From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from xmbghk7.mail.qq.com (xmbghk7.mail.qq.com [43.163.128.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 69062288B1 for ; Thu, 9 Apr 2026 11:29:08 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=43.163.128.48 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775734151; cv=none; b=kehX6Y6vJTXNSXdZs+4pyU6jcMTwoS/zJiLd3FsqDfnO8LWQVmRGbs4s5PuHHzJ0yNGAwL3sKdFYenVMRtCTUUdXDXnO0OV2AOk+fCgX9HziSo2ehQkLBQr1Kiw/d0pgTPGrp+3z/nOP3GBtb9/sSaMKtnecgensxoBymKXrErY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775734151; c=relaxed/simple; bh=Ev6WEOqVNSGaXlo81ZVDoASNSkxZb2JpV494n1I7mBE=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=ZXYtxtarFzWz/bYFDK3QbAput82zGxlwHbC56VRU0xNOR8Jr9gYLOa4UrKTSvbNUPiPYfLX8t3yizBL0i7CgAnCS2coUX/emGiI9rh/ChjMmiSdhj0IQ5IF9YhF3XhY6bsreBTQz2/vkJez74wNkIBQ2j6Zq+iqqWzzxlg6n3Jg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=ASBoqAyU; arc=none smtp.client-ip=43.163.128.48 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="ASBoqAyU" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1775734146; bh=/rDDLVT1qB/WRR2PqdEMDZKdRqMJsT1537cfUO6DIAM=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=ASBoqAyUtlSC70LOSWri8YwB7rb++bra9LobwalVfwLoNbJe09sT+aUBLOuQ6nEM7 lGoaWro75y900ZZ2BUFHtgDONLod+kAftXfCrvlrEUCXqH6ddfdcLNLdbqnRg0rpVV wgeYERKKO19h7TXauiwM5aIXirV5zw2z1NUe+l3M= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrszc56-0.qq.com (NewEsmtp) with SMTP id 74401E47; Thu, 09 Apr 2026 19:29:04 +0800 X-QQ-mid: xmsmtpt1775734144t4drex94q Message-ID: X-QQ-XMAILINFO: N9lasXYeZMXWx/ATh9CfOEaUUlwB0SlkuF5kMGD1cCy0mVKW5s3Mxqb+hJAdL1 Soa2tYzQYx3g0DC7B38K0BOOtlpUAp45AS6RHyoakgVKXcWmrLFy/U8tGHuXX7MEQRwPqATKFdc0 N4XNKso9KXfBBycyp3j9yANI+6UJv3S09ayG8Gbx+LA5xMgRDoSG1Z59t/X3m3BpNFhxWbS0+8fb 5hEar5hN00AW0/4v+jnDf5IwDSeFdXRSujBNBEElVD5wpAEz5kZSRKNVN3vhDllGpqnJft/mnaBR Tdg+JkE891saOpOvn6wTM/8LvXbcmac4UXogWtHwdUZrqaeAbHk9JW6WfWsrO6mCd/fCajxglSJS AC0LxuRFEL4u5xYO1byXCvhy9logsI2WiZ2gjPFvtDve3Q5VsBZGtDlNKs74wtNDB4utZMYReqcf OyH3AT7hiy6vBZa4hHTJ6yjEFkQkSqaosKzUlpPup1c44IpQYaNJC/ZfLOWGKFTtSiF5tk7s9HNX 2Vy0X/POvS6Yl8rqCvYBfePgLwsf5zS6vNSaa0kuTVCE5x6WzOeNEl36FhknB3rkqPN5Q7d4M5N8 HyzfdLEMAzYMq+94zp2c7wcYYBQq1oClxA+ov9HRD7Vz2NuzSPaRlUvsQpesyWEsIvOgct0KBw0I IG3hgzoOAJoGgq2sRpUOMGMp4EPoedKRr/U8XEGdOxcP3KmIoVnrNzXlJwTEllLQm8dAwPCdZ+9j SWOxwT7HdPQ2pyoeq7oKnbJWQPGxWnWhuE018ZnVnauw+iD3DCfObYvoybRc6rAshL5oNpofDJzQ /Vfsa40oaHwHsgJ7/5UvIBI2AHh4HetuC6MqjxB6rvZXMuhQm31H12XL/D4x0RBEMSZ07CwGT5Dk WyBdHi6a/irnvsyon8KP9ljk8CpXNJMFdis0yDRb/AMbtpjpkP19idSGBZI5ezTtbzNLPO03dFTf sD6MXvimTs38Mise6tdBGTT8Qym63TYFI8Bu+DHb0qQ3JWPvjdCkgj4445ZTLFn/gpnR7v9v3MbA AmA4OAfnWdxQQXGXq0uTWvN9z+TOTupZ9eaPpjmB2fMU6e6NDX X-QQ-XMRINFO: NS+P29fieYNwqS3WCnRCOn9D1NpZuCnCRA== From: Edward Adam Davis To: syzbot+ff30eeab8e07b37d524e@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [bluetooth?] general protection fault in h4_recv Date: Thu, 9 Apr 2026 19:29:04 +0800 X-OQ-MSGID: <20260409112903.103226-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <69d7585b.050a0220.3030df.0011.GAE@google.com> References: <69d7585b.050a0220.3030df.0011.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/drivers/bluetooth/hci_h4.c b/drivers/bluetooth/hci_h4.c index a889a66a326f..07cc2a79a77b 100644 --- a/drivers/bluetooth/hci_h4.c +++ b/drivers/bluetooth/hci_h4.c @@ -109,6 +109,9 @@ static int h4_recv(struct hci_uart *hu, const void *data, int count) { struct h4_struct *h4 = hu->priv; + if (!test_bit(HCI_UART_REGISTERED, &hu->flags)) + return -EUNATCH; + h4->rx_skb = h4_recv_buf(hu, h4->rx_skb, data, count, h4_recv_pkts, ARRAY_SIZE(h4_recv_pkts)); if (IS_ERR(h4->rx_skb)) {