syzbot

 sign-in | mailing list | source | docs
🐞 Open [1570]
≡ Subsystems
🐞 Fixed [6412]
🐞 Invalid [16289]
⬇ Missing Backports [199]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

Applied filters: Label=subsystems:bluetooth (drop)
open (43):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth bcachefs 19 syz 2 4d06h 3d02h 💬 3 [2d10h]
KASAN: slab-use-after-free Read in btusb_disconnect bluetooth usb 19 C 4 14d 13d 💬 1 [13d]
KASAN: slab-out-of-bounds Write in enqueue_timer bluetooth 23 1 29d 24d
INFO: task hung in hci_conn_failed (4) bluetooth 1 syz 5 39d 36d
WARNING in hci_conn_drop (2) bluetooth -1 1 73d 69d
INFO: task hung in hci_remote_features_evt (2) bluetooth 1 syz error 8 21d 71d
KASAN: slab-use-after-free Read in bt_accept_dequeue (2) bluetooth 19 1 85d 80d
possible deadlock in l2cap_conn_del bluetooth 4 syz error 197 2h39m 108d
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump bluetooth 17 C 1206 2h00m 108d PATCH [1h11m]
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 19 13 5d07h 122d
WARNING in hci_send_cmd (2) bluetooth -1 2 80d 141d
possible deadlock in l2cap_info_timeout bluetooth 4 28 1d05h 142d
general protection fault in bcsp_recv bluetooth 8 C error 547 3h49m 152d PATCH [17d]
general protection fault in h5_recv bluetooth 10 C done 1016 2h58m 158d 💬 1 [24d]
general protection fault in __timer_delete_sync bluetooth 2 C done 3 156d 159d 💬 1 [159d]
general protection fault in hci_devcd_register bluetooth 17 27 22d 188d
KASAN: slab-use-after-free Read in msft_opcode_get bluetooth 19 17 39d 203d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth 19 C 363 3d04h 204d 💬 4 [13d]
WARNING: held lock freed in bt_accept_dequeue bluetooth 4 8 45d 211d
WARNING in hci_conn_timeout (2) bluetooth -1 C error 556 18h36m 212d
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth 7 C 23 23d 243d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth 1 syz done 12 13d 250d
KASAN: slab-use-after-free Read in l2cap_register_user bluetooth 19 12 57d 252d
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth 24 syz done 41657 21m 258d 💬 1 [24d]
BUG: corrupted list in hci_cmd_sync_dequeue_once bluetooth 8 71 2d20h 269d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 62 14h57m 269d
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 19 50 2d10h 269d
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 19 53 7d04h 289d
BUG: corrupted list in _hci_cmd_sync_cancel_entry bluetooth 8 syz error 21 6d04h 293d 💬 1 [21d]
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth -1 C error 312 2d06h 358d
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2) bluetooth 19 47 65d 393d
BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth 19 C inconclusive error 144 9d17h 430d 💬 2 [118d]
possible deadlock in mgmt_remove_adv_monitor_complete bluetooth 4 C unreliable done 39 60d 440d
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth 19 C inconclusive inconclusive 139 8d04h 446d 💬 2 [150d]
WARNING in hci_recv_frame bluetooth -1 C error 76 21h23m 447d 💬 1 [59d]
KASAN: slab-use-after-free Read in hci_disconnect bluetooth 19 27 76d 447d
WARNING in l2cap_chan_send bluetooth -1 44 25d 459d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth 19 C error error 3383 337d 466d 💬 2 [371d]
WARNING in l2cap_chan_del bluetooth -1 281 1h00m 487d
general protection fault in lock_sock_nested bluetooth 19 C done done 2986 8h40m 675d
WARNING in call_timer_fn bluetooth -1 C unreliable 7121 1h49m 974d 💬 8 [24d]
general protection fault in l2cap_chan_timeout (3) bluetooth 19 C inconclusive inconclusive 48 1d01h 1253d
general protection fault in skb_release_data (2) net bluetooth 24 C done error 703 107d 1772d
moderation (2):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
stack segment fault in kernfs_rename_ns bluetooth 2 4 2d09h 9d16h
KASAN: slab-use-after-free Read in skb_dequeue bluetooth 19 1 44d 40d