syzbot


KASAN: use-after-free Read in v4l2_fh_open
Status: upstream: reported C repro on 2021/02/15 15:18
Reported-by: syzbot+b2391895514ed9ef4a8e@syzkaller.appspotmail.com
First crash: 87d, last: 27d

Cause bisection: introduced by (bisect log) [ignored commit]:
commit f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10
Author: Andrey Konovalov <andreyknvl@google.com>
Date: Mon Feb 24 16:13:03 2020 +0000

  usb: gadget: add raw-gadget interface

Crash: KASAN: use-after-free Read in v4l2_fh_init (log)
Repro: C syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2021/05/07 18:26 12m igormtorrente@gmail.com https://github.com/Igortorrente/linux.git v4l2-open-use-after-free error
2021/05/03 14:57 33m igormtorrente@gmail.com https://github.com/Igortorrente/linux.git v4l2-open-use-after-free error
2021/04/07 17:19 35m igormtorrente@gmail.com https://github.com/Igortorrente/linux.git v4l2-open-use-after-free OK
2021/03/19 22:13 36m igormtorrente@gmail.com https://github.com/Igortorrente/linux.git v4l2-open-use-after-free report log
2021/03/19 13:20 16m igormtorrente@gmail.com https://github.com/Igortorrente/linux.git v4l2-open-use-after-free report log
2021/03/10 14:17 12m igormtorrente@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/ master report log

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/04/12 15:55 upstream d434405a a52ee10a .config log report syz C
ci-upstream-kasan-gce-smack-root 2021/03/13 15:32 upstream f296bfd5 a52ee10a .config log report syz C
Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/02/11 15:12 upstream 291009f6 a52ee10a .config log report syz C KASAN: use-after-free Read in v4l2_fh_open