syzbot


general protection fault in device_move

Status: upstream: reported on 2024/12/31 11:47
Reported-by: syzbot+e0c10fc14a30c3df1430@syzkaller.appspotmail.com
First crash: 361d, last: 13d
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 general protection fault in device_move 2 13 6d01h 177d 0/2 upstream: reported on 2025/07/04 01:12
upstream general protection fault in device_move kernel 8 syz error 6274 3h01m 402d 0/29 upstream: reported syz repro on 2024/11/20 18:53
linux-5.15 BUG: unable to handle kernel paging request in device_move origin:lts-only 8 syz inconclusive 44 23d 376d 0/3 upstream: reported syz repro on 2024/12/16 11:50

Sample crash report:
general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
CPU: 0 PID: 8750 Comm: syz.2.653 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:klist_put lib/klist.c:212 [inline]
RIP: 0010:klist_del lib/klist.c:230 [inline]
RIP: 0010:klist_remove+0x158/0x380 lib/klist.c:249
Code: 80 3c 04 00 74 08 4c 89 f7 e8 24 bc d4 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 fd bb d4 f7 49 8b 47 58 48 89 44 24 10 4c 89
RSP: 0018:ffffc90005ddf560 EFLAGS: 00010202
RAX: 000000000000000b RBX: ffff88807923d940 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
RBP: ffffc90005ddf660 R08: dffffc0000000000 R09: fffffbfff1bcf535
R10: fffffbfff1bcf535 R11: 1ffffffff1bcf534 R12: 1ffff1100f30c30c
R13: dffffc0000000000 R14: ffff888079861860 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055bc61bf0028 CR3: 000000005648a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 device_move+0x18f/0x6f0 drivers/base/core.c:4633
 hci_conn_del_sysfs+0xab/0x160 net/bluetooth/hci_sysfs.c:73
 hci_conn_cleanup+0x575/0x730 net/bluetooth/hci_conn.c:172
 hci_conn_del+0x515/0x720 net/bluetooth/hci_conn.c:1152
 hci_conn_hash_flush+0x203/0x290 net/bluetooth/hci_conn.c:2511
 hci_dev_close_sync+0x930/0xf40 net/bluetooth/hci_sync.c:5246
 hci_dev_do_close net/bluetooth/hci_core.c:510 [inline]
 hci_unregister_dev+0x202/0x4f0 net/bluetooth/hci_core.c:2705
 vhci_release+0x7f/0xd0 drivers/bluetooth/hci_vhci.c:573
 __fput+0x22c/0x920 fs/file_table.c:320
 task_work_run+0x1ca/0x250 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0x93e/0x2400 kernel/exit.c:880
 do_group_exit+0x217/0x2d0 kernel/exit.c:1022
 get_signal+0x1272/0x1350 kernel/signal.c:2871
 arch_do_signal_or_restart+0xb7/0x1240 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f6a2f58f749
Code: Unable to access opcode bytes at 0x7f6a2f58f71f.
RSP: 002b:00007f6a2d3f3f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: fffffffffffffffc RBX: 0000000000000058 RCX: 00007f6a2f58f749
RDX: 00007f6a2d3f3f20 RSI: 0000000000000058 RDI: 00007f6a2d3f3f20
RBP: 00007f6a2f613f91 R08: 0000000000000000 R09: 0000000000000058
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6a2f7e6308 R14: 00007f6a2f7e6270 R15: 00007ffcbeacfe98
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:klist_put lib/klist.c:212 [inline]
RIP: 0010:klist_del lib/klist.c:230 [inline]
RIP: 0010:klist_remove+0x158/0x380 lib/klist.c:249
Code: 80 3c 04 00 74 08 4c 89 f7 e8 24 bc d4 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 fd bb d4 f7 49 8b 47 58 48 89 44 24 10 4c 89
RSP: 0018:ffffc90005ddf560 EFLAGS: 00010202
RAX: 000000000000000b RBX: ffff88807923d940 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
RBP: ffffc90005ddf660 R08: dffffc0000000000 R09: fffffbfff1bcf535
R10: fffffbfff1bcf535 R11: 1ffffffff1bcf534 R12: 1ffff1100f30c30c
R13: dffffc0000000000 R14: ffff888079861860 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f38a93e8000 CR3: 00000000555ce000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	80 3c 04 00          	cmpb   $0x0,(%rsp,%rax,1)
   4:	74 08                	je     0xe
   6:	4c 89 f7             	mov    %r14,%rdi
   9:	e8 24 bc d4 f7       	call   0xf7d4bc32
   e:	4d 8b 3e             	mov    (%r14),%r15
  11:	49 83 e7 fe          	and    $0xfffffffffffffffe,%r15
  15:	49 8d 7f 58          	lea    0x58(%r15),%rdi
  19:	48 89 f8             	mov    %rdi,%rax
  1c:	48 c1 e8 03          	shr    $0x3,%rax
  20:	48 b9 00 00 00 00 00 	movabs $0xdffffc0000000000,%rcx
  27:	fc ff df
* 2a:	80 3c 08 00          	cmpb   $0x0,(%rax,%rcx,1) <-- trapping instruction
  2e:	74 05                	je     0x35
  30:	e8 fd bb d4 f7       	call   0xf7d4bc32
  35:	49 8b 47 58          	mov    0x58(%r15),%rax
  39:	48 89 44 24 10       	mov    %rax,0x10(%rsp)
  3e:	4c                   	rex.WR
  3f:	89                   	.byte 0x89

Crashes (49):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/14 01:22 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/12/01 17:28 linux-6.1.y f6e38ae624cf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/11/26 00:20 linux-6.1.y f6e38ae624cf 64219f15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/11/03 05:33 linux-6.1.y f6e38ae624cf 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/10/23 04:55 linux-6.1.y 8e6e2188d949 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/10/20 16:11 linux-6.1.y 8e6e2188d949 d422939c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/10/15 18:55 linux-6.1.y c2fda4b3f577 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/09/26 20:26 linux-6.1.y 7b34dc04e4ff 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/08/25 00:01 linux-6.1.y 0bc96de781b4 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/31 00:16 linux-6.1.y 3594f306da12 f8f2b4da .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/22 16:16 linux-6.1.y 3369c6df2fae 8e9d1dc1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/12 06:05 linux-6.1.y dfc486ec9cce 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/10 04:34 linux-6.1.y 04d1ccaa9c28 956bd956 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/09 11:01 linux-6.1.y 04d1ccaa9c28 f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/05 13:49 linux-6.1.y 7e69c33e4858 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/05 13:47 linux-6.1.y 7e69c33e4858 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/05 12:02 linux-6.1.y 7e69c33e4858 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/07/04 00:53 linux-6.1.y 7e69c33e4858 76ad128c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/06/30 21:28 linux-6.1.y 7e69c33e4858 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/06/29 10:32 linux-6.1.y 7e69c33e4858 fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/06/14 02:14 linux-6.1.y 58485ff1a74f 0e8da31f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/06/11 03:15 linux-6.1.y 58485ff1a74f 5d7e17ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/06/04 04:01 linux-6.1.y da3c5173c55f a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/06/03 10:43 linux-6.1.y da3c5173c55f a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/06/03 03:06 linux-6.1.y da3c5173c55f a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/06/02 19:53 linux-6.1.y da3c5173c55f b396b4bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/28 03:05 linux-6.1.y da3c5173c55f 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/28 03:00 linux-6.1.y da3c5173c55f 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/17 03:50 linux-6.1.y 02b72ccb5f9d f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/15 23:54 linux-6.1.y 02b72ccb5f9d cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/12 18:42 linux-6.1.y 02b72ccb5f9d f6671af7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/09 17:34 linux-6.1.y 02b72ccb5f9d 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/07 18:54 linux-6.1.y ac7079a42ea5 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/03 02:42 linux-6.1.y b6736e03756f b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/01 17:02 linux-6.1.y 535ec20c5027 51b137cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/05/01 09:20 linux-6.1.y 535ec20c5027 ce7952f4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/04/29 00:26 linux-6.1.y 535ec20c5027 aeb6ec69 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/04/15 16:13 linux-6.1.y 420102835862 23b969b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/03/21 07:08 linux-6.1.y 344a09659766 62330552 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/03/12 13:07 linux-6.1.y 6ae7ac5c4251 ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/02/21 16:36 linux-6.1.y 3a8358583626 0808a665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/01/28 03:49 linux-6.1.y 75cefdf153f5 18070896 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/01/24 05:14 linux-6.1.y 75cefdf153f5 521b0ce3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/01/24 05:12 linux-6.1.y 75cefdf153f5 521b0ce3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/01/23 20:09 linux-6.1.y 75cefdf153f5 521b0ce3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/01/04 05:14 linux-6.1.y 7dc732d24ff7 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2024/12/31 11:46 linux-6.1.y 563edd786f0a d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan general protection fault in device_move
2025/04/10 01:39 linux-6.1.y 3dfebb87d7eb 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: unable to handle kernel paging request in device_move
2025/02/12 00:28 linux-6.1.y 0cbb5f65e52f f2baddf5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: unable to handle kernel paging request in device_move
* Struck through repros no longer work on HEAD.