syzbot


KASAN: use-after-free Write in hci_sock_bind
Status: fixed on 2021/08/26 13:35
Reported-by: syzbot+bdbdd849903b8659f6ea@syzkaller.appspotmail.com
Fix commit: 3719acc161d5 Bluetooth: defer cleanup of resources in hci_unregister_dev()
First crash: 688d, last: 128d

Fix bisection: fixed by (bisect log) :
commit 3719acc161d5c1ce09912cc1c9eddc2c5faa3c66
Author: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Date: Wed Aug 4 10:26:56 2021 +0000

  Bluetooth: defer cleanup of resources in hci_unregister_dev()

similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Write in hci_sock_bind 4 652d 684d 16/22 fixed on 2020/02/18 14:31
upstream KASAN: use-after-free Write in hci_sock_bind (2) C done unreliable 26 363d 637d 0/22 upstream: reported C repro on 2020/03/02 05:14

Sample crash report:

Crashes (12):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-19 2020/03/27 19:38 linux-4.19.y 54b4fa6d3955 831e9a81 .config log report syz C
ci2-linux-4-19 2020/01/12 01:08 linux-4.19.y cb1f9a169a0e 4c04afaa .config log report syz C
ci2-linux-4-19 2020/07/28 11:58 linux-4.19.y 20b3a3dfdf6c cb93dc6a .config log report
ci2-linux-4-19 2020/05/26 09:32 linux-4.19.y 1bab61d3e8cd 8ca3b7d2 .config log report
ci2-linux-4-19 2020/05/04 18:16 linux-4.19.y fdc072324f3c 58ae5e18 .config log report
ci2-linux-4-19 2020/04/17 19:30 linux-4.19.y 8488c3f3bc86 18397578 .config log report
ci2-linux-4-19 2020/04/02 12:36 linux-4.19.y 54b4fa6d3955 a34e2c33 .config log report
ci2-linux-4-19 2020/04/01 04:51 linux-4.19.y 54b4fa6d3955 a34e2c33 .config log report
ci2-linux-4-19 2020/03/20 12:24 linux-4.19.y 14cfdbd39e31 2c31c529 .config log report
ci2-linux-4-19 2020/03/20 07:03 linux-4.19.y 93556fb211fa 2c31c529 .config log report
ci2-linux-4-19 2020/03/20 03:46 linux-4.19.y 93556fb211fa 2c31c529 .config log report
ci2-linux-4-19 2020/03/02 14:27 linux-4.19.y a083db76118d 4a4e0509 .config log report