syzbot


KASAN: use-after-free Write in hci_sock_bind (2)
Status: upstream: reported C repro on 2020/03/02 05:14
Reported-by: syzbot+04e804c8c2224b6a9497@syzkaller.appspotmail.com
First crash: 512d, last: 236d

Cause bisection: introduced by (bisect log) :
commit 7d13eca09ed5e477f6ecfd97a35058762228b5e4
Author: Florian Fainelli <f.fainelli@gmail.com>
Date: Sat Aug 27 22:34:20 2016 +0000

  Documentation: networking: dsa: Remove platform device TODO

Crash: KASAN: null-ptr-deref Read (log)
Repro: C syz .config

Fix bisection: fixed by (bisect log) [merge commit]:
commit c59c7588fc922e27c378a7e2a920b889bd6bf872
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Fri Dec 18 20:38:28 2020 +0000

  Merge tag 'drm-next-2020-12-18' of git://anongit.freedesktop.org/drm/drm

similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Write in hci_sock_bind 4 525d 557d 16/22 fixed on 2020/02/18 14:31
linux-4.19 KASAN: use-after-free Write in hci_sock_bind C 12 21h20m 560d 0/1 upstream: reported C repro on 2020/01/12 01:08
Patch testing requests:
Created Duration User Patch Repo Result
2020/04/06 15:03 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 14:11 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 OK
2020/04/06 13:05 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 OK
2020/04/06 11:49 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 07:58 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 07:28 15m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 05:35 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/06 04:08 3m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 error
2020/04/05 17:43 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 17:16 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 15:41 14m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 14:52 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 OK
2020/04/05 14:22 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 12:57 17m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 OK
2020/04/05 12:37 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 11:13 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 10:56 3m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 error
2020/04/05 07:57 10m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/04/05 07:06 4m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 error
2020/03/30 14:42 12m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/30 09:18 18m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/30 06:47 11m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/30 06:46 11m anenbupt@gmail.com git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/30 02:50 0m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 error
2020/03/29 16:26 11m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/28 12:53 18m anenbupt@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 770fbb32 report log
2020/03/28 11:57 9m anenbupt@gmail.com patch linux-next error
2020/03/28 11:40 3m anenbupt@gmail.com patch linux-next error
2020/03/28 10:46 9m anenbupt@gmail.com patch linux-next error

Sample crash report:

Crashes (26):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu-upstream 2020/07/23 22:15 upstream d15be546031c 70c104a1 .config log report syz C
ci-upstream-kasan-gce-root 2020/05/24 06:31 upstream 423b8baf18a8 96c92ad3 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/05/24 05:55 upstream 423b8baf18a8 96c92ad3 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2020/03/22 22:09 linux-next 770fbb32d34e 78267cec .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/06/29 06:52 upstream 4e99b32169e8 a2cdad9d .config log report
ci-upstream-kasan-gce-selinux-root 2020/06/18 23:13 upstream 7ae77150d94d d45a4d69 .config log report
ci-upstream-kasan-gce-selinux-root 2020/06/03 19:12 upstream d6f9469a03d8 a5ce5de0 .config log report
ci-upstream-kasan-gce-smack-root 2020/06/02 06:16 upstream 9bf9511e3d9f a0331e89 .config log report
ci-upstream-kasan-gce-root 2020/05/30 02:13 upstream 75caf310d16c 3905eaae .config log report
ci-upstream-kasan-gce-smack-root 2020/05/29 08:09 upstream 75caf310d16c d19ed305 .config log report
ci-upstream-kasan-gce-selinux-root 2020/05/26 15:52 upstream 9cb1fd0efd19 8ca3b7d2 .config log report
ci-upstream-kasan-gce-root 2020/05/16 01:34 upstream 12bf0b632ed0 37bccd4e .config log report
ci-upstream-kasan-gce-root 2020/04/26 17:05 upstream b2768df24ec4 99b258dd .config log report
ci-upstream-kasan-gce-smack-root 2020/04/13 15:28 upstream 8f3d9f354286 17a986e5 .config log report
ci-upstream-kasan-gce-selinux-root 2020/04/09 17:08 upstream 5d30bcacd91a a8c6a3f8 .config log report
ci-upstream-kasan-gce-root 2020/04/02 08:11 upstream 919dce24701f a34e2c33 .config log report
ci-upstream-kasan-gce-selinux-root 2020/04/02 04:02 upstream 1a323ea5356e a34e2c33 .config log report
ci-upstream-kasan-gce-root 2020/03/30 13:54 upstream 7111951b8d49 c8d1cc20 .config log report
ci-upstream-kasan-gce-root 2020/03/27 16:00 upstream f3e69428b5e2 7d95711b .config log report
ci-upstream-kasan-gce-selinux-root 2020/03/19 17:57 upstream 5076190daded 2c31c529 .config log report
ci-upstream-kasan-gce-root 2020/03/02 14:16 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-root 2020/02/29 17:41 upstream f8788d86ab28 59b57593 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/06/24 23:05 linux-next e7b08814b16b 54566aff .config log report
ci-upstream-linux-next-kasan-gce-root 2020/05/18 05:51 linux-next ac935d227366 37bccd4e .config log report
ci-upstream-linux-next-kasan-gce-root 2020/03/29 07:17 linux-next 770fbb32d34e 05736b29 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/03/22 21:22 linux-next 770fbb32d34e 78267cec .config log report