syzbot


general protection fault in usb_set_interface
Status: upstream: reported C repro on 2019/09/16 13:29
Reported-by: syzbot+7fa38a608b1075dfd634@syzkaller.appspotmail.com
Fix commit: c7a19146 media: usbvision: Fix invalid accesses after device disconnect
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-usb], missing on: [ci2-upstream-kcsan-gce]
First crash: 95d, last: 84d
duplicates (5):
Title Repro Bisected Count Last Reported Patched Status
KASAN: invalid-free in usbvision_release 1 87d 87d 0/16 closed as dup on 2019/09/20 15:35
KASAN: use-after-free Write in usbvision_scratch_alloc 5 14d 136d 0/16 closed as dup on 2019/09/20 15:34
KASAN: use-after-free Read in v4l2_release (2) 9 1d22h 80d 0/16 closed as dup on 2019/09/23 15:12
KASAN: use-after-free Read in usbvision_release 1 83d 82d 0/16 closed as dup on 2019/09/20 18:29
KASAN: use-after-free Write in usbvision_decompress_alloc 1 95d 87d 0/16 closed as dup on 2019/09/20 15:35

Sample crash report:

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-upstream-usb 2019/09/12 01:00 https://github.com/google/kasan.git usb-fuzzer f0df5c1b f4e53c10 .config log report syz C gregkh@linuxfoundation.org, kai.heng.feng@canonical.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, mans@mansr.com, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2019/09/19 09:31 https://github.com/google/kasan.git usb-fuzzer f0df5c1b eb940044 .config log report gregkh@linuxfoundation.org, kai.heng.feng@canonical.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, mans@mansr.com, oneukum@suse.com, stern@rowland.harvard.edu
ci2-upstream-usb 2019/09/08 10:56 https://github.com/google/kasan.git usb-fuzzer f0df5c1b a60cb4cd .config log report gregkh@linuxfoundation.org, kai.heng.feng@canonical.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, mans@mansr.com, oneukum@suse.com, stern@rowland.harvard.edu