syzbot


KASAN: use-after-free Read in usblp_bulk_read
Status: upstream: reported on 2020/04/21 15:35
Reported-by: syzbot+be5b5f86a162a6c281e6@syzkaller.appspotmail.com
Fix commit: usblp: poison URBs upon disconnect
Patched on: [ci-upstream-linux-next-kasan-gce-root ci2-upstream-usb], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce]
First crash: 43d, last: 6d15h

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-qemu-upstream-386 2020/05/27 13:05 upstream 444fc5cd fdf90f62 .config log report gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, zaitcev@redhat.com
ci2-upstream-usb 2020/04/20 10:53 https://github.com/google/kasan.git usb-fuzzer 0fa84af8 347a5dc3 .config log report gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, zaitcev@redhat.com