syzbot


bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 102
Parent subsystem(s): kernel (87)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
WARNING in l2cap_conn_start bluetooth -1 2 7d21h 20d
KCSAN: data-race in bacpy / memcmp race:harmful bluetooth 6 1 50d 39d
WARNING: locking bug in l2cap_unregister_user bluetooth 4 6 61d 97d
WARNING in hci_connect_sco bluetooth -1 syz 5 28d 97d 💬 2 [59d]
INFO: task hung in get_signal (2) bluetooth 1 syz 1 120d 116d
KASAN: slab-use-after-free Write in hci_conn_drop (3) bluetooth 22 C error 1022 18h12m 119d PATCH [50d]
INFO: trying to register non-static key in l2cap_unregister_user bluetooth -1 13 19d 167d
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start usb bluetooth 17 1404 1h24m 178d
stack segment fault in kernfs_rename_ns bluetooth 2 35 72d 255d
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth 19 syz error error 78 45d 261d 💬 3 [253d]
INFO: task hung in hci_remote_features_evt (2) bluetooth 1 syz error inconclusive 9 185d 330d
possible deadlock in l2cap_conn_del bluetooth 4 syz error 569 7d05h 366d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth 19 C error 273 3d09h 380d 💬 1 [18h08m]
possible deadlock in l2cap_info_timeout bluetooth 4 94 7d02h 400d
general protection fault in h5_recv bluetooth 10 C done 3515 53d 416d 💬 1 [63d]
KASAN: slab-use-after-free Read in force_devcd_write bluetooth 19 C 448 209d 462d 💬 4 [219d]
WARNING: held lock freed in bt_accept_dequeue bluetooth 4 30 8d10h 469d
WARNING in hci_conn_timeout (2) bluetooth -1 C error 13602 3h29m 470d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth 1 syz done 98 10d 508d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 syz 120 4d11h 527d 💬 1 [138d]
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth 19 syz error 147 3d11h 527d 💬 3 [127d]
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) bluetooth 19 syz error 73 22d 547d 💬 3 [68d]
WARNING: ODEBUG bug in hci_release_dev (2) bluetooth -1 C error 510 5d23h 616d PATCH [4d15h]
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth 19 C inconclusive inconclusive 140 54d 704d 💬 2 [189d]
WARNING in hci_recv_frame bluetooth -1 C error 167 3d10h 705d 💬 1 [18h08m]
WARNING in l2cap_chan_send bluetooth -1 55 5d09h 718d
KASAN: slab-use-after-free Read in __hci_req_sync bluetooth 19 C error error 3383 596d 724d 💬 2 [629d]
WARNING in l2cap_chan_del bluetooth -1 351 7d14h 745d
general protection fault in lock_sock_nested bluetooth 19 C done done 4468 4d02h 933d
WARNING in call_timer_fn bluetooth -1 C unreliable 8421 5h59m 1232d 💬 8 [18h08m]
general protection fault in l2cap_chan_timeout (3) bluetooth 19 C inconclusive inconclusive 84 2d12h 1511d
general protection fault in skb_release_data (2) net bluetooth 22 C done error 703 365d 2030d
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
general protection fault in l2cap_conn_del (2) bluetooth 2 1 9d13h 5d13h