syzbot


BUG: corrupted list in em28xx_init_extension
Status: upstream: reported C repro on 2020/01/23 13:17
Reported-by: syzbot+a6969ef522a36d3344c9@syzkaller.appspotmail.com
Fix commit: media: em28xx: add missing em28xx_close_extension
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 606d, last: 61d

Cause bisection: failed (bisect log)
duplicates (3):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
BUG: corrupted list in corrupted (3) C 1 457d 453d 0/22 closed as dup on 2020/06/24 12:45
WARNING in em28xx_init_extension C 4 680d 723d 0/22 closed as dup on 2020/03/09 15:24
KASAN: use-after-free Read in em28xx_init_extension C 6 22d 727d 0/22 closed as dup on 2020/03/09 15:23
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in em28xx_init_extension C 6 22d 727d 0/22 closed as dup on 2020/03/09 15:23
Patch testing requests:
Created Duration User Patch Repo Result
2021/07/29 17:38 19m paskripkin@gmail.com patch upstream OK
2021/07/21 12:26 38m paskripkin@gmail.com patch upstream OK
2021/07/06 13:55 19m mudongliangabcd@gmail.com upstream error

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2021/06/01 19:44 upstream c2131f7e73c9 92ead296 .config log report syz C
ci-upstream-kasan-gce 2021/05/02 13:18 upstream 17ae69aba89d 92ead296 .config log report syz C
ci-upstream-kasan-gce 2021/04/02 12:56 upstream 1678e493d530 92ead296 .config log report syz C
Crashes (18):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/07/20 21:25 upstream 8cae8cd89f05 1b201b48 .config log report syz C BUG: corrupted list in em28xx_init_extension
ci-upstream-kasan-gce-root 2021/07/11 10:11 upstream 3dbdb38e2869 8f5a7b8c .config log report syz C BUG: corrupted list in em28xx_init_extension
ci-upstream-kasan-gce-smack-root 2021/06/22 00:32 upstream 13311e74253f aba2b2fb .config log report syz C BUG: corrupted list in em28xx_init_extension
ci-upstream-kasan-gce-root 2021/06/13 15:00 upstream 8ecfa36cd4db 1ba81399 .config log report syz C BUG: corrupted list in em28xx_init_extension
ci-upstream-kasan-gce 2021/03/02 18:38 upstream 7a7fd0de4a98 92ead296 .config log report syz C BUG: corrupted list in em28xx_init_extension
ci-upstream-kasan-gce 2021/02/08 01:30 upstream b75dba7f472c 2ce644fc .config log report syz C BUG: corrupted list in em28xx_init_extension
ci-upstream-linux-next-kasan-gce-root 2021/07/15 18:27 linux-next c1a6d08348fc b9a2f64e .config log report syz C BUG: corrupted list in em28xx_init_extension
ci2-upstream-usb 2021/01/10 00:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 841081d89d5a 2c1f2513 .config log report syz C
ci2-upstream-usb 2020/12/22 10:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3644e2d2dda7 04201c06 .config log report syz C
ci2-upstream-usb 2020/07/06 03:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 768a07412843 22f87567 .config log report syz C
ci2-upstream-usb 2020/06/09 06:39 https://github.com/google/kasan.git usb-fuzzer 2089c6ed5a17 0d60b78a .config log report syz C
ci2-upstream-usb 2020/05/29 01:51 https://github.com/google/kasan.git usb-fuzzer d19c64b3d097 d19ed305 .config log report syz C
ci2-upstream-usb 2020/05/14 04:52 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c a885920d .config log report syz C
ci2-upstream-usb 2020/03/06 18:04 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 7fb694ef .config log report syz C
ci2-upstream-usb 2020/03/06 14:14 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 7fb694ef .config log report syz C
ci2-upstream-usb 2020/02/29 23:47 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c c88c7b75 .config log report syz C
ci2-upstream-usb 2020/01/23 03:16 https://github.com/google/kasan.git usb-fuzzer 4cc301ee04d9 3334d684 .config log report syz C
ci2-upstream-usb 2020/01/25 01:03 https://github.com/google/kasan.git usb-fuzzer cd234325a5f1 2e95ab33 .config log report