syzbot

 sign-in | mailing list | source | docs
🐞 Open [1591]
≡ Subsystems
🐞 Fixed [6234]
🐞 Invalid [15798]
⬇ Missing Backports [184]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

Applied filters: Label=subsystems:bluetooth (drop)
open (52):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (3) bluetooth C 1 10d 6d13h
WARNING in hci_conn_drop (2) bluetooth 1 15d 11d
INFO: task hung in hci_remote_features_evt (2) bluetooth syz error 5 8d08h 13d
KASAN: slab-out-of-bounds Read in hci_cmd_sync_alloc bluetooth C 4 6d08h 16d
KASAN: slab-use-after-free Read in bt_accept_dequeue (2) bluetooth 1 27d 22d
possible deadlock in l2cap_conn_del bluetooth syz error 124 14h51m 49d
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump bluetooth C 673 1h43m 50d 💬 1 [27d]
BUG: soft lockup in hci_cmd_timeout (2) bluetooth usb syz 1 65d 61d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 5 40d 64d
WARNING in hci_send_cmd (2) bluetooth 2 22d 83d
possible deadlock in l2cap_info_timeout bluetooth 14 2d14h 83d
WARNING: refcount bug in sco_conn_put bluetooth 1 92d 88d
general protection fault in bcsp_recv bluetooth C error 269 3h32m 94d
general protection fault in h5_recv bluetooth C done 384 38m 100d 💬 1 [28d]
general protection fault in __timer_delete_sync bluetooth C done 3 98d 101d 💬 1 [101d]
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3) bluetooth 8 66d 112d
KASAN: slab-use-after-free Read in sock_def_readable bluetooth net 3 96d 113d
KASAN: slab-use-after-free Read in force_suspend_read bluetooth 8 94d 122d
general protection fault in hci_devcd_register bluetooth 26 10d 130d
WARNING in hci_devcd_register bluetooth 3 57d 135d
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 15 26d 144d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth syz 347 2d13h 146d 💬 1 [28d]
WARNING in sco_conn_put bluetooth 2 89d 149d
WARNING: held lock freed in bt_accept_dequeue bluetooth 4 18d 153d
WARNING in hci_conn_timeout (2) bluetooth C error 436 22h18m 153d
KASAN: slab-use-after-free Write in sco_conn_put bluetooth 95 55d 169d
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth C 17 48d 185d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth syz done 5 9d12h 192d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 11 22d 194d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth syz done 37748 7m 199d 💬 1 [28d]
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 35 1d04h 211d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 39 17h27m 211d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 36 15h37m 211d
KASAN: slab-use-after-free Read in cmd_complete_rsp bluetooth 18 67d 211d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 45 23d 231d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 15 10d 235d
BUG: corrupted list in mgmt_pending_remove bluetooth C error 43 5d18h 261d 💬 1 [173d]
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth C error 248 3d11h 300d
possible deadlock in sco_connect_cfm bluetooth 21 70d 315d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 47 7d21h 335d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive error 141 54d 372d 💬 2 [60d]
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth C unreliable 39 2d12h 382d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth C inconclusive inconclusive 137 20d 388d 💬 2 [92d]
WARNING in hci_recv_frame bluetooth C error 64 1d00h 389d 💬 1 [1d00h]
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 27 18d 389d
WARNING in l2cap_chan_send bluetooth 43 29d 401d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth C error error 3383 279d 408d 💬 2 [313d]
WARNING in l2cap_chan_del bluetooth 216 3d10h 429d
general protection fault in lock_sock_nested bluetooth C done done 2333 2h41m 617d
WARNING in call_timer_fn bluetooth C unreliable 6725 1h05m 916d 💬 8 [28d]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 35 12h07m 1194d
general protection fault in skb_release_data (2) net bluetooth C done error 703 49d 1714d
moderation (1):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hidp_session_thread bluetooth 3 45d 96d