syzbot


KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2)
Status: upstream: reported C repro on 2020/11/16 17:09
Reported-by: syzbot+03110230a11411024147@syzkaller.appspotmail.com
First crash: 215d, last: 1h13m

Cause bisection: introduced by (bisect log) :
commit dcd479e10a0510522a5d88b29b8f79ea3467d501
Author: Johannes Berg <johannes.berg@intel.com>
Date: Fri Oct 9 12:17:11 2020 +0000

  mac80211: always wind down STA state

Crash: BUG: sleeping function called from invalid context in sta_info_move_state (log)
Repro: C syz .config
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
KASAN: slab-out-of-bounds Read in ath9k_hif_usb_rx_cb (2) C error 181 3h23m 324d 0/22 closed as dup on 2021/01/13 11:30
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in ath9k_hif_usb_rx_cb C 2849 215d 450d 17/22 fixed on 2020/11/16 12:12
upstream KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) C unreliable 5 13d 165d 0/22 upstream: reported C repro on 2021/01/05 16:03
upstream KASAN: slab-out-of-bounds Read in ath9k_hif_usb_rx_cb (2) C error 181 3h23m 324d 0/22 closed as dup on 2021/01/13 11:30
upstream general protection fault in ath9k_hif_usb_rx_cb (2) C error 765 58m 337d 0/22 upstream: reported C repro on 2020/07/17 18:56
Patch testing requests:
Created Duration User Patch Repo Result
2021/06/17 21:59 14m fuzzybritches0@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 009c9aa5be652675a06d5211e1640e02bbb1c33d report log
2021/06/17 17:38 16m fuzzybritches0@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 009c9aa5be652675a06d5211e1640e02bbb1c33d report log
2021/06/17 12:27 12m fuzzybritches0@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 009c9aa5be652675a06d5211e1640e02bbb1c33d report log
2021/03/12 08:39 9m mail@anirudhrb.com linux-next report log

Sample crash report:

Crashes (3822):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/06/19 17:04 upstream b1edae0d aba2b2fb .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/06/17 11:49 upstream 6b00bc63 aba2b2fb .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/06/14 08:42 upstream e4e45343 1ba81399 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/06/04 11:50 upstream f88cd3fb 0740de69 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/06/03 00:22 upstream 324c92e5 0740de69 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/06/02 02:30 upstream c2131f7e 032639db .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/06/01 21:48 upstream c2131f7e 032639db .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/05/31 20:01 upstream 8124c8a6 032639db .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/05/30 11:34 upstream 6799d4f2 325a8dab .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/05/30 09:59 upstream 6799d4f2 325a8dab .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/05/30 07:57 upstream 6799d4f2 325a8dab .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/05/29 12:37 upstream 5ff2756a 858ea628 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/05/27 12:22 upstream 7ac3a1c1 858ea628 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/05/27 10:22 upstream 7ac3a1c1 858ea628 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/04/30 02:57 upstream d2b6f8a1 77e2b668 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/04/28 20:07 upstream acd3d285 77e2b668 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/03/24 06:50 upstream 7acac4b3 e613994b .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/03/23 06:25 upstream 84196390 8092f30d .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/03/21 17:31 upstream 812da4d3 17810eae .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/03/05 10:27 upstream cee407c5 9d751681 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/02/24 13:16 upstream c03c21ba fcc6d71b .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/02/20 23:18 upstream f40ddce8 3e5ed8b4 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/02/20 18:05 upstream f40ddce8 3e5ed8b4 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/02/20 01:10 upstream f40ddce8 f689d40a .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/02/19 23:55 upstream f40ddce8 f689d40a .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/02/19 00:29 upstream f40ddce8 14052202 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/02/17 02:51 upstream f40ddce8 98682e5e .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/02/16 12:05 upstream f40ddce8 98682e5e .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/02/16 00:02 upstream f40ddce8 98682e5e .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/02/14 12:31 upstream ac30d8ce 98682e5e .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce 2021/02/14 07:52 upstream ac30d8ce 98682e5e .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/02/14 02:58 upstream ac30d8ce 98682e5e .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce 2021/02/12 03:59 upstream 291009f6 a5f86b15 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-root 2021/02/12 02:25 upstream 291009f6 a5f86b15 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-linux-next-kasan-gce-root 2021/04/17 05:57 linux-next 1216f02e 7e2b734b .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-linux-next-kasan-gce-root 2021/04/14 08:09 linux-next dcf1b51d a184b83e .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-linux-next-kasan-gce-root 2021/04/11 23:48 linux-next e99d8a84 bfeda1b1 .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/04/09 01:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e9fcb077 6a81331a .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-linux-next-kasan-gce-root 2021/04/06 09:32 linux-next 454c576c 6a81331a .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-linux-next-kasan-gce-root 2021/04/05 06:57 linux-next 454c576c 6a81331a .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-linux-next-kasan-gce-root 2021/04/04 08:27 linux-next 454c576c 6a81331a .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-linux-next-kasan-gce-root 2021/04/01 10:15 linux-next 93129492 6a81331a .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-linux-next-kasan-gce-root 2021/03/23 05:22 linux-next e3128d2f 8092f30d .config log report syz C KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-386 2020/11/18 16:30 upstream 0fa8ee0d 09323409 .config log report syz C
ci2-upstream-usb 2021/01/11 08:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 841081d8 2c1f2513 .config log report syz C
ci2-upstream-usb 2020/11/16 16:45 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 0fb2c41f 1bf9a662 .config log report syz C
ci-upstream-kasan-gce-root 2021/06/10 06:38 upstream cd1245d7 1ba81399 .config log report syz KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-smack-root 2021/05/30 06:19 upstream 6799d4f2 325a8dab .config log report syz KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-qemu-upstream 2021/06/03 13:40 upstream 324c92e5 0740de69 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-selinux-root 2021/05/26 08:33 upstream ad9f25d3 93d3a9f6 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce 2021/05/19 22:06 upstream 8ac91e6c a343ba6b .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci-upstream-kasan-gce-386 2021/05/14 12:18 upstream 315d9931 8bdd5343 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/20 05:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/20 02:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/20 01:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/19 23:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/19 20:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/19 19:10 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/19 15:37 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/19 12:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/19 09:12 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/19 05:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/18 22:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/18 20:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04d72afa aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/18 15:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b31d9d6d aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/18 06:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b31d9d6d aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/18 03:42 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b31d9d6d aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/18 02:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e5662158 aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/18 00:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e5662158 aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/17 20:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e5662158 aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/17 05:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1da8116e aba2b2fb .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/16 19:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1da8116e c06f97ad .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/16 18:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1da8116e c06f97ad .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/16 06:01 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5f4dee73 990d3cbe .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/16 02:48 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5f4dee73 990d3cbe .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/15 22:10 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5f4dee73 990d3cbe .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/15 15:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1f28f6f0 8022d7e3 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/15 13:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1f28f6f0 8022d7e3 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/15 11:06 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1f28f6f0 8022d7e3 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/15 06:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1f28f6f0 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/15 05:26 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1f28f6f0 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/15 03:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1f28f6f0 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/15 01:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1f28f6f0 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 23:56 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1f28f6f0 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 20:26 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 37fdb7c9 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 19:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 37fdb7c9 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 17:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 37fdb7c9 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 14:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 37fdb7c9 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 12:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 37fdb7c9 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 10:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 37fdb7c9 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 05:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 12f73979 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 04:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 12f73979 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/14 03:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 12f73979 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2021/06/13 23:42 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 12f73979 1ba81399 .config log report info KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
ci2-upstream-usb 2020/11/16 16:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 0fb2c41f 1bf9a662 .config log report info