WARNING in hci_conn_timeout

Status: upstream: reported C repro on 2020/07/31 02:13
Reported-by: syzbot+acd541d3e3ae018e2374@syzkaller.appspotmail.com
First crash: 2230d, last: 1296d
Fix bisection the fix commit could be any of (bisect log):
  2f166cdcf8a9 Linux 4.14.196
  cfb41ef9deb1 Linux 4.14.237
   
▶ ▼ Similar bugs (6)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in hci_conn_timeout bluetooth -1 syz, C done 6022 631d 2228d 28/29 fixed on 2024/12/16 09:50
linux-5.15 WARNING in hci_conn_timeout origin:lts-only -1 syz, C done 1527 13h00m 1277d 0/3 upstream: reported C repro on 2023/03/10 14:50
linux-6.6 WARNING in hci_conn_timeout origin:lts-only -1 syz, C inconclusive 49 14h46m 440d 0/2 upstream: reported C repro on 2025/06/25 01:13
upstream WARNING in hci_conn_timeout (2) prio:low bluetooth -1 syz, C error 28248 1h22m 629d 0/29 upstream: reported C repro on 2024/12/17 17:47
linux-4.19 WARNING in hci_conn_timeout -1 syz, C error 127 1282d 2228d 0/1 upstream: reported C repro on 2020/08/01 17:09
linux-6.1 WARNING in hci_conn_timeout origin:lts-only -1 syz, C done 6837 30m 1279d 0/3 upstream: reported C repro on 2023/03/08 17:34
▶ ▼ Fix bisection attempts (6)
Created Duration User Patch Repo Result
2021/06/28 18:19 23m bisect fix linux-4.14.y OK (2) job log
2021/05/29 17:52 26m bisect fix linux-4.14.y OK (0) job log log
2021/04/29 17:22 30m bisect fix linux-4.14.y OK (0) job log log
2021/03/30 16:55 26m bisect fix linux-4.14.y OK (0) job log log
2021/02/24 02:51 25m bisect fix linux-4.14.y OK (0) job log log
2021/01/23 23:14 26m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 8026 at net/bluetooth/hci_conn.c:404 hci_conn_timeout+0x1ef/0x3f0 net/bluetooth/hci_conn.c:404
Kernel panic - not syncing: kernel: panic_on_warn set ...

CPU: 1 PID: 8026 Comm: kworker/u5:1 Not tainted 4.14.305-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Workqueue: hci0 hci_conn_timeout
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 panic+0x21d/0x451 kernel/panic.c:247
 check_panic_on_warn.cold+0x19/0x35 kernel/panic.c:171
 __warn+0xdf/0x1e0 kernel/panic.c:603
 report_bug+0x208/0x250 lib/bug.c:183
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:967
RIP: 0010:hci_conn_timeout+0x1ef/0x3f0 net/bluetooth/hci_conn.c:404
RSP: 0018:ffff8880b2a7fd30 EFLAGS: 00010297
RAX: ffff8880b2f68200 RBX: ffff8880b11844a0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880b1184390
RBP: ffff8880b11844a0 R08: 0000000000000001 R09: ffffffff8ae188a0
R10: 0000000000146777 R11: ffff8880b2f68200 R12: ffff8880b1184380
R13: 00000000ffff58b4 R14: ffff8880b2d7ec40 R15: ffff8880b2b92000
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2117
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2251
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:406
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (27):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/20 04:33 linux-4.14.y a8ad60f2af58 bcdf85f8 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-4-14 WARNING in hci_conn_timeout
2022/12/23 04:14 linux-4.14.y c4215ee4771b 9da18ae8 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-4-14 WARNING in hci_conn_timeout
2022/02/08 04:23 linux-4.14.y b86ee2b7ae42 a7dab638 .config console log report syz C ci2-linux-4-14 WARNING in hci_conn_timeout
2021/10/04 07:43 linux-4.14.y f11944f1aa1c db0f5787 .config console log report syz C ci2-linux-4-14 WARNING in hci_conn_timeout
2020/09/06 14:42 linux-4.14.y 2f166cdcf8a9 abf9ba4f .config console log report syz C ci2-linux-4-14
2020/08/01 15:05 linux-4.14.y 7f2c5eb458b8 8df85ed9 .config console log report syz C ci2-linux-4-14
2022/09/12 15:26 linux-4.14.y 65640c873dcf 356d8217 .config console log report info ci2-linux-4-14 WARNING in hci_conn_timeout
2022/09/06 11:02 linux-4.14.y 65640c873dcf 65aea2b9 .config console log report info [disk image] [vmlinux] ci2-linux-4-14 WARNING in hci_conn_timeout
2022/05/24 21:27 linux-4.14.y dffb5c6ff09c fcfad4ff .config console log report info ci2-linux-4-14 WARNING in hci_conn_timeout
2022/04/10 22:16 linux-4.14.y 74766a973637 e22c3da3 .config console log report info ci2-linux-4-14 WARNING in hci_conn_timeout
2022/03/10 06:11 linux-4.14.y c9fcc1545c3b 9e8eaa75 .config console log report info ci2-linux-4-14 WARNING in hci_conn_timeout
2021/02/28 16:46 linux-4.14.y 3242aa3a635c 4c37c133 .config console log report info ci2-linux-4-14 WARNING in hci_conn_timeout
2020/12/24 21:55 linux-4.14.y 3f2ecb86cb90 c2c1d1dd .config console log report info ci2-linux-4-14
2020/12/19 10:52 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report info ci2-linux-4-14
2020/12/17 16:44 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report info ci2-linux-4-14
2020/11/29 13:34 linux-4.14.y 87335852c5d9 a0092f9d .config console log report info ci2-linux-4-14
2020/11/29 02:02 linux-4.14.y 87335852c5d9 a0092f9d .config console log report info ci2-linux-4-14
2020/11/28 22:43 linux-4.14.y 87335852c5d9 3c7136c0 .config console log report info ci2-linux-4-14
2020/11/06 05:39 linux-4.14.y 6b6446efedb2 cba33199 .config console log report info ci2-linux-4-14
2020/10/21 05:33 linux-4.14.y cbfa1702aaf6 ff4a3345 .config console log report info ci2-linux-4-14
2020/09/29 10:03 linux-4.14.y cbfa1702aaf6 1b88c6d5 .config console log report info ci2-linux-4-14
2020/09/11 20:00 linux-4.14.y 458a534cac0c adfb8b4e .config console log report ci2-linux-4-14
2020/08/29 22:59 linux-4.14.y d7e78d08fa77 d5a3ae1f .config console log report ci2-linux-4-14
2020/08/09 12:57 linux-4.14.y 14b58326976d f721e4a0 .config console log report ci2-linux-4-14
2020/08/02 09:07 linux-4.14.y 7f2c5eb458b8 96dd3623 .config console log report ci2-linux-4-14
2020/08/01 10:21 linux-4.14.y 7f2c5eb458b8 8df85ed9 .config console log report ci2-linux-4-14
2020/07/31 02:12 linux-4.14.y e5a54aa2d312 8df85ed9 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.