syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (53):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb bluetooth 5 16d 2h23m
KASAN: slab-use-after-free Read in sk_skb_reason_drop bluetooth syz 99 8m 2h23m
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 1 12d 5d00h
general protection fault in l2cap_publish_rx_avail bluetooth C 6 6d20h 6d21h 💬 1 [6d06h]
WARNING in l2cap_send_disconn_req bluetooth 1 11d 7d23h
KASAN: slab-use-after-free Read in __lock_sock (2) bluetooth C 3 11d 8d07h 💬 1 [7d06h]
KASAN: slab-use-after-free Read in hci_req_sync_complete bluetooth 7 11d 16d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb bluetooth 1 28d 24d
possible deadlock in mgmt_set_connectable_complete bluetooth 1 40d 36d
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 10 5d21h 38d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth 3 8d10h 42d 💬 1 [41d]
WARNING in sco_chan_del bluetooth 4 18d 44d
KFENCE: invalid free in __hci_req_sync bluetooth 25 7h33m 51d
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 1 56d 52d
possible deadlock in hci_dev_close bluetooth 2 54d 54d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth syz 3 16h17m 58d
possible deadlock in hci_unregister_dev (2) bluetooth 6 55d 59d
WARNING in hci_recv_frame bluetooth 2 6d04h 59d
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 9 6h33m 59d
KASAN: invalid-free in hci_req_sync_complete bluetooth syz 155 1d04h 63d PATCH [3h55m]
KASAN: slab-use-after-free Read in skb_release_head_state bluetooth syz 103 9h20m 63d 💬 1 [54d]
WARNING in hci_conn_set_handle bluetooth C error 7 19d 71d 💬 1 [70d]
WARNING in l2cap_chan_send bluetooth 13 2d00h 71d
KASAN: global-out-of-bounds Read in __timer_delete bluetooth 1 83d 77d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error 3131 28m 78d 💬 2 [14d]
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth C done 7 34d 78d 💬 2 [77d]
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt bluetooth C done 5 75d 80d PATCH [75d]
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt bluetooth C error 8 66d 80d PATCH [75d]
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt bluetooth C 36 69d 80d 💬 2 [79d]
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt bluetooth C unreliable 28 67d 80d PATCH [75d]
WARNING in msft_do_close bluetooth 1 87d 83d
KASAN: slab-use-after-free Read in mgmt_pending_foreach bluetooth 1 92d 88d
WARNING in l2cap_chan_del bluetooth 5 8d17h 99d
possible deadlock in touch_wq_lockdep_map bluetooth 783 3h36m 100d
KASAN: slab-use-after-free Read in hci_cmd_timeout bluetooth 17 1d13h 100d
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 8 15h08m 119d
WARNING in ida_free (2) bluetooth C 14 131d 132d 💬 2 [131d]
WARNING in hci_send_cmd bluetooth 5 1d06h 133d
WARNING in l2cap_do_send (2) bluetooth syz 1 167d 180d 💬 2 [179d]
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth C done 248 11h50m 221d PATCH [219d]
INFO: trying to register non-static key in sco_sock_timeout (2) bluetooth 5 58d 224d
general protection fault in lock_sock_nested bluetooth C done done 204 5h48m 287d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 7 7d21h 362d 💬 1 [196d]
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 69 3d14h 391d 💬 2 [45d]
possible deadlock in rfcomm_dlc_exists bluetooth C error 12954 14d 521d PATCH [48d]
WARNING in call_timer_fn bluetooth syz unreliable 3102 1h36m 586d 💬 8 [14d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 5 58d 864d
possible deadlock in rfcomm_sk_state_change bluetooth C done 21745 10d 1015d PATCH [48d]
general protection fault in skb_release_data (2) net bluetooth C done error 649 2h38m 1384d
KASAN: use-after-free Read in __queue_work (3) bluetooth syz done done 83 587d 1415d 💬 1 [1137d]
WARNING: ODEBUG bug in put_device bluetooth syz done error 44 95d 1417d
KASAN: use-after-free Read in __sco_sock_close bluetooth syz error error 1 1420d 1420d
WARNING in hci_conn_timeout bluetooth C done 5159 18h20m 1422d PATCH [312d]
moderation (9):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 1 12h41m 2h22m
KASAN: slab-use-after-free Read in l2cap_connect (2) bluetooth 2 1d00h 2h23m
general protection fault in hci_release_dev (2) bluetooth 1 11d 7d00h
BUG: corrupted list in mgmt_pending_remove bluetooth 2 11h08m 13d
KASAN: slab-use-after-free Read in skb_free_head bluetooth 1 13d 13d
KASAN: slab-use-after-free Read in hci_chan_sent bluetooth 1 19d 15d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth 2 12d 15d
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind bluetooth 1 19d 19d
WARNING: refcount bug in sco_conn_del (3) bluetooth 1 85d 81d