syzbot


general protection fault in bnep_session

Status: upstream: reported syz repro on 2024/11/23 23:04
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+6df45dd3d03e1a9aca96@syzkaller.appspotmail.com
First crash: 299d, last: 1h24m
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernel?] general protection fault in bnep_session 0 (2) 2024/12/22 22:32
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 general protection fault in bnep_session 2 1 24d 24d 0/3 upstream: reported on 2025/08/22 09:32
linux-6.6 general protection fault in bnep_session 2 4 18d 78d 0/2 upstream: reported on 2025/06/28 12:06
linux-5.15 general protection fault in bnep_session 2 2 158d 206d 0/3 auto-obsoleted due to no activity on 2025/07/19 02:50

Sample crash report:
Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
CPU: 0 UID: 0 PID: 6160 Comm: kbnepd bnep0 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:klist_put+0x4d/0x1b0 lib/klist.c:212
Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c ce 0c
RSP: 0018:ffffc900047e79c0 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff888033468860 RCX: ffffffff8239c3fd
RDX: 000000000000000b RSI: ffffffff8b1f72c5 RDI: 0000000000000058
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000b92 R12: 0000000000000000
R13: 0000000000000001 R14: ffff88802426bb80 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffabd6b5108 CR3: 000000003551a000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 device_del+0x1d9/0x9f0 drivers/base/core.c:3831
 unregister_netdevice_many_notify+0x105d/0x1e60 net/core/dev.c:11562
 unregister_netdevice_many net/core/dev.c:11590 [inline]
 unregister_netdevice_queue+0x307/0x3f0 net/core/dev.c:11462
 unregister_netdevice include/linux/netdevice.h:3192 [inline]
 unregister_netdev+0x1c/0x30 net/core/dev.c:11608
 bnep_session+0x21b6/0x2ca0 net/bluetooth/bnep/core.c:525
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:klist_put+0x4d/0x1b0 lib/klist.c:212
Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c ce 0c
RSP: 0018:ffffc900047e79c0 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff888033468860 RCX: ffffffff8239c3fd
RDX: 000000000000000b RSI: ffffffff8b1f72c5 RDI: 0000000000000058
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000b92 R12: 0000000000000000
R13: 0000000000000001 R14: ffff88802426bb80 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe5193ea718 CR3: 0000000024a3c000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	c1 ea 03             	shr    $0x3,%edx
   3:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   7:	0f 85 5f 01 00 00    	jne    0x16c
   d:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  14:	fc ff df
  17:	4c 8b 23             	mov    (%rbx),%r12
  1a:	49 83 e4 fe          	and    $0xfffffffffffffffe,%r12
  1e:	49 8d 7c 24 58       	lea    0x58(%r12),%rdi
  23:	48 89 fa             	mov    %rdi,%rdx
  26:	48 c1 ea 03          	shr    $0x3,%rdx
* 2a:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1) <-- trapping instruction
  2e:	0f 85 2e 01 00 00    	jne    0x162
  34:	4c 89 e7             	mov    %r12,%rdi
  37:	4d 8b 74 24 58       	mov    0x58(%r12),%r14
  3c:	e8                   	.byte 0xe8
  3d:	7c ce                	jl     0xd
  3f:	0c                   	.byte 0xc

Crashes (890):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/22 22:31 upstream bcde95ce32b6 b4fbdbd4 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/11 15:13 upstream 7aac71907bde fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root general protection fault in bnep_session
2025/09/10 21:01 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root general protection fault in bnep_session
2025/09/10 07:20 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root general protection fault in bnep_session
2025/09/08 07:39 upstream 76eeb9b8de98 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root general protection fault in bnep_session
2025/09/07 13:31 upstream b236920731dd d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root general protection fault in bnep_session
2025/09/07 02:30 upstream b236920731dd d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root general protection fault in bnep_session
2025/09/05 12:31 upstream d69eb204c255 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root general protection fault in bnep_session
2025/09/02 17:32 upstream b320789d6883 091ba174 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root general protection fault in bnep_session
2025/08/23 21:00 upstream 8d245acc1e88 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root general protection fault in bnep_session
2025/07/24 20:55 upstream 25fae0b93d1d fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root general protection fault in bnep_session
2025/06/24 04:34 upstream 86731a2a651e 1a7fb460 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root general protection fault in bnep_session
2025/09/15 08:53 upstream 79e8447ec662 e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/14 17:57 upstream f83a4f2a4d8c e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/14 09:15 upstream f83a4f2a4d8c e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/12 16:35 upstream 320475fbd590 e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/12 07:13 upstream 320475fbd590 e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/12 02:25 upstream 02ffd6f89c50 e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/11 22:27 upstream 02ffd6f89c50 e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/11 19:53 upstream 02ffd6f89c50 e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/11 18:39 upstream 02ffd6f89c50 e2beed91 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/10 05:30 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/10 00:33 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/09 14:42 upstream f777d1112ee5 d291dd2d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/06 20:36 upstream d1d10cea0895 d291dd2d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/05 05:16 upstream 08b06c30a445 d291dd2d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/08/28 21:46 upstream 07d9df80082b d401b9d7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/08/28 14:49 upstream 07d9df80082b bee60a83 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/08/24 18:14 upstream 69fd6b99b8f8 bf27483f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/08/23 19:10 upstream 8d245acc1e88 bf27483f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream general protection fault in bnep_session
2025/09/06 08:41 upstream d1d10cea0895 d291dd2d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 general protection fault in bnep_session
2025/09/05 19:26 upstream c8ed9b5c02a5 d291dd2d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 general protection fault in bnep_session
2025/08/30 17:45 upstream 11e7861d680c 807a3b61 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 general protection fault in bnep_session
2025/08/27 07:32 upstream fab1beda7597 e12e5ba4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 general protection fault in bnep_session
2025/08/27 03:19 upstream fab1beda7597 e12e5ba4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 general protection fault in bnep_session
2025/08/24 05:17 upstream 8d245acc1e88 bf27483f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 general protection fault in bnep_session
2025/09/15 00:10 net 2429a1976481 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/09/13 13:02 net 201825fb4278 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/09/10 16:44 net 78dd8ad62cad fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/09/09 13:05 net 1dbfb0363224 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/09/09 05:55 net 1dbfb0363224 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/09/06 22:31 net e2a10daba849 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/09/03 10:31 net f63e7c8a8389 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/09/01 01:44 net 788bc43d8330 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/08/31 17:29 net 788bc43d8330 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/08/31 07:26 net 788bc43d8330 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/08/24 12:58 net ec79003c5f9d bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2024/11/23 08:50 net fcc79e1714e8 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce general protection fault in bnep_session
2025/09/13 10:17 net-next fc006f5478fc e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/09/13 07:59 net-next fc006f5478fc e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/09/12 00:10 net-next 5adf6f2b9972 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/09/09 17:44 net-next aeb8d48ea92e d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/09/09 09:46 net-next f3883b1ea5a8 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/09/06 13:44 net-next 43a42b85162a d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/09/06 10:16 net-next 43a42b85162a d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/09/03 15:40 net-next 1d8f0059091e 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/08/25 09:23 net-next b1c92cdf5af3 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/08/24 06:24 net-next b1c92cdf5af3 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2024/11/19 22:56 net-next dd7207838d38 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce general protection fault in bnep_session
2025/09/09 22:47 linux-next 65dd046ef558 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root general protection fault in bnep_session
2025/07/14 20:36 linux-next 0be23810e32e 03fcfc4b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in bnep_session
2025/09/14 11:31 upstream f83a4f2a4d8c e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bnep_session
2025/09/04 02:19 upstream ec299e4dc21e 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bnep_session
* Struck through repros no longer work on HEAD.