|
possible deadlock in l2cap_chan_connect
prio:high
bluetooth
|
4 |
syz, C |
|
|
4304 |
7d06h |
48d
|
|
INFO: task hung in hci_remote_features_evt (2)
prio:high
bluetooth
|
1 |
syz |
error |
inconclusive |
9 |
379d |
524d
|
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
92 |
121d |
1705d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
prio:high
bluetooth
|
19 |
syz |
error |
|
203 |
106d |
721d
|
|
WARNING in hci_recv_frame
prio:low
bluetooth
|
-1 |
syz, C |
error |
error |
266 |
105d |
899d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
19 |
syz, C |
|
|
448 |
403d |
657d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
4 |
syz |
error |
error |
569 |
201d |
560d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (3)
bluetooth
prio:high
|
22 |
syz, C |
error |
|
1023 |
193d |
313d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
19 |
syz, C |
error |
error |
3383 |
790d |
918d
|
|
general protection fault in skb_release_data (2)
bluetooth
net
|
22 |
syz, C |
done |
error |
703 |
560d |
2224d
|
|
general protection fault in h5_recv
bluetooth
|
10 |
syz, C |
done |
|
3515 |
247d |
610d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
1 |
syz |
|
|
17 |
311d |
488d
|
|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
syz, C |
|
|
1 |
324d |
329d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
353d |
745d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
syz, C |
inconclusive |
error |
153 |
404d |
882d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
syz, C |
done |
|
3 |
608d |
612d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
syz, C |
unreliable |
done |
39 |
513d |
893d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
575d |
571d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
syz, C |
done |
|
94 |
594d |
613d
|
|
general protection fault in h5_close
bluetooth
|
2 |
syz, C |
done |
|
5 |
596d |
599d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
syz, C |
|
|
36 |
584d |
653d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
syz, C |
done |
|
3 |
601d |
599d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
585d |
664d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
syz, C |
done |
done |
1 |
685d |
684d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
685d |
877d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
syz, C |
done |
|
87 |
715d |
1232d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
1007d |
1021d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
syz, C |
error |
done |
13649 |
728d |
1361d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
762d |
904d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
788d |
840d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
syz, C |
|
|
28 |
799d |
826d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
syz, C |
|
|
5 |
834d |
848d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
syz, C |
|
|
6 |
847d |
847d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
syz, C |
error |
done |
7 |
860d |
912d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1427d |
2256d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2261d |
2260d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
syz, C |
error |
error |
8 |
907d |
921d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
syz, C |
done |
unreliable |
5 |
916d |
921d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
syz, C |
|
|
14 |
972d |
972d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
syz, C |
unreliable |
|
28 |
907d |
921d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
syz, C |
|
|
36 |
910d |
921d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
syz, C |
done |
|
7 |
944d |
1075d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
syz, C |
done |
|
1 |
945d |
989d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
syz, C |
done |
|
10 |
894d |
899d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
syz, C |
done |
done |
3400 |
953d |
1197d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
syz, C |
|
|
22 |
954d |
1015d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
syz, C |
done |
|
18 |
981d |
979d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
syz, C |
done |
done |
1323 |
975d |
1148d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
syz, C |
done |
done |
63 |
992d |
1137d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
syz, C |
|
|
1 |
1055d |
1055d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
syz, C |
done |
error |
1067 |
1070d |
1884d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
syz, C |
|
|
65 |
1078d |
1136d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
syz, C |
error |
done |
4 |
1140d |
1518d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1847d |
2260d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
syz, C |
|
|
72 |
1247d |
1272d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
syz, C |
done |
unreliable |
50 |
2135d |
2262d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
syz, C |
done |
inconclusive |
131 |
1353d |
2464d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
syz, C |
error |
done |
4 |
1493d |
1489d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
syz, C |
done |
done |
166 |
1527d |
1613d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
syz, C |
unreliable |
inconclusive |
34 |
1473d |
2127d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
syz, C |
error |
|
12 |
1447d |
1477d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1873d |
2639d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
syz, C |
done |
inconclusive |
26 |
1898d |
2260d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
syz, C |
done |
done |
87 |
1983d |
2262d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
syz, C |
done |
error |
13 |
1448d |
1480d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
syz, C |
done |
inconclusive |
37 |
1558d |
1594d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
syz, C |
done |
done |
611 |
1578d |
2265d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
syz, C |
|
|
5 |
1446d |
1463d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
syz, C |
|
|
14 |
1446d |
1458d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
syz, C |
|
|
1 |
1468d |
1468d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
syz, C |
inconclusive |
inconclusive |
13 |
1553d |
1773d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
3 |
1476d |
2012d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
syz, C |
inconclusive |
done |
3 |
1884d |
1881d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
syz, C |
|
|
1 |
1492d |
1488d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
syz, C |
done |
unreliable |
26 |
2142d |
2416d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2258d |
2258d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2257d |
2257d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1979d |
2260d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
syz, C |
|
|
10 |
2115d |
2262d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1615d |
2258d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
syz, C |
|
|
2 |
2016d |
2224d
|
|
general protection fault in klist_next
bluetooth
|
17 |
syz, C |
error |
|
33 |
1469d |
1523d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
syz, C |
inconclusive |
done |
9 |
1828d |
1913d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1813d |
2253d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
syz, C |
done |
|
2256 |
2127d |
2429d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1685d |
1751d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1744d |
1810d
|
|
general protection fault in skb_put
bluetooth
|
2 |
syz, C |
done |
error |
43 |
2226d |
2807d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2258d |
2258d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1821d |
1817d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
syz, C |
done |
inconclusive |
21 |
2308d |
2835d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
syz, C |
|
|
10 |
1932d |
2023d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2291d |
2600d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
syz, C |
|
|
3 |
2249d |
2249d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1979d |
2258d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
syz, C |
done |
done |
8 |
2370d |
2911d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2416d |
2416d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
syz, C |
|
|
8 |
1615d |
1612d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2250d |
2250d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
syz, C |
|
|
2 |
2738d |
2738d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
syz, C |
|
|
11 |
2563d |
2621d
|