syzbot


WARNING in hci_conn_timeout

Status: upstream: reported C repro on 2023/03/10 14:50
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+b3668760e544f4a0b191@syzkaller.appspotmail.com
First crash: 348d, last: 11d
Fix commit to backport (bisect log) :
tree: upstream
commit 5af1f84ed13a416297ab9ced7537f4d5ae7f329a
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: Thu Aug 3 18:04:51 2023 +0000

  Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync

  
Bug presence (2)
Date Name Commit Repro Result
2023/11/05 linux-5.15.y (ToT) 12952a23a5da C [report] WARNING in hci_conn_timeout
2023/11/05 upstream (ToT) 1c41041124bd C Didn't crash
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in hci_conn_timeout bluetooth C done 4910 1d06h 1299d 0/26 upstream: reported C repro on 2020/08/01 18:55
linux-4.14 WARNING in hci_conn_timeout C inconclusive 27 367d 1301d 0/1 upstream: reported C repro on 2020/07/31 02:13
linux-4.19 WARNING in hci_conn_timeout C error 127 353d 1299d 0/1 upstream: reported C repro on 2020/08/01 17:09
linux-6.1 WARNING in hci_conn_timeout origin:lts-only C done 636 5d07h 350d 0/3 upstream: reported C repro on 2023/03/08 17:34
Fix bisection attempts (1)
Created Duration User Patch Repo Result
2023/11/21 12:57 5h10m fix candidate upstream job log (1)

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3529 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450
Modules linked in:
CPU: 0 PID: 3529 Comm: kworker/u5:2 Not tainted 5.15.145-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Workqueue: hci0 hci_conn_timeout
RIP: 0010:hci_conn_timeout+0x250/0x450 net/bluetooth/hci_conn.c:443
Code: e3 8d e8 93 21 8f f8 48 8b 35 74 e3 a8 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a5 c3 17 f8 e8 f0 6b 45 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff
RSP: 0018:ffffc90002147c28 EFLAGS: 00010293
RAX: ffffffff893abb80 RBX: ffff8880151a6138 RCX: ffff88807a54d940
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: 00000000ffffffff R08: ffffffff893ab991 R09: ffffed1002a34c03
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff888015dc8128 R14: ffff8880151a6000 R15: ffff888015dc8118
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f14d8b16063 CR3: 000000001a1fd000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310
 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457
 kthread+0x3f6/0x4f0 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>

Crashes (199):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/01 15:32 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/06/27 11:18 linux-5.15.y f67653019430 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/06/20 19:41 linux-5.15.y 471e639e59d1 09ffe269 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/05/24 07:09 linux-5.15.y 9d6bde853685 4bce1a3e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/03/20 12:35 linux-5.15.y 8020ae3c051d 7939252e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/08/22 11:56 linux-5.15.y f6f7927ac664 6b415825 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/20 06:00 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/19 13:29 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/06 04:07 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/06/06 19:36 linux-5.15.y d7af3e5ba454 a4ae4f42 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/05/27 21:43 linux-5.15.y 1fe619a7d252 cf184559 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/05/07 17:13 linux-5.15.y 8a7f2a5c5aa1 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/03/11 09:59 linux-5.15.y abddfcf701a5 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/04/30 06:50 linux-5.15.y f48aeeaaa64c 62df2017 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/02/01 05:41 linux-5.15.y 6139f2a02fe0 373b66cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/01/26 09:55 linux-5.15.y 6139f2a02fe0 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/01/01 06:25 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/12/26 13:02 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/12/24 00:33 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/12/06 05:29 linux-5.15.y 9b91d36ba301 858d62d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/11/25 02:58 linux-5.15.y 2a910f4af54d 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/11/07 10:03 linux-5.15.y 12952a23a5da 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/11/01 17:59 linux-5.15.y 12952a23a5da 69904c9f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/10/17 09:45 linux-5.15.y 02e21884dcf2 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/10/12 02:13 linux-5.15.y 02e21884dcf2 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/09/25 08:52 linux-5.15.y b911329317b4 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/09/21 03:39 linux-5.15.y 35ecaa3632bf 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/09/20 14:52 linux-5.15.y 35ecaa3632bf 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/09/16 01:26 linux-5.15.y aff03380bda4 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/02/10 09:24 linux-5.15.y 6139f2a02fe0 77b23aa1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/02/07 22:44 linux-5.15.y 6139f2a02fe0 6404acf9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/02/06 07:51 linux-5.15.y 6139f2a02fe0 6404acf9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/30 02:31 linux-5.15.y 6139f2a02fe0 991a98f4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/26 11:29 linux-5.15.y 6139f2a02fe0 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/22 15:18 linux-5.15.y ddcaf4999061 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/22 05:20 linux-5.15.y ddcaf4999061 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/21 03:40 linux-5.15.y ddcaf4999061 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/16 03:25 linux-5.15.y ddcaf4999061 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/12 22:26 linux-5.15.y 26c690eff0a5 551587c1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/10 10:02 linux-5.15.y 26c690eff0a5 b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/07 12:14 linux-5.15.y 26c690eff0a5 d0304e9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/01/01 04:33 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/12/25 08:47 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/12/16 03:45 linux-5.15.y d0fc081c6241 3222d10c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/11/30 23:56 linux-5.15.y a78d278e01b1 f819d6f7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/11/24 01:24 linux-5.15.y 2a910f4af54d 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/11/05 02:19 linux-5.15.y 12952a23a5da 500bfdc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/10/23 01:02 linux-5.15.y 00c03985402e 361b23dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/10/15 02:26 linux-5.15.y 02e21884dcf2 f757a323 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/10/12 18:55 linux-5.15.y 02e21884dcf2 1b231e3c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/10/06 10:00 linux-5.15.y b911329317b4 db17ad9f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/09/19 03:01 linux-5.15.y aff03380bda4 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/30 22:40 linux-5.15.y 9e43368a3393 84803932 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/27 07:37 linux-5.15.y 5ddfe5cc8716 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/08/24 23:46 linux-5.15.y f6f7927ac664 49be837e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/08/22 21:33 linux-5.15.y f6f7927ac664 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/08/22 03:33 linux-5.15.y f6f7927ac664 6b415825 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/08/29 06:34 linux-5.15.y 5ddfe5cc8716 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/28 20:15 linux-5.15.y 5ddfe5cc8716 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/25 06:56 linux-5.15.y f6f7927ac664 49be837e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/24 01:45 linux-5.15.y f6f7927ac664 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/23 13:52 linux-5.15.y f6f7927ac664 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/23 13:20 linux-5.15.y f6f7927ac664 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/23 09:35 linux-5.15.y f6f7927ac664 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/03/10 14:49 linux-5.15.y abddfcf701a5 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
* Struck through repros no longer work on HEAD.