syzbot

 sign-in | mailing list | source | docs
🐞 Open [732]
🐞 Fixed [74]
🐞 Invalid [926]
⬇ Missing Backports [120]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

WARNING in hci_conn_timeout

Status: upstream: reported C repro on 2023/03/10 14:50
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+b3668760e544f4a0b191@syzkaller.appspotmail.com
First crash: 859d, last: 4h05m
Fix commit to backport (bisect log) :
tree: upstream
commit 5af1f84ed13a416297ab9ced7537f4d5ae7f329a
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: Thu Aug 3 18:04:51 2023 +0000

  Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync

  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/11/05 linux-5.15.y (ToT) 12952a23a5da C [report] WARNING in hci_conn_timeout
2023/11/05 upstream (ToT) 1c41041124bd C Didn't crash
▶ ▼ Similar bugs (6)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in hci_conn_timeout bluetooth -1 C done 6022 212d 1810d 28/29 fixed on 2024/12/16 09:50
linux-4.14 WARNING in hci_conn_timeout -1 C inconclusive 27 877d 1811d 0/1 upstream: reported C repro on 2020/07/31 02:13
linux-6.6 WARNING in hci_conn_timeout origin:lts-only -1 C inconclusive 3 12d 21d 0/2 upstream: reported C repro on 2025/06/25 01:13
upstream WARNING in hci_conn_timeout (2) bluetooth -1 C error 555 12h17m 211d 0/29 upstream: reported C repro on 2024/12/17 17:47
linux-4.19 WARNING in hci_conn_timeout -1 C error 127 864d 1810d 0/1 upstream: reported C repro on 2020/08/01 17:09
linux-6.1 WARNING in hci_conn_timeout origin:lts-only -1 C done 4006 1h20m 861d 0/3 upstream: reported C repro on 2023/03/08 17:34
▶ ▼ Fix bisection attempts (1)
Created Duration User Patch Repo Result
2023/11/21 12:57 5h10m fix candidate upstream OK (1) job log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 146 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450
Modules linked in:
CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted 5.15.154-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: hci0 hci_conn_timeout
RIP: 0010:hci_conn_timeout+0x250/0x450 net/bluetooth/hci_conn.c:443
Code: e4 8d e8 c3 e4 8d f8 48 8b 35 b4 20 a8 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 70 16 f8 e8 00 22 44 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff
RSP: 0018:ffffc900015dfc28 EFLAGS: 00010293
RAX: ffffffff893c3a00 RBX: ffff88807a718138 RCX: ffff888018409dc0
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: 00000000ffffffff R08: ffffffff893c3811 R09: ffffed100f4e3003
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff888016fad528 R14: ffff88807a718000 R15: ffff888016fad518
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555555d36c8 CR3: 000000000c68e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310
 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
 </TASK>

Crashes (1248):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/13 06:20 linux-5.15.y cdfd0a7f0139 c8349e48 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/04/06 21:07 linux-5.15.y 9465fef4ae35 ca620dd8 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2024/01/01 15:32 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/06/27 11:18 linux-5.15.y f67653019430 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/06/20 19:41 linux-5.15.y 471e639e59d1 09ffe269 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/05/24 07:09 linux-5.15.y 9d6bde853685 4bce1a3e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/03/20 12:35 linux-5.15.y 8020ae3c051d 7939252e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2023/08/22 11:56 linux-5.15.y f6f7927ac664 6b415825 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/20 06:00 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/19 13:29 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/08/06 04:07 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/06/06 19:36 linux-5.15.y d7af3e5ba454 a4ae4f42 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/05/27 21:43 linux-5.15.y 1fe619a7d252 cf184559 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/05/07 17:13 linux-5.15.y 8a7f2a5c5aa1 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/03/11 09:59 linux-5.15.y abddfcf701a5 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/04/30 06:50 linux-5.15.y f48aeeaaa64c 62df2017 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/07/16 18:56 linux-5.15.y 89950c454265 124ec9cc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/07/16 14:01 linux-5.15.y 89950c454265 124ec9cc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/07/16 13:57 linux-5.15.y 89950c454265 124ec9cc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/07/11 22:48 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/07/09 18:58 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/07/03 11:11 linux-5.15.y 3dea0e7f549e 115ceea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/07/01 23:40 linux-5.15.y 3dea0e7f549e 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/07/01 09:37 linux-5.15.y 3dea0e7f549e 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/06/28 14:54 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/06/22 05:33 linux-5.15.y 1c700860e8bc d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/06/21 13:07 linux-5.15.y 1c700860e8bc d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/06/15 23:35 linux-5.15.y 1c700860e8bc 5f4b362d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/06/08 23:27 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/06/05 15:23 linux-5.15.y 1c700860e8bc 6b6b5f21 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/06/04 01:20 linux-5.15.y 98f47d0e9b8c a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/06/03 17:55 linux-5.15.y 98f47d0e9b8c a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/31 09:08 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/30 06:36 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/28 07:04 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/27 20:22 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/27 14:59 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/24 19:20 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/24 14:47 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/05/23 12:47 linux-5.15.y 98f47d0e9b8c fa44301a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/20 15:24 linux-5.15.y a68c15152131 b47f9e02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/20 01:20 linux-5.15.y a68c15152131 b84f0537 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/18 05:16 linux-5.15.y 3b8db0e4f263 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/18 02:02 linux-5.15.y 3b8db0e4f263 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/13 08:11 linux-5.15.y 3b8db0e4f263 f6671af7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf WARNING in hci_conn_timeout
2025/05/10 03:34 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in hci_conn_timeout
2025/06/25 22:51 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/06/24 14:19 linux-5.15.y 1c700860e8bc e2f27c35 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/06/18 10:55 linux-5.15.y 1c700860e8bc e77fae15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/06/08 22:08 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/06/03 21:53 linux-5.15.y 98f47d0e9b8c a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/30 09:57 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/28 08:22 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/27 23:55 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/27 09:03 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/25 07:06 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/24 00:48 linux-5.15.y 98f47d0e9b8c f8cc0c83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/22 21:02 linux-5.15.y 98f47d0e9b8c 0919b50b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/17 11:42 linux-5.15.y 3b8db0e4f263 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/16 20:47 linux-5.15.y 3b8db0e4f263 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2025/05/10 13:19 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
2023/03/10 14:49 linux-5.15.y abddfcf701a5 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in hci_conn_timeout
* Struck through repros no longer work on HEAD.