syzbot


KASAN: use-after-free Read in ath9k_wmi_ctrl_rx
Status: upstream: reported C repro on 2020/03/27 13:30
Reported-by: syzbot+5d338854440137ea0fef@syzkaller.appspotmail.com
Fix commit: abeaa850 ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 107d, last: 107d
Patch testing requests:
Created Duration User Patch Repo Result
2020/04/04 03:50 18m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer OK
2020/04/04 02:18 16m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer OK
2020/04/04 01:58 4m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer error
2020/04/04 01:01 9m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/04 00:26 9m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/04 00:04 9m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/03 23:34 9m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/03 23:12 9m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/03 22:08 9m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/03 20:39 10m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/03 16:53 16m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer OK
2020/04/03 09:29 11m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/03 04:28 11m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log
2020/04/03 01:51 9m anenbupt@gmail.com patch https://github.com/google/kasan.git usb-fuzzer report log

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-upstream-usb 2020/03/27 02:16 https://github.com/google/kasan.git usb-fuzzer e17994d1 6d25c5a0 .config log report syz C ath9k-devel@qca.qualcomm.com, davem@davemloft.net, kvalo@codeaurora.org, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, netdev@vger.kernel.org