syzbot


KASAN: use-after-free Write in hci_sock_bind (2)
Status: upstream: reported C repro on 2020/03/02 05:14
Reported-by: syzbot+04e804c8c2224b6a9497@syzkaller.appspotmail.com
First crash: 134d, last: 13d

Cause bisection: introduced by (bisect log):

commit 7d13eca09ed5e477f6ecfd97a35058762228b5e4
Author: Florian Fainelli <f.fainelli@gmail.com>
Date: Sat Aug 27 22:34:20 2016 +0000

  Documentation: networking: dsa: Remove platform device TODO

Crash: KASAN: null-ptr-deref Read (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: use-after-free Write in hci_sock_bind 4 147d 179d 16/17 fixed on 2020/02/18 14:31
linux-4.19 KASAN: use-after-free Write in hci_sock_bind C 11 17d 182d 0/1 upstream: reported C repro on 2020/01/12 01:08
Patch testing requests:
Created Duration User Patch Repo Result
2020/04/06 15:03 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 14:11 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 OK
2020/04/06 13:05 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 OK
2020/04/06 11:49 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 07:58 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 07:28 15m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 05:35 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 04:08 3m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 error
2020/04/05 17:43 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 17:16 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 15:41 14m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 14:52 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 OK
2020/04/05 14:22 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 12:57 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 OK
2020/04/05 12:37 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 11:13 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 10:56 3m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 error
2020/04/05 07:57 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 07:06 4m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 error
2020/03/30 14:42 12m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/30 09:18 18m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/30 06:47 11m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/30 06:46 11m anenbupt@gmail.com git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/30 02:50 0m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 error
2020/03/29 16:26 11m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/28 12:53 18m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/28 11:57 9m anenbupt@gmail.com patch linux-next error
2020/03/28 11:40 3m anenbupt@gmail.com patch linux-next error
2020/03/28 10:46 9m anenbupt@gmail.com patch linux-next error

Sample crash report:

Crashes (25):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-root 2020/05/24 06:31 upstream 423b8baf 96c92ad3 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/05/24 05:55 upstream 423b8baf 96c92ad3 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-linux-next-kasan-gce-root 2020/03/22 22:09 linux-next 770fbb32 78267cec .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/06/29 06:52 upstream 4e99b321 a2cdad9d .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/06/18 23:13 upstream 7ae77150 d45a4d69 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/06/03 19:12 upstream d6f9469a a5ce5de0 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-smack-root 2020/06/02 06:16 upstream 9bf9511e a0331e89 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/05/30 02:13 upstream 75caf310 3905eaae .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-smack-root 2020/05/29 08:09 upstream 75caf310 d19ed305 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/05/26 15:52 upstream 9cb1fd0e 8ca3b7d2 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/05/16 01:34 upstream 12bf0b63 37bccd4e .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/04/26 17:05 upstream b2768df2 99b258dd .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-smack-root 2020/04/13 15:28 upstream 8f3d9f35 17a986e5 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/04/09 17:08 upstream 5d30bcac a8c6a3f8 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/04/02 08:11 upstream 919dce24 a34e2c33 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/04/02 04:02 upstream 1a323ea5 a34e2c33 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/03/30 13:54 upstream 7111951b c8d1cc20 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/03/27 16:00 upstream f3e69428 7d95711b .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/03/19 17:57 upstream 5076190d 2c31c529 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/03/02 14:16 upstream 63623fd4 c88c7b75 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/02/29 17:41 upstream f8788d86 59b57593 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-linux-next-kasan-gce-root 2020/06/24 23:05 linux-next e7b08814 54566aff .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-linux-next-kasan-gce-root 2020/05/18 05:51 linux-next ac935d22 37bccd4e .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-linux-next-kasan-gce-root 2020/03/29 07:17 linux-next 770fbb32 05736b29 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-linux-next-kasan-gce-root 2020/03/22 21:22 linux-next 770fbb32 78267cec .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, marcel@holtmann.org, netdev@vger.kernel.org