syzbot


KASAN: use-after-free Read in service_outstanding_interrupt
Status: upstream: reported C repro on 2020/08/07 12:19
Reported-by: syzbot+9e04e2df4a32fb661daf@syzkaller.appspotmail.com
Fix commit: 5e5ff0b4 USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32 ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 173d, last: 17d
Patch testing requests:
Created Duration User Patch Repo Result
2021/01/04 16:28 14m syzkaller-bugs@googlegroups.com patch https://github.com/google/kasan.git 5e60366d report log

Sample crash report:

Crashes (28):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci2-upstream-usb 2020/12/18 03:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5e60366d 04201c06 .config log report syz C gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci-upstream-kasan-gce 2020/12/14 07:13 upstream 6bff9bb8 b22a7ec3 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2021/01/09 16:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 841081d8 a6c52263 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2021/01/05 18:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ed054e4e a0234d98 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2021/01/05 17:42 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ed054e4e a0234d98 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2021/01/03 01:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cb4d9b52 79264ae3 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2021/01/01 07:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cb4d9b52 79264ae3 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/12/30 13:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cb4d9b52 ecb8c012 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/12/29 11:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cb4d9b52 8259d56c .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/12/29 05:31 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 32510cf5 8259d56c .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/12/28 16:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5c8fe583 8259d56c .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/12/28 12:42 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f838f8d2 2242f77f .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/12/26 12:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3644e2d2 821e0b09 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/12/21 15:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3644e2d2 04201c06 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/12/18 02:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5e60366d 04201c06 .config log report info gregkh@linuxfoundation.org, lee.jones@linaro.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, penguin-kernel@I-love.SAKURA.ne.jp
ci2-upstream-usb 2020/08/30 23:41 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3ed8e1c2 d5a3ae1f .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, stern@rowland.harvard.edu
ci2-upstream-usb 2020/08/30 09:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3ed8e1c2 d5a3ae1f .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2020/08/30 01:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3ed8e1c2 d5a3ae1f .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2020/08/29 20:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3ed8e1c2 d5a3ae1f .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2020/08/29 05:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3ed8e1c2 d5a3ae1f .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2020/08/28 15:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3ed8e1c2 816e0689 .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com
ci2-upstream-usb 2020/08/25 19:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cb06b385 344da168 .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com
ci2-upstream-usb 2020/08/25 02:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 28157b8c 344da168 .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2020/08/23 21:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 28157b8c a6d5f3ad .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2020/08/22 00:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 28157b8c 6436ce4b .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2020/08/21 08:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 28157b8c 1d75fe45 .config log report eli.billauer@gmail.com, gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, oneukum@suse.com
ci2-upstream-usb 2020/08/07 11:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 7b4ea945 28ac5c9e .config log report gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org
ci2-upstream-usb 2020/08/07 10:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 7b4ea945 cb436c69 .config log report gregkh@linuxfoundation.org, gustavoars@kernel.org, ingrassia@epigenesys.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org