syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (47):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hci_req_cmd_complete bluetooth 1 7d23h 3h15m
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete bluetooth 1 18d 3h36m
possible deadlock in touch_wq_lockdep_map (2) bluetooth 4 19h17m 3d00h
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 3 2d11h 12d
INFO: rcu detected stall in vhci_release mm bluetooth syz done 5 7h25m 15d
KASAN: slab-use-after-free Write in mgmt_device_connected bluetooth 1 39d 16d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 1 24d 16d
KASAN: slab-use-after-free Read in sco_chan_del (2) bluetooth 1 26d 21d
BUG: corrupted list in mgmt_pending_remove bluetooth 10 9d21h 43d
KASAN: slab-use-after-free Read in l2cap_conn_unreliable bluetooth 1 75d 51d
KASAN: slab-use-after-free Read in hci_cmd_work bluetooth 1 89d 51d
WARNING in hci_conn_del (2) bluetooth 17 61d 57d
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth 32 4d00h 81d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb bluetooth 1 84d 81d
WARNING in l2cap_send_cmd bluetooth 1 83d 81d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth 19 1h36m 82d
WARNING in hci_send_acl (3) bluetooth 1 89d 85d
KASAN: slab-use-after-free Read in set_powered_sync bluetooth C done 90 1h29m 90d 💬 6 [9d12h]
possible deadlock in sco_connect_cfm bluetooth 8 49d 97d
KASAN: slab-use-after-free Read in sk_skb_reason_drop bluetooth syz error error 412 59d 111d 💬 2 [95d]
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 4 37d 116d
possible deadlock in mgmt_set_connectable_complete bluetooth 8 7h56m 148d
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 45 5d00h 150d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive 55 3d03h 153d 💬 2 [29d]
WARNING in sco_chan_del bluetooth 7 31d 156d
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 6 1d08h 164d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive 130 2d15h 170d 💬 2 [42d]
WARNING in hci_recv_frame bluetooth 7 11d 170d
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 17 20d 171d
KASAN: slab-use-after-free Read in skb_release_head_state bluetooth syz error error 135 33d 175d 💬 1 [29d]
WARNING in l2cap_chan_send bluetooth 36 11d 183d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 61d 189d 💬 2 [95d]
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth C done 170 6h45m 189d 💬 2 [29d]
WARNING in l2cap_chan_del bluetooth 22 15d 210d
KASAN: slab-use-after-free Read in hci_cmd_timeout bluetooth 28 65d 211d
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 28 15d 231d
WARNING in hci_send_cmd bluetooth 7 30d 244d
WARNING in l2cap_do_send (2) bluetooth syz 1 278d 292d 💬 2 [290d]
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth C done 273 11d 332d PATCH [6d12h]
general protection fault in lock_sock_nested bluetooth C done done 345 14h09m 399d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 9 29d 474d 💬 1 [307d]
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 84 2d21h 503d 💬 2 [61d]
possible deadlock in rfcomm_dlc_exists bluetooth C error 13637 2d20h 632d PATCH [159d]
WARNING in call_timer_fn bluetooth syz unreliable 4252 5m 697d 💬 8 [29d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 6 21d 976d
general protection fault in skb_release_data (2) net bluetooth C done error 683 83d 1495d
WARNING: ODEBUG bug in put_device bluetooth syz done error 46 8d13h 1529d
moderation (4):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 2 4d13h 13h45m
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 2 3d22h 8d15h
KASAN: slab-use-after-free Read in bt_accept_dequeue bluetooth 2 36d 90d
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 3 16d 111d