linux-kernel - Re: [REGRESSION] Oops during init in btintel_read_debug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 26 Mar 2024 12:56:50 -0400
From: Luiz Augusto von Dentz <luiz.dentz@...il.com>
To: Thorsten Leemhuis <linux@...mhuis.info>
Cc: Marcel Holtmann <marcel@...tmann.org>, 
	Linux kernel regressions list <regressions@...ts.linux.dev>, 
	"linux-bluetooth@...r.kernel.org" <linux-bluetooth@...r.kernel.org>, LKML <linux-kernel@...r.kernel.org>
Subject: Re: [REGRESSION] Oops during init in btintel_read_debug_features with
 today's mainline

Hi Thorsten,

On Tue, Mar 26, 2024 at 4:44 AM Thorsten Leemhuis <linux@...mhuis.info> wrote:
>
> Lo! Just booted 6.9 for the first time and noticed the Bluetooth code
> causes an Oops (see below) during boot that did not happen with 6.8 and
> earlier. This is on Fedora 40 with a vanilla kernel on a Lenovo Thinkpad
> T14s Gen1 AMD.
>
> Do I need to bisect this? Or is this known already? Or does anyone by
> chance an idea what might cause this? Or is there some other way to get
> down to the problem?
>
> Ciao, Thorsten
>
> [Full dmesg: https://www.leemhuis.info/files/misc/dmesg-6.9-btprob]
>
> [   19.903869] Bluetooth: hci0: Found device firmware: intel/ibt-20-1-3.sfi
> [   19.903908] Bluetooth: hci0: Boot Address: 0x24800
> [   19.903913] Bluetooth: hci0: Firmware Version: 255-255.255
> [   19.906245] usb 6-4: USB disconnect, device number 3
> [   19.906364] usb 2-2: Found UVC 1.50 device Integrated Camera (04f2:b6cb)
> [   19.906583] Bluetooth: hci0: FW download error recovery failed (-19)
> [   19.906649] Bluetooth: hci0: sending frame failed (-19)
> [   19.906666] BUG: kernel NULL pointer dereference, address: 0000000000000070
> [   19.906672] #PF: supervisor read access in kernel mode
> [   19.906677] #PF: error_code(0x0000) - not-present page
> [   19.906681] PGD 0 P4D 0
> [   19.906688] Oops: 0000 [#1] PREEMPT SMP NOPTI
> [   19.906701] Hardware name: LENOVO 20UH001HGE/20UH001HGE, BIOS R1CET77W(1.46 ) 10/26/2023
> [   19.906706] Workqueue: hci0 hci_power_on [bluetooth]
> [   19.906775] RIP: 0010:btintel_read_debug_features (/usr/src/debug/[...]/drivers/bluetooth/btintel.c:1306) btintel

Seem like the following could be reason:

https://patchwork.kernel.org/project/bluetooth/patch/20240326164317.1460864-1-luiz.dentz@gmail.com/