From: bugzilla-daemon@kernel.org
To: linux-bluetooth@vger.kernel.org
Subject: [Bug 221696] btmtk: regression in 6.6.142: NULL pointer dereference in btmtk_usb_hci_wmt_sync during resume from S4
Date: Thu, 02 Jul 2026 08:41:28 +0000 [thread overview]
Message-ID: <bug-221696-62941-pMlnDSljQI@https.bugzilla.kernel.org/> (raw)
In-Reply-To: <bug-221696-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221696
--- Comment #4 from Matt Whitlock (kernel@mattwhitlock.name) ---
(In reply to The Linux kernel's regression tracker (Thorsten Leemhuis) from
comment #3)
> (b) run a git bisection
# bad: [924b4a879cbb75aef37c160b955b92f6894b11a4] Linux 6.6.142
# good: [eac8889a3a1c81d7113cc4656b9420e84c379cf5] Linux 6.6.140
git bisect start '--no-checkout' 'refs/tags/v6.6.142' 'refs/tags/v6.6.140'
# good: [1ff46c9915c1cbf454db58a8cb87f7cac818e6a6] ksmbd: scope conn->binding
slowpath to bound sessions only
git bisect good 1ff46c9915c1cbf454db58a8cb87f7cac818e6a6
# good: [9426265e157dd77ec237c795901ed4dea6d69b5c] mptcp: pm: ADD_ADDR rtx:
always decrease sk refcount
git bisect good 9426265e157dd77ec237c795901ed4dea6d69b5c
# good: [f85c81e93dbd6915970bd5f3bffcf62633c4c54c] hwmon: (pmbus/adm1266)
reject implausible blackbox record_count
git bisect good f85c81e93dbd6915970bd5f3bffcf62633c4c54c
# good: [acdc12b71c9aa4be5dcd2c8062753c6d2033e235] net: tls: prevent
chain-after-chain in plain text SG
git bisect good acdc12b71c9aa4be5dcd2c8062753c6d2033e235
# good: [60ef1675b652e912f3eb064767af4432393291fd] pds_core: fix debugfs_lookup
dentry leak and error handling
git bisect good 60ef1675b652e912f3eb064767af4432393291fd
# bad: [c9ea01768903ae47f210cd457af1dead6de7a9c3] bpf, skmsg: fix verdict
sk_data_ready racing with ktls rx
git bisect bad c9ea01768903ae47f210cd457af1dead6de7a9c3
# good: [b748250d778e575ef1a0e09939bd1366ee9b6bbf] Bluetooth: btmtk: add the
function to get the fw name
git bisect good b748250d778e575ef1a0e09939bd1366ee9b6bbf
# bad: [f0457842215438786e2e205ad06a4fbb8ab63cd0] Bluetooth: btmtk: move
btusb_mtk_hci_wmt_sync to btmtk.c
git bisect bad f0457842215438786e2e205ad06a4fbb8ab63cd0
# good: [73377cf3056ad72b10df90f54ce6b9822057bc66] Bluetooth: btmtk: rename
btmediatek_data
git bisect good 73377cf3056ad72b10df90f54ce6b9822057bc66
# first 'bad' commit: [f0457842215438786e2e205ad06a4fbb8ab63cd0] Bluetooth:
btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c
f0457842215438786e2e205ad06a4fbb8ab63cd0 is the first 'bad' commit
commit f0457842215438786e2e205ad06a4fbb8ab63cd0
Author: Chris Lu <chris.lu@mediatek.com>
Date: Thu Jul 4 14:01:13 2024 +0800
Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c
[ Upstream commit d019930b0049fc2648a6b279893d8ad330596e81 ]
Move btusb_mtk_hci_wmt_sync from btusb.c to btmtk.c which holds
vendor specific stuff and would make btusb.c clean.
Add usb.h header to btmtksdio.c/btmtkuart.c for usb related element
defined in btmtk.h
Signed-off-by: Sean Wang <sean.wang@mediatek.com>
Signed-off-by: Chris Lu <chris.lu@mediatek.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Stable-dep-of: dd1dda6b8d6e ("Bluetooth: btmtk: fix urb->setup_packet leak
in error paths")
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/bluetooth/btmtk.c | 265 ++++++++++++++++++++++++++++++++++++++
drivers/bluetooth/btmtk.h | 31 +++++
drivers/bluetooth/btmtksdio.c | 1 +
drivers/bluetooth/btmtkuart.c | 1 +
drivers/bluetooth/btusb.c | 290 +-----------------------------------------
5 files changed, 305 insertions(+), 283 deletions(-)
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
next prev parent reply other threads:[~2026-07-02 8:41 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-06-27 10:13 [Bug 221696] New: btmtk: regression in 6.6.142: NULL pointer dereference in btmtk_usb_hci_wmt_sync during resume from S4 bugzilla-daemon
2026-07-01 6:42 ` [Bug 221696] " bugzilla-daemon
2026-07-02 6:46 ` bugzilla-daemon
2026-07-02 6:53 ` bugzilla-daemon
2026-07-02 8:41 ` bugzilla-daemon [this message]
2026-07-02 9:13 ` bugzilla-daemon
2026-07-02 9:25 ` bugzilla-daemon
2026-07-02 12:36 ` bugzilla-daemon
2026-07-02 14:18 ` bugzilla-daemon
2026-07-02 14:52 ` bugzilla-daemon
2026-07-06 7:07 ` bugzilla-daemon
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=bug-221696-62941-pMlnDSljQI@https.bugzilla.kernel.org/ \
--to=bugzilla-daemon@kernel.org \
--cc=linux-bluetooth@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox