general protection fault in bcsp_recv
bluetooth
|
syz |
error |
|
3 |
1d22h |
2d14h
|
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
8 |
12h04m |
8d15h
|
💬 1 [6d07h] |
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
6d21h |
10d
|
💬 1 [9d19h] |
general protection fault in qca_close
bluetooth
|
C |
done |
|
58 |
1d12h |
11d
|
PATCH [11d] |
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
|
|
|
7 |
16d |
20d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
|
|
|
|
3 |
5d05h |
21d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
|
|
|
8 |
3d12h |
30d
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
|
|
|
11 |
26d |
31d
|
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
11 |
2h04m |
38d
|
|
general protection fault in hci_abort_conn
bluetooth
|
|
|
|
1 |
61d |
38d
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
2 |
35d |
44d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
|
|
|
1 |
50d |
46d
|
|
WARNING in hci_conn_drop
bluetooth
|
|
|
|
1 |
52d |
48d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
C |
|
|
32 |
3d12h |
51d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
11 |
2d21h |
53d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
218 |
2h01m |
55d
|
💬 1 [18h49m] |
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
|
|
|
1 |
61d |
56d
|
|
WARNING in sco_conn_put
bluetooth
|
|
|
|
1 |
62d |
58d
|
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
2 |
45d |
61d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
syz |
inconclusive |
|
32 |
3d20h |
62d
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
245 |
4h06m |
62d
|
|
general protection fault in l2cap_conn_del
bluetooth
|
|
|
|
2 |
52d |
68d
|
|
BUG: unable to handle kernel paging request in hci_release_dev
bluetooth
|
|
|
|
1 |
76d |
72d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
|
|
|
60 |
8h19m |
77d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
C |
done |
done |
1 |
83d |
82d
|
💬 1 [52d] |
KASAN: slab-use-after-free Read in lookup_object_or_alloc (2)
bluetooth
|
syz |
error |
|
8 |
1d15h |
83d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
|
|
|
2 |
16d |
87d
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
|
|
|
3 |
15d |
93d
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
|
|
|
2 |
53d |
96d
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
4 |
2d18h |
101d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
5 |
8d17h |
102d
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
27687 |
41m |
108d
|
💬 1 [18h49m] |
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
6 |
39d |
119d
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
19 |
13h50m |
119d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
29 |
1d02h |
119d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
|
|
|
17 |
45d |
119d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
29 |
2d00h |
139d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
|
|
|
3 |
77d |
143d
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
C |
error |
|
33 |
4d01h |
169d
|
💬 1 [81d] |
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
184 |
13h26m |
208d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
|
|
|
17 |
12d |
224d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
29 |
6d08h |
243d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
syz |
|
|
44 |
83d |
275d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2)
bluetooth
|
C |
done |
|
95 |
6h32m |
276d
|
PATCH [5d15h] |
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
|
115 |
11d |
280d
|
💬 2 [31d] |
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
|
39 |
2d01h |
291d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
137 |
13d |
296d
|
💬 2 [18h49m] |
WARNING in hci_recv_frame
bluetooth
|
syz |
error |
|
40 |
20h41m |
297d
|
💬 1 [89d] |
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
23 |
19d |
298d
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
41 |
1d17h |
310d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
188d |
316d
|
💬 2 [222d] |
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
133 |
11h04m |
337d
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
949 |
2h28m |
525d
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
5848 |
2h17m |
824d
|
💬 8 [18h49m] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
12 |
1d10h |
1103d
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
702 |
3d05h |
1622d
|
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
61 |
75d |
1656d
|
|