syzbot

 sign-in | mailing list | source | docs
🐞 Open [1499]
≡ Subsystems
🐞 Fixed [6516]
🐞 Invalid [16585]
⬇ Missing Backports [204]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 91
Parent subsystem(s): kernel (72)
open (42):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in hci_devcd_register (2) bluetooth -1 3 6d11h 4d13h
WARNING: kobject bug in hci_disconnect_all_sync bluetooth -1 1 26d 21d
WARNING in l2cap_send_disconn_req (2) bluetooth -1 1 32d 28d
stack segment fault in kernfs_rename_ns bluetooth 2 9 1d05h 30d
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth 19 syz 2 23d 36d 💬 3 [28d]
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 C 5 6d03h 46d 💬 1 [46d]
KASAN: slab-out-of-bounds Write in enqueue_timer bluetooth 23 1 62d 57d
INFO: task hung in hci_conn_failed (4) bluetooth 1 syz 7 4d11h 69d
INFO: task hung in hci_remote_features_evt (2) bluetooth 1 syz error inconclusive 8 54d 104d
possible deadlock in l2cap_conn_del bluetooth 4 syz error 227 3d16h 141d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 19 14 24d 155d
possible deadlock in l2cap_info_timeout bluetooth 4 33 3d19h 175d
general protection fault in bcsp_recv bluetooth 8 C error 694 6h02m 185d PATCH [50d]
general protection fault in h5_recv bluetooth 10 C done 1310 1h00m 191d 💬 1 [26d]
general protection fault in __timer_delete_sync bluetooth 2 C done 3 189d 193d 💬 1 [192d]
general protection fault in hci_devcd_register bluetooth 17 31 8d12h 221d
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 19 18 14h11m 236d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth 19 C 423 21h36m 237d 💬 4 [26d]
WARNING: held lock freed in bt_accept_dequeue bluetooth 4 9 6d12h 244d
WARNING in hci_conn_timeout (2) bluetooth -1 C error 642 2h37m 245d
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth 7 C 25 3d21h 276d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth 1 syz done 16 2d19h 283d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 19 12 91d 285d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth 24 C done 42146 40m 291d 💬 2 [6d20h]
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 8 98 21m 302d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 75 11h14m 302d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 19 56 1d05h 302d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 19 55 6d14h 322d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 8 syz error 31 5d07h 326d 💬 1 [54d]
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth -1 C error 341 1d16h 391d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 19 47 99d 426d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth 19 C inconclusive error 152 8d10h 463d 💬 2 [22d]
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 4 C unreliable done 39 93d 473d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth 19 C inconclusive inconclusive 139 41d 479d 💬 2 [183d]
WARNING in hci_recv_frame bluetooth -1 C error 81 5d09h 480d 💬 1 [92d]
WARNING in l2cap_chan_send bluetooth -1 44 58d 492d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth 19 C error error 3383 370d 499d 💬 2 [404d]
WARNING in l2cap_chan_del bluetooth -1 283 31m 520d
general protection fault in lock_sock_nested bluetooth 19 C done done 3174 29m 708d
WARNING in call_timer_fn bluetooth -1 C unreliable 7206 20h58m 1007d 💬 8 [26d]
general protection fault in l2cap_chan_timeout (3) bluetooth 19 C inconclusive inconclusive 53 10d 1286d
general protection fault in skb_release_data (2) net bluetooth 24 C done error 703 140d 1805d
moderation (2):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2) bluetooth 19 1 51d 19d
KASAN: slab-use-after-free Read in skb_dequeue bluetooth 19 1 77d 73d