Greg, please disregard my previous report.
After testing with a POC (which returned -EFAULT, no crash) and reviewing the
call chain (__sys_bind → move_addr_to_kernel), I confirm that the sockaddr
pointer passed to llcp_sock_bind() already points to kernel memory.
Thus there is no security issue. My apologies for the noise.
Signed-off-by: Eneshan Erdogan Karaca <redacted>