syzbot


bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): johan.hedberg@gmail.com, luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 58
Parent subsystem(s): kernel (50)
open (31):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in __lock_sock bluetooth C 1 18d 18d 💬 0 [18d]
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth C done 68 3h42m 24d PATCH [23d]
possible deadlock in hci_error_reset bluetooth 1 29d 25d 💬 0 [25d]
KASAN: slab-use-after-free Read in l2cap_connect bluetooth 1 33d 26d 💬 0 [26d]
KASAN: null-ptr-deref Read in ida_free (4) bluetooth C done 29 2d02h 26d 💬 0 [14d]
INFO: trying to register non-static key in sco_sock_timeout (2) bluetooth 1 32d 28d 💬 0 [28d]
WARNING in hci_send_acl (2) bluetooth 1 33d 29d 💬 0 [29d]
KASAN: slab-use-after-free Write in hci_conn_drop (2) bluetooth syz 4 23d 38d 💬 0 [37d]
KASAN: slab-use-after-free Read in sco_chan_del bluetooth 1 46d 40d 💬 0 [40d]
KASAN: slab-use-after-free Read in release_sock bluetooth 1 51d 46d 💬 0 [46d]
possible deadlock in hci_rfkill_set_block bluetooth C done 2441 1h33m 48d 💬 0 [6d22h]
possible deadlock in hci_dev_do_close bluetooth C done 5576 1h57m 77d 💬 0 [6d22h]
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb bluetooth 1 88d 81d 💬 0 [81d]
general protection fault in lock_sock_nested bluetooth C done 50 16d 91d 💬 0 [91d]
memory leak in hci_conn_add (2) bluetooth C 65 41d 99d 💬 0 [99d]
KASAN: slab-use-after-free Write in __sco_sock_close bluetooth C done done 61 45d 101d 💬 0 [14d]
KASAN: slab-use-after-free Read in hci_send_acl bluetooth C done 1321 8d02h 111d 💬 0 [6d22h]
BUG: sleeping function called from invalid context in hci_cmd_sync_submit bluetooth C done 3397 26d 160d 💬 0 [69d]
WARNING: refcount bug in sco_sock_timeout (2) bluetooth 3 29d 166d 💬 0 [166d]
KASAN: slab-use-after-free Write in sco_conn_del bluetooth C done 32 4d10h 195d 💬 1 [1d21h]
possible deadlock in rfcomm_dlc_exists bluetooth C error 7778 11m 324d 💬 0 [6d22h]
WARNING in call_timer_fn bluetooth syz unreliable 445 8h35m 389d 💬 8 [6d22h]
possible deadlock in discov_off bluetooth 121 4d06h 434d 💬 0 [6d22h]
possible deadlock in hci_unregister_dev bluetooth 171 1d05h 476d 💬 0 [6d22h]
general protection fault in l2cap_chan_timeout (3) bluetooth C inconclusive inconclusive 4 19d 668d 💬 0 [34d]
possible deadlock in rfcomm_sk_state_change bluetooth C done 15259 now 819d PATCH [333d]
INFO: task can't die in __lock_sock bluetooth C done error 1067 33d 847d PATCH [797d]
KASAN: use-after-free Read in __queue_work (3) bluetooth syz done done 83 390d 1219d 💬 1 [941d]
WARNING: ODEBUG bug in put_device bluetooth syz done error 43 95d 1221d 💬 0 [163d]
KASAN: use-after-free Read in __sco_sock_close bluetooth syz error error 1 1224d 1223d 💬 0 [1223d]
WARNING in hci_conn_timeout bluetooth C done 4863 2h43m 1226d PATCH [115d]
moderation (2):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING: ODEBUG bug in hci_abort_conn_sync bluetooth 1 81d 77d 💬 0 [never]
KASAN: slab-use-after-free Read in lookup_object_or_alloc bluetooth 2 68d 78d 💬 0 [never]