syzbot


KASAN: slab-out-of-bounds Write in betop_probe
Status: upstream: reported C repro on 2020/02/11 01:16
Reported-by: syzbot+07efed3bc5a1407bd742@syzkaller.appspotmail.com
Fix commit: 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce], missing on: [ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci2-upstream-usb]
First crash: 656d, last: 99d

Cause bisection: introduced by (bisect log) [ignored commit]:
commit f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10
Author: Andrey Konovalov <andreyknvl@google.com>
Date: Mon Feb 24 16:13:03 2020 +0000

  usb: gadget: add raw-gadget interface

Crash: KASAN: slab-out-of-bounds Write in betop_probe (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 KASAN: slab-out-of-bounds Write in betop_probe C 1 581d 581d 0/1 upstream: reported C repro on 2020/04/25 06:12
Patch testing requests:
Created Duration User Patch Repo Result
2021/08/24 12:04 0m asha.16@itfac.mrt.ac.lk patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master error
2021/08/24 10:19 12m asha.16@itfac.mrt.ac.lk patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master report log
2021/08/24 10:04 5m asha.16@itfac.mrt.ac.lk patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master error
2021/08/16 11:36 0m asha.16@itfac.mrt.ac.lk patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master error
2021/08/16 11:34 0m asha.16@itfac.mrt.ac.lk patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master error
2021/08/16 11:32 0m asha.16@itfac.mrt.ac.lk patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master error
2021/08/15 15:53 10m asha.16@itfac.mrt.ac.lk patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master report log
2021/08/14 22:02 15m asha.16@itfac.mrt.ac.lk patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master OK
2021/08/13 19:57 14m asha.16@itfac.mrt.ac.lk https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master report log

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2021/08/20 01:54 upstream d992fe5318d8 e6a17580 .config log report syz C
Crashes (9):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2021/07/19 17:43 upstream 2734d6c1b1a0 e6a17580 .config log report syz C KASAN: slab-out-of-bounds Write in betop_probe
ci-upstream-kasan-gce-smack-root 2021/06/06 20:38 upstream f5b6eb1e0182 500c2339 .config log report syz C KASAN: slab-out-of-bounds Write in betop_probe
ci-upstream-linux-next-kasan-gce-root 2021/06/27 22:28 linux-next a1f92694393a 9d2ab5df .config log report syz C KASAN: slab-out-of-bounds Write in betop_probe
ci2-upstream-usb 2020/12/13 17:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a256e24021bf bca53db9 .config log report syz C
ci2-upstream-usb 2020/05/14 02:05 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c a885920d .config log report syz C
ci2-upstream-usb 2020/04/25 06:08 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c 03d97a1b .config log report syz C
ci2-upstream-usb 2020/04/23 18:00 https://github.com/google/kasan.git usb-fuzzer e9010320f2d9 b9233cab .config log report syz C
ci2-upstream-usb 2020/03/02 04:39 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 4a4e0509 .config log report syz C
ci2-upstream-usb 2020/02/10 08:50 https://github.com/google/kasan.git usb-fuzzer e5cd56e94edd 35f5e45e .config log report syz C