Re: [syzbot] [bluetooth?] KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
From: Edward Adam Davis
Date: Tue Nov 25 2025 - 07:14:19 EST
#syz test
diff --git a/net/bluetooth/l2cap_sock.c b/net/bluetooth/l2cap_sock.c
index 814fb8610ac4..6f2740d55dc0 100644
--- a/net/bluetooth/l2cap_sock.c
+++ b/net/bluetooth/l2cap_sock.c
@@ -1422,7 +1422,7 @@ static int l2cap_sock_release(struct socket *sock)
if (!sk)
return 0;
- lock_sock_nested(sk, L2CAP_NESTING_PARENT);
+ lock_sock(sk);
l2cap_sock_cleanup_listen(sk);
release_sock(sk);