syzbot


general protection fault in lock_sock_nested

Status: upstream: reported C repro on 2024/04/04 13:25
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+919d4e1e5bdfd4fa9abb@syzkaller.appspotmail.com
First crash: 412d, last: 1d17h
Bug presence (1)
Date Name Commit Repro Result
2025/04/15 upstream (ToT) 1a1d569a75f3 C [report] unregister_netdevice: waiting for DEV to become free
Similar bugs (16)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 general protection fault in lock_sock_nested 1 2657d 2657d 0/3 auto-closed as invalid on 2019/02/22 12:39
linux-4.14 general protection fault in lock_sock_nested 4 1475d 1693d 0/1 auto-closed as invalid on 2021/09/04 19:35
upstream general protection fault in lock_sock_nested bluetooth C done done 2362 8m 619d 0/28 upstream: reported C repro on 2023/09/11 07:52
linux-6.1 general protection fault in lock_sock_nested origin:upstream syz 130 3h27m 403d 0/3 upstream: reported syz repro on 2024/04/14 08:46
upstream BUG: unable to handle kernel paging request in lock_sock_nested bluetooth 43 1310d 1750d 0/28 auto-closed as invalid on 2022/02/16 22:16
linux-4.19 KASAN: wild-memory-access Write in lock_sock_nested 2 1574d 1643d 0/1 auto-closed as invalid on 2021/05/28 14:35
linux-6.1 BUG: sleeping function called from invalid context in lock_sock_nested (2) origin:upstream missing-backport C error 5 27d 88d 0/3 upstream: reported C repro on 2025/02/23 00:56
linux-4.19 KASAN: use-after-free Read in lock_sock_nested C 471 813d 2126d 0/1 upstream: reported C repro on 2019/07/26 21:27
linux-4.14 KASAN: use-after-free Read in lock_sock_nested C inconclusive 331 853d 2220d 0/1 upstream: reported C repro on 2019/04/24 06:28
upstream KASAN: use-after-free Read in lock_sock_nested hams C inconclusive done 1856 722d 2332d 0/28 auto-obsoleted due to no activity on 2023/08/23 09:06
linux-6.1 BUG: sleeping function called from invalid context in lock_sock_nested 7 306d 327d 0/3 auto-obsoleted due to no activity on 2024/10/28 05:57
linux-4.14 BUG: unable to handle kernel paging request in lock_sock_nested 4 1468d 1588d 0/1 auto-closed as invalid on 2021/09/11 11:51
upstream KASAN: slab-out-of-bounds Read in lock_sock_nested bluetooth syz unreliable done 23 1305d 1744d 0/28 auto-obsoleted due to no activity on 2022/09/29 10:19
linux-4.19 KASAN: slab-out-of-bounds Read in lock_sock_nested 14 987d 1651d 0/1 auto-obsoleted due to no activity on 2023/01/05 15:59
upstream BUG: sleeping function called from invalid context in lock_sock_nested (3) bluetooth C inconclusive error 141 56d 373d 0/28 upstream: reported C repro on 2024/05/13 12:58
linux-5.15 BUG: sleeping function called from invalid context in lock_sock_nested origin:upstream missing-backport C error 22 70d 327d 0/3 upstream: reported C repro on 2024/06/29 07:50
Last patch testing requests (5)
Created Duration User Patch Repo Result
2024/12/12 17:26 17m retest repro linux-5.15.y report log
2024/12/12 17:26 13m retest repro linux-5.15.y report log
2024/12/12 17:26 17m retest repro linux-5.15.y report log
2024/12/12 17:26 12m retest repro linux-5.15.y report log
2024/12/12 17:26 18m retest repro linux-5.15.y report log
Fix bisection attempts (3)
Created Duration User Patch Repo Result
2024/10/27 03:55 1m fix candidate upstream error job log
2024/08/19 20:04 1m fix candidate upstream error job log
2024/07/03 04:13 57m fix candidate upstream error job log

Sample crash report:
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
Bluetooth: hci1: failed to register connection device
Unable to handle kernel paging request at virtual address dfff800000000024
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff800000000024] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4048 Comm: kworker/u5:5 Not tainted 5.15.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: hci1 hci_rx_work
pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __lock_acquire+0x104/0x7638 kernel/locking/lockdep.c:4882
lr : lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5623
sp : ffff800020206e40
x29: ffff8000202070e0 x28: 1ffff0000297006b x27: 0000000000000001
x26: ffff800010efffa4 x25: ffff700004040dec x24: 0000000000000000
x23: 0000000000000000 x22: ffff0000c8b58000 x21: 0000000000000000
x20: 0000000000000000 x19: 0000000000000120 x18: 1fffe0003683258e
x17: ffff800010ef3004 x16: ffff800011b61854 x15: ffff8000088cd1c4
x14: 1ffff0000297006c x13: ffff800020206f60 x12: dfff800000000000
x11: ffff8000082f07b8 x10: ffff800014b8035c x9 : 00000000000000f3
x8 : 0000000000000024 x7 : ffff800010efffa4 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000120
Call trace:
 __lock_acquire+0x104/0x7638 kernel/locking/lockdep.c:4882
 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5623
 lock_sock_nested+0xec/0x1ec net/core/sock.c:3253
 lock_sock include/net/sock.h:1684 [inline]
 l2cap_sock_ready_cb+0x4c/0x130 net/bluetooth/l2cap_sock.c:1649
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1386 [inline]
 l2cap_le_start+0x59c/0x19dc net/bluetooth/l2cap_core.c:1498
 l2cap_conn_ready net/bluetooth/l2cap_core.c:1767 [inline]
 l2cap_connect_cfm+0x5a8/0xe5c net/bluetooth/l2cap_core.c:8294
 hci_connect_cfm include/net/bluetooth/hci_core.h:1505 [inline]
 le_conn_complete_evt+0xa30/0x1228 net/bluetooth/hci_event.c:5429
 hci_le_conn_complete_evt net/bluetooth/hci_event.c:5454 [inline]
 hci_le_meta_evt+0x234/0x31c0 net/bluetooth/hci_event.c:6175
 hci_event_packet+0xd34/0x12b4 net/bluetooth/hci_event.c:6524
 hci_rx_work+0x1d0/0x830 net/bluetooth/hci_core.c:5160
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310
 worker_thread+0x910/0x1034 kernel/workqueue.c:2457
 kthread+0x37c/0x45c kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
Code: b0064988 b9456108 34000208 d343fe68 (386c6908) 
---[ end trace dbb896433e7f35e2 ]---
----------------
Code disassembly (best guess):
   0:	b0064988 	adrp	x8, 0xc931000
   4:	b9456108 	ldr	w8, [x8, #1376]
   8:	34000208 	cbz	w8, 0x48
   c:	d343fe68 	lsr	x8, x19, #3
* 10:	386c6908 	ldrb	w8, [x8, x12] <-- trapping instruction

Crashes (120):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/15 02:27 linux-5.15.y f7347f400572 0bd6db41 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/04/06 21:23 linux-5.15.y 0c935c049b5c 1c65791e .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro #1 (corrupt fs)] [mounted in repro #2 (corrupt fs)] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2024/12/27 20:59 linux-5.15.y 91786f140358 d3ccff63 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/05/16 10:37 linux-5.15.y 3b8db0e4f263 cfde8269 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/05/13 12:51 linux-5.15.y 3b8db0e4f263 f6671af7 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/04/21 12:56 linux-5.15.y f7347f400572 2a20f901 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/03/28 01:59 linux-5.15.y 0c935c049b5c 6c09fb82 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/03/22 12:56 linux-5.15.y 0c935c049b5c c6512ef7 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/03/08 12:27 linux-5.15.y c16c81c81336 7e3bd60d .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/02/04 18:45 linux-5.15.y c16c81c81336 8f267cef .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2024/06/23 19:14 linux-5.15.y 4878aadf2d15 edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2024/06/22 04:02 linux-5.15.y 4878aadf2d15 edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2024/06/19 13:03 linux-5.15.y 4878aadf2d15 41b7e219 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2024/05/07 19:19 linux-5.15.y 284087d4f7d5 cb2dcc0e .config console log report syz [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2024/05/07 06:13 linux-5.15.y 284087d4f7d5 fa7a5cf0 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2024/04/25 00:20 linux-5.15.y c52b9710c83d 8bdc0f22 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2024/04/16 22:56 linux-5.15.y fa3df276cd36 18f6e127 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/05/20 17:28 linux-5.15.y a68c15152131 b47f9e02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/05/19 17:26 linux-5.15.y a68c15152131 b84f0537 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/05/01 16:45 linux-5.15.y f7347f400572 51b137cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/04/17 14:43 linux-5.15.y f7347f400572 229db4cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/04/12 00:04 linux-5.15.y f7347f400572 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/04/10 02:22 linux-5.15.y 0c935c049b5c 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/04/07 17:53 linux-5.15.y 0c935c049b5c a2ada0e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/04/06 18:41 linux-5.15.y 0c935c049b5c 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/03/26 21:52 linux-5.15.y 0c935c049b5c 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/03/24 03:47 linux-5.15.y 0c935c049b5c 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/02/27 09:47 linux-5.15.y c16c81c81336 6a8fcbc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/02/18 19:35 linux-5.15.y c16c81c81336 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/02/11 10:23 linux-5.15.y c16c81c81336 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/02/06 15:27 linux-5.15.y c16c81c81336 577d049b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/02/06 13:05 linux-5.15.y c16c81c81336 577d049b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/28 16:24 linux-5.15.y 003148680b79 f5427d7c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/28 02:22 linux-5.15.y 003148680b79 18070896 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/27 13:58 linux-5.15.y 003148680b79 d99a33ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/25 09:22 linux-5.15.y 003148680b79 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/23 23:33 linux-5.15.y 003148680b79 521b0ce3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/20 19:37 linux-5.15.y 4735586da88e 6e87cfa2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/18 05:04 linux-5.15.y 4735586da88e f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/17 15:01 linux-5.15.y 4735586da88e 953d1c45 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/16 17:41 linux-5.15.y 4735586da88e f9e07a6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/14 05:19 linux-5.15.y 4735586da88e b1f1cd88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/12 18:50 linux-5.15.y 4735586da88e 6dbc6a9b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/10 07:06 linux-5.15.y 4735586da88e 67d7ec0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/09 04:30 linux-5.15.y 91786f140358 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/08 02:14 linux-5.15.y 91786f140358 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/01/07 12:46 linux-5.15.y 91786f140358 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2024/04/04 13:24 linux-5.15.y 9465fef4ae35 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan general protection fault in lock_sock_nested
2025/05/17 16:08 linux-5.15.y 3b8db0e4f263 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/05/14 21:52 linux-5.15.y 3b8db0e4f263 a4fa04ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/05/10 12:23 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/05/09 04:41 linux-5.15.y 16fdf2c7111b bb813bcc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/05/04 17:10 linux-5.15.y 16fdf2c7111b b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/04/27 23:23 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/04/10 18:12 linux-5.15.y f7347f400572 1ef3ab4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/04/09 15:40 linux-5.15.y 0c935c049b5c 47d015b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/03/26 07:23 linux-5.15.y 0c935c049b5c 89d30d73 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/02/14 06:19 linux-5.15.y c16c81c81336 d9a046cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/02/13 17:40 linux-5.15.y c16c81c81336 a98a8417 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/02/04 17:15 linux-5.15.y c16c81c81336 8f267cef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/02/02 18:20 linux-5.15.y c16c81c81336 568559e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/02/02 14:41 linux-5.15.y c16c81c81336 568559e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/02/02 03:58 linux-5.15.y c16c81c81336 568559e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/01/29 04:57 linux-5.15.y 003148680b79 865ef71e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/01/28 11:08 linux-5.15.y 003148680b79 18070896 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/01/26 14:51 linux-5.15.y 003148680b79 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
2025/01/07 20:56 linux-5.15.y 91786f140358 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel paging request in lock_sock_nested
* Struck through repros no longer work on HEAD.