|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
|
|
|
1 |
6d00h |
1d02h
|
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
syz |
|
|
5 |
16d |
12d
|
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
|
|
|
1 |
50d |
46d
|
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
syz |
error |
|
7 |
8d21h |
48d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
61d |
57d
|
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
171 |
12h08m |
84d
|
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
913 |
1d12h |
84d
|
PATCH [10d] |
|
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
7 |
5d05h |
98d
|
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
57d |
118d
|
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
19 |
2d22h |
118d
|
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
404 |
2d03h |
128d
|
|
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
679 |
7h33m |
134d
|
💬 1 [1d02h] |
|
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
132d |
136d
|
💬 1 [135d] |
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
26 |
45d |
164d
|
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
3 |
91d |
170d
|
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
17 |
15d |
179d
|
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
351 |
3d14h |
181d
|
💬 1 [1d02h] |
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
8 |
21d |
188d
|
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
507 |
1d17h |
188d
|
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
23 |
4h53m |
219d
|
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
9 |
4d07h |
227d
|
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
12 |
34d |
228d
|
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
40203 |
27m |
234d
|
💬 1 [1d02h] |
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
60 |
now |
246d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
47 |
2d23h |
246d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
42 |
4d04h |
246d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
48 |
8d21h |
265d
|
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
|
|
|
18 |
3d19h |
269d
|
|
|
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
261 |
18h21m |
334d
|
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
47 |
42d |
369d
|
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
error |
141 |
89d |
406d
|
💬 2 [95d] |
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
done |
39 |
37d |
417d
|
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
139 |
16d |
423d
|
💬 2 [126d] |
|
WARNING in hci_recv_frame
bluetooth
|
C |
error |
|
72 |
9d04h |
423d
|
💬 1 [35d] |
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
27 |
53d |
424d
|
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
44 |
1d21h |
436d
|
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
314d |
442d
|
💬 2 [348d] |
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
259 |
2h27m |
463d
|
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2716 |
3h20m |
652d
|
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
6972 |
2h57m |
950d
|
💬 8 [1d02h] |
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
42 |
21h04m |
1229d
|
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
84d |
1749d
|
|