Questions about reproducing Android 11 vulnerabilities

[Ash4701]

Since I saw in the paper that using l2fuzz can test Android11 vulnerabilities, I tried to use l2fuzz to fuzz pixel5 (Android11/RQ1D.210105.003), but Bluetooth crash failed after 8 hours of testing. The environment I use has python3.6.9 and scapy2.4.4 installed for the virtual machine (ubuntu18.04.4). I would like to ask some details about this Android11 vulnerability and whether a specific bluetooth adapter is required, it would be better if you can provide the packets or logs where l2fuzz caused the crash. The bluetooth adapter I am using is Cambridge Silicon Radio CSR8510 A10. The following is some test information： ===================Test Informatoin=================== { "starting_time": "2023-02-13 16:39:57.167816", "interface": "Bluetooth_L2CAP", "toolVer": "1.0.0", "bdaddr": "14:C1:4E:FF:56:C5", "OUI": "Google, Inc.", "name": "Pixel 5", "Class of Device Value": "5898764", "Class of Device": { "major": "Phone", "minor": "Smartphone", "service": [ "Telephony", "Object Transfer", "Capturing", "Networking" ] }, "service": "AV Remote Control Target", "protocol": "L2CAP", "port": 23

}

================================================

Start Fuzzing... Please hit Ctrl + C to finish... [+] Tested 0 packets [!] Device is not paired with host('Connection refused - PSM not supported'). [!] Can't test service port that you've selected. Now set port as default PSM, '1'. [+] Tested 30007 packets [+] Tested 60013 packets