Title | Replies (including bot) | Last reply |
---|---|---|
[syzbot] [bluetooth?] BUG: corrupted list in hci_cmd_sync_dequeue_once | 0 (1) | 2024/10/21 08:48 |
syzbot |
sign-in | mailing list | source | docs |
Title | Replies (including bot) | Last reply |
---|---|---|
[syzbot] [bluetooth?] BUG: corrupted list in hci_cmd_sync_dequeue_once | 0 (1) | 2024/10/21 08:48 |
non-paged memory list_del corruption, ffff8880288d6100->next is LIST_POISON1 (dead000000000100) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:58! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 1 UID: 0 PID: 5848 Comm: kworker/u9:7 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: hci6 hci_conn_timeout RIP: 0010:__list_del_entry_valid_or_report+0x10f/0x190 lib/list_debug.c:56 Code: 00 f9 a0 8c 4c 89 fe e8 6f 9e 23 fc 90 0f 0b 48 89 df e8 94 09 06 fd 48 c7 c7 60 f9 a0 8c 4c 89 fe 48 89 da e8 52 9e 23 fc 90 <0f> 0b 48 89 df e8 77 09 06 fd 48 c7 c7 c0 f9 a0 8c 4c 89 fe 48 89 RSP: 0018:ffffc9000339fa28 EFLAGS: 00010246 RAX: 000000000000004e RBX: dead000000000100 RCX: 8688ec4cc9eec700 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffff8880288d6120 R08: ffffffff81a2ae7c R09: fffffbfff1d7a73c R10: dffffc0000000000 R11: fffffbfff1d7a73c R12: dead000000000122 R13: dffffc0000000000 R14: dead000000000100 R15: ffff8880288d6100 FS: 0000000000000000(0000) GS:ffff88812510f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f318fda3f98 CR3: 000000004b056000 CR4: 0000000000350ef0 Call Trace: <TASK> __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del include/linux/list.h:229 [inline] _hci_cmd_sync_cancel_entry net/bluetooth/hci_sync.c:647 [inline] hci_cmd_sync_cancel_entry net/bluetooth/hci_sync.c:851 [inline] hci_cmd_sync_dequeue_once+0x262/0x360 net/bluetooth/hci_sync.c:870 hci_cancel_connect_sync+0xc3/0x120 net/bluetooth/hci_sync.c:-1 hci_abort_conn+0x194/0x330 net/bluetooth/hci_conn.c:3060 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xac5/0x18e0 kernel/workqueue.c:3319 worker_thread+0x870/0xd30 kernel/workqueue.c:3400 kthread+0x7ab/0x920 kernel/kthread.c:464 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_del_entry_valid_or_report+0x10f/0x190 lib/list_debug.c:56 Code: 00 f9 a0 8c 4c 89 fe e8 6f 9e 23 fc 90 0f 0b 48 89 df e8 94 09 06 fd 48 c7 c7 60 f9 a0 8c 4c 89 fe 48 89 da e8 52 9e 23 fc 90 <0f> 0b 48 89 df e8 77 09 06 fd 48 c7 c7 c0 f9 a0 8c 4c 89 fe 48 89 RSP: 0018:ffffc9000339fa28 EFLAGS: 00010246 RAX: 000000000000004e RBX: dead000000000100 RCX: 8688ec4cc9eec700 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffff8880288d6120 R08: ffffffff81a2ae7c R09: fffffbfff1d7a73c R10: dffffc0000000000 R11: fffffbfff1d7a73c R12: dead000000000122 R13: dffffc0000000000 R14: dead000000000100 R15: ffff8880288d6100 FS: 0000000000000000(0000) GS:ffff88812500f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564d5c34ef50 CR3: 000000004b510000 CR4: 0000000000350ef0
Time | Kernel | Commit | Syzkaller | Config | Log | Report | Syz repro | C repro | VM info | Assets (help?) | Manager | Title |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2025/03/28 07:14 | upstream | 1a9239bb4253 | 6c09fb82 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2025/03/20 08:49 | upstream | a7f2e10ecd8f | 3b7445cf | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2025/03/18 02:40 | upstream | 4701f33a1070 | ce3352cd | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2025/03/12 06:41 | upstream | 0fed89a961ea | ee70e6db | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2025/02/19 04:27 | upstream | 6537cfb395f3 | 9a14138f | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2025/01/09 19:01 | upstream | eea6e4b4dfb8 | 40f46913 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2024/08/21 16:05 | upstream | b311c1b497e5 | db5852f9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2024/06/24 05:08 | upstream | 7c16f0a4ed1c | edc5149a | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2025/03/26 13:21 | net-next | a19f40d919ca | 89d30d73 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2024/12/20 22:50 | linux-next | 8155b4ef3466 | 1ac6aa80 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-linux-next-kasan-gce-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2024/12/20 05:54 | linux-next | 8503810115fb | 1d58202c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-linux-next-kasan-gce-root | BUG: corrupted list in hci_cmd_sync_dequeue_once | ||
2024/09/27 19:40 | linux-next | 40e0c9d414f5 | 2b1784d6 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-linux-next-kasan-gce-root | BUG: corrupted list in hci_cmd_sync_dequeue_once |