syzbot


KASAN: use-after-free Read in firmware_fallback_sysfs
Status: fixed on 2021/11/10 00:50
Reported-by: syzbot+de271708674e2093097b@syzkaller.appspotmail.com
Fix commit: 75d95e2e39b2 firmware_loader: fix use-after-free in firmware_fallback_sysfs
First crash: 355d, last: 151d

Cause bisection: failed (bisect log)
duplicates (3):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
KASAN: use-after-free Read in kill_pending_fw_fallback_reqs 784 122d 305d 0/22 closed as dup on 2021/03/19 06:17
WARNING: locking bug in complete_all 4 172d 243d 0/22 closed as dup on 2021/07/05 05:25
BUG: unable to handle kernel paging request in complete_all 2 184d 197d 0/22 closed as dup on 2021/07/05 05:25
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 KASAN: use-after-free Read in firmware_fallback_sysfs C 2349 89d 639d 1/1 fixed on 2021/10/21 11:33
android-54 BUG: corrupted list in firmware_fallback_sysfs 70 90d 637d 0/1 upstream: reported on 2020/04/20 14:11
android-54 KASAN: slab-out-of-bounds Read in firmware_fallback_sysfs 6 500d 610d 0/1 auto-closed as invalid on 2021/01/03 04:24
Patch testing requests:
Created Duration User Patch Repo Result
2021/07/27 18:46 19m mail@anirudhrb.com patch upstream OK
2021/04/14 16:20 19m mail@anirudhrb.com patch linux-next OK
2021/04/14 07:06 19m mail@anirudhrb.com patch linux-next OK
2021/04/13 09:04 18m mail@anirudhrb.com patch linux-next OK
2021/04/13 06:36 19m mail@anirudhrb.com patch linux-next OK
2021/04/12 13:33 12m mail@anirudhrb.com linux-next report log

Sample crash report:

Crashes (16514):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2021/08/08 11:45 upstream 85a90500f9a1 6972b106 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-root 2021/08/06 15:09 upstream 902e7f373fff f9e341e3 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-selinux-root 2021/08/03 08:28 upstream c500bee1c5b2 6c236867 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-root 2021/08/01 18:32 upstream f3438b4c4e69 6c236867 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce 2021/06/14 16:49 upstream 009c9aa5be65 1ba81399 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/05 03:08 bpf a02215ce72a3 b97d64c9 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/06/26 12:54 net d6765985a42a 9d2ab5df .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/06/01 14:49 net 4ac06a1e013c 032639db .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/05/23 00:57 net e29f011e8fc0 3c7fef33 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/05/17 06:58 bpf 2d58cee61309 f54a5c09 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/04/08 13:37 bpf 144748eb0c44 6a81331a .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/04/05 14:05 net a14d273ba159 6a81331a .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/08/13 18:23 net-next b769cf44ed55 3fd2ea69 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-next-kasan-gce 2021/08/05 02:36 bpf-next db517c8f8556 b97d64c9 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/07/23 09:17 net-next 4431531c482a bc5f1d88 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/06/26 12:50 net-next ff8744b5eb11 9d2ab5df .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/06/04 23:45 net-next ebbf5fcb94a7 966a236b .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-next-kasan-gce 2021/06/01 14:54 bpf-next 05924717ac70 032639db .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/05/28 15:31 net-next af9207adb6d9 858ea628 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/05/23 01:05 net-next f5120f599880 3c7fef33 .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/04/08 14:08 net-next 3cd52c1e32fe 6a81331a .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-next-kasan-gce 2021/04/08 14:04 bpf-next 957dca3df624 6a81331a .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/04/05 14:04 net-next 7d42e84eb99d 6a81331a .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/03/21 12:01 net-next a1e6f641e307 17810eae .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-linux-next-kasan-gce-root 2021/06/26 12:26 linux-next a1f92694393a 9d2ab5df .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-linux-next-kasan-gce-root 2021/05/10 05:59 linux-next e6f67ebd93ef bc5434be .config log report syz C KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-root 2021/07/23 08:46 upstream 9bead1b58c4c bc5f1d88 .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-root 2021/07/08 06:24 upstream 3dbdb38e2869 95793bce .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-root 2021/06/13 13:37 upstream 8ecfa36cd4db 1ba81399 .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/08/13 17:54 net a9a507013a6f 3fd2ea69 .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/08/03 07:42 net 0541a6293298 6c236867 .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/07/23 09:07 net 9f42f674a892 bc5f1d88 .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/06/19 04:54 net 35036d69b9bd aba2b2fb .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/06/16 16:26 net a4f0377db125 c06f97ad .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/06/04 23:42 net 1a8024239dac 966a236b .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/06/01 14:19 bpf ff2e6efda0d5 032639db .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/05/28 14:56 net 44991d61aa12 858ea628 .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/04/27 23:56 net bbd6f0a94813 805b5003 .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/03/12 06:38 net 47142ed6c34d 429d8a6b .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/08/03 07:42 net-next 28814cd18cd7 6c236867 .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/06/16 16:19 net-next c7654495916e c06f97ad .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/06/01 14:42 net-next e099f3e8b71c 032639db .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-next-kasan-gce 2021/04/05 17:47 bpf-next 1e1032b0c4af 6a81331a .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-linux-next-kasan-gce-root 2021/06/04 23:08 linux-next a1f92694393a 966a236b .config log report syz KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-root 2021/08/08 16:33 upstream 85a90500f9a1 6972b106 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce 2021/08/08 13:57 upstream 85a90500f9a1 6972b106 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-selinux-root 2021/08/06 19:06 upstream 902e7f373fff f9e341e3 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-qemu-upstream 2021/08/05 22:46 upstream 902e7f373fff d2d6e680 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-qemu-upstream-386 2021/08/05 20:07 upstream 902e7f373fff d2d6e680 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-kasan-gce-386 2021/07/28 07:28 upstream 7d549995d4e0 17d6ab15 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-qemu2-arm64 2021/03/14 18:38 upstream f296bfd5cd04 4a003785 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-qemu2-arm64-compat 2021/03/10 00:59 upstream 144c79ef3353 26967e35 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-qemu2-arm64-compat 2021/01/31 19:25 upstream 6642d600b541 fc9fd31e .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-qemu2-arm64 2021/01/28 04:06 upstream 2ab38c17aac1 1fa053ad .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 15:15 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 13:03 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 11:00 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 09:56 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 09:42 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 08:27 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 06:42 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 05:35 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 05:19 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 03:14 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 02:12 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 01:10 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 00:12 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 22:49 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 21:49 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 21:02 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 20:00 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 18:47 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 17:29 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 12:52 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 11:07 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 08:08 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 05:45 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 04:32 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 00:19 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/17 22:39 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/17 19:03 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/17 17:50 bpf 3776f3517ed9 a2fe1cb5 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/17 13:54 bpf 3776f3517ed9 33c26cb7 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/17 11:46 bpf 3776f3517ed9 33c26cb7 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-this-kasan-gce 2021/08/13 23:49 net a9a507013a6f 3fd2ea69 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-net-kasan-gce 2021/08/13 22:33 net-next b769cf44ed55 3fd2ea69 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-bpf-next-kasan-gce 2021/08/13 13:58 bpf-next 25dc3895baaa 3fd2ea69 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-upstream-linux-next-kasan-gce-root 2021/07/30 04:42 linux-next 4ccc9e2db7ac c585c7b0 .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-qemu2-riscv64 2021/06/19 03:38 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 18a3c5f7abfd aba2b2fb .config log report info KASAN: use-after-free Read in firmware_fallback_sysfs
ci-qemu2-arm64-mte 2021/06/27 05:21 upstream 625acffd7ae2 9d2ab5df .config log report info KASAN: invalid-access Read in firmware_fallback_sysfs
ci-qemu2-arm32 2021/05/27 18:28 upstream bf152b0b41dc 858ea628 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-qemu2-arm64-mte 2021/03/14 10:52 upstream 88fe49249c99 4a003785 .config log report info KASAN: invalid-access Read in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 14:04 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 12:00 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/19 04:15 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 16:16 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 15:10 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 14:09 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 12:13 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 09:56 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 08:41 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 06:54 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 03:25 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 02:32 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/18 01:21 bpf 3776f3517ed9 a2fe1cb5 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/17 14:40 bpf 3776f3517ed9 33c26cb7 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/17 12:46 bpf 3776f3517ed9 33c26cb7 .config log report info BUG: corrupted list in firmware_fallback_sysfs
ci-upstream-bpf-kasan-gce 2021/08/13 10:07 bpf 2d3a1e3615c5 3fd2ea69 .config log report info KASAN: slab-out-of-bounds Read in firmware_fallback_sysfs
ci-upstream-bpf-next-kasan-gce 2021/08/12 11:41 bpf-next 25dc3895baaa 6972b106 .config log report info KFENCE: use-after-free in firmware_fallback_sysfs
ci-upstream-kmsan-gce 2021/06/23 23:51 https://github.com/google/kmsan.git master 31ffdb453231 fe4ab389 .config log report info KMSAN: uninit-value in firmware_fallback_sysfs
ci-upstream-kmsan-gce-386 2021/06/19 09:59 https://github.com/google/kmsan.git master bfeba8b4c158 aba2b2fb .config log report info KMSAN: uninit-value in firmware_fallback_sysfs
ci-upstream-kmsan-gce-386 2021/06/18 22:41 https://github.com/google/kmsan.git master bfeba8b4c158 aba2b2fb .config log report info KMSAN: uninit-value in firmware_fallback_sysfs