Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>:
On Fri, 25 Oct 2024 14:40:18 +0300 you wrote:
> Syzbot has reported the following KASAN splat:
>
> BUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0
> Read of size 8 at addr ffff88801f605308 by task kbnepd bnep0/4980
>
> CPU: 0 UID: 0 PID: 4980 Comm: kbnepd bnep0 Not tainted 6.12.0-rc4-00161-gae90f6a6170d #1
> Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014
> Call Trace:
> <TASK>
> dump_stack_lvl+0x100/0x190
> ? device_for_each_child+0x18f/0x1a0
> print_report+0x13a/0x4cb
> ? __virt_addr_valid+0x5e/0x590
> ? __phys_addr+0xc6/0x150
> ? device_for_each_child+0x18f/0x1a0
> kasan_report+0xda/0x110
> ? device_for_each_child+0x18f/0x1a0
> ? __pfx_dev_memalloc_noio+0x10/0x10
> device_for_each_child+0x18f/0x1a0
> ? __pfx_device_for_each_child+0x10/0x10
> pm_runtime_set_memalloc_noio+0xf2/0x180
> netdev_unregister_kobject+0x1ed/0x270
> unregister_netdevice_many_notify+0x123c/0x1d80
> ? __mutex_trylock_common+0xde/0x250
> ? __pfx_unregister_netdevice_many_notify+0x10/0x10
> ? trace_contention_end+0xe6/0x140
> ? __mutex_lock+0x4e7/0x8f0
> ? __pfx_lock_acquire.part.0+0x10/0x10
> ? rcu_is_watching+0x12/0xc0
> ? unregister_netdev+0x12/0x30
> unregister_netdevice_queue+0x30d/0x3f0
> ? __pfx_unregister_netdevice_queue+0x10/0x10
> ? __pfx_down_write+0x10/0x10
> unregister_netdev+0x1c/0x30
> bnep_session+0x1fb3/0x2ab0
> ? __pfx_bnep_session+0x10/0x10
> ? __pfx_lock_release+0x10/0x10
> ? __pfx_woken_wake_function+0x10/0x10
> ? __kthread_parkme+0x132/0x200
> ? __pfx_bnep_session+0x10/0x10
> ? kthread+0x13a/0x370
> ? __pfx_bnep_session+0x10/0x10
> kthread+0x2b7/0x370
> ? __pfx_kthread+0x10/0x10
> ret_from_fork+0x48/0x80
> ? __pfx_kthread+0x10/0x10
> ret_from_fork_asm+0x1a/0x30
> </TASK>
>
> [...]
Here is the summary with links:
- Bluetooth: fix use-after-free in device_for_each_child()
https://git.kernel.org/bluetooth/bluetooth-next/c/b6379ce226a1
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
