syzbot


KASAN: use-after-free Read in hci_cmd_timeout
Status: upstream: reported C repro on 2019/05/07 09:10
Reported-by: syzbot+19a9f729f05272857487@syzkaller.appspotmail.com
First crash: 951d, last: 2d06h

Cause bisection: introduced by (bisect log) :
commit ff92b9dd9268507e23fc10cc4341626cef50367c
Author: Suganath Prabu <suganath-prabu.subramani@broadcom.com>
Date: Thu Oct 25 14:03:40 2018 +0000

  scsi: mpt3sas: Update MPI headers to support Aero controllers

Crash: KASAN: use-after-free Read in hci_cmd_timeout (log)
Repro: C syz .config

Fix bisection: failed (bisect log)
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in hci_cmd_timeout syz error 11 76d 828d 0/1 upstream: reported syz repro on 2019/09/01 02:37
linux-4.14 KASAN: use-after-free Read in hci_cmd_timeout C inconclusive 10 192d 822d 0/1 upstream: reported C repro on 2019/09/06 20:31
Patch testing requests:
Created Duration User Patch Repo Result
2021/08/14 15:41 18m phind.uet@gmail.com linux-next OK
2020/10/27 16:43 18m anmol.karan123@gmail.com upstream OK

Sample crash report:

Crashes (131):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-386 2021/07/11 15:14 upstream 3dbdb38e2869 8f5a7b8c .config log report syz C KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2019/07/03 13:11 upstream eca94432934f 55565fa0 .config log report syz C
ci-qemu-upstream 2020/06/16 19:24 upstream 435faf5c218a 4ea9d964 .config log report syz
ci-qemu-upstream 2021/12/05 06:30 upstream bbef3c7a63d2 a617004c .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/30 05:32 upstream d58071a8a76d d0830353 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/30 04:09 upstream d58071a8a76d d0830353 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/11/27 21:51 upstream 741392771338 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/26 19:57 upstream a4849f6000e2 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/11/26 16:20 upstream a4849f6000e2 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/11/25 07:37 upstream 5f53fa508db0 545ab074 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/11/19 19:51 upstream 4c388a8e740d 3a9d0024 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/18 15:35 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/11/09 05:30 upstream e851dfae4371 8ab17e57 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/11/07 11:50 upstream b5013d084e03 4c1be0be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2021/11/05 18:41 upstream d4439a1189f9 4c1be0be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/04 19:54 upstream 7ddb58cb0eca 4c1be0be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2021/11/03 12:21 upstream dcd68326d29b 17f3edd2 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/01 09:14 upstream 8bb7eca972ad 098b5d53 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/10/28 08:29 upstream 1fc596a56b33 be531bb4 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/10/24 08:09 upstream 9c0c4d24ac00 282f03fb .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/10/21 15:53 upstream 2f111a6fd5b5 c5cb7da8 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/12/03 07:53 upstream a51e3ac43ddb 61f86278 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/12/02 08:03 upstream 58e1100fdc59 61f86278 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/29 03:29 upstream d06c942efea4 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/22 20:00 upstream 136057256686 545ab074 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/17 00:00 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/16 13:01 upstream 8ab774587903 600426bd .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/16 00:12 upstream 8ab774587903 83f5c9b5 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/11 08:00 upstream debe436e77c7 75b04091 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/08 21:46 upstream e851dfae4371 d29682f1 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/08 01:17 upstream b5013d084e03 4c1be0be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/07 06:39 upstream 512b7931ad05 4c1be0be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/06 12:23 upstream fe91c4725aee 4c1be0be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/10/11 11:57 upstream 64570fbc14f8 838e7e2c .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/12/04 11:53 linux-next f81e94e91878 a617004c .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/12/03 18:03 linux-next f81e94e91878 c7c20675 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/30 13:07 linux-next f81e94e91878 80270552 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/28 10:55 linux-next f81e94e91878 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/27 17:03 linux-next f81e94e91878 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/26 07:58 linux-next f81e94e91878 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/26 05:30 linux-next f81e94e91878 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/24 17:23 linux-next 4b74e088fef6 545ab074 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/19 09:59 linux-next 5191249f8803 31a30fc0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/19 00:13 linux-next 5191249f8803 31a30fc0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/12 04:35 linux-next ad8be4fa6e81 75b04091 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/11 06:18 linux-next ad8be4fa6e81 75b04091 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/09 21:41 linux-next c8109c2ba35e 59bcaf9a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/07 04:50 linux-next 6a37ebbe07bf 4c1be0be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/06 15:22 linux-next 6a37ebbe07bf 4c1be0be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/03 10:28 linux-next 9150de4aac1e 17f3edd2 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/02 17:26 linux-next 9150de4aac1e 17f3edd2 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/02 09:14 linux-next 9150de4aac1e 098b5d53 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/01/14 09:52 upstream 65f0d2414b70 269d24e8 .config log report info
ci-upstream-kasan-gce 2019/04/30 13:29 upstream 83a50840e72a 20f16bef .config log report
ci-qemu-upstream-386 2021/10/28 01:05 upstream 1fc596a56b33 be531bb4 .config log report info KFENCE: use-after-free in hci_cmd_timeout