syzbot


bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 103
Parent subsystem(s): kernel (96)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in bnep_add_connection bluetooth actionable 19 1 9d06h 2d06h
WARNING in hci_send_acl (4) bluetooth -1 1 11d 7d01h
KASAN: slab-use-after-free Read in skb_dequeue (2) bluetooth actionable 19 1 13d 9d02h PATCH [8d22h]
WARNING in hci_conn_drop (4) bluetooth prio:high -1 3 3d11h 13d
KASAN: slab-use-after-free Read in l2cap_disconn_ind (3) bluetooth prio:high 19 1 18d 15d
WARNING in l2cap_send_conn_req bluetooth prio:low -1 2 8d09h 22d PATCH [7d23h]
KASAN: slab-use-after-free Read in skb_pull (2) bluetooth prio:normal 19 1 28d 27d PATCH [19d]
WARNING in hci_send_cmd (4) bluetooth -1 3 22d 32d 💬 1 [31d]
KASAN: slab-use-after-free Read in process_one_work (2) bluetooth prio:high 19 3 6d12h 36d
WARNING in l2cap_conn_start bluetooth -1 5 11d 77d
WARNING in hci_connect_sco bluetooth prio:low -1 syz 5 84d 154d 💬 2 [115d]
INFO: task hung in get_signal (2) prio:low bluetooth 1 syz 1 177d 173d
KASAN: slab-use-after-free Write in hci_conn_drop (3) bluetooth 22 C error 1023 56d 176d PATCH [106d]
INFO: trying to register non-static key in l2cap_unregister_user bluetooth -1 13 75d 223d
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth prio:high 19 syz error error 78 102d 317d 💬 3 [310d]
INFO: task hung in hci_remote_features_evt (2) bluetooth prio:high 1 syz error inconclusive 9 241d 386d
possible deadlock in l2cap_conn_del bluetooth 4 syz error error 569 63d 422d
KASAN: wild-memory-access Read in l2cap_connect_cfm bluetooth prio:high 19 C error 343 22h05m 436d 💬 1 [26d]
possible deadlock in l2cap_info_timeout bluetooth prio:high 4 94 63d 456d
KASAN: slab-use-after-free Read in force_devcd_write bluetooth 19 C 448 265d 519d 💬 4 [276d]
WARNING: held lock freed in bt_accept_dequeue bluetooth prio:high 4 32 2d00h 526d
WARNING in hci_conn_timeout (2) prio:low bluetooth -1 C error 16366 9m 526d
INFO: task hung in hci_cmd_sync_clear (3) bluetooth prio:high 1 syz done 110 2d10h 565d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 syz 163 1d19h 584d 💬 1 [194d]
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb bluetooth prio:high 19 syz error 202 1h42m 584d 💬 3 [26d]
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) prio:high bluetooth 19 syz error 92 1d14h 604d 💬 3 [124d]
WARNING: ODEBUG bug in hci_release_dev (2) prio:high bluetooth -1 C error 558 10h11m 673d PATCH [61d]
KASAN: slab-use-after-free Read in l2cap_recv_frame bluetooth prio:high 19 C inconclusive inconclusive 140 41d 761d 💬 2 [246d]
WARNING in hci_recv_frame bluetooth prio:low -1 C error 265 13h16m 762d 💬 1 [26d]
WARNING in l2cap_chan_send prio:high bluetooth -1 57 44d 774d
WARNING in l2cap_chan_del prio:high bluetooth -1 361 4d00h 801d
general protection fault in lock_sock_nested prio:high bluetooth 19 C done done 4502 12d 990d
WARNING in call_timer_fn bluetooth prio:high -1 C unreliable 9256 7h55m 1288d 💬 8 [26d]
general protection fault in l2cap_chan_timeout (3) bluetooth 19 C inconclusive inconclusive 89 4d19h 1567d
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (4) bluetooth 12 4 9d13h 13d
KCSAN: data-race in data_push_tail / number (6) ext4 bluetooth prio:low 6 4 22d 84d