|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
syz |
|
|
1 |
9d07h |
5d07h
|
|
|
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
2 |
11d |
8d00h
|
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
1 |
31d |
27d
|
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
4 |
1d05h |
27d
|
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
|
|
|
1 |
36d |
32d
|
|
|
general protection fault in h5_close
bluetooth
|
C |
done |
|
5 |
30d |
33d
|
|
|
general protection fault in bcsp_close
bluetooth
|
C |
done |
|
3 |
34d |
33d
|
|
|
general protection fault in bcsp_recv
bluetooth
|
syz |
error |
|
3 |
37d |
37d
|
|
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
10 |
27d |
44d
|
💬 1 [41d] |
|
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
42d |
45d
|
💬 1 [45d] |
|
general protection fault in qca_close
bluetooth
|
C |
done |
|
94 |
28d |
47d
|
PATCH [46d] |
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
|
|
|
8 |
10d |
56d
|
|
|
KASAN: slab-use-after-free Read in sock_def_readable
net
bluetooth
|
|
|
|
3 |
40d |
57d
|
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
|
|
|
8 |
38d |
66d
|
|
|
KASAN: slab-use-after-free Read in full_proxy_read
bluetooth
|
|
|
|
11 |
61d |
66d
|
|
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
20 |
2d15h |
74d
|
|
|
general protection fault in hci_abort_conn
bluetooth
|
|
|
|
1 |
97d |
74d
|
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
3 |
1d05h |
79d
|
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (2)
bluetooth
|
|
|
|
1 |
86d |
82d
|
|
|
WARNING in hci_conn_drop
bluetooth
|
|
|
|
1 |
88d |
84d
|
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
C |
|
|
36 |
18d |
86d
|
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
14 |
15d |
88d
|
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
322 |
14h05m |
90d
|
💬 1 [4d16h] |
|
KASAN: slab-use-after-free Read in hci_tx_work
bluetooth
|
|
|
|
1 |
97d |
92d
|
|
|
WARNING in sco_conn_put
bluetooth
|
|
|
|
2 |
33d |
93d
|
|
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
2 |
80d |
97d
|
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
323 |
7h24m |
97d
|
|
|
general protection fault in l2cap_conn_del
bluetooth
|
|
|
|
2 |
88d |
104d
|
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
|
|
|
93 |
1h49m |
113d
|
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
|
|
|
2 |
52d |
122d
|
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
15 |
6d04h |
129d
|
|
|
KASAN: slab-use-after-free Write in sk_skb_reason_drop
bluetooth
net
|
|
|
|
2 |
88d |
132d
|
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
4 |
8d01h |
136d
|
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
8 |
2d23h |
138d
|
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
33374 |
18m |
143d
|
💬 1 [4d16h] |
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
10 |
5d07h |
155d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
20 |
24d |
155d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
33 |
4d20h |
155d
|
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
|
|
|
18 |
11d |
155d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
37 |
19h15m |
175d
|
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
|
|
|
4 |
19d |
179d
|
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
C |
error |
|
36 |
3d18h |
205d
|
💬 1 [117d] |
|
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
214 |
1d03h |
244d
|
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
|
|
|
21 |
14d |
259d
|
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
42 |
8d01h |
278d
|
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
|
139 |
16h31m |
316d
|
💬 2 [4d16h] |
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
|
39 |
7d07h |
326d
|
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
137 |
34d |
332d
|
💬 2 [36d] |
|
WARNING in hci_recv_frame
bluetooth
|
syz |
error |
|
47 |
5d00h |
333d
|
💬 1 [125d] |
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
24 |
35d |
333d
|
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
42 |
3d18h |
345d
|
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
223d |
352d
|
💬 2 [257d] |
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
174 |
16h34m |
373d
|
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
1359 |
2h32m |
561d
|
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
6326 |
8h32m |
860d
|
💬 8 [4d16h] |
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
24 |
2d10h |
1138d
|
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
702 |
38d |
1658d
|
|
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
61 |
110d |
1691d
|
|