syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (47):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hci_req_cmd_complete bluetooth 1 8d02h 6h30m
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete bluetooth 1 19d 6h51m
possible deadlock in touch_wq_lockdep_map (2) bluetooth 4 22h32m 3d03h
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 3 2d15h 13d
INFO: rcu detected stall in vhci_release mm bluetooth syz done 5 10h40m 16d
KASAN: slab-use-after-free Write in mgmt_device_connected bluetooth 1 39d 16d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 1 24d 16d
KASAN: slab-use-after-free Read in sco_chan_del (2) bluetooth 1 26d 21d
BUG: corrupted list in mgmt_pending_remove bluetooth 10 10d 43d
KASAN: slab-use-after-free Read in l2cap_conn_unreliable bluetooth 1 75d 51d
KASAN: slab-use-after-free Read in hci_cmd_work bluetooth 1 90d 51d
WARNING in hci_conn_del (2) bluetooth 17 61d 57d
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth 32 4d03h 81d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb bluetooth 1 85d 81d
WARNING in l2cap_send_cmd bluetooth 1 83d 82d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth 19 4h51m 82d
WARNING in hci_send_acl (3) bluetooth 1 89d 85d
KASAN: slab-use-after-free Read in set_powered_sync bluetooth C done 90 4h43m 91d 💬 6 [9d15h]
possible deadlock in sco_connect_cfm bluetooth 8 49d 97d
KASAN: slab-use-after-free Read in sk_skb_reason_drop bluetooth syz error error 412 60d 111d 💬 2 [95d]
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 4 37d 116d
possible deadlock in mgmt_set_connectable_complete bluetooth 8 11h11m 148d
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 45 5d03h 150d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive 55 3d06h 153d 💬 2 [30d]
WARNING in sco_chan_del bluetooth 7 31d 156d
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 6 1d11h 164d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive 130 2d18h 170d 💬 2 [43d]
WARNING in hci_recv_frame bluetooth 7 11d 171d
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 17 21d 171d
KASAN: slab-use-after-free Read in skb_release_head_state bluetooth syz error error 135 33d 175d 💬 1 [30d]
WARNING in l2cap_chan_send bluetooth 36 11d 183d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 61d 189d 💬 2 [95d]
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth C done 170 9h59m 190d 💬 2 [30d]
WARNING in l2cap_chan_del bluetooth 22 15d 210d
KASAN: slab-use-after-free Read in hci_cmd_timeout bluetooth 28 65d 212d
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 28 15d 231d
WARNING in hci_send_cmd bluetooth 7 30d 245d
WARNING in l2cap_do_send (2) bluetooth syz 1 279d 292d 💬 2 [291d]
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth C done 273 11d 333d PATCH [6d15h]
general protection fault in lock_sock_nested bluetooth C done done 345 17h24m 399d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 9 29d 474d 💬 1 [307d]
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 84 3d00h 503d 💬 2 [62d]
possible deadlock in rfcomm_dlc_exists bluetooth C error 13637 2d23h 632d PATCH [160d]
WARNING in call_timer_fn bluetooth syz unreliable 4254 6m 697d 💬 8 [30d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 6 21d 976d
general protection fault in skb_release_data (2) net bluetooth C done error 683 83d 1496d
WARNING: ODEBUG bug in put_device bluetooth syz done error 46 8d16h 1529d
moderation (4):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 2 4d17h 17h00m
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 2 4d01h 8d18h
KASAN: slab-use-after-free Read in bt_accept_dequeue bluetooth 2 36d 90d
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 3 16d 111d