syzbot


KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt
Status: upstream: reported C repro on 2020/07/08 01:43
Reported-by: syzbot+d8489a79b781849b9c46@syzkaller.appspotmail.com
Fix commit: 51c19bf3 Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
Patched on: [ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-upstream ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 38d, last: 7d05h
duplicates (1):
Title Repro Bisected Count Last Reported Patched Status
KMSAN: uninit-value in hci_event_packet C 37 3d18h 485d 0/17 closed as dup on 2020/07/24 21:34
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.19 KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt C 6 4d00h 38d 0/1 upstream: reported C repro on 2020/07/04 16:34
linux-4.14 KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt C 5 4d00h 9d07h 0/1 upstream: reported C repro on 2020/08/02 11:19

Sample crash report:

Crashes (16):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-root 2020/08/04 13:23 upstream 3208167a 196277c4 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/08/02 21:47 upstream ac3a0c84 63a73341 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/07/04 14:51 upstream 7cc2a8ea 51095195 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/07/04 13:08 upstream 7cc2a8ea 51095195 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/07/04 01:55 upstream 7cc2a8ea 51095195 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-386 2020/07/04 11:09 upstream 7cc2a8ea 51095195 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-linux-next-kasan-gce-root 2020/07/04 07:39 linux-next 9e50b94b 51095195 .config log report syz C davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/08/02 12:17 upstream ac3a0c84 63a73341 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/08/02 12:15 upstream ac3a0c84 63a73341 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/08/02 11:20 upstream ac3a0c84 63a73341 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/08/02 11:15 upstream ac3a0c84 63a73341 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/07/21 09:43 upstream 4fa640dc d88894e6 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/07/17 12:22 upstream f8456690 54b3c45e .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/07/17 12:18 upstream f8456690 54b3c45e .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-qemu-upstream 2020/07/17 12:17 upstream 07a56bb8 54b3c45e .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/07/04 01:36 upstream 7cc2a8ea 51095195 .config log report davem@davemloft.net, johan.hedberg@gmail.com, kuba@kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org, linux@armlinux.org.uk, marcel@holtmann.org, netdev@vger.kernel.org