syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (43):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
INFO: task hung in hci_conn_failed (4) bluetooth syz 5 14d 10d
WARNING in hci_conn_drop (2) bluetooth 1 48d 44d
INFO: task hung in hci_remote_features_evt (2) bluetooth syz error 7 6d21h 46d
KASAN: slab-use-after-free Read in bt_accept_dequeue (2) bluetooth 1 59d 55d
possible deadlock in l2cap_conn_del bluetooth syz error 170 49m 82d
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump bluetooth C 892 1d12h 82d PATCH [8d05h]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 98d 94d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 7 3d04h 96d
WARNING in hci_send_cmd (2) bluetooth 2 55d 116d
possible deadlock in l2cap_info_timeout bluetooth 19 21h58m 116d
general protection fault in bcsp_recv bluetooth C error 404 3h18m 126d
general protection fault in h5_recv bluetooth C done 668 1h09m 132d 💬 1 [30d]
general protection fault in __timer_delete_sync bluetooth C done 3 130d 134d 💬 1 [133d]
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3) bluetooth 8 99d 145d
general protection fault in hci_devcd_register bluetooth 26 43d 162d
WARNING in hci_devcd_register bluetooth 3 89d 168d
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 17 13d 177d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth syz 351 1d14h 179d 💬 1 [30d]
WARNING: held lock freed in bt_accept_dequeue bluetooth 8 19d 186d
WARNING in hci_conn_timeout (2) bluetooth C error 506 58m 186d
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth C 23 12d 217d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth syz done 9 2d07h 225d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 12 32d 226d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth syz done 40086 26m 232d 💬 1 [30d]
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 59 1d12h 244d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 47 23h04m 244d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 42 2d04h 244d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 48 6d21h 263d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 18 1d18h 267d
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth C error 256 12h32m 332d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 47 40d 367d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive error 141 87d 404d 💬 2 [93d]
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth C unreliable done 39 35d 415d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive inconclusive 139 14d 421d 💬 2 [124d]
WARNING in hci_recv_frame bluetooth C error 72 7d03h 421d 💬 1 [33d]
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 27 51d 422d
WARNING in l2cap_chan_send bluetooth 43 62d 434d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 312d 440d 💬 2 [346d]
WARNING in l2cap_chan_del bluetooth 256 1h25m 461d
general protection fault in lock_sock_nested bluetooth C done done 2701 6h43m 650d
WARNING in call_timer_fn bluetooth C unreliable 6958 6h58m 948d 💬 8 [30d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 40 5d16h 1227d
general protection fault in skb_release_data (2) net bluetooth C done error 703 82d 1746d
moderation (2):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in skb_dequeue bluetooth 1 19d 15d
KASAN: slab-use-after-free Read in hidp_session_thread bluetooth 3 78d 128d