|
general protection fault in bcsp_recv
bluetooth
|
syz |
error |
|
2 |
3d17h |
40m
|
|
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
6 |
4d10h |
6d02h
|
💬 1 [3d17h] |
|
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
4d07h |
7d21h
|
💬 1 [7d05h] |
|
general protection fault in qca_close
bluetooth
|
C |
done |
|
54 |
3h13m |
9d04h
|
PATCH [8d14h] |
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
|
|
|
7 |
13d |
18d
|
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
|
|
|
|
3 |
2d16h |
19d
|
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
|
|
|
8 |
22h38m |
28d
|
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
|
|
|
11 |
23d |
29d
|
|
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
10 |
1d12h |
36d
|
|
|
general protection fault in hci_abort_conn
bluetooth
|
|
|
|
1 |
59d |
36d
|
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
2 |
32d |
41d
|
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
|
|
|
1 |
48d |
44d
|
|
|
WARNING in hci_conn_drop
bluetooth
|
|
|
|
1 |
50d |
46d
|
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
C |
|
|
32 |
23h01m |
48d
|
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
11 |
8h01m |
50d
|
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
196 |
11h10m |
52d
|
💬 1 [29d] |
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
|
|
|
1 |
59d |
54d
|
|
|
WARNING in sco_conn_put
bluetooth
|
|
|
|
1 |
59d |
55d
|
|
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
2 |
42d |
59d
|
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
syz |
inconclusive |
|
32 |
1d06h |
60d
|
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
235 |
12h04m |
60d
|
|
|
general protection fault in l2cap_conn_del
bluetooth
|
|
|
|
2 |
50d |
66d
|
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
|
|
|
1 |
74d |
70d
|
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
|
|
|
55 |
18h34m |
75d
|
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
C |
done |
done |
1 |
80d |
79d
|
💬 1 [50d] |
|
KASAN: slab-use-after-free Read in lookup_object_or_alloc (2)
bluetooth
|
syz |
error |
|
7 |
15h40m |
80d
|
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
|
|
|
2 |
14d |
85d
|
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
|
|
|
3 |
12d |
91d
|
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
|
|
|
2 |
51d |
94d
|
|
|
WARNING in emon
bluetooth
|
|
|
|
1 |
99d |
95d
|
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
4 |
5h12m |
98d
|
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
5 |
6d03h |
100d
|
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
27201 |
9m |
105d
|
💬 1 [29d] |
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
6 |
36d |
117d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
17 |
15h11m |
117d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
27 |
16h01m |
117d
|
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
|
|
|
17 |
43d |
117d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
28 |
1d02h |
137d
|
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
|
|
|
3 |
74d |
141d
|
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
C |
error |
|
33 |
1d11h |
167d
|
💬 1 [79d] |
|
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
180 |
1d08h |
206d
|
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
|
|
|
17 |
10d |
221d
|
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
29 |
3d18h |
241d
|
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
syz |
|
|
44 |
80d |
272d
|
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2)
bluetooth
|
C |
done |
|
85 |
3h03m |
274d
|
PATCH [3d01h] |
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
|
115 |
8d23h |
278d
|
💬 2 [29d] |
|
WARNING in sco_chan_del
bluetooth
|
|
|
|
10 |
98d |
280d
|
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
|
39 |
29d |
288d
|
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
137 |
11d |
294d
|
💬 2 [123d] |
|
WARNING in hci_recv_frame
bluetooth
|
syz |
error |
|
39 |
7d07h |
295d
|
💬 1 [87d] |
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
23 |
16d |
295d
|
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
40 |
6d02h |
307d
|
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
185d |
314d
|
💬 2 [219d] |
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
130 |
6h33m |
335d
|
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
919 |
7m |
523d
|
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
5810 |
4h02m |
822d
|
💬 8 [29d] |
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
11 |
2d19h |
1100d
|
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
702 |
16h01m |
1620d
|
|
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
61 |
73d |
1653d
|
|