syzbot


KASAN: slab-out-of-bounds Read in hci_le_meta_evt

Status: upstream: reported C repro on 2023/03/13 06:57
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+57b8721a7d4d06e7ffa8@syzkaller.appspotmail.com
First crash: 845d, last: 6h01m
Fix commit to backport (bisect log) :
tree: upstream
commit b48b833f9e8aa0675820a3b5a0f30d7319590ea8
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: Wed Dec 1 18:55:01 2021 +0000

  Bluetooth: HCI: Use skb_pull_data to parse LE Ext Advertising Report event

  
Fix bisection: the issue occurs on the latest tested release (bisect log)
Crash: KASAN: slab-out-of-bounds Read in hci_le_meta_evt (log)
Repro: C syz .config
  
Bug presence (2)
Date Name Commit Repro Result
2023/05/04 linux-5.15.y (ToT) 8a7f2a5c5aa1 C [report] KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/05/04 upstream (ToT) 1a5304fecee5 C Didn't crash
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: slab-out-of-bounds Read in hci_le_meta_evt C done 15 1678d 1797d 1/1 fixed on 2020/12/30 13:33
upstream KASAN: slab-out-of-bounds Read in hci_le_meta_evt (2) bluetooth C inconclusive 2 1342d 1342d 20/29 fixed on 2022/03/08 16:11
linux-4.19 KASAN: slab-out-of-bounds Read in hci_le_meta_evt C done 12 1658d 1799d 1/1 fixed on 2021/01/18 14:01
linux-4.19 KASAN: slab-out-of-bounds Read in hci_le_meta_evt (2) C error 239 856d 1512d 0/1 upstream: reported C repro on 2021/05/14 20:19
upstream KASAN: slab-out-of-bounds Read in hci_le_meta_evt bluetooth C error error 45 1675d 1796d 19/29 fixed on 2021/03/10 01:49
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/09/29 05:52 4h01m fix candidate upstream OK (1) job log
2023/05/02 19:28 53m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
Bluetooth: hci0: Unknown advertising packet type: 0x70
==================================================================
BUG: KASAN: slab-out-of-bounds in hci_le_ext_adv_report_evt net/bluetooth/hci_event.c:5935 [inline]
BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 net/bluetooth/hci_event.c:6208
Read of size 1 at addr ffff888020ef3604 by task kworker/u5:2/4171

CPU: 0 PID: 4171 Comm: kworker/u5:2 Not tainted 5.15.185-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: hci0 hci_rx_work
Call Trace:
 <TASK>
 dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106
 print_address_description+0x60/0x2d0 mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:434 [inline]
 kasan_report+0xdf/0x130 mm/kasan/report.c:451
 hci_le_ext_adv_report_evt net/bluetooth/hci_event.c:5935 [inline]
 hci_le_meta_evt+0x12db/0x3b80 net/bluetooth/hci_event.c:6208
 hci_event_packet+0xe05/0x12f0 net/bluetooth/hci_event.c:6525
 hci_rx_work+0x255/0xa10 net/bluetooth/hci_core.c:5160
 process_one_work+0x863/0x1000 kernel/workqueue.c:2310
 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>

Allocated by task 4166:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:46 [inline]
 set_alloc_info mm/kasan/common.c:434 [inline]
 ____kasan_kmalloc mm/kasan/common.c:513 [inline]
 __kasan_kmalloc+0xb5/0xf0 mm/kasan/common.c:522
 kmalloc_reserve net/core/skbuff.c:356 [inline]
 __alloc_skb+0x22c/0x750 net/core/skbuff.c:427
 alloc_skb include/linux/skbuff.h:1162 [inline]
 bt_skb_alloc include/net/bluetooth/bluetooth.h:392 [inline]
 vhci_get_user drivers/bluetooth/hci_vhci.c:170 [inline]
 vhci_write+0xbc/0x450 drivers/bluetooth/hci_vhci.c:290
 call_write_iter include/linux/fs.h:2172 [inline]
 new_sync_write fs/read_write.c:507 [inline]
 vfs_write+0x712/0xd00 fs/read_write.c:594
 ksys_write+0x14d/0x250 fs/read_write.c:647
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0

The buggy address belongs to the object at ffff888020ef3400
 which belongs to the cache kmalloc-512 of size 512
The buggy address is located 4 bytes to the right of
 512-byte region [ffff888020ef3400, ffff888020ef3600)
The buggy address belongs to the page:
page:ffffea000083bc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20ef0
head:ffffea000083bc00 order:2 compound_mapcount:0 compound_pincount:0
flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841c80
raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1094, ts 6593717114, free_ts 0
 prep_new_page mm/page_alloc.c:2426 [inline]
 get_page_from_freelist+0x1b77/0x1c60 mm/page_alloc.c:4192
 __alloc_pages+0x1e1/0x470 mm/page_alloc.c:5474
 alloc_slab_page mm/slub.c:1775 [inline]
 allocate_slab mm/slub.c:1912 [inline]
 new_slab+0xc0/0x4b0 mm/slub.c:1975
 ___slab_alloc+0x81e/0xdf0 mm/slub.c:3008
 __slab_alloc mm/slub.c:3095 [inline]
 slab_alloc_node mm/slub.c:3186 [inline]
 slab_alloc mm/slub.c:3228 [inline]
 kmem_cache_alloc_trace+0x1a5/0x2a0 mm/slub.c:3245
 kmalloc include/linux/slab.h:604 [inline]
 kzalloc include/linux/slab.h:735 [inline]
 alloc_bprm+0x56/0x6a0 fs/exec.c:1516
 kernel_execve+0x49/0x900 fs/exec.c:1978
 call_usermodehelper_exec_async+0x207/0x350 kernel/umh.c:112
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888020ef3500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff888020ef3580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff888020ef3600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
                   ^
 ffff888020ef3680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888020ef3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================

Crashes (4802):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/24 08:04 linux-5.15.y 1c700860e8bc e2f27c35 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2024/03/27 07:26 linux-5.15.y 9465fef4ae35 454571b6 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/12/18 02:59 linux-5.15.y d0fc081c6241 3222d10c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/03/27 08:05 linux-5.15.y 115472395b0a fbf0499a .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/03/15 23:53 linux-5.15.y 0c935c049b5c e2826670 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/02/05 11:07 linux-5.15.y c16c81c81336 5896748e .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/02/05 10:37 linux-5.15.y c16c81c81336 5896748e .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2024/11/28 11:10 linux-5.15.y 0a51d2d4527b 5df23865 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2024/08/20 09:56 linux-5.15.y fa93fa65db6e 9f0ab3fb .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2024/08/20 08:42 linux-5.15.y fa93fa65db6e 9f0ab3fb .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2024/05/12 06:40 linux-5.15.y 284087d4f7d5 9026e142 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2024/03/27 07:17 linux-5.15.y 9465fef4ae35 454571b6 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/11/04 16:12 linux-5.15.y 12952a23a5da 500bfdc4 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/07/06 22:25 linux-5.15.y d54cfc420586 1a2f6297 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/03/27 04:07 linux-5.15.y 115472395b0a fbf0499a .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/03/13 07:54 linux-5.15.y bbf9f29bac04 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/07/22 02:58 linux-5.15.y d54cfc420586 abdf9bae .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/03/13 08:23 linux-5.15.y bbf9f29bac04 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/03/13 07:12 linux-5.15.y bbf9f29bac04 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/05 01:16 linux-5.15.y 3dea0e7f549e d869b261 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/03 20:40 linux-5.15.y 3dea0e7f549e 115ceea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/03 14:46 linux-5.15.y 3dea0e7f549e 115ceea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/03 06:34 linux-5.15.y 3dea0e7f549e 115ceea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/03 00:43 linux-5.15.y 3dea0e7f549e bc80e4f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/03 00:41 linux-5.15.y 3dea0e7f549e bc80e4f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/02 21:15 linux-5.15.y 3dea0e7f549e bc80e4f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/02 17:13 linux-5.15.y 3dea0e7f549e bc80e4f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/02 15:20 linux-5.15.y 3dea0e7f549e bc80e4f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/02 13:39 linux-5.15.y 3dea0e7f549e bc80e4f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/02 03:05 linux-5.15.y 3dea0e7f549e 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/01 23:36 linux-5.15.y 3dea0e7f549e 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/01 17:58 linux-5.15.y 3dea0e7f549e 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/01 06:39 linux-5.15.y 3dea0e7f549e 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/30 15:58 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/29 03:06 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/28 22:08 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/28 13:31 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/27 21:29 linux-5.15.y 3dea0e7f549e 803ce19b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/27 05:27 linux-5.15.y 1c700860e8bc 803ce19b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/27 00:49 linux-5.15.y 1c700860e8bc 803ce19b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/26 07:18 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/26 03:34 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/26 03:30 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/26 01:53 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/25 22:32 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/25 18:26 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/04 22:20 linux-5.15.y 3dea0e7f549e d869b261 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/03 19:19 linux-5.15.y 3dea0e7f549e 115ceea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/03 11:37 linux-5.15.y 3dea0e7f549e 115ceea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/02 18:29 linux-5.15.y 3dea0e7f549e bc80e4f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/02 00:37 linux-5.15.y 3dea0e7f549e 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/01 22:15 linux-5.15.y 3dea0e7f549e 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/01 20:56 linux-5.15.y 3dea0e7f549e 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/01 04:12 linux-5.15.y 3dea0e7f549e 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/07/01 03:59 linux-5.15.y 3dea0e7f549e 6e83b42d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/29 15:04 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/29 01:40 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/28 10:29 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/28 10:27 linux-5.15.y 3dea0e7f549e fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/27 19:32 linux-5.15.y 3dea0e7f549e 803ce19b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/26 11:43 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/26 09:24 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2025/06/25 11:15 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
2023/03/13 06:56 linux-5.15.y bbf9f29bac04 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 KASAN: slab-out-of-bounds Read in hci_le_meta_evt
* Struck through repros no longer work on HEAD.