syzbot

 sign-in | mailing list | source | docs
🐞 Open [1470]
≡ Subsystems
🐞 Fixed [6785]
🐞 Invalid [17509]
⬇ Missing Backports [220]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 97
Parent subsystem(s): kernel (92)
open (44):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (3) bluetooth 12 1 4d02h now
KASAN: slab-use-after-free Write in le_read_features_complete bluetooth 24 C error 18 4d06h 1d09h
INFO: task hung in get_signal (2) bluetooth 1 syz 1 7d12h 3d12h
KASAN: slab-use-after-free Write in hci_conn_drop (3) bluetooth 24 C error 44 13h13m 6d03h 💬 1 [5d12h]
KASAN: slab-use-after-free Read in skb_pull bluetooth 19 1 15d 11d
KASAN: slab-use-after-free Read in hci_cmd_work (2) bluetooth 19 27015 20d 21d
memory leak in __hci_cmd_sync_sk bluetooth usb 3 C 1 16d 22d 💬 19 [15d]
linux-next test error: KASAN: slab-use-after-free Read in hci_cmd_work bluetooth -1 4 22d 24d
INFO: trying to register non-static key in l2cap_unregister_user bluetooth -1 1 57d 53d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start bluetooth 17 412 now 65d
KASAN: slab-use-after-free Read in l2cap_disconn_ind (2) bluetooth 19 6 31d 66d
WARNING in hci_conn_drop (3) bluetooth -1 2 34d 66d
BUG: unable to handle kernel paging request in l2cap_conn_del bluetooth 8 1 83d 79d
KASAN: slab-use-after-free Read in hidp_session_thread (2) bluetooth 19 2 40d 88d
WARNING in hci_devcd_register (2) bluetooth -1 4 96d 116d
stack segment fault in kernfs_rename_ns bluetooth 2 23 2d11h 142d
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth 19 syz error 15 6d04h 147d 💬 3 [140d]
INFO: task hung in hci_conn_failed (4) bluetooth 1 syz 17 4d04h 181d
INFO: task hung in hci_remote_features_evt (2) bluetooth 1 syz error inconclusive 9 71d 216d
possible deadlock in l2cap_conn_del bluetooth 4 syz error 416 12h19m 252d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 19 C error 116 3h52m 266d 💬 1 [58d]
possible deadlock in l2cap_info_timeout bluetooth 4 47 5h39m 286d
general protection fault in h5_recv bluetooth 10 C done 2589 43m 302d 💬 1 [12d]
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 19 19 98d 347d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth 19 C 448 95d 349d 💬 4 [106d]
WARNING: held lock freed in bt_accept_dequeue bluetooth 4 17 1d16h 356d
WARNING in hci_conn_timeout (2) bluetooth -1 C error 1921 15m 356d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth 1 syz done 39 9h52m 395d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth 24 C done 45438 2h41m 402d PATCH [32d]
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 8 129 39d 414d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 syz 102 6d07h 414d 💬 1 [24d]
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 19 syz error 92 4d09h 414d 💬 3 [13d]
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 19 61 43d 434d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 8 syz error 46 46d 437d 💬 1 [166d]
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth -1 C error 401 15h16m 503d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth 19 C inconclusive inconclusive 139 11d 591d 💬 2 [76d]
WARNING in hci_recv_frame bluetooth -1 C error 118 1d00h 592d 💬 1 [203d]
WARNING in l2cap_chan_send bluetooth -1 52 3d03h 604d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth 19 C error error 3383 482d 611d 💬 2 [516d]
WARNING in l2cap_chan_del bluetooth -1 332 2d01h 631d
general protection fault in lock_sock_nested bluetooth 19 C done done 3849 7h23m 820d
WARNING in call_timer_fn bluetooth -1 C unreliable 7773 1h47m 1118d 💬 8 [12d]
general protection fault in l2cap_chan_timeout (3) bluetooth 19 C inconclusive inconclusive 74 12d 1397d
general protection fault in skb_release_data (2) net bluetooth 24 C done error 703 252d 1917d
moderation (4):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync bluetooth 6 1 8h42m 8h41m
KCSAN: data-race in hci_uart_open / hci_uart_tty_close bluetooth 6 1 43d 43d
WARNING: refcount bug in hci_conn_del_sysfs bluetooth 13 1 81d 77d
KASAN: slab-use-after-free Read in skb_dequeue bluetooth 19 4 88d 185d