[syzbot] Monthly bluetooth report (Sep 2026)

[syzbot]

Hello bluetooth maintainers/developers,

This is a 31-day syzbot report for the bluetooth subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/bluetooth

During the period, 3 new issues were detected and 4 were fixed.
In total, 20 issues are still open and 110 have already been fixed.
There are also 6 low-priority issues.

Some of the still happening issues:

Ref Crashes Repro Title
<1> 9720    Yes   WARNING in call_timer_fn
                  https://syzkaller.appspot.com/bug?extid=6fb78d577e89e69602f9
<2> 598     Yes   WARNING: ODEBUG bug in hci_release_dev (2)
                  https://syzkaller.appspot.com/bug?extid=b170dbf55520ebf5969a
<3> 391     No    WARNING in l2cap_chan_del
                  https://syzkaller.appspot.com/bug?extid=3272785b7a1fc9b510f6
<4> 62      Yes   WARNING in l2cap_chan_send
                  https://syzkaller.appspot.com/bug?extid=b6919040d9958e2fc1ae
<5> 7       No    WARNING in hci_send_cmd (4)
                  https://syzkaller.appspot.com/bug?extid=00f5a866124dc44cce14
<6> 250     Yes   KASAN: slab-use-after-free Read in bt_accept_unlink
                  https://syzkaller.appspot.com/bug?extid=a1595e656a83ea5b78eb

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@xxxxxxxxxxxxxxxx.

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.