syzbot

 sign-in | mailing list | source | docs
🐞 Open [1454]
≡ Subsystems
🐞 Fixed [6864]
🐞 Invalid [17808]
⬇ Missing Backports [226]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 97
Parent subsystem(s): kernel (80)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in skb_clone (3) batman bluetooth 3 C 3 30d 8d20h
WARNING: locking bug in l2cap_unregister_user bluetooth 4 3 11d 22d
WARNING in hci_connect_sco bluetooth -1 1 26d 22d
WARNING in hci_send_cmd (3) bluetooth -1 1 36d 32d
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (3) bluetooth 12 3 28d 37d
KASAN: slab-use-after-free Write in le_read_features_complete bluetooth 24 C error 432 8d18h 39d PATCH [28d]
INFO: task hung in get_signal (2) bluetooth 1 syz 1 45d 41d
KASAN: slab-use-after-free Write in hci_conn_drop (3) bluetooth 24 C error 524 2h57m 44d 💬 1 [43d]
KASAN: slab-use-after-free Read in skb_pull bluetooth 19 1 53d 49d
KASAN: slab-use-after-free Read in hci_cmd_work (2) bluetooth 19 27015 58d 59d PATCH [22d]
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 54d 59d 💬 19 [53d]
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work bluetooth -1 4 60d 62d
INFO: trying to register non-static key in l2cap_unregister_user bluetooth -1 8 1d09h 91d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 749 5h29m 103d
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2) bluetooth 19 6 69d 103d
WARNING in hci_conn_drop (3) bluetooth -1 2 72d 104d
KASAN: slab-use-after-free Read in hidp_session_thread (2) bluetooth 19 2 78d 126d
stack segment fault in kernfs_rename_ns bluetooth 2 34 15h45m 180d
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth 19 syz error 64 1d19h 185d 💬 3 [178d]
INFO: task hung in hci_conn_failed (4) bluetooth 1 syz 17 42d 219d
INFO: task hung in hci_remote_features_evt (2) bluetooth 1 syz error inconclusive 9 109d 254d
possible deadlock in l2cap_conn_del bluetooth 4 syz error 480 5h28m 290d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 19 C error 170 14h37m 304d 💬 1 [96d]
possible deadlock in l2cap_info_timeout bluetooth 4 63 2d14h 324d
general protection fault in h5_recv bluetooth 10 C done 3406 3h41m 340d 💬 1 [18d]
KASAN: slab-use-after-free Read in force_devcd_write bluetooth 19 C 448 133d 387d 💬 4 [144d]
WARNING: held lock freed in bt_accept_dequeue bluetooth 4 20 24d 394d
WARNING in hci_conn_timeout (2) bluetooth -1 C error 5419 42m 394d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth 1 syz done 68 9d02h 433d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth 24 C done 45860 8h01m 440d PATCH [70d]
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 syz 109 1d15h 452d 💬 1 [62d]
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 19 syz error 112 1d03h 452d 💬 3 [51d]
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 19 65 4d06h 472d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 8 syz error error 46 84d 475d 💬 1 [204d]
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth -1 C error 444 21h20m 541d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth 19 C inconclusive inconclusive 140 8d00h 629d 💬 2 [114d]
WARNING in hci_recv_frame bluetooth -1 C error 131 7d10h 630d 💬 1 [241d]
WARNING in l2cap_chan_send bluetooth -1 53 21d 642d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth 19 C error error 3383 520d 648d 💬 2 [554d]
WARNING in l2cap_chan_del bluetooth -1 339 7d16h 669d
general protection fault in lock_sock_nested bluetooth 19 C done done 4114 4h17m 858d
WARNING in call_timer_fn bluetooth -1 C unreliable 8006 1h16m 1156d 💬 8 [18d]
general protection fault in l2cap_chan_timeout (3) bluetooth 19 C inconclusive inconclusive 77 1d05h 1435d
general protection fault in skb_release_data (2) net bluetooth 24 C done error 703 290d 1955d
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync bluetooth 6 1 38d 38d
KCSAN: data-race in data_push_tail / vsnprintf (9) bluetooth 6 178 1d12h 329d
KCSAN: data-race in data_alloc / data_push_tail (3) bluetooth 6 57 11d 495d