syzbot

 sign-in | mailing list | source | docs
🐞 Open [712]
🐞 Fixed [61]
🐞 Invalid [636]
⬇ Missing Backports [62]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

WARNING in hci_conn_timeout

Status: upstream: reported C repro on 2023/03/10 14:50
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+b3668760e544f4a0b191@syzkaller.appspotmail.com
First crash: 653d, last: 4h34m
Fix commit to backport (bisect log) :
tree: upstream
commit 5af1f84ed13a416297ab9ced7537f4d5ae7f329a
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: Thu Aug 3 18:04:51 2023 +0000

  Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync

  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/11/05 linux-5.15.y (ToT) 12952a23a5da C [report] WARNING in hci_conn_timeout
2023/11/05 upstream (ToT) 1c41041124bd C Didn't crash
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in hci_conn_timeout bluetooth C done 6022 6d13h 1604d 28/28 fixed on 2024/12/16 09:50
linux-4.14 WARNING in hci_conn_timeout C inconclusive 27 671d 1605d 0/1 upstream: reported C repro on 2020/07/31 02:13
upstream WARNING in hci_conn_timeout (2) bluetooth C error 62 2h46m 5d03h 0/28 upstream: reported C repro on 2024/12/17 17:47
linux-4.19 WARNING in hci_conn_timeout C error 127 658d 1604d 0/1 upstream: reported C repro on 2020/08/01 17:09
linux-6.1 WARNING in hci_conn_timeout origin:lts-only C done 2620 53m 655d 0/3 upstream: reported C repro on 2023/03/08 17:34
▶ ▼ Fix bisection attempts (1)
Created Duration User Patch Repo Result
2023/11/21 12:57 5h10m fix candidate upstream OK (1) job log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 146 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450
Modules linked in:
CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted 5.15.154-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: hci0 hci_conn_timeout
RIP: 0010:hci_conn_timeout+0x250/0x450 net/bluetooth/hci_conn.c:443
Code: e4 8d e8 c3 e4 8d f8 48 8b 35 b4 20 a8 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 70 16 f8 e8 00 22 44 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff
RSP: 0018:ffffc900015dfc28 EFLAGS: 00010293
RAX: ffffffff893c3a00 RBX: ffff88807a718138 RCX: ffff888018409dc0
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: 00000000ffffffff R08: ffffffff893c3811 R09: ffffed100f4e3003
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff888016fad528 R14: ffff88807a718000 R15: ffff888016fad518
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555555d36c8 CR3: 000000000c68e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310
 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
 </TASK>

Crashes (1054):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/13 06:20 linux-5.15.y cdfd0a7f0139 c8349e48 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/04/06 21:07 linux-5.15.y 9465fef4ae35 ca620dd8 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/01/01 15:32 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/06/27 11:18 linux-5.15.y f67653019430 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/06/20 19:41 linux-5.15.y 471e639e59d1 09ffe269 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/05/24 07:09 linux-5.15.y 9d6bde853685 4bce1a3e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/03/20 12:35 linux-5.15.y 8020ae3c051d 7939252e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/08/22 11:56 linux-5.15.y f6f7927ac664 6b415825 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/20 06:00 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/19 13:29 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/06 04:07 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/06/06 19:36 linux-5.15.y d7af3e5ba454 a4ae4f42 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/05/27 21:43 linux-5.15.y 1fe619a7d252 cf184559 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/05/07 17:13 linux-5.15.y 8a7f2a5c5aa1 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/03/11 09:59 linux-5.15.y abddfcf701a5 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/04/30 06:50 linux-5.15.y f48aeeaaa64c 62df2017 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/22 16:12 linux-5.15.y 91786f140358 b4fbdbd4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2024/12/22 01:35 linux-5.15.y 91786f140358 d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/21 23:44 linux-5.15.y 91786f140358 d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/21 04:57 linux-5.15.y 91786f140358 d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/20 11:26 linux-5.15.y 91786f140358 0f61b415 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2024/12/11 19:41 linux-5.15.y 0a51d2d4527b ff949d25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/08 20:33 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/08 05:13 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/07 12:29 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/06 16:28 linux-5.15.y 0a51d2d4527b 946d28f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/05 21:13 linux-5.15.y 0a51d2d4527b 29f61fce .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/04 06:35 linux-5.15.y 0a51d2d4527b b50eb251 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/03 11:36 linux-5.15.y 0a51d2d4527b 578925bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/01 23:46 linux-5.15.y 0a51d2d4527b 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/28 06:57 linux-5.15.y 0a51d2d4527b 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/27 17:19 linux-5.15.y 0a51d2d4527b 52b38cc1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/26 13:35 linux-5.15.y 0a51d2d4527b e9a9a9f2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2024/11/25 14:06 linux-5.15.y 0a51d2d4527b 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/24 11:52 linux-5.15.y 0a51d2d4527b 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/24 03:24 linux-5.15.y 0a51d2d4527b 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/18 03:35 linux-5.15.y 0a51d2d4527b cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/15 12:47 linux-5.15.y d98fd109f827 f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/13 21:01 linux-5.15.y 3c17fc483905 bb3f8425 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/13 05:34 linux-5.15.y 3c17fc483905 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/13 03:35 linux-5.15.y 3c17fc483905 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/12 08:14 linux-5.15.y 3c17fc483905 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/11 19:56 linux-5.15.y 3c17fc483905 0c4b1325 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/11 00:26 linux-5.15.y 3c17fc483905 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/10 20:58 linux-5.15.y 3c17fc483905 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/09 01:43 linux-5.15.y 3c17fc483905 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/08 10:14 linux-5.15.y 72244eab0dad 179b040e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/07 20:58 linux-5.15.y 72244eab0dad 867e44df .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/06 23:57 linux-5.15.y 72244eab0dad df3dc63b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/11/06 09:58 linux-5.15.y 72244eab0dad 3a465482 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/12/20 18:57 linux-5.15.y 91786f140358 0f61b415 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/12/03 09:54 linux-5.15.y 0a51d2d4527b 578925bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/12/03 08:50 linux-5.15.y 0a51d2d4527b 578925bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/28 02:07 linux-5.15.y 0a51d2d4527b 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/27 14:49 linux-5.15.y 0a51d2d4527b 52b38cc1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/27 12:35 linux-5.15.y 0a51d2d4527b 52b38cc1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/24 08:34 linux-5.15.y 0a51d2d4527b 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/22 15:14 linux-5.15.y 0a51d2d4527b 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/13 08:42 linux-5.15.y 3c17fc483905 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/11 18:28 linux-5.15.y 3c17fc483905 0c4b1325 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/07 21:21 linux-5.15.y 72244eab0dad 867e44df .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2024/11/05 22:18 linux-5.15.y 72244eab0dad da38b4c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/03/10 14:49 linux-5.15.y abddfcf701a5 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
* Struck through repros no longer work on HEAD.