syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (47):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hci_req_cmd_complete bluetooth 1 9d09h 1d12h
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete bluetooth 1 20d 1d13h
possible deadlock in touch_wq_lockdep_map (2) bluetooth 4 2d04h 4d10h
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 3 3d21h 14d
INFO: rcu detected stall in vhci_release mm bluetooth syz done 5 1d17h 17d
KASAN: slab-use-after-free Write in mgmt_device_connected bluetooth 1 40d 18d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 2 15h13m 18d
KASAN: slab-use-after-free Read in sco_chan_del (2) bluetooth 1 27d 22d
BUG: corrupted list in mgmt_pending_remove bluetooth 10 11d 44d
KASAN: slab-use-after-free Read in l2cap_conn_unreliable bluetooth 1 76d 53d
KASAN: slab-use-after-free Read in hci_cmd_work bluetooth 1 91d 53d
WARNING in hci_conn_del (2) bluetooth 17 62d 59d
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth syz error 35 16h31m 83d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb bluetooth 1 86d 83d
WARNING in l2cap_send_cmd bluetooth 1 84d 83d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth 19 1d11h 83d
WARNING in hci_send_acl (3) bluetooth 1 90d 86d
KASAN: slab-use-after-free Read in set_powered_sync bluetooth C done 92 4h17m 92d 💬 6 [10d]
possible deadlock in sco_connect_cfm bluetooth 8 51d 99d
KASAN: slab-use-after-free Read in sk_skb_reason_drop bluetooth syz error error 412 61d 113d 💬 2 [96d]
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 4 39d 118d
possible deadlock in mgmt_set_connectable_complete bluetooth 9 20h36m 149d
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 45 6d09h 151d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive 57 11h59m 155d 💬 2 [10h38m]
WARNING in sco_chan_del bluetooth 7 33d 157d
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 6 2d17h 165d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive 130 4d00h 171d 💬 2 [10h38m]
WARNING in hci_recv_frame bluetooth 7 13d 172d
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 17 22d 172d
KASAN: slab-use-after-free Read in skb_release_head_state bluetooth syz error error 135 34d 176d 💬 1 [31d]
WARNING in l2cap_chan_send bluetooth 36 12d 184d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 62d 191d 💬 2 [96d]
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth C done 176 3h33m 191d 💬 2 [10h38m]
WARNING in l2cap_chan_del bluetooth 22 16d 212d
KASAN: slab-use-after-free Read in hci_cmd_timeout bluetooth 28 66d 213d
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 28 17d 232d
WARNING in hci_send_cmd bluetooth 7 32d 246d
WARNING in l2cap_do_send (2) bluetooth syz 1 280d 293d 💬 2 [292d]
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth C done 273 12d 334d PATCH [7d22h]
general protection fault in lock_sock_nested bluetooth C done done 345 1d23h 400d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 9 31d 475d 💬 1 [309d]
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 85 17h28m 504d 💬 2 [10h38m]
possible deadlock in rfcomm_dlc_exists bluetooth C error 13649 11h32m 634d PATCH [161d]
WARNING in call_timer_fn bluetooth syz unreliable 4271 2h29m 699d 💬 8 [10h38m]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 6 22d 978d
general protection fault in skb_release_data (2) net bluetooth C done error 683 85d 1497d
WARNING: ODEBUG bug in put_device bluetooth syz done error 46 9d22h 1530d
moderation (4):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 2 5d23h 1d23h
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 2 5d08h 10d
KASAN: slab-use-after-free Read in bt_accept_dequeue bluetooth 2 38d 91d
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 3 17d 113d