syzbot


WARNING in hci_conn_timeout

Status: upstream: reported C repro on 2023/03/10 14:50
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+b3668760e544f4a0b191@syzkaller.appspotmail.com
First crash: 814d, last: 1d16h
Fix commit to backport (bisect log) :
tree: upstream
commit 5af1f84ed13a416297ab9ced7537f4d5ae7f329a
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: Thu Aug 3 18:04:51 2023 +0000

  Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync

  
Bug presence (2)
Date Name Commit Repro Result
2023/11/05 linux-5.15.y (ToT) 12952a23a5da C [report] WARNING in hci_conn_timeout
2023/11/05 upstream (ToT) 1c41041124bd C Didn't crash
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in hci_conn_timeout bluetooth C done 6022 167d 1765d 28/28 fixed on 2024/12/16 09:50
linux-4.14 WARNING in hci_conn_timeout C inconclusive 27 832d 1766d 0/1 upstream: reported C repro on 2020/07/31 02:13
upstream WARNING in hci_conn_timeout (2) bluetooth C error 463 21h10m 166d 0/28 upstream: reported C repro on 2024/12/17 17:47
linux-4.19 WARNING in hci_conn_timeout C error 127 819d 1765d 0/1 upstream: reported C repro on 2020/08/01 17:09
linux-6.1 WARNING in hci_conn_timeout origin:lts-only C done 3695 2h21m 816d 0/3 upstream: reported C repro on 2023/03/08 17:34
Fix bisection attempts (1)
Created Duration User Patch Repo Result
2023/11/21 12:57 5h10m fix candidate upstream OK (1) job log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 146 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450
Modules linked in:
CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted 5.15.154-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: hci0 hci_conn_timeout
RIP: 0010:hci_conn_timeout+0x250/0x450 net/bluetooth/hci_conn.c:443
Code: e4 8d e8 c3 e4 8d f8 48 8b 35 b4 20 a8 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 70 16 f8 e8 00 22 44 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff
RSP: 0018:ffffc900015dfc28 EFLAGS: 00010293
RAX: ffffffff893c3a00 RBX: ffff88807a718138 RCX: ffff888018409dc0
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: 00000000ffffffff R08: ffffffff893c3811 R09: ffffed100f4e3003
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff888016fad528 R14: ffff88807a718000 R15: ffff888016fad518
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555555d36c8 CR3: 000000000c68e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310
 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
 </TASK>

Crashes (1220):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/13 06:20 linux-5.15.y cdfd0a7f0139 c8349e48 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/04/06 21:07 linux-5.15.y 9465fef4ae35 ca620dd8 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/01/01 15:32 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/06/27 11:18 linux-5.15.y f67653019430 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/06/20 19:41 linux-5.15.y 471e639e59d1 09ffe269 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/05/24 07:09 linux-5.15.y 9d6bde853685 4bce1a3e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/03/20 12:35 linux-5.15.y 8020ae3c051d 7939252e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/08/22 11:56 linux-5.15.y f6f7927ac664 6b415825 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/20 06:00 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/19 13:29 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/06 04:07 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/06/06 19:36 linux-5.15.y d7af3e5ba454 a4ae4f42 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/05/27 21:43 linux-5.15.y 1fe619a7d252 cf184559 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/05/07 17:13 linux-5.15.y 8a7f2a5c5aa1 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/03/11 09:59 linux-5.15.y abddfcf701a5 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/04/30 06:50 linux-5.15.y f48aeeaaa64c 62df2017 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/31 09:08 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/30 06:36 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/28 07:04 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/27 20:22 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/27 14:59 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/24 19:20 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/24 14:47 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/23 12:47 linux-5.15.y 98f47d0e9b8c fa44301a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/20 15:24 linux-5.15.y a68c15152131 b47f9e02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/20 01:20 linux-5.15.y a68c15152131 b84f0537 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/18 05:16 linux-5.15.y 3b8db0e4f263 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/18 02:02 linux-5.15.y 3b8db0e4f263 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/13 08:11 linux-5.15.y 3b8db0e4f263 f6671af7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/10 03:34 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/08 18:23 linux-5.15.y 16fdf2c7111b dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/05 04:08 linux-5.15.y 16fdf2c7111b b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/04/27 05:33 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/04/25 02:35 linux-5.15.y f7347f400572 9882047a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/04/24 17:13 linux-5.15.y f7347f400572 9882047a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/04/16 20:02 linux-5.15.y f7347f400572 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/04/13 19:21 linux-5.15.y f7347f400572 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/04/11 10:00 linux-5.15.y f7347f400572 94486846 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/04/10 09:53 linux-5.15.y 0c935c049b5c 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/04/09 19:49 linux-5.15.y 0c935c049b5c 47d015b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/04/08 18:23 linux-5.15.y 0c935c049b5c a775275d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/04/05 12:28 linux-5.15.y 0c935c049b5c c53ea9c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/03/26 22:55 linux-5.15.y 0c935c049b5c 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/03/26 19:38 linux-5.15.y 0c935c049b5c 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/03/23 16:19 linux-5.15.y 0c935c049b5c 4e8d3850 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/03/21 05:54 linux-5.15.y 0c935c049b5c 62330552 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/03/20 13:23 linux-5.15.y 0c935c049b5c 9209bc22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/03/19 22:50 linux-5.15.y 0c935c049b5c e20d7b13 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/03/19 00:26 linux-5.15.y 0c935c049b5c 22a6c2b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/03/18 11:55 linux-5.15.y 0c935c049b5c ce3352cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/30 09:57 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/28 08:22 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/27 23:55 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/27 09:03 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/25 07:06 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/24 00:48 linux-5.15.y 98f47d0e9b8c f8cc0c83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/22 21:02 linux-5.15.y 98f47d0e9b8c 0919b50b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/17 11:42 linux-5.15.y 3b8db0e4f263 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/16 20:47 linux-5.15.y 3b8db0e4f263 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/10 13:19 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/04/24 14:06 linux-5.15.y f7347f400572 9882047a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/04/07 11:39 linux-5.15.y 0c935c049b5c 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/04/07 02:27 linux-5.15.y 0c935c049b5c 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/04/02 05:10 linux-5.15.y 0c935c049b5c b8645499 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/03/31 02:58 linux-5.15.y 0c935c049b5c d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/03/27 04:18 linux-5.15.y 0c935c049b5c 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/03/23 12:14 linux-5.15.y 0c935c049b5c 4e8d3850 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/03/20 10:32 linux-5.15.y 0c935c049b5c 9209bc22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/03/18 22:00 linux-5.15.y 0c935c049b5c 22a6c2b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/03/10 14:49 linux-5.15.y abddfcf701a5 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
* Struck through repros no longer work on HEAD.