syzbot

 sign-in | mailing list | source | docs
🐞 Open [1502]
≡ Subsystems
🐞 Fixed [6625]
🐞 Invalid [16950]
⬇ Missing Backports [210]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

WARNING in hci_recv_frame

Status: upstream: reported C repro on 2024/04/26 12:10
Subsystems: bluetooth
[Documentation on labels]
Reported-by: syzbot+3e07a461b836821ff70e@syzkaller.appspotmail.com
First crash: 524d, last: 1d17h
Cause bisection: failed (error log, bisect log)
  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [bluetooth?] WARNING in hci_recv_frame 1 (5) 2025/05/19 17:27
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING in hci_recv_frame -1 1 364d 364d 0/3 auto-obsoleted due to no activity on 2025/01/11 11:35
linux-5.15 WARNING in hci_recv_frame origin:lts-only -1 syz 1 95d 97d 0/3 upstream: reported syz repro on 2025/06/27 08:19
▶ ▼ Last patch testing requests (6)
Created Duration User Patch Repo Result
2025/08/07 16:15 21m retest repro upstream OK log
2025/05/20 10:50 21m hdanton@sina.com patch upstream OK log
2025/05/17 00:01 19m retest repro upstream OK log
2025/05/17 00:01 19m retest repro upstream OK log
2025/03/18 04:08 2h49m retest repro upstream OK log
2024/11/20 11:47 22m hdanton@sina.com patch upstream OK log

Sample crash report:
------------[ cut here ]------------
workqueue: cannot queue hci_rx_work on wq hci0
WARNING: CPU: 0 PID: 13414 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160 kernel/workqueue.c:2254
Modules linked in:
CPU: 0 UID: 0 PID: 13414 Comm: syz.2.3146 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:__queue_work+0xd03/0x1160 kernel/workqueue.c:2254
Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 3f 7a 38 00 90 0f 0b 90 e9 b4 f5 ff
RSP: 0018:ffffc9000633fbf8 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388
RDX: ffff88802d3e4880 RSI: ffffffff817a4395 RDI: 0000000000000001
RBP: ffff88802bbd0ac0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008
R13: ffff888038118800 R14: 0000000000000000 R15: ffff888038118978
FS:  00007f89c75516c0(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f89c7550f98 CR3: 0000000032ee1000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 queue_work_on+0x1a4/0x1f0 kernel/workqueue.c:2390
 queue_work include/linux/workqueue.h:669 [inline]
 hci_recv_frame+0x503/0x880 net/bluetooth/hci_core.c:2968
 vhci_get_user drivers/bluetooth/hci_vhci.c:520 [inline]
 vhci_write+0x399/0x480 drivers/bluetooth/hci_vhci.c:616
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x7d3/0x11d0 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f89c678d97f
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
RSP: 002b:00007f89c7551000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f89c69e6090 RCX: 00007f89c678d97f
RDX: 0000000000000007 RSI: 0000200000000040 RDI: 00000000000000ca
RBP: 00007f89c6811f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000000
R13: 00007f89c69e6128 R14: 00007f89c69e6090 R15: 00007ffebece68d8
 </TASK>

Crashes (94):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/23 21:29 upstream cec1e6e5d1ab e667a34f .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in hci_recv_frame
2025/09/17 03:50 upstream 5aca7966d2a7 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in hci_recv_frame
2025/04/20 04:59 upstream 119009db2674 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in hci_recv_frame
2024/11/20 09:17 upstream a5c93bfec0be 7d02db5a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in hci_recv_frame
2025/10/01 00:39 upstream 30d4efb2f5a5 65a0eece .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/09/27 18:39 upstream fec734e8d564 001c9061 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/09/24 13:21 upstream cec1e6e5d1ab 0abd0691 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/09/20 18:28 upstream cd89d487374c 67c37560 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/09/17 23:01 upstream d4b779985a6c e2beed91 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/09/15 06:29 upstream 79e8447ec662 e2beed91 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/09/13 05:27 upstream 22f20375f5b7 e2beed91 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/09/07 03:52 upstream b236920731dd d291dd2d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/08/28 06:09 upstream 39f90c196721 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/08/27 02:49 upstream fab1beda7597 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/08/14 13:44 upstream 0cc53520e68b dcc075fb .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/08/08 12:43 upstream bec077162bd0 56444e07 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/07/24 16:06 upstream 25fae0b93d1d 65d60d73 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/07/22 02:03 upstream 89be9a83ccf1 1555463b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/07/19 16:22 upstream 4871b7cb27f4 7117feec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/07/16 22:38 upstream 155a3c003e55 44f8051e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/07/06 18:23 upstream 1f988d0788f5 4f67c4ae .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/06/29 21:27 upstream afa9a6f4f574 fc9d8ee5 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/06/25 21:39 upstream 92ca6c498a5e 26d77996 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/06/15 05:43 upstream 8c6bc74c7f89 5f4b362d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/06/12 16:37 upstream 2c4a1f3fe03e 98683f8f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/06/09 21:16 upstream 19272b37aa4f 4826c28e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/06/06 23:13 upstream c0c9379f235d 4826c28e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/30 08:41 upstream f66bc387efbe 3d2f584d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/26 08:24 upstream 0ff41df1cb26 2d4582d0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/25 05:10 upstream b1427432d3b6 ed351ea7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/23 20:21 upstream 94305e83eccb f8cc0c83 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/19 17:27 upstream a5806cd506af 27f68995 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/19 15:25 upstream a5806cd506af 27f68995 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/17 18:18 upstream 172a9d94339c f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/17 09:43 upstream 172a9d94339c f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/17 07:36 upstream 172a9d94339c f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/02 02:18 upstream 4f79eaa2ceac 51b137cd .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/05/01 09:15 upstream 7a13c14ee59d ce7952f4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/04/23 07:48 upstream bc3372351d0c 53a8b9bd .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/04/23 01:05 upstream bc3372351d0c 53a8b9bd .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/04/21 03:19 upstream 6fea5fabd332 2a20f901 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/04/12 19:22 upstream 3bde70a2c827 0bd6db41 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/04/08 17:53 upstream 0af2f6be1b42 a775275d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/04/06 17:26 upstream f4d2ef48250a 1c65791e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/04/03 20:20 upstream a2cc6ff5ec8f d7ae3a11 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/03/31 08:31 upstream 4e82c87058f4 d3999433 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/03/29 12:57 upstream 0c86b42439b6 cf25e2c2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/03/20 16:17 upstream a7f2e10ecd8f 62330552 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/03/20 12:59 upstream a7f2e10ecd8f 62330552 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/03/04 04:00 upstream 99fa936e8e4f c3901742 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/03/03 14:34 upstream 7eb172143d55 c3901742 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2025/02/27 20:33 upstream dd83757f6e68 6a8fcbc4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hci_recv_frame
2024/06/18 13:47 upstream 2ccbdf43d5e7 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in hci_recv_frame
2024/12/02 11:50 bpf 537a2525eaf7 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in hci_recv_frame
2024/07/31 05:46 net 84383b5ef4cd 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in hci_recv_frame
2024/07/20 02:23 net-next 58f9416d413a 890ce4f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-net-next-test-gce WARNING in hci_recv_frame
2024/04/26 10:28 net-next 2bd87951de65 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-net-next-test-gce WARNING in hci_recv_frame
2024/11/22 22:56 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 7b1d1d4cfac0 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in hci_recv_frame
* Struck through repros no longer work on HEAD.