|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
81 |
9h12m |
4d08h
|
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
212 |
5h38m |
4d13h
|
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
syz |
|
|
1 |
19d |
15d
|
|
|
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
2 |
22d |
18d
|
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
1 |
41d |
37d
|
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
5 |
5d07h |
38d
|
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
|
|
|
1 |
46d |
42d
|
|
|
general protection fault in h5_close
bluetooth
|
C |
done |
|
5 |
40d |
43d
|
|
|
general protection fault in bcsp_close
bluetooth
|
C |
done |
|
3 |
45d |
43d
|
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
57 |
12h47m |
48d
|
|
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
97 |
11m |
54d
|
💬 1 [52d] |
|
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
52d |
56d
|
💬 1 [55d] |
|
general protection fault in qca_close
bluetooth
|
C |
done |
|
94 |
38d |
57d
|
PATCH [56d] |
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
|
|
|
8 |
21d |
66d
|
|
|
KASAN: slab-use-after-free Read in sock_def_readable
net
bluetooth
|
|
|
|
3 |
51d |
67d
|
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
|
|
|
8 |
49d |
76d
|
|
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
20 |
13d |
84d
|
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
3 |
11d |
89d
|
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
|
|
|
1 |
96d |
92d
|
|
|
WARNING in hci_conn_drop
bluetooth
|
|
|
|
1 |
98d |
94d
|
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
C |
|
|
36 |
28d |
96d
|
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
14 |
25d |
99d
|
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
326 |
3d09h |
101d
|
💬 1 [15d] |
|
WARNING in sco_conn_put
bluetooth
|
|
|
|
2 |
44d |
103d
|
|
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
3 |
4d16h |
107d
|
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
350 |
49m |
108d
|
|
|
general protection fault in l2cap_conn_del
bluetooth
|
|
|
|
2 |
98d |
114d
|
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
|
|
|
95 |
10d |
123d
|
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
|
|
|
2 |
62d |
133d
|
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
17 |
2d11h |
139d
|
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
|
|
|
2 |
99d |
142d
|
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
4 |
18d |
146d
|
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
9 |
9d20h |
148d
|
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
34480 |
1h03m |
154d
|
💬 1 [15d] |
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
17 |
3h05m |
165d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
21 |
1d19h |
165d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
33 |
15d |
165d
|
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
|
|
|
18 |
22d |
165d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
37 |
11d |
185d
|
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
|
|
|
5 |
6d06h |
189d
|
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
C |
error |
|
37 |
7d16h |
215d
|
💬 1 [127d] |
|
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
224 |
6h18m |
254d
|
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
|
|
|
21 |
24d |
270d
|
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
42 |
18d |
289d
|
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
|
141 |
9d05h |
326d
|
💬 2 [15d] |
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
|
39 |
17d |
337d
|
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
137 |
45d |
342d
|
💬 2 [46d] |
|
WARNING in hci_recv_frame
bluetooth
|
syz |
error |
|
50 |
1d07h |
343d
|
💬 1 [135d] |
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
25 |
6d14h |
343d
|
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
42 |
14d |
356d
|
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
234d |
362d
|
💬 2 [267d] |
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
184 |
17h20m |
383d
|
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
1563 |
38m |
571d
|
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
6408 |
53m |
870d
|
💬 8 [15d] |
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
27 |
1d06h |
1149d
|
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
3d22h |
1668d
|
|
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
61 |
121d |
1701d
|
|