[syzbot] Monthly bluetooth report (Sep 2024)

From: syzbot
Date: Sat Sep 14 2024 - 06:59:05 EST


Hello bluetooth maintainers/developers,

This is a 31-day syzbot report for the bluetooth subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/bluetooth

During the period, 0 new issues were detected and 0 were fixed.
In total, 51 issues are still open and 70 have been fixed so far.

Some of the still happening issues:

Ref Crashes Repro Title
<1> 22304 Yes possible deadlock in rfcomm_sk_state_change
https://syzkaller.appspot.com/bug?extid=d7ce59b06b3eb14fd218
<2> 13307 Yes possible deadlock in rfcomm_dlc_exists
https://syzkaller.appspot.com/bug?extid=b69a625d06e8ece26415
<3> 5704 Yes WARNING in hci_conn_timeout
https://syzkaller.appspot.com/bug?extid=2446dd3cb07277388db6
<4> 3906 Yes WARNING in call_timer_fn
https://syzkaller.appspot.com/bug?extid=6fb78d577e89e69602f9
<5> 291 Yes general protection fault in lock_sock_nested
https://syzkaller.appspot.com/bug?extid=d3ccfb78a0dc16ffebe3
<6> 268 Yes KASAN: slab-use-after-free Write in sco_sock_timeout
https://syzkaller.appspot.com/bug?extid=4c0d0c4cde787116d465
<7> 135 Yes KASAN: slab-use-after-free Read in skb_release_head_state
https://syzkaller.appspot.com/bug?extid=d863bc2d28ef7ff42984
<8> 134 Yes BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
https://syzkaller.appspot.com/bug?extid=2fb0835e0c9cefc34614
<9> 50 Yes BUG: sleeping function called from invalid context in lock_sock_nested (3)
https://syzkaller.appspot.com/bug?extid=55cd5225f71c5cff7f6f
<10> 45 Yes KASAN: slab-use-after-free Read in set_powered_sync
https://syzkaller.appspot.com/bug?extid=03d6270b6425df1605bf

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@xxxxxxxxxxxxxxxx.

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.