|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
92 |
100d |
1684d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
prio:high
bluetooth
|
19 |
syz |
error |
|
203 |
85d |
700d
|
|
WARNING in hci_recv_frame
prio:low
bluetooth
|
-1 |
syz, C |
error |
error |
266 |
84d |
878d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
19 |
syz, C |
|
|
448 |
382d |
636d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
4 |
syz |
error |
error |
569 |
180d |
539d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (3)
bluetooth
prio:high
|
22 |
syz, C |
error |
|
1023 |
172d |
292d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
19 |
syz, C |
error |
error |
3383 |
769d |
897d
|
|
general protection fault in skb_release_data (2)
bluetooth
net
|
22 |
syz, C |
done |
error |
703 |
539d |
2203d
|
|
general protection fault in h5_recv
bluetooth
|
10 |
syz, C |
done |
|
3515 |
226d |
589d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
1 |
syz |
|
|
17 |
290d |
467d
|
|
memory leak in __hci_cmd_sync_sk
bluetooth
usb
|
3 |
syz, C |
|
|
1 |
303d |
308d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
error |
46 |
332d |
724d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
syz, C |
inconclusive |
error |
153 |
383d |
861d
|
|
general protection fault in __timer_delete_sync
bluetooth
|
2 |
syz, C |
done |
|
3 |
587d |
591d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
syz, C |
unreliable |
done |
39 |
492d |
872d
|
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
1 |
syz |
|
|
1 |
554d |
550d
|
|
general protection fault in qca_close
arm-msm
bluetooth
|
2 |
syz, C |
done |
|
94 |
573d |
592d
|
|
general protection fault in h5_close
bluetooth
|
2 |
syz, C |
done |
|
5 |
575d |
578d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
19 |
syz, C |
|
|
36 |
563d |
632d
|
|
general protection fault in bcsp_close
bluetooth
|
2 |
syz, C |
done |
|
3 |
580d |
578d
|
|
KASAN: slab-use-after-free Read in l2cap_connect_cfm
bluetooth
|
19 |
syz |
inconclusive |
|
36 |
564d |
643d
|
|
KASAN: slab-use-after-free Read in __timer_delete
bluetooth
|
19 |
syz, C |
done |
done |
1 |
664d |
663d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
4 |
syz |
|
|
44 |
664d |
856d
|
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
22 |
syz, C |
done |
|
87 |
694d |
1210d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
-1 |
syz |
|
|
1 |
986d |
1000d
|
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
4 |
syz, C |
error |
done |
13649 |
706d |
1340d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
19 |
syz |
error |
error |
135 |
741d |
882d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
19 |
syz |
error |
error |
412 |
767d |
819d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
-1 |
syz, C |
|
|
28 |
778d |
805d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
19 |
syz, C |
|
|
5 |
813d |
827d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
2 |
syz, C |
|
|
6 |
826d |
826d
|
|
WARNING in hci_conn_set_handle
bluetooth
|
-1 |
syz, C |
error |
done |
7 |
839d |
890d
|
|
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
19 |
syz |
done |
done |
83 |
1406d |
2235d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
19 |
syz |
error |
error |
1 |
2240d |
2239d
|
|
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
17 |
syz, C |
error |
error |
8 |
886d |
899d
|
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
17 |
syz, C |
done |
unreliable |
5 |
895d |
899d
|
|
WARNING in ida_free (2)
bluetooth
|
-1 |
syz, C |
|
|
14 |
951d |
951d
|
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
17 |
syz, C |
unreliable |
|
28 |
886d |
899d
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
17 |
syz, C |
|
|
36 |
889d |
899d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
22 |
syz, C |
done |
|
7 |
923d |
1054d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
1 |
syz, C |
done |
|
1 |
924d |
968d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
4 |
syz, C |
done |
|
10 |
873d |
878d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
19 |
syz, C |
done |
done |
3400 |
932d |
1175d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
7 |
syz, C |
|
|
22 |
933d |
994d
|
|
INFO: task hung in hci_release_dev
bluetooth
|
1 |
syz, C |
done |
|
18 |
960d |
958d
|
|
KASAN: slab-use-after-free Read in hci_send_acl
bluetooth
|
19 |
syz, C |
done |
done |
1323 |
954d |
1127d
|
|
KASAN: slab-use-after-free Write in __sco_sock_close
bluetooth
|
22 |
syz, C |
done |
done |
63 |
970d |
1116d
|
|
KASAN: slab-use-after-free Read in __lock_sock
bluetooth
|
19 |
syz, C |
|
|
1 |
1034d |
1034d
|
|
INFO: task can't die in __lock_sock
bluetooth
|
1 |
syz, C |
done |
error |
1067 |
1049d |
1863d
|
|
memory leak in hci_conn_add (2)
bluetooth
|
3 |
syz, C |
|
|
65 |
1056d |
1114d
|
|
general protection fault in hci_uart_tty_ioctl
bluetooth
|
2 |
syz, C |
error |
done |
4 |
1119d |
1497d
|
|
KASAN: use-after-free Write in hci_conn_del
bluetooth
|
22 |
syz |
done |
inconclusive |
3 |
1826d |
2239d
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
bluetooth
|
4 |
syz, C |
|
|
72 |
1225d |
1251d
|
|
general protection fault in hci_phy_link_complete_evt
bluetooth
|
2 |
syz, C |
done |
unreliable |
50 |
2114d |
2241d
|
|
WARNING: locking bug in finish_task_switch
bluetooth
net
|
4 |
syz, C |
done |
inconclusive |
131 |
1332d |
2443d
|
|
BUG: corrupted list in kobject_add_internal (4)
bluetooth
|
8 |
syz, C |
error |
done |
4 |
1472d |
1468d
|
|
INFO: task hung in hci_dev_do_open (2)
bluetooth
|
1 |
syz, C |
done |
done |
166 |
1506d |
1591d
|
|
BUG: corrupted list in klist_release
bluetooth
|
19 |
syz, C |
unreliable |
inconclusive |
34 |
1452d |
2106d
|
|
KASAN: use-after-free Read in l2cap_conn_del
bluetooth
|
19 |
syz, C |
error |
|
12 |
1426d |
1456d
|
|
KASAN: use-after-free Read in h5_rx_3wire_hdr
bluetooth
|
19 |
syz |
error |
|
3 |
1852d |
2618d
|
|
WARNING: refcount bug in l2cap_global_chan_by_psm
bluetooth
|
13 |
syz, C |
done |
inconclusive |
26 |
1876d |
2238d
|
|
KASAN: use-after-free Read in hci_chan_del
bluetooth
|
19 |
syz, C |
done |
done |
87 |
1962d |
2241d
|
|
WARNING: held lock freed in l2cap_conn_del
bluetooth
|
4 |
syz, C |
done |
error |
13 |
1427d |
1459d
|
|
INFO: task hung in hci_power_on
bluetooth
|
1 |
syz, C |
done |
inconclusive |
37 |
1537d |
1572d
|
|
WARNING in cancel_delayed_work
bluetooth
|
-1 |
syz, C |
done |
done |
611 |
1557d |
2244d
|
|
BUG: unable to handle kernel NULL pointer dereference in device_find_child
bluetooth
|
10 |
syz, C |
|
|
5 |
1425d |
1442d
|
|
BUG: corrupted list in hci_conn_del_sysfs
bluetooth
|
8 |
syz, C |
|
|
14 |
1425d |
1437d
|
|
BUG: unable to handle kernel NULL pointer dereference in klist_next
bluetooth
|
10 |
syz, C |
|
|
1 |
1447d |
1447d
|
|
WARNING: ODEBUG bug in cancel_delayed_work (2)
bluetooth
|
-1 |
syz, C |
inconclusive |
inconclusive |
13 |
1532d |
1752d
|
|
BUG: corrupted list in klist_dec_and_del
bluetooth
|
19 |
syz, C |
inconclusive |
inconclusive |
3 |
1454d |
1991d
|
|
KASAN: use-after-free Read in h4_recv_buf
bluetooth
|
19 |
syz, C |
inconclusive |
done |
3 |
1863d |
1859d
|
|
BUG: corrupted list in kobj_kset_join
bluetooth
|
8 |
syz, C |
|
|
1 |
1471d |
1467d
|
|
KASAN: use-after-free Write in hci_sock_bind (2)
bluetooth
|
22 |
syz, C |
done |
unreliable |
26 |
2120d |
2395d
|
|
INFO: trying to register non-static key in l2cap_chan_close
bluetooth
|
-1 |
syz |
done |
|
1 |
2237d |
2236d
|
|
KASAN: use-after-free Read in hci_get_auth_info
bluetooth
|
19 |
syz |
error |
error |
1 |
2236d |
2235d
|
|
WARNING: locking bug in hci_dev_reset
bluetooth
|
4 |
syz |
done |
inconclusive |
1 |
1957d |
2238d
|
|
KMSAN: uninit-value in process_adv_report
bluetooth
|
7 |
syz, C |
|
|
10 |
2094d |
2241d
|
|
WARNING: refcount bug in bt_accept_dequeue
bluetooth
|
13 |
syz |
error |
error |
2 |
1594d |
2237d
|
|
memory leak in mgmt_cmd_status
bluetooth
|
3 |
syz, C |
|
|
2 |
1995d |
2203d
|
|
general protection fault in klist_next
bluetooth
|
17 |
syz, C |
error |
|
33 |
1448d |
1502d
|
|
general protection fault in skb_dequeue (2)
bluetooth
|
19 |
syz, C |
inconclusive |
done |
9 |
1807d |
1892d
|
|
KASAN: slab-out-of-bounds Read in lock_sock_nested
bluetooth
|
17 |
syz |
unreliable |
done |
23 |
1792d |
2232d
|
|
general protection fault in sco_sock_getsockopt
bluetooth
|
2 |
syz, C |
done |
|
2256 |
2106d |
2407d
|
|
KMSAN: uninit-value in vsscanf
bluetooth
|
7 |
syz |
|
|
9 |
1664d |
1730d
|
|
KMSAN: uninit-value in hci_conn_request_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1723d |
1788d
|
|
general protection fault in skb_put
bluetooth
|
2 |
syz, C |
done |
error |
43 |
2205d |
2786d
|
|
memory leak in hci_conn_add
bluetooth
|
3 |
syz |
|
|
1 |
2237d |
2236d
|
|
KMSAN: uninit-value in hci_phy_link_complete_evt
bluetooth
|
7 |
syz, C |
|
|
3 |
1800d |
1796d
|
|
KASAN: slab-out-of-bounds Read in bacpy
bluetooth
|
17 |
syz, C |
done |
inconclusive |
21 |
2287d |
2814d
|
|
KMSAN: uninit-value in hci_event_packet (3)
bluetooth
|
7 |
syz, C |
|
|
10 |
1911d |
2002d
|
|
memory leak in hci_inquiry_cache_update
bluetooth
|
3 |
syz |
|
|
5 |
2270d |
2579d
|
|
KMSAN: uninit-value in hci_chan_lookup_handle
bluetooth
|
7 |
syz, C |
|
|
3 |
2228d |
2228d
|
|
WARNING: locking bug in l2cap_chan_del
bluetooth
|
4 |
syz |
inconclusive |
inconclusive |
83 |
1958d |
2236d
|
|
KASAN: use-after-free Write in hci_sock_release
bluetooth
|
22 |
syz, C |
done |
done |
8 |
2349d |
2890d
|
|
KASAN: use-after-free Read in skb_release_data (2)
bluetooth
|
19 |
syz |
done |
done |
1 |
2395d |
2395d
|
|
WARNING: refcount bug in l2cap_chan_hold
bluetooth
|
13 |
syz, C |
|
|
8 |
1594d |
1591d
|
|
BUG: corrupted list in bt_accept_unlink
bluetooth
|
8 |
syz |
error |
error |
1 |
2229d |
2229d
|
|
KMSAN: uninit-value in hci_inquiry_cache_update
bluetooth
|
7 |
syz, C |
|
|
2 |
2717d |
2717d
|
|
KMSAN: uninit-value in kfree_skb
bluetooth
|
7 |
syz, C |
|
|
11 |
2541d |
2599d
|