syzbot


Out of 230 bugs, 213 were automatically obsoleted (69 due to revoked reproducers), 17 were invalidated by users.
Applied filters: Label=subsystems:bluetooth (drop)
Title Repro Cause bisect Fix bisect Count Last Reported
WARNING in sco_chan_del bluetooth 10 101d 284d
WARNING in emon bluetooth 1 102d 98d
KASAN: slab-use-after-free Read in l2cap_sock_kill bluetooth 1 91d 91d
INFO: task hung in hci_conn_failed (3) bluetooth 18 74d 146d
KASAN: slab-use-after-free Read in hci_send_acl (2) bluetooth 1 116d 110d
KASAN: slab-use-after-free Read in sco_chan_del (2) bluetooth 2 120d 148d
possible deadlock in touch_wq_lockdep_map (2) bluetooth 5 120d 130d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 10 121d 601d
WARNING in hci_send_cmd bluetooth 8 124d 372d
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 87 114d 630d
KASAN: slab-use-after-free Read in hci_req_cmd_complete bluetooth 1 135d 127d
INFO: task hung in hci_remote_features_evt bluetooth 9 133d 229d
INFO: task hung in srso_alias_return_thunk bluetooth 1 136d 136d
WARNING in l2cap_do_send (2) bluetooth syz 1 406d 420d
possible deadlock in rfcomm_dlc_exists bluetooth C error done 13649 126d 760d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2) bluetooth 1 94d 94d
KASAN: slab-use-after-free Read in bt_accept_dequeue bluetooth 2 164d 120d
KASAN: slab-use-after-free Write in mgmt_device_connected bluetooth 1 166d 144d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete bluetooth 1 146d 127d
KASAN: slab-use-after-free Read in skb_release_head_state bluetooth syz error error 135 161d 302d
KASAN: slab-use-after-free Read in l2cap_conn_unreliable bluetooth 1 203d 179d
WARNING in l2cap_send_cmd bluetooth 1 211d 209d
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb bluetooth 1 212d 209d
WARNING in hci_send_acl (3) bluetooth 1 217d 213d
KASAN: slab-use-after-free Read in sk_skb_reason_drop bluetooth syz error error 412 187d 239d
KASAN: slab-use-after-free Read in hci_cmd_work bluetooth 1 217d 179d
KASAN: slab-use-after-free Read in hci_cmd_timeout bluetooth 28 192d 339d
WARNING in hci_conn_del (2) bluetooth 17 189d 185d
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM] bluetooth C 28 198d 225d
KASAN: slab-use-after-free Read in hci_req_sync_complete bluetooth 8 231d 256d
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb bluetooth 7 232d 239d
WARNING: locking bug in sco_conn_del (2) bluetooth 1 233d 229d
KASAN: slab-use-after-free Read in __lock_sock (2) bluetooth C 5 233d 247d
KASAN: slab-use-after-free Read in l2cap_recv_acldata bluetooth 1 234d 230d
KASAN: slab-use-after-free Read in skb_free_head bluetooth 2 233d 252d
general protection fault in l2cap_publish_rx_avail bluetooth C 6 246d 246d
INFO: rcu detected stall in bt_err bluetooth 1 240d 240d
INFO: task hung in hci_conn_failed (2) bluetooth 1 241d 241d
WARNING in l2cap_send_disconn_req bluetooth 1 251d 247d
INFO: task hung in l2cap_conn_del bluetooth 1 244d 244d
WARNING in lock_sock_nested bluetooth 6 174d 182d
WARNING in hci_conn_set_handle bluetooth C error done 7 259d 310d
KFENCE: invalid free in __hci_req_sync bluetooth 35 230d 291d
general protection fault in hci_release_dev (2) bluetooth 1 250d 246d
KASAN: use-after-free Read in __queue_work (3) bluetooth syz done done 83 826d 1655d
KASAN: use-after-free Read in __sco_sock_close bluetooth syz error error 1 1659d 1659d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb bluetooth 1 267d 263d
INFO: trying to register non-static key in sco_sock_timeout (2) bluetooth 5 297d 464d
KASAN: slab-use-after-free Read in hci_chan_sent bluetooth 1 258d 237d
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt bluetooth C error error 8 306d 319d
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt bluetooth C done unreliable 5 314d 319d
WARNING in ida_free (2) bluetooth C 14 371d 371d
KASAN: global-out-of-bounds Read in __timer_delete bluetooth 1 322d 316d
KCSAN: data-race in l2cap_chan_connect / l2cap_sock_bind bluetooth 1 259d 259d
WARNING in msft_do_close bluetooth 1 326d 322d
INFO: rcu detected stall in l2cap_sock_connect bluetooth 1 288d 288d
KASAN: slab-use-after-free Read in mgmt_pending_foreach bluetooth 1 332d 327d
possible deadlock in hci_dev_close bluetooth 2 294d 294d
possible deadlock in hci_unregister_dev (2) bluetooth 6 294d 298d
WARNING: refcount bug in sco_conn_del (3) bluetooth 1 324d 320d
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt bluetooth C unreliable 28 306d 319d
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt bluetooth C 36 309d 319d
INFO: task hung in hci_cmd_sync_clear (2) bluetooth 15 330d 736d
KASAN: slab-use-after-free Write in hci_conn_drop (2) bluetooth C done 7 343d 474d
INFO: task hung in hci_conn_failed bluetooth C done 1 344d 388d
possible deadlock in hci_dev_do_close (2) bluetooth C done 10 293d 298d
KASAN: slab-use-after-free Read in hci_sock_get_cookie bluetooth 2 285d 293d
BUG: sleeping function called from invalid context in hci_cmd_sync_submit bluetooth C done done 3400 351d 595d
KMSAN: uninit-value in eir_get_service_data bluetooth C 22 353d 414d
INFO: task hung in hci_release_dev bluetooth C done 18 380d 378d
KASAN: slab-use-after-free Read in hci_send_acl bluetooth C done done 1323 374d 547d
INFO: task hung in hci_dev_close_sync (2) bluetooth 2 379d 382d
KASAN: slab-use-after-free Write in __sco_sock_close bluetooth C done done 63 390d 536d
KASAN: slab-use-after-free Read in skb_queue_purge_reason bluetooth 1 419d 415d
possible deadlock in discov_off bluetooth 127 413d 869d
possible deadlock in hci_unregister_dev bluetooth 175 414d 911d
KASAN: slab-use-after-free Read in __lock_sock bluetooth C 1 454d 454d
KASAN: slab-use-after-free Read in l2cap_connect bluetooth 1 469d 461d
WARNING in hci_send_acl (2) bluetooth 1 469d 465d
KASAN: slab-use-after-free Read in sco_chan_del bluetooth 1 482d 476d
KASAN: slab-use-after-free Read in release_sock bluetooth 1 487d 482d
INFO: task can't die in __lock_sock bluetooth C done error 1067 469d 1283d
memory leak in hci_conn_add (2) bluetooth C 65 476d 534d
KASAN: slab-use-after-free Read in lookup_object_or_alloc bluetooth 2 504d 514d
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb bluetooth 1 523d 517d
WARNING: ODEBUG bug in hci_abort_conn_sync bluetooth 1 516d 512d
KASAN: use-after-free Read in hci_conn_security bluetooth 1 536d 532d
general protection fault in hci_uart_tty_ioctl bluetooth C error done 4 539d 917d
KASAN: use-after-free Write in hci_conn_del bluetooth syz done inconclusive 3 1246d 1659d
WARNING: refcount bug in sco_conn_del (2) bluetooth 1 588d 584d
KASAN: slab-use-after-free Write in hci_conn_drop bluetooth 1 643d 638d
WARNING in l2cap_do_send bluetooth 2 668d 743d
WARNING: bad unlock balance in l2cap_bredr_sig_cmd bluetooth 2 670d 673d
WARNING: bad unlock balance in l2cap_disconnect_rsp bluetooth C 72 645d 671d
WARNING in hci_send_acl bluetooth 1 722d 718d
general protection fault in hci_phy_link_complete_evt bluetooth C done unreliable 50 1534d 1661d
possible deadlock in hci_conn_hash_flush bluetooth 4 732d 862d
INFO: rcu detected stall in hci_rx_work bluetooth 1 689d 689d
WARNING: locking bug in finish_task_switch bluetooth net C done inconclusive 131 752d 1863d
BUG: corrupted list in kobject_add_internal (4) bluetooth C error done 4 892d 888d
INFO: task hung in hci_dev_do_open (2) bluetooth C done done 166 926d 1011d
linux-next test error: possible deadlock in hci_cmd_sync_clear bluetooth 6 725d 725d
BUG: corrupted list in klist_release bluetooth C unreliable inconclusive 34 872d 1526d
KASAN: use-after-free Read in l2cap_conn_del bluetooth C error 12 846d 876d
KASAN: use-after-free Read in h5_rx_3wire_hdr bluetooth syz error 3 1272d 2038d
WARNING: refcount bug in l2cap_global_chan_by_psm bluetooth C done inconclusive 26 1296d 1658d
KASAN: use-after-free Read in hci_chan_del bluetooth C done done 87 1382d 1661d
WARNING: held lock freed in l2cap_conn_del bluetooth C done error 13 847d 879d
INFO: task hung in hci_power_on bluetooth C done inconclusive 37 957d 992d
WARNING in cancel_delayed_work bluetooth C done done 611 977d 1664d
BUG: unable to handle kernel NULL pointer dereference in device_find_child bluetooth C 5 845d 862d
BUG: corrupted list in hci_conn_del_sysfs bluetooth C 14 845d 857d
possible deadlock in sco_sock_timeout bluetooth 1 862d 862d
BUG: unable to handle kernel NULL pointer dereference in klist_next bluetooth C 1 867d 867d
WARNING: ODEBUG bug in cancel_delayed_work (2) bluetooth C inconclusive inconclusive 13 952d 1172d
BUG: corrupted list in klist_dec_and_del bluetooth C inconclusive inconclusive 3 874d 1411d
KASAN: use-after-free Read in h4_recv_buf bluetooth C inconclusive done 3 1282d 1279d
BUG: corrupted list in kobj_kset_join bluetooth C 1 891d 887d
KASAN: use-after-free Write in hci_sock_bind (2) bluetooth C done unreliable 26 1540d 1814d
INFO: trying to register non-static key in l2cap_chan_close bluetooth syz done 1 1657d 1656d
KASAN: use-after-free Read in hci_get_auth_info bluetooth syz error error 1 1656d 1655d
WARNING: locking bug in hci_dev_reset bluetooth syz done inconclusive 1 1377d 1658d
KMSAN: uninit-value in process_adv_report bluetooth C 10 1514d 1661d
INFO: task hung in hci_cmd_sync_clear bluetooth 4 915d 1062d
general protection fault in rcu_sync_func (3) bluetooth 2 892d 906d
upstream test error: WARNING in mgmt_index_removed bluetooth 90 922d 929d
WARNING: refcount bug in bt_accept_dequeue bluetooth syz error error 2 1014d 1657d
memory leak in mgmt_cmd_status bluetooth C 2 1415d 1623d
bpf test error: WARNING: ODEBUG bug in mgmt_index_removed bluetooth 41 923d 929d
net test error: WARNING: ODEBUG bug in mgmt_index_removed bluetooth 39 924d 930d
general protection fault in klist_next bluetooth C error 33 867d 922d
general protection fault in skb_dequeue (2) bluetooth C inconclusive done 9 1227d 1312d
KASAN: slab-out-of-bounds Read in lock_sock_nested bluetooth syz unreliable done 23 1212d 1652d
general protection fault in sco_sock_getsockopt bluetooth C done 2256 1526d 1827d
INFO: task hung in hci_dev_open bluetooth 6 965d 1037d
KMSAN: uninit-value in vsscanf bluetooth syz 9 1084d 1150d
KMSAN: uninit-value in hci_conn_request_evt bluetooth C 3 1143d 1208d
general protection fault in skb_put bluetooth C done error 43 1625d 2206d
memory leak in hci_conn_add bluetooth syz 1 1657d 1656d
KMSAN: uninit-value in hci_phy_link_complete_evt bluetooth C 3 1220d 1216d
KASAN: slab-out-of-bounds Read in bacpy bluetooth C done inconclusive 21 1707d 2234d
KMSAN: uninit-value in hci_event_packet (3) bluetooth C 10 1331d 1422d
WARNING: refcount bug in sco_sock_timeout bluetooth 24 1007d 1250d
memory leak in hci_inquiry_cache_update bluetooth syz 5 1690d 1999d
KMSAN: uninit-value in hci_chan_lookup_handle bluetooth C 3 1648d 1648d
WARNING: locking bug in l2cap_chan_del bluetooth syz inconclusive inconclusive 83 1378d 1656d
KASAN: use-after-free Write in hci_sock_release bluetooth C done done 8 1769d 2310d
KASAN: use-after-free Read in skb_release_data (2) bluetooth syz done done 1 1815d 1815d
WARNING: refcount bug in l2cap_chan_hold bluetooth C 8 1014d 1011d
BUG: corrupted list in bt_accept_unlink bluetooth syz error error 1 1649d 1649d
WARNING: locking bug in sco_sock_timeout bluetooth 13 1026d 1250d
INFO: trying to register non-static key in sco_sock_timeout bluetooth 2 1032d 1078d
KASAN: use-after-free Write in sco_conn_del bluetooth 23 1085d 1253d
general protection fault in rcu_sync_func (2) bluetooth 1 1063d 1059d
WARNING: ODEBUG bug in hci_dev_close_sync bluetooth 1 1107d 1102d
KMSAN: uninit-value in hci_conn_complete_evt bluetooth 3 1117d 1178d
WARNING: ODEBUG bug in hci_release_dev bluetooth 1 1150d 1142d
INFO: task hung in scan_update_work (2) bluetooth 1 1096d 1096d
BUG: spinlock bad magic in lock_sock_nested (2) bluetooth 1 1128d 1128d
KMSAN: uninit-value in hci_cmd_status_evt bluetooth 1 1135d 1135d
WARNING: locking bug in l2cap_sock_teardown_cb bluetooth 129 1213d 1505d
BUG: unable to handle kernel paging request in lock_sock_nested bluetooth 43 1218d 1658d
INFO: task can't die in hci_unregister_dev bluetooth 1 1163d 1159d
INFO: task hung in scan_update_work bluetooth 17 1166d 1204d
WARNING: locking bug in sco_conn_del bluetooth 2 1228d 1237d
INFO: task hung in hci_request_cancel_all bluetooth 1 1171d 1171d
KMSAN: uninit-value in hci_loglink_complete_evt bluetooth 1 1233d 1228d
WARNING: refcount bug in sco_conn_del bluetooth 7 1242d 1253d
INFO: trying to register non-static key in sco_conn_del bluetooth 1 1242d 1238d
KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping bluetooth 1 1157d 1157d
BUG: spinlock bad magic in lock_sock_nested bluetooth 26 1269d 1624d
KASAN: global-out-of-bounds Read in cancel_delayed_work bluetooth 1 1247d 1243d
INFO: task hung in rfcomm_process_sessions bluetooth 1 1248d 1248d
KMSAN: uninit-value in hci_inquiry_cache_update bluetooth C 2 2137d 2137d
INFO: task can't die in rfcomm_dlc_close bluetooth 4 1260d 1277d
BUG: unable to handle kernel NULL pointer dereference in l2cap_sock_teardown_cb bluetooth 1 1264d 1260d
WARNING: refcount bug in l2cap_sock_kill bluetooth 1 1321d 1317d
INFO: task can't die in rfcomm_dlc_open bluetooth 1 1285d 1281d
upstream test error: BUG: sleeping function called from invalid context in lock_sock_nested bluetooth 6 1294d 1346d
general protection fault in release_sock bluetooth 1 1265d 1265d
general protection fault in l2cap_chan_timeout (2) bluetooth 1 1364d 1359d
INFO: task hung in hci_conn_hash_flush bluetooth 1 1347d 1347d
KMSAN: uninit-value in l2cap_sock_teardown_cb (2) bluetooth 1 1367d 1367d
general protection fault in qca_power_shutdown bluetooth 1 1402d 1397d
KASAN: use-after-free Write in h4_recv_buf bluetooth 2 1433d 1442d
general protection fault in bt_accept_unlink (2) bluetooth 1 1448d 1444d
KASAN: wild-memory-access Write in l2cap_chan_put bluetooth 2 1450d 1473d
general protection fault in hci_chan_del bluetooth 2 1490d 1533d
KASAN: slab-out-of-bounds Write in hci_chan_del bluetooth 1 1490d 1485d
KCSAN: data-race in __hci_req_sync / hci_req_sync_complete bluetooth 23 1409d 1530d
KASAN: use-after-free Read in skb_release_head_state bluetooth 1 1501d 1497d
KASAN: use-after-free Read in hci_dev_do_open bluetooth 1 1503d 1499d
possible deadlock in lock_sock_nested bluetooth 1 1504d 1500d
KMSAN: uninit-value in l2cap_sock_teardown_cb bluetooth 1 1490d 1490d
KASAN: out-of-bounds Read in lock_sock_nested bluetooth 1 1544d 1540d
general protection fault in l2cap_chan_timeout bluetooth 1 1546d 1541d
KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2) bluetooth 1 1478d 1478d
KMSAN: uninit-value in hci_event_packet (2) bluetooth 4 1580d 1611d
KASAN: use-after-free Read in l2cap_sock_kill bluetooth 1 1550d 1550d
KASAN: global-out-of-bounds Read in lock_sock_nested bluetooth 2 1599d 1540d
KASAN: use-after-free Read in sco_chan_del bluetooth 1 1595d 1591d
BUG: corrupted list in hci_chan_del bluetooth 2 1649d 1649d
general protection fault in bt_accept_unlink bluetooth 1 1658d 1658d
KMSAN: uninit-value in hci_cmd_timeout bluetooth 3 1685d 1829d
KCSAN: data-race in __hci_req_sync / hci_req_status_pend bluetooth 1 1614d 1614d
INFO: task hung in hci_dev_do_open bluetooth 1 1683d 1683d
KMSAN: uninit-value in vhci_write bluetooth 1 1672d 1672d
WARNING in __queue_work (2) bluetooth 1 1737d 1733d
INFO: trying to register non-static key in hci_uart_send_frame (2) bluetooth 1 1816d 1814d
KASAN: use-after-free Read in rfcomm_dlc_exists bluetooth 833 1787d 2401d
KCSAN: data-race in do_enable_set / do_enable_set bluetooth 3 1850d 1855d
INFO: trying to register non-static key in hci_uart_tty_receive (2) bluetooth 1 1911d 1907d
KMSAN: use-after-free in hci_cmd_timeout bluetooth 1 1886d 1886d
KCSAN: data-race in flush_workqueue / flush_workqueue bluetooth 3 1901d 1919d
KCSAN: data-race in rfcomm_sock_sendmsg / rfcomm_sock_shutdown bluetooth 1 1911d 1911d
KASAN: use-after-free Read in rfcomm_dlc_open (2) bluetooth 19 1989d 2128d
general protection fault in rfcomm_dlc_open bluetooth 3 2017d 2114d
general protection fault in rfcomm_dlc_exists bluetooth 2 2032d 2114d
KCSAN: data-race in __skb_wait_for_more_packets / l2cap_sock_shutdown bluetooth 1 1932d 1932d
general protection fault in rcu_sync_func bluetooth 1 2026d 2022d
INFO: trying to register non-static key in hci_uart_tty_receive bluetooth 1 2000d 1999d
BUG: unable to handle kernel paging request in rfcomm_dlc_exists bluetooth 1 2032d 2028d
INFO: trying to register non-static key in hci_uart_send_frame bluetooth 2 2133d 2182d
KMSAN: uninit-value in kfree_skb bluetooth C 11 1961d 2019d
KMSAN: uninit-value in sock_rfree (2) bluetooth 1 1969d 1969d
KMSAN: uninit-value in skb_queue_purge bluetooth 2 1966d 1987d
WARNING in lockdep_register_key bluetooth 35 2165d 2180d
WARNING: ODEBUG bug in hci_uart_tty_close bluetooth 1 2193d 2192d
INFO: trying to register non-static key in hci_uart_flush bluetooth 1 2199d 2199d
KASAN: use-after-free Read in rfcomm_dlc_open bluetooth 1 2388d 2384d