================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read include/linux/instrumented.h:68 [inline] BUG: KASAN: null-ptr-deref in _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] BUG: KASAN: null-ptr-deref in ida_free+0x218/0x2e0 lib/idr.c:511 Read of size 8 at addr 0000000000000048 by task syz-executor.1/18727 CPU: 0 PID: 18727 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106 kasan_report+0xda/0x110 mm/kasan/report.c:588 check_region_inline mm/kasan/generic.c:181 [inline] kasan_check_range+0xef/0x190 mm/kasan/generic.c:187 instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] ida_free+0x218/0x2e0 lib/idr.c:511 hci_conn_cleanup net/bluetooth/hci_conn.c:157 [inline] hci_conn_del+0x78c/0xe10 net/bluetooth/hci_conn.c:1182 hci_conn_hash_flush+0x189/0x260 net/bluetooth/hci_conn.c:2615 hci_dev_close_sync+0x5a7/0x1160 net/bluetooth/hci_sync.c:5021 hci_dev_do_close+0x2e/0x90 net/bluetooth/hci_core.c:554 hci_unregister_dev+0x1eb/0x600 net/bluetooth/hci_core.c:2739 vhci_release+0x7f/0x100 drivers/bluetooth/hci_vhci.c:672 __fput+0x270/0xbb0 fs/file_table.c:394 task_work_run+0x14d/0x240 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0xa92/0x2ae0 kernel/exit.c:871 do_group_exit+0xd4/0x2a0 kernel/exit.c:1021 get_signal+0x23be/0x2790 kernel/signal.c:2904 arch_do_signal_or_restart+0x90/0x7f0 arch/x86/kernel/signal.c:309 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x121/0x240 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1e/0x60 kernel/entry/common.c:296 do_syscall_64+0x4d/0x110 arch/x86/entry/common.c:88 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f065d8a7ef5 Code: Unable to access opcode bytes at 0x7f065d8a7ecb. RSP: 002b:00007f065e57a010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f065d99bf80 RCX: 00007f065d8a7ef5 RDX: 00007f065e57a050 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f065d8c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 000000000000000b R14: 00007f065d99bf80 R15: 00007ffe0b524e68 ==================================================================