** Waiting for unfinished jobs....
make[1]: *** [/github/workspace/src/src/Makefile:2010: .] Error 2
make: *** [Makefile:248: __sub-make] Error 2

github-actions · 2026-01-09T03:21:06Z

CheckAllWarning
Desc: Run linux kernel with all warning enabled
Duration: 21.90 seconds
Result: FAIL
Output:


In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
net/bluetooth/hci_sock.c: In function ‘hci_sock_bind’:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1262:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1262:7: error: too few arguments to function ‘sk_capable’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1430:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1430:7: error: too few arguments to function ‘sk_capable’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
make[4]: *** [scripts/Makefile.build:287: net/bluetooth/hci_sock.o] Error 1
make[4]: *** Waiting for unfinished jobs....
make[3]: *** [scripts/Makefile.build:556: net/bluetooth] Error 2
make[2]: *** [scripts/Makefile.build:556: net] Error 2
make[2]: *** Waiting for unfinished jobs....
make[1]: *** [/github/workspace/src/src/Makefile:2010: .] Error 2
make: *** [Makefile:248: __sub-make] Error 2

github-actions · 2026-01-09T03:21:34Z

CheckSparse
Desc: Run sparse tool with linux kernel
Duration: 24.29 seconds
Result: FAIL
Output:


net/bluetooth/af_bluetooth.c:248:25: warning: context imbalance in 'bt_accept_enqueue' - different lock contexts for basic block
net/bluetooth/hci_core.c:85:9: warning: context imbalance in '__hci_dev_get' - different lock contexts for basic block
net/bluetooth/hci_core.c: note: in included file (through include/linux/notifier.h, include/linux/memory_hotplug.h, include/linux/mmzone.h, include/linux/gfp.h, include/linux/xarray.h, include/linux/radix-tree.h, ...):
./include/linux/srcu.h:389:9: warning: context imbalance in 'hci_dev_put_srcu' - unexpected unlock
In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
net/bluetooth/hci_sock.c: In function ‘hci_sock_bind’:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1262:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1262:7: error: too few arguments to function ‘sk_capable’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1430:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1430:7: error: too few arguments to function ‘sk_capable’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
make[4]: *** [scripts/Makefile.build:287: net/bluetooth/hci_sock.o] Error 1
make[4]: *** Waiting for unfinished jobs....
net/bluetooth/hci_event.c: note: in included file (through include/net/bluetooth/hci_core.h):
./include/net/bluetooth/hci.h:2922:47: warning: array of flexible structures
./include/net/bluetooth/hci.h:3008:43: warning: array of flexible structures
drivers/bluetooth/hci_ag6xx.c:257:24: warning: restricted __le32 degrades to integer
make[3]: *** [scripts/Makefile.build:556: net/bluetooth] Error 2
make[2]: *** [scripts/Makefile.build:556: net] Error 2
make[2]: *** Waiting for unfinished jobs....
drivers/bluetooth/hci_mrvl.c:170:23: warning: restricted __le16 degrades to integer
drivers/bluetooth/hci_mrvl.c:203:23: warning: restricted __le16 degrades to integer
drivers/bluetooth/hci_nokia.c:279:23: warning: incorrect type in assignment (different base types)
drivers/bluetooth/hci_nokia.c:279:23:    expected unsigned short [usertype] baud
drivers/bluetooth/hci_nokia.c:279:23:    got restricted __le16 [usertype]
drivers/bluetooth/hci_nokia.c:282:26: warning: incorrect type in assignment (different base types)
drivers/bluetooth/hci_nokia.c:282:26:    expected unsigned short [usertype] sys_clk
drivers/bluetooth/hci_nokia.c:282:26:    got restricted __le16 [usertype]
make[1]: *** [/github/workspace/src/src/Makefile:2010: .] Error 2
make: *** [Makefile:248: __sub-make] Error 2

github-actions · 2026-01-09T03:21:58Z

BuildKernel32
Desc: Build 32bit Kernel for Bluetooth
Duration: 19.71 seconds
Result: FAIL
Output:


In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
net/bluetooth/hci_sock.c: In function ‘hci_sock_bind’:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1262:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1262:7: error: too few arguments to function ‘sk_capable’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1430:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1430:7: error: too few arguments to function ‘sk_capable’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
make[4]: *** [scripts/Makefile.build:287: net/bluetooth/hci_sock.o] Error 1
make[4]: *** Waiting for unfinished jobs....
make[3]: *** [scripts/Makefile.build:556: net/bluetooth] Error 2
make[2]: *** [scripts/Makefile.build:556: net] Error 2
make[2]: *** Waiting for unfinished jobs....
make[1]: *** [/github/workspace/src/src/Makefile:2010: .] Error 2
make: *** [Makefile:248: __sub-make] Error 2

github-actions · 2026-01-09T03:30:44Z

TestRunnerSetup
Desc: Setup kernel and bluez for test-runner
Duration: 525.21 seconds
Result: FAIL
Output:

Kernel: 
In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
net/bluetooth/hci_sock.c: In function ‘hci_sock_bind’:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1262:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1262:7: error: too few arguments to function ‘sk_capable’
 1262 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
In file included from ./include/linux/capability.h:16,
                 from ./include/linux/fs.h:25,
                 from ./include/linux/compat.h:17,
                 from net/bluetooth/hci_sock.c:26:
./include/uapi/linux/capability.h:205:30: warning: passing argument 1 of ‘sk_capable’ makes pointer from integer without a cast [-Wint-conversion]
  205 | #define CAP_NET_ADMIN        12
      |                              ^~
      |                              |
      |                              int
net/bluetooth/hci_sock.c:1430:18: note: in expansion of macro ‘CAP_NET_ADMIN’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |                  ^~~~~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:36: note: expected ‘const struct sock *’ but argument is of type ‘int’
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |                 ~~~~~~~~~~~~~~~~~~~^~
net/bluetooth/hci_sock.c:1430:7: error: too few arguments to function ‘sk_capable’
 1430 |   if (sk_capable(CAP_NET_ADMIN))
      |       ^~~~~~~~~~
In file included from ./include/net/bluetooth/bluetooth.h:30,
                 from net/bluetooth/hci_sock.c:32:
./include/net/sock.h:3019:6: note: declared here
 3019 | bool sk_capable(const struct sock *sk, int cap);
      |      ^~~~~~~~~~
make[4]: *** [scripts/Makefile.build:287: net/bluetooth/hci_sock.o] Error 1
make[3]: *** [scripts/Makefile.build:556: net/bluetooth] Error 2
make[3]: *** Waiting for unfinished jobs....
make[2]: *** [scripts/Makefile.build:556: net] Error 2
make[2]: *** Waiting for unfinished jobs....
make[1]: *** [/github/workspace/src/src/Makefile:2010: .] Error 2
make: *** [Makefile:248: __sub-make] Error 2

github-actions · 2026-01-09T03:30:45Z

TestRunner_l2cap-tester
Desc: Run l2cap-tester with test-runner
Duration: 0.11 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:46Z

TestRunner_iso-tester
Desc: Run iso-tester with test-runner
Duration: 0.10 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:47Z

TestRunner_bnep-tester
Desc: Run bnep-tester with test-runner
Duration: 0.10 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:48Z

TestRunner_mgmt-tester
Desc: Run mgmt-tester with test-runner
Duration: 0.11 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:49Z

TestRunner_rfcomm-tester
Desc: Run rfcomm-tester with test-runner
Duration: 0.11 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:50Z

TestRunner_sco-tester
Desc: Run sco-tester with test-runner
Duration: 0.10 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:51Z

TestRunner_ioctl-tester
Desc: Run ioctl-tester with test-runner
Duration: 0.10 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:52Z

TestRunner_mesh-tester
Desc: Run mesh-tester with test-runner
Duration: 0.10 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:52Z

TestRunner_smp-tester
Desc: Run smp-tester with test-runner
Duration: 0.10 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:53Z

TestRunner_userchan-tester
Desc: Run userchan-tester with test-runner
Duration: 0.10 seconds
Result: FAIL
Output:


Could not access KVM kernel module: No such file or directory
qemu-system-x86_64: failed to initialize KVM: No such file or directory
qemu-system-x86_64: Back to tcg accelerator
qemu: could not open kernel file '/github/workspace/src/src/arch/x86/boot/bzImage': No such file or directory

github-actions · 2026-01-09T03:30:54Z

IncrementalBuild
Desc: Incremental build with the patches in the series
Duration: 0.47 seconds
Result: PENDING

tedd-an and others added 2 commits January 7, 2026 21:29

github-actions bot force-pushed the workflow branch 3 times, most recently from e7984f7 to e352d45 Compare January 15, 2026 16:43

[PW_SID:1040193] Bluetooth: Perform careful capability checks in hci_sock_bind() #3258

Are you sure you want to change the base?

[PW_SID:1040193] Bluetooth: Perform careful capability checks in hci_sock_bind() #3258

Uh oh!

Conversation

BluezTestBot commented Jan 9, 2026

Fixes: f4cdbb3 ("Bluetooth: Handle HCI raw socket transition from unbound to bound") Signed-off-by: Jerry Wu w.7erry@foxmail.com

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

github-actions bot commented Jan 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Fixes: `f4cdbb3` ("Bluetooth: Handle HCI raw socket transition from unbound to bound")
Signed-off-by: Jerry Wu w.7erry@foxmail.com