syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (46):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 2 5d20h 9d07h
INFO: rcu detected stall in vhci_release mm bluetooth syz done 4 9d11h 12d
KASAN: slab-use-after-free Write in mgmt_device_connected bluetooth 1 35d 13d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 1 21d 13d
KASAN: slab-use-after-free Read in sco_chan_del (2) bluetooth 1 22d 17d
BUG: corrupted list in mgmt_pending_remove bluetooth 10 6d05h 39d
KASAN: slab-use-after-free Read in l2cap_conn_unreliable bluetooth 1 71d 48d
KASAN: slab-use-after-free Read in hci_cmd_work bluetooth 1 86d 48d
WARNING in hci_conn_del (2) bluetooth 17 57d 53d
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth 32 8h16m 78d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb bluetooth 1 81d 78d
WARNING in l2cap_send_cmd bluetooth 1 79d 78d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth 18 5d10h 78d
KMSAN: uninit-value in hci_rx_work bluetooth C 19 3d07h 78d PATCH [1d15h]
WARNING in hci_send_acl (3) bluetooth 1 85d 81d
KASAN: slab-use-after-free Read in set_powered_sync bluetooth C done 87 1d20h 87d 💬 6 [5d20h]
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM] bluetooth C 28 66d 93d 💬 1 [91d]
possible deadlock in sco_connect_cfm bluetooth 8 46d 93d
KASAN: slab-use-after-free Read in sk_skb_reason_drop bluetooth syz error error 412 56d 108d 💬 2 [91d]
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 4 34d 113d
possible deadlock in mgmt_set_connectable_complete bluetooth 5 2d00h 144d
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 45 1d08h 146d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive 52 5d06h 150d 💬 2 [26d]
WARNING in sco_chan_del bluetooth 7 27d 152d
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 4 3h06m 160d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive 127 1d10h 166d 💬 2 [39d]
WARNING in hci_recv_frame bluetooth 7 7d22h 167d
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 17 17d 167d
KASAN: slab-use-after-free Read in skb_release_head_state bluetooth syz error 135 29d 171d 💬 1 [26d]
WARNING in l2cap_chan_send bluetooth 36 7d14h 179d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 57d 186d 💬 2 [91d]
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth C done 150 9h20m 186d 💬 2 [26d]
WARNING in l2cap_chan_del bluetooth 22 11d 207d
KASAN: slab-use-after-free Read in hci_cmd_timeout bluetooth 28 61d 208d
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 28 12d 227d
WARNING in hci_send_cmd bluetooth 7 27d 241d
WARNING in l2cap_do_send (2) bluetooth syz 1 275d 288d 💬 2 [287d]
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth C done 273 7d21h 329d PATCH [2d20h]
general protection fault in lock_sock_nested bluetooth C done done 336 4h40m 395d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 9 25d 470d 💬 1 [304d]
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 83 2d06h 499d 💬 2 [58d]
possible deadlock in rfcomm_dlc_exists bluetooth C error 13618 8h46m 629d PATCH [156d]
WARNING in call_timer_fn bluetooth syz unreliable 4199 now 694d 💬 8 [26d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 6 17d 972d
general protection fault in skb_release_data (2) net bluetooth C done error 683 80d 1492d
WARNING: ODEBUG bug in put_device bluetooth syz done error 46 4d20h 1525d
moderation (5):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hci_req_cmd_complete bluetooth 1 4d07h 7h22m
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 2 6h33m 4d23h
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete bluetooth 1 15d 11d
KASAN: slab-use-after-free Read in bt_accept_dequeue bluetooth 2 33d 86d
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 3 12d 108d