syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (51):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: unable to handle kernel paging request in hci_release_dev bluetooth 1 4d03h 2h33m
KASAN: slab-use-after-free Write in sco_conn_put bluetooth 5 3d13h 5d10h
KASAN: slab-use-after-free Read in __timer_delete bluetooth C done 1 11d 9d23h 💬 1 [9d06h]
KASAN: slab-use-after-free Read in lookup_object_or_alloc (2) bluetooth syz 1 14d 10d
KASAN: slab-use-after-free Read in l2cap_disconn_ind bluetooth 1 15d 15d
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth 1 25d 21d
KASAN: slab-use-after-free Write in sk_skb_reason_drop bluetooth 1 28d 24d
WARNING in emon bluetooth 1 29d 25d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth syz 4 8d22h 28d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 1 34d 30d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth syz 8885 now 36d 💬 1 [35d]
KASAN: slab-use-after-free Read in hci_send_acl (2) bluetooth 1 42d 37d
KASAN: slab-use-after-free Read in bt_accept_dequeue bluetooth 2 91d 47d
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 3 70d 47d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 6 14d 47d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 15 2d03h 47d
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 16 11d 47d
KASAN: slab-use-after-free Read in hci_req_cmd_complete bluetooth 1 62d 54d
possible deadlock in touch_wq_lockdep_map (2) bluetooth 5 47d 57d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 6 24m 67d
KASAN: slab-use-after-free Write in mgmt_device_connected bluetooth 1 93d 71d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 3 4d21h 71d
KASAN: slab-use-after-free Read in sco_chan_del (2) bluetooth 2 46d 75d
BUG: corrupted list in mgmt_pending_remove bluetooth C error 18 1d12h 97d 💬 1 [9d07h]
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth syz error 42 44d 136d
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth syz 33 17h22m 136d PATCH [2d08h]
possible deadlock in sco_connect_cfm bluetooth 11 20d 152d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 14 2d18h 171d
possible deadlock in mgmt_set_connectable_complete bluetooth syz 44 10d 202d
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 53 3d04h 204d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive 82 5d00h 208d 💬 2 [22d]
WARNING in sco_chan_del bluetooth 10 28d 210d
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth C unreliable 29 23h40m 218d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive 130 9d23h 224d 💬 2 [53d]
WARNING in hci_recv_frame bluetooth syz 26 5d06h 225d 💬 1 [17d]
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 20 11d 225d
WARNING in l2cap_chan_send bluetooth 38 17d 237d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 115d 244d 💬 2 [149d]
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth C done 380 1d16h 244d PATCH [2d03h]
WARNING in l2cap_chan_del bluetooth 51 15h36m 265d
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 30 11d 285d
WARNING in hci_send_cmd bluetooth 8 51d 299d
WARNING in l2cap_do_send (2) bluetooth syz 1 333d 346d 💬 2 [345d]
general protection fault in lock_sock_nested bluetooth C done done 517 39m 453d
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 10 48d 528d 💬 1 [362d]
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 87 40d 557d 💬 2 [53d]
possible deadlock in rfcomm_dlc_exists bluetooth C error done 13649 53d 687d PATCH [214d]
WARNING in call_timer_fn bluetooth C unreliable 5003 5h13m 752d 💬 8 [25d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 9 12d 1031d
general protection fault in skb_release_data (2) net bluetooth C done error 695 23d 1550d
WARNING: ODEBUG bug in put_device bluetooth syz done error 61 3d01h 1583d