syzbot


KASAN: use-after-free Read in hif_usb_regout_cb
Status: upstream: reported C repro on 2020/03/26 11:34
Reported-by: syzbot+b894396e6110e1df38c4@syzkaller.appspotmail.com
First crash: 132d, last: 53d
duplicates (1):
Title Repro Bisected Count Last Reported Patched Status
KASAN: use-after-free Read in ath9k_htc_txcompletion_cb 8 53d 115d 0/17 closed as dup on 2020/06/12 13:08

Sample crash report:

Crashes (1383):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-upstream-usb 2020/04/17 22:14 https://github.com/google/kasan.git usb-fuzzer 0fa84af8 435c6d53 .config log report syz C ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/08 21:30 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 7604bb03 .config log report syz ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/05/29 15:55 https://github.com/google/kasan.git usb-fuzzer d19c64b3 bed08304 .config log report syz ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 12:12 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 819b58b0 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 11:19 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 819b58b0 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 10:02 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 819b58b0 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 08:13 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 819b58b0 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 07:11 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 819b58b0 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 06:03 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 819b58b0 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 03:29 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 1beaee21 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 02:08 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 1beaee21 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/12 00:28 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 1beaee21 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 23:19 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 1beaee21 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 22:25 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 1beaee21 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 21:03 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 1beaee21 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 19:31 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 1beaee21 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 16:56 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 1beaee21 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 15:25 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 14:09 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 12:18 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 11:32 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 10:09 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 08:59 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 07:14 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 05:43 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 04:22 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/11 03:10 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 3ab7a05a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 23:54 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 5caaad3a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 21:58 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 5caaad3a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 21:26 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 5caaad3a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 19:39 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 5caaad3a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 18:13 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 5caaad3a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 17:05 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 5caaad3a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 14:33 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 5caaad3a .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 10:31 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 860c4de9 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 09:19 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 860c4de9 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 07:46 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 860c4de9 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 06:21 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 860c4de9 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 05:11 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 860c4de9 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/10 01:53 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 860c4de9 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/09 23:56 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 092934c1 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/09 20:25 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 092934c1 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/09 18:17 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 092934c1 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/06/09 17:04 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 092934c1 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kuba@kernel.org, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/03/26 10:10 https://github.com/google/kasan.git usb-fuzzer e17994d1 e8e6c7d2 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org
ci2-upstream-usb 2020/03/25 22:42 https://github.com/google/kasan.git usb-fuzzer e17994d1 e8e6c7d2 .config log report ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org