syzbot


KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt
Status: upstream: reported C repro on 2020/07/13 19:24
Reported-by: syzbot+3a430af182785b4c7360@syzkaller.appspotmail.com
Fix commit: 629b49c8 Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
Patched on: [ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-upstream ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 33d, last: 8d20h

Cause bisection: failed (bisect log)
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.14 KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt C 5 3d18h 11d 0/1 upstream: reported C repro on 2020/07/31 13:57
linux-4.19 KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt C 4 3d18h 32d 0/1 upstream: reported C repro on 2020/07/09 22:47

Sample crash report:

Crashes (9):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-root 2020/08/02 22:57 upstream ac3a0c84 63a73341 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/08/01 07:10 upstream d8b9faec d895b3be .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/07/11 00:29 upstream a581387e 18d18b59 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/07/09 23:33 upstream 0bddd227 bc238812 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/07/09 19:27 upstream 0bddd227 bc238812 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-386 2020/07/09 19:56 upstream 0bddd227 bc238812 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-linux-next-kasan-gce-root 2020/07/11 20:04 linux-next d31958b3 18d18b59 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/08/02 10:39 upstream ac3a0c84 63a73341 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/07/09 19:14 upstream 0bddd227 bc238812 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org