KASAN: null-ptr-deref Write in l2cap_sock_suspend

Title	Replies (including bot)	Last reply
[syzbot] [bluetooth?] KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb	0 (1)	2023/09/20 23:03

Title

Replies (including bot)

Last reply

[syzbot] [bluetooth?] KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb

0 (1)

2023/09/20 23:03

Kernel	Title	Rank 🛈	Count	Last	Reported	Patched	Status
linux-6.6	KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb	12	1	385d	385d	0/2	auto-obsoleted due to no activity on 2025/10/13 20:35
upstream	KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (4) prio:high bluetooth	12	4	68d	72d	0/29	moderation: reported on 2026/05/14 19:02
upstream	KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (2) bluetooth	12	2	371d	374d	0/29	closed as invalid on 2025/08/19 19:15
upstream	KASAN: null-ptr-deref Write in l2cap_sock_suspend_cb (3) bluetooth	12	3	219d	228d	0/29	auto-obsoleted due to no activity on 2026/03/29 02:38

================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_write include/linux/instrumented.h:82 [inline] BUG: KASAN: null-ptr-deref in set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline] BUG: KASAN: null-ptr-deref in l2cap_sock_suspend_cb+0x43/0x90 net/bluetooth/l2cap_sock.c:1698 Write of size 8 at addr 0000000000000528 by task kworker/3:4/5228 CPU: 3 PID: 5228 Comm: kworker/3:4 Not tainted 6.6.0-rc1-syzkaller-00070-g23f108dc9ed2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: events l2cap_info_timeout Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106 kasan_report+0xda/0x110 mm/kasan/report.c:588 check_region_inline mm/kasan/generic.c:181 [inline] kasan_check_range+0xef/0x190 mm/kasan/generic.c:187 instrument_atomic_write include/linux/instrumented.h:82 [inline] set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline] l2cap_sock_suspend_cb+0x43/0x90 net/bluetooth/l2cap_sock.c:1698 l2cap_chan_ready.part.0+0x1bc/0x230 net/bluetooth/l2cap_core.c:1376 l2cap_chan_ready net/bluetooth/l2cap_core.c:1365 [inline] l2cap_conn_start+0x15c/0xa40 net/bluetooth/l2cap_core.c:1640 process_one_work+0x887/0x15d0 kernel/workqueue.c:2630 process_scheduled_works kernel/workqueue.c:2703 [inline] worker_thread+0x8bb/0x1290 kernel/workqueue.c:2784 kthread+0x33a/0x430 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 </TASK> ================================================================== Kernel panic - not syncing: KASAN: panic_on_warn set ... CPU: 3 PID: 5228 Comm: kworker/3:4 Not tainted 6.6.0-rc1-syzkaller-00070-g23f108dc9ed2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: events l2cap_info_timeout Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106 panic+0x6a6/0x750 kernel/panic.c:340 check_panic_on_warn+0xab/0xb0 kernel/panic.c:236 end_report+0x108/0x150 mm/kasan/report.c:225 kasan_report+0xea/0x110 mm/kasan/report.c:590 check_region_inline mm/kasan/generic.c:181 [inline] kasan_check_range+0xef/0x190 mm/kasan/generic.c:187 instrument_atomic_write include/linux/instrumented.h:82 [inline] set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline] l2cap_sock_suspend_cb+0x43/0x90 net/bluetooth/l2cap_sock.c:1698 l2cap_chan_ready.part.0+0x1bc/0x230 net/bluetooth/l2cap_core.c:1376 l2cap_chan_ready net/bluetooth/l2cap_core.c:1365 [inline] l2cap_conn_start+0x15c/0xa40 net/bluetooth/l2cap_core.c:1640 process_one_work+0x887/0x15d0 kernel/workqueue.c:2630 process_scheduled_works kernel/workqueue.c:2703 [inline] worker_thread+0x8bb/0x1290 kernel/workqueue.c:2784 kthread+0x33a/0x430 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 </TASK> Kernel Offset: disabled