All of lore.kernel.org
 help / color / mirror / Atom feed
From: bugzilla-daemon@kernel.org
To: linux-bluetooth@vger.kernel.org
Subject: [Bug 221696] btmtk: regression in 6.6.142: NULL pointer dereference in btmtk_usb_hci_wmt_sync during resume from S4
Date: Thu, 02 Jul 2026 08:41:28 +0000	[thread overview]
Message-ID: <bug-221696-62941-pMlnDSljQI@https.bugzilla.kernel.org/> (raw)
In-Reply-To: <bug-221696-62941@https.bugzilla.kernel.org/>

https://bugzilla.kernel.org/show_bug.cgi?id=221696

--- Comment #4 from Matt Whitlock (kernel@mattwhitlock.name) ---
(In reply to The Linux kernel's regression tracker (Thorsten Leemhuis) from
comment #3)
> (b) run a git bisection

# bad: [924b4a879cbb75aef37c160b955b92f6894b11a4] Linux 6.6.142
# good: [eac8889a3a1c81d7113cc4656b9420e84c379cf5] Linux 6.6.140
git bisect start '--no-checkout' 'refs/tags/v6.6.142' 'refs/tags/v6.6.140'
# good: [1ff46c9915c1cbf454db58a8cb87f7cac818e6a6] ksmbd: scope conn->binding
slowpath to bound sessions only
git bisect good 1ff46c9915c1cbf454db58a8cb87f7cac818e6a6
# good: [9426265e157dd77ec237c795901ed4dea6d69b5c] mptcp: pm: ADD_ADDR rtx:
always decrease sk refcount
git bisect good 9426265e157dd77ec237c795901ed4dea6d69b5c
# good: [f85c81e93dbd6915970bd5f3bffcf62633c4c54c] hwmon: (pmbus/adm1266)
reject implausible blackbox record_count
git bisect good f85c81e93dbd6915970bd5f3bffcf62633c4c54c
# good: [acdc12b71c9aa4be5dcd2c8062753c6d2033e235] net: tls: prevent
chain-after-chain in plain text SG
git bisect good acdc12b71c9aa4be5dcd2c8062753c6d2033e235
# good: [60ef1675b652e912f3eb064767af4432393291fd] pds_core: fix debugfs_lookup
dentry leak and error handling
git bisect good 60ef1675b652e912f3eb064767af4432393291fd
# bad: [c9ea01768903ae47f210cd457af1dead6de7a9c3] bpf, skmsg: fix verdict
sk_data_ready racing with ktls rx
git bisect bad c9ea01768903ae47f210cd457af1dead6de7a9c3
# good: [b748250d778e575ef1a0e09939bd1366ee9b6bbf] Bluetooth: btmtk: add the
function to get the fw name
git bisect good b748250d778e575ef1a0e09939bd1366ee9b6bbf
# bad: [f0457842215438786e2e205ad06a4fbb8ab63cd0] Bluetooth: btmtk: move
btusb_mtk_hci_wmt_sync to btmtk.c
git bisect bad f0457842215438786e2e205ad06a4fbb8ab63cd0
# good: [73377cf3056ad72b10df90f54ce6b9822057bc66] Bluetooth: btmtk: rename
btmediatek_data
git bisect good 73377cf3056ad72b10df90f54ce6b9822057bc66
# first 'bad' commit: [f0457842215438786e2e205ad06a4fbb8ab63cd0] Bluetooth:
btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c

f0457842215438786e2e205ad06a4fbb8ab63cd0 is the first 'bad' commit
commit f0457842215438786e2e205ad06a4fbb8ab63cd0
Author: Chris Lu <chris.lu@mediatek.com>
Date:   Thu Jul 4 14:01:13 2024 +0800

    Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c

    [ Upstream commit d019930b0049fc2648a6b279893d8ad330596e81 ]

    Move btusb_mtk_hci_wmt_sync from btusb.c to btmtk.c which holds
    vendor specific stuff and would make btusb.c clean.

    Add usb.h header to btmtksdio.c/btmtkuart.c for usb related element
    defined in btmtk.h

    Signed-off-by: Sean Wang <sean.wang@mediatek.com>
    Signed-off-by: Chris Lu <chris.lu@mediatek.com>
    Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
    Stable-dep-of: dd1dda6b8d6e ("Bluetooth: btmtk: fix urb->setup_packet leak
in error paths")
    Signed-off-by: Sasha Levin <sashal@kernel.org>

 drivers/bluetooth/btmtk.c     | 265 ++++++++++++++++++++++++++++++++++++++
 drivers/bluetooth/btmtk.h     |  31 +++++
 drivers/bluetooth/btmtksdio.c |   1 +
 drivers/bluetooth/btmtkuart.c |   1 +
 drivers/bluetooth/btusb.c     | 290 +-----------------------------------------
 5 files changed, 305 insertions(+), 283 deletions(-)

-- 
You may reply to this email to add a comment.

You are receiving this mail because:
You are the assignee for the bug.

  parent reply	other threads:[~2026-07-02  8:41 UTC|newest]

Thread overview: 11+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-06-27 10:13 [Bug 221696] New: btmtk: regression in 6.6.142: NULL pointer dereference in btmtk_usb_hci_wmt_sync during resume from S4 bugzilla-daemon
2026-07-01  6:42 ` [Bug 221696] " bugzilla-daemon
2026-07-02  6:46 ` bugzilla-daemon
2026-07-02  6:53 ` bugzilla-daemon
2026-07-02  8:41 ` bugzilla-daemon [this message]
2026-07-02  9:13 ` bugzilla-daemon
2026-07-02  9:25 ` bugzilla-daemon
2026-07-02 12:36 ` bugzilla-daemon
2026-07-02 14:18 ` bugzilla-daemon
2026-07-02 14:52 ` bugzilla-daemon
2026-07-06  7:07 ` bugzilla-daemon

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=bug-221696-62941-pMlnDSljQI@https.bugzilla.kernel.org/ \
    --to=bugzilla-daemon@kernel.org \
    --cc=linux-bluetooth@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.