syzbot

 sign-in | mailing list | source | docs
🐞 Open [1604]
≡ Subsystems
🐞 Fixed [6294]
🐞 Invalid [16026]
⬇ Missing Backports [190]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

Applied filters: Label=subsystems:bluetooth (drop)
open (46):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in skb_queue_purge_reason (3) bluetooth 2 2d16h 1h06m
INFO: task hung in hci_conn_failed (4) bluetooth syz 5 8d06h 4d22h
WARNING in hci_conn_drop (2) bluetooth 1 42d 38d
INFO: task hung in hci_remote_features_evt (2) bluetooth syz error 7 22h46m 40d
KASAN: slab-use-after-free Read in bt_accept_dequeue (2) bluetooth 1 53d 49d
possible deadlock in l2cap_conn_del bluetooth syz error 163 10h44m 76d
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump bluetooth C 871 17h15m 76d PATCH [2d06h]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 92d 88d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 6 7d06h 90d
WARNING in hci_send_cmd (2) bluetooth 2 49d 110d
possible deadlock in l2cap_info_timeout bluetooth 17 2h43m 110d
general protection fault in bcsp_recv bluetooth C error 386 3h13m 120d
general protection fault in h5_recv bluetooth C done 632 6h54m 126d 💬 1 [24d]
general protection fault in __timer_delete_sync bluetooth C done 3 125d 128d 💬 1 [127d]
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3) bluetooth 8 93d 139d
general protection fault in hci_devcd_register bluetooth 26 37d 156d
WARNING in hci_devcd_register bluetooth 3 84d 162d
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 17 7d19h 171d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth syz 350 6d09h 173d 💬 1 [24d]
WARNING: held lock freed in bt_accept_dequeue bluetooth 8 14d 180d
WARNING in hci_conn_timeout (2) bluetooth C error 491 4h18m 180d
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth C 23 6d12h 211d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth syz done 7 2d10h 219d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 12 26d 220d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth syz done 39725 now 226d 💬 1 [24d]
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 51 22h09m 238d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 45 1d17h 238d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 41 6d08h 238d
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 18 94d 238d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 48 22h40m 258d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 17 4d10h 261d
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth C error 250 12d 326d
possible deadlock in sco_connect_cfm bluetooth 21 96d 342d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 47 34d 361d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive error 141 81d 398d 💬 2 [87d]
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth C unreliable 39 29d 409d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive inconclusive 139 8d04h 415d 💬 2 [118d]
WARNING in hci_recv_frame bluetooth C error 72 1d05h 415d 💬 1 [27d]
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 27 45d 416d
WARNING in l2cap_chan_send bluetooth 43 56d 428d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 306d 434d 💬 2 [340d]
WARNING in l2cap_chan_del bluetooth 252 20h16m 455d
general protection fault in lock_sock_nested bluetooth C done done 2668 8h18m 644d
WARNING in call_timer_fn bluetooth C unreliable 6933 2h22m 942d 💬 8 [24d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 38 4d15h 1221d
general protection fault in skb_release_data (2) net bluetooth C done error 703 76d 1741d
moderation (2):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in skb_dequeue bluetooth 1 13d 9d10h
KASAN: slab-use-after-free Read in hidp_session_thread bluetooth 3 72d 122d