syzbot


bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 105
Parent subsystem(s): kernel (93)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Write in bt_accept_dequeue bluetooth prio:high actionable 22 3 6d16h 6d03h 💬 1 [5d16h]
INFO: trying to register non-static key in bt_accept_unlink bluetooth prio:high -1 2 6d13h 12d
WARNING in hci_send_acl (4) prio:low bluetooth -1 1 39d 35d
KASAN: slab-use-after-free Read in skb_dequeue (2) actionable prio:high bluetooth 19 1 41d 37d PATCH [37d]
WARNING in hci_conn_drop (4) prio:high bluetooth -1 4 27d 41d
KASAN: slab-use-after-free Read in l2cap_disconn_ind (3) prio:high bluetooth 19 1 47d 43d
WARNING in l2cap_send_conn_req prio:low bluetooth -1 3 17d 50d PATCH [36d]
KASAN: slab-use-after-free Read in skb_pull (2) prio:normal bluetooth 19 1 57d 56d PATCH [47d]
WARNING in hci_send_cmd (4) prio:high bluetooth -1 3 51d 61d 💬 1 [60d]
KASAN: slab-use-after-free Read in process_one_work (2) bluetooth prio:high 19 3 35d 64d
WARNING in l2cap_conn_start prio:low bluetooth -1 5 39d 106d
WARNING in hci_connect_sco prio:low bluetooth -1 syz 5 113d 183d 💬 2 [144d]
INFO: task hung in get_signal (2) prio:low bluetooth 1 syz 1 206d 202d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start prio:normal bluetooth usb 17 2866 15m 263d PATCH [35d]
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth prio:high 19 syz error error 78 131d 346d 💬 3 [339d]
INFO: task hung in hci_remote_features_evt (2) prio:high bluetooth 1 syz error inconclusive 9 270d 415d
KASAN: wild-memory-access Read in l2cap_connect_cfm prio:high bluetooth 19 C error 345 27d 465d 💬 1 [23d]
KASAN: slab-use-after-free Read in force_devcd_write bluetooth 19 C 448 294d 548d 💬 4 [304d]
WARNING: held lock freed in bt_accept_dequeue prio:high bluetooth 4 34 17d 554d
WARNING in hci_conn_timeout (2) prio:low bluetooth -1 C error 19989 1h20m 555d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 syz 173 4d18h 612d 💬 1 [23d]
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb prio:high bluetooth 19 syz error 203 27d 612d 💬 3 [23d]
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) prio:high bluetooth 19 syz error 104 6d21h 632d 💬 3 [23d]
WARNING: ODEBUG bug in hci_release_dev (2) prio:high bluetooth -1 C error 586 1d21h 701d PATCH [89d]
KASAN: slab-use-after-free Read in l2cap_recv_frame prio:high bluetooth 19 C inconclusive inconclusive 140 69d 789d 💬 2 [274d]
WARNING in hci_recv_frame prio:low bluetooth -1 C error 266 26d 790d 💬 1 [54d]
WARNING in l2cap_chan_send prio:high bluetooth -1 58 2d13h 803d
WARNING in l2cap_chan_del prio:high bluetooth -1 371 6h08m 830d
general protection fault in lock_sock_nested prio:high bluetooth 19 C done done 4503 12d 1018d
WARNING in call_timer_fn bluetooth prio:high -1 C unreliable 9400 6h14m 1317d 💬 8 [23d]
general protection fault in l2cap_chan_timeout (3) bluetooth 19 C inconclusive inconclusive 92 12d 1596d
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (4) prio:high bluetooth 12 4 38d 42d