================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:101 [inline] BUG: KASAN: null-ptr-deref in atomic64_or include/asm-generic/atomic-instrumented.h:1327 [inline] BUG: KASAN: null-ptr-deref in atomic_long_or include/asm-generic/atomic-long.h:329 [inline] BUG: KASAN: null-ptr-deref in set_bit include/asm-generic/bitops/atomic.h:17 [inline] BUG: KASAN: null-ptr-deref in amp_read_loc_assoc_final_data+0x108/0x1e4 net/bluetooth/amp.c:304 Write of size 8 at addr 0000000000000030 by task kworker/u5:0/1771 CPU: 1 PID: 1771 Comm: kworker/u5:0 Not tainted 5.11.0-rc6-syzkaller #0 Hardware name: linux,dummy-virt (DT) Workqueue: hci1 hci_rx_work Call trace: dump_backtrace+0x0/0x3e0 arch/arm64/include/asm/pointer_auth.h:76 show_stack+0x1c/0x70 arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x110/0x188 lib/dump_stack.c:120 __kasan_report mm/kasan/report.c:400 [inline] kasan_report+0x128/0x200 mm/kasan/report.c:413 check_memory_region_inline mm/kasan/generic.c:169 [inline] check_memory_region+0xfc/0x1a4 mm/kasan/generic.c:185 __kasan_check_write+0x38/0x60 mm/kasan/shadow.c:36 instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic64_or include/asm-generic/atomic-instrumented.h:1327 [inline] atomic_long_or include/asm-generic/atomic-long.h:329 [inline] set_bit include/asm-generic/bitops/atomic.h:17 [inline] amp_read_loc_assoc_final_data+0x108/0x1e4 net/bluetooth/amp.c:304 hci_chan_selected_evt net/bluetooth/hci_event.c:4943 [inline] hci_event_packet+0x2850/0x60fc net/bluetooth/hci_event.c:6296 hci_rx_work+0x338/0x980 net/bluetooth/hci_core.c:4971 process_one_work+0x798/0x1780 kernel/workqueue.c:2275 worker_thread+0x3dc/0xce0 kernel/workqueue.c:2421 kthread+0x324/0x3c0 kernel/kthread.c:292 ret_from_fork+0x10/0x38 arch/arm64/kernel/entry.S:958 ==================================================================