syzbot


KASAN: use-after-free Read in p54u_load_firmware_cb
Status: fixed on 2019/08/05 13:45
Reported-by: syzbot+200d4bb11b23d929335f@syzkaller.appspotmail.com
Fix commit: 6e41e2257f10 p54usb: Fix race between disconnect and firmware loading
First crash: 871d, last: 787d
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
KASAN: slab-out-of-bounds Read in p54u_load_firmware_cb syz 8 794d 870d 0/22 closed as dup on 2019/08/13 13:28
Patch testing requests:
Created Duration User Patch Repo Result
2019/05/18 17:49 41m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer OK
2019/05/18 17:01 33m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer report log
2019/05/18 16:32 16m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer error
2019/05/18 15:13 35m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer report log
2019/05/17 20:46 14m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer error

Sample crash report:

Crashes (40):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-usb 2019/05/31 10:13 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f d9aaf3c2 .config log report syz
ci2-upstream-usb 2019/05/13 10:22 https://github.com/google/kasan.git usb-fuzzer 43151d6c3fce 16ab1e89 .config log report syz
ci2-upstream-usb 2019/07/28 20:06 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 c85e1c5b .config log report
ci2-upstream-usb 2019/07/25 17:17 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 0d7a1249 .config log report
ci2-upstream-usb 2019/07/25 10:51 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 32329ceb .config log report
ci2-upstream-usb 2019/07/24 19:37 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 32329ceb .config log report
ci2-upstream-usb 2019/07/24 16:18 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 32329ceb .config log report
ci2-upstream-usb 2019/07/24 10:50 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 32329ceb .config log report
ci2-upstream-usb 2019/07/23 13:06 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 bb071d58 .config log report
ci2-upstream-usb 2019/07/22 07:22 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 b3c615f5 .config log report
ci2-upstream-usb 2019/07/21 22:37 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 1656845f .config log report
ci2-upstream-usb 2019/07/21 16:46 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 1656845f .config log report
ci2-upstream-usb 2019/07/21 06:19 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 1656845f .config log report
ci2-upstream-usb 2019/07/21 04:11 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 1656845f .config log report
ci2-upstream-usb 2019/07/20 21:27 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 1656845f .config log report
ci2-upstream-usb 2019/07/20 06:35 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 1656845f .config log report
ci2-upstream-usb 2019/07/20 00:34 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 1656845f .config log report
ci2-upstream-usb 2019/07/19 04:59 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 7bb222f7 .config log report
ci2-upstream-usb 2019/07/18 20:10 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 7bb222f7 .config log report
ci2-upstream-usb 2019/07/17 10:40 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 0d10349c .config log report
ci2-upstream-usb 2019/07/09 23:24 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config log report
ci2-upstream-usb 2019/07/09 03:41 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config log report
ci2-upstream-usb 2019/07/08 19:42 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config log report
ci2-upstream-usb 2019/07/07 02:21 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config log report
ci2-upstream-usb 2019/07/06 17:31 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config log report
ci2-upstream-usb 2019/07/06 15:20 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 f62e1e85 .config log report
ci2-upstream-usb 2019/07/05 14:35 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 429efa16 .config log report
ci2-upstream-usb 2019/07/05 13:08 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 429efa16 .config log report
ci2-upstream-usb 2019/06/28 08:38 https://github.com/google/kasan.git usb-fuzzer 7829a896a587 7509bf36 .config log report
ci2-upstream-usb 2019/06/26 05:23 https://github.com/google/kasan.git usb-fuzzer 9939f56ee6c0 0a8d1a96 .config log report
ci2-upstream-usb 2019/06/14 02:10 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f d25bb7ad .config log report
ci2-upstream-usb 2019/06/04 19:53 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f e41a20c5 .config log report
ci2-upstream-usb 2019/06/03 09:58 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f 53c81ea5 .config log report
ci2-upstream-usb 2019/06/03 06:46 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f 53c81ea5 .config log report
ci2-upstream-usb 2019/06/01 23:14 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f 53c81ea5 .config log report
ci2-upstream-usb 2019/06/01 14:53 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f 53c81ea5 .config log report
ci2-upstream-usb 2019/06/01 08:57 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f 53c81ea5 .config log report
ci2-upstream-usb 2019/06/01 03:40 https://github.com/google/kasan.git usb-fuzzer 69bbe8c72e6f 53c81ea5 .config log report
ci2-upstream-usb 2019/05/13 09:27 https://github.com/google/kasan.git usb-fuzzer 43151d6c3fce 16ab1e89 .config log report
ci2-upstream-usb 2019/05/05 13:12 https://github.com/google/kasan.git usb-fuzzer 43151d6c3fce d28f4ce5 .config log report