syzbot


Applied filters: Label=subsystems:bluetooth (drop)
open (55):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (3) bluetooth C 1 5d00h 1d00h
WARNING in hci_conn_drop (2) bluetooth 1 10d 6d06h
INFO: task hung in hci_remote_features_evt (2) bluetooth syz 5 2d19h 8d03h
KASAN: slab-out-of-bounds Read in hci_cmd_sync_alloc bluetooth C 4 19h33m 10d
KASAN: slab-use-after-free Read in bt_accept_dequeue (2) bluetooth 1 21d 16d
possible deadlock in l2cap_conn_del bluetooth syz error 122 9h26m 44d
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump bluetooth C 596 11h25m 44d 💬 1 [21d]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 59d 55d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 5 35d 58d
WARNING in hci_send_cmd (2) bluetooth 2 16d 77d
possible deadlock in l2cap_info_timeout bluetooth 12 8d13h 78d
WARNING: refcount bug in sco_conn_put bluetooth 1 86d 82d
general protection fault in h5_close bluetooth C done 5 80d 83d
general protection fault in bcsp_recv bluetooth C error 237 1h44m 88d
general protection fault in h5_recv bluetooth C done 353 1h05m 94d 💬 1 [22d]
general protection fault in __timer_delete_sync bluetooth C done 3 92d 96d 💬 1 [95d]
general protection fault in qca_close bluetooth C done 94 78d 97d PATCH [97d]
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3) bluetooth 8 61d 106d
KASAN: slab-use-after-free Read in sock_def_readable bluetooth net 3 91d 107d
KASAN: slab-use-after-free Read in force_suspend_read bluetooth 8 89d 116d
general protection fault in hci_devcd_register bluetooth 26 4d22h 124d
WARNING in hci_devcd_register bluetooth 3 51d 129d
KASAN: slab-use-after-free Read in full_proxy_write bluetooth C 36 68d 136d
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 15 21d 139d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth syz 345 13h49m 141d 💬 1 [22d]
WARNING in sco_conn_put bluetooth 2 84d 143d
WARNING: held lock freed in bt_accept_dequeue bluetooth 4 13d 147d
WARNING in hci_conn_timeout (2) bluetooth C error 423 1d05h 148d
KASAN: slab-use-after-free Write in sco_conn_put bluetooth 95 50d 163d
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth C 17 42d 179d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth syz done 5 3d23h 186d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 11 16d 188d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth syz done 37387 12m 194d 💬 1 [22d]
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 32 7h47m 205d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 28 21d 205d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 35 4h52m 205d
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 18 62d 205d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 45 18d 225d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 15 5d06h 229d
BUG: corrupted list in mgmt_pending_remove bluetooth C error 43 4h58m 255d 💬 1 [167d]
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth C error 247 2d04h 294d
possible deadlock in sco_connect_cfm bluetooth 21 64d 310d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 47 2d08h 329d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive error 141 49d 366d 💬 2 [55d]
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth C unreliable 39 27d 377d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive inconclusive 137 14d 382d 💬 2 [86d]
WARNING in hci_recv_frame bluetooth syz error 59 13d 383d 💬 1 [175d]
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 27 12d 384d
WARNING in l2cap_chan_send bluetooth 43 24d 396d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 274d 402d 💬 2 [307d]
WARNING in l2cap_chan_del bluetooth 213 1d04h 423d
general protection fault in lock_sock_nested bluetooth C done done 2229 49m 611d
WARNING in call_timer_fn bluetooth C unreliable 6690 4h03m 910d 💬 8 [22d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 33 8d16h 1189d
general protection fault in skb_release_data (2) net bluetooth C done error 703 43d 1708d
moderation (1):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hidp_session_thread bluetooth 3 40d 90d