[syzbot] Monthly bluetooth report (Aug 2023)

From: syzbot <hidden>
Date: 2023-08-01 12:54:01
Also in: linux-bluetooth, lkml

Hello bluetooth maintainers/developers,

This is a 31-day syzbot report for the bluetooth subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/bluetooth

During the period, 1 new issues were detected and 1 were fixed.
In total, 23 issues are still open and 54 have been fixed so far.

Some of the still happening issues:

Ref Crashes Repro Title
<1> 8070    Yes   possible deadlock in rfcomm_sk_state_change
                  https://syzkaller.appspot.com/bug?extid=d7ce59b06b3eb14fd218
<2> 4315    Yes   WARNING in hci_conn_timeout
                  https://syzkaller.appspot.com/bug?extid=2446dd3cb07277388db6
<3> 1974    Yes   possible deadlock in rfcomm_dlc_exists
                  https://syzkaller.appspot.com/bug?extid=b69a625d06e8ece26415
<4> 875     Yes   BUG: sleeping function called from invalid context in hci_cmd_sync_submit
                  https://syzkaller.appspot.com/bug?extid=e7be5be00de0c3c2d782
<5> 151     Yes   WARNING in call_timer_fn
                  https://syzkaller.appspot.com/bug?extid=6fb78d577e89e69602f9
<6> 84      No    possible deadlock in hci_unregister_dev
                  https://syzkaller.appspot.com/bug?extid=c933391d8e4089f1f53e
<7> 51      No    possible deadlock in discov_off
                  https://syzkaller.appspot.com/bug?extid=f047480b1e906b46a3f4
<8> 4       No    KASAN: slab-use-after-free Write in sco_conn_del
                  https://syzkaller.appspot.com/bug?extid=6b9277cad941daf126a2

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help