syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (43):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in hci_conn_failed (4) bluetooth syz 5 14d 11d
WARNING in hci_conn_drop (2) bluetooth 1 48d 44d
INFO: task hung in hci_remote_features_evt (2) bluetooth syz error 7 7d06h 46d
KASAN: slab-use-after-free Read in bt_accept_dequeue (2) bluetooth 1 60d 55d
possible deadlock in l2cap_conn_del bluetooth syz error 170 10h08m 82d
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump bluetooth C 911 2h53m 83d PATCH [8d14h]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 98d 94d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 7 3d13h 97d
WARNING in hci_send_cmd (2) bluetooth 2 55d 116d
possible deadlock in l2cap_info_timeout bluetooth 19 1d07h 116d
general protection fault in bcsp_recv bluetooth C error 404 12h37m 127d
general protection fault in h5_recv bluetooth C done 672 1h00m 133d 💬 1 [31d]
general protection fault in __timer_delete_sync bluetooth C done 3 131d 134d 💬 1 [134d]
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3) bluetooth 8 99d 145d
general protection fault in hci_devcd_register bluetooth 26 43d 163d
WARNING in hci_devcd_register bluetooth 3 90d 168d
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 17 14d 178d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth syz 351 1d23h 179d 💬 1 [31d]
WARNING: held lock freed in bt_accept_dequeue bluetooth 8 20d 186d
WARNING in hci_conn_timeout (2) bluetooth C error 507 2h26m 187d
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth C 23 12d 218d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth syz done 9 2d16h 225d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 12 32d 227d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth syz done 40104 1h06m 233d 💬 1 [31d]
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 59 1d22h 244d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 47 1d08h 244d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 42 2d13h 244d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 48 7d06h 264d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 18 2d04h 268d
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth C error 256 21h51m 333d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 47 40d 368d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive error 141 87d 405d 💬 2 [93d]
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth C unreliable done 39 35d 415d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive inconclusive 139 14d 421d 💬 2 [125d]
WARNING in hci_recv_frame bluetooth C error 72 7d13h 422d 💬 1 [34d]
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 27 51d 422d
WARNING in l2cap_chan_send bluetooth 44 6h26m 434d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 312d 441d 💬 2 [346d]
WARNING in l2cap_chan_del bluetooth 257 4h15m 462d
general protection fault in lock_sock_nested bluetooth C done done 2704 4h02m 650d
WARNING in call_timer_fn bluetooth C unreliable 6960 6h20m 949d 💬 8 [31d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 41 5h14m 1228d
general protection fault in skb_release_data (2) net bluetooth C done error 703 82d 1747d
moderation (3):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-out-of-bounds Write in enqueue_timer bluetooth 1 4d09h 9h12m
KASAN: slab-use-after-free Read in skb_dequeue bluetooth 1 19d 15d
KASAN: slab-use-after-free Read in hidp_session_thread bluetooth 3 78d 129d