syzbot


KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (2)

Status: closed as invalid on 2024/12/17 17:57
Subsystems: bluetooth
[Documentation on labels]
First crash: 34d, last: 34d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: null-ptr-deref Write in l2cap_sock_resume_cb bluetooth 1 153d 150d 0/28 auto-obsoleted due to no activity on 2024/10/29 12:18

Sample crash report:
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_write include/linux/instrumented.h:82 [inline]
BUG: KASAN: null-ptr-deref in clear_bit include/asm-generic/bitops/instrumented-atomic.h:41 [inline]
BUG: KASAN: null-ptr-deref in l2cap_sock_resume_cb+0xca/0x130 net/bluetooth/l2cap_sock.c:1697
Write of size 8 at addr 0000000000000568 by task kworker/u9:5/5854

CPU: 1 UID: 0 PID: 5854 Comm: kworker/u9:5 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
Workqueue: hci4 hci_rx_work
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 print_report+0xe8/0x550 mm/kasan/report.c:491
 kasan_report+0x143/0x180 mm/kasan/report.c:601
 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189
 instrument_atomic_write include/linux/instrumented.h:82 [inline]
 clear_bit include/asm-generic/bitops/instrumented-atomic.h:41 [inline]
 l2cap_sock_resume_cb+0xca/0x130 net/bluetooth/l2cap_sock.c:1697
 l2cap_security_cfm+0x7ae/0x13f0 net/bluetooth/l2cap_core.c:7347
 hci_encrypt_cfm+0x3a2/0x510 include/net/bluetooth/hci_core.h:2036
 hci_encrypt_change_evt+0xa2a/0xe40 net/bluetooth/hci_event.c:3650
 hci_event_func net/bluetooth/hci_event.c:7443 [inline]
 hci_event_packet+0xac4/0x1540 net/bluetooth/hci_event.c:7495
 hci_rx_work+0x3e8/0xca0 net/bluetooth/hci_core.c:4029
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/16 21:17 upstream e8bdb3c8be08 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
* Struck through repros no longer work on HEAD.