syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (46):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
possible deadlock in touch_wq_lockdep_map (2) bluetooth 4 8h58m 2d14h
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 3 2d01h 12d
INFO: rcu detected stall in vhci_release mm bluetooth syz done 4 12d 15d
KASAN: slab-use-after-free Write in mgmt_device_connected bluetooth 1 38d 16d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 1 24d 16d
KASAN: slab-use-after-free Read in sco_chan_del (2) bluetooth 1 25d 20d
BUG: corrupted list in mgmt_pending_remove bluetooth 10 9d10h 42d
KASAN: slab-use-after-free Read in l2cap_conn_unreliable bluetooth 1 74d 51d
KASAN: slab-use-after-free Read in hci_cmd_work bluetooth 1 89d 51d
WARNING in hci_conn_del (2) bluetooth 17 60d 57d
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth 32 3d14h 81d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb bluetooth 1 84d 81d
WARNING in l2cap_send_cmd bluetooth 1 83d 81d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth 18 8d16h 81d
WARNING in hci_send_acl (3) bluetooth 1 89d 85d
KASAN: slab-use-after-free Read in set_powered_sync bluetooth C done 89 23h28m 90d 💬 6 [9d02h]
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM] bluetooth C 28 69d 96d 💬 1 [94d]
possible deadlock in sco_connect_cfm bluetooth 8 49d 97d
KASAN: slab-use-after-free Read in sk_skb_reason_drop bluetooth syz error error 412 59d 111d 💬 2 [94d]
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 4 37d 116d
possible deadlock in mgmt_set_connectable_complete bluetooth 7 16h19m 147d
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 45 4d13h 149d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive 55 2d17h 153d 💬 2 [29d]
WARNING in sco_chan_del bluetooth 7 31d 155d
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 6 22h01m 163d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive 130 2d04h 169d 💬 2 [42d]
WARNING in hci_recv_frame bluetooth 7 11d 170d
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 17 20d 170d
KASAN: slab-use-after-free Read in skb_release_head_state bluetooth syz error 135 32d 174d 💬 1 [29d]
WARNING in l2cap_chan_send bluetooth 36 10d 182d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 61d 189d 💬 2 [94d]
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth C done 168 3h23m 189d 💬 2 [29d]
WARNING in l2cap_chan_del bluetooth 22 14d 210d
KASAN: slab-use-after-free Read in hci_cmd_timeout bluetooth 28 64d 211d
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 28 15d 230d
WARNING in hci_send_cmd bluetooth 7 30d 244d
WARNING in l2cap_do_send (2) bluetooth syz 1 278d 292d 💬 2 [290d]
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth C done 273 11d 332d PATCH [6d02h]
general protection fault in lock_sock_nested bluetooth C done done 345 3h50m 398d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 9 29d 473d 💬 1 [307d]
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 84 2d11h 502d 💬 2 [61d]
possible deadlock in rfcomm_dlc_exists bluetooth C error 13637 2d09h 632d PATCH [159d]
WARNING in call_timer_fn bluetooth syz unreliable 4245 1h15m 697d 💬 8 [29d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 6 20d 976d
general protection fault in skb_release_data (2) net bluetooth C done error 683 83d 1495d
WARNING: ODEBUG bug in put_device bluetooth syz done error 46 8d02h 1528d
moderation (6):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 2 4d03h 3h26m
KASAN: slab-use-after-free Read in hci_req_cmd_complete bluetooth 1 7d13h 3d13h
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 2 3d12h 8d04h
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete bluetooth 1 18d 14d
KASAN: slab-use-after-free Read in bt_accept_dequeue bluetooth 2 36d 89d
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 3 16d 111d