syzbot


KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
Status: fixed on 2020/11/16 12:12
Reported-by: syzbot+89bd486af9427a9fc605@syzkaller.appspotmail.com
Fix commit: 03fb92a4 ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
First crash: 451d, last: 215d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2) C done 3819 33m 215d 0/22 upstream: reported C repro on 2020/11/16 17:09
Patch testing requests:
Created Duration User Patch Repo Result
2020/10/12 18:59 1m brookebasile@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master error
2020/09/09 21:36 20m brookebasile@gmail.com patch upstream OK
2020/08/24 18:29 11m brookebasile@gmail.com upstream report log

Sample crash report:

Crashes (2849):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2020/11/13 12:43 upstream af5043c8 16fca0c8 .config log report syz C
ci2-upstream-usb 2020/10/26 12:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 3650b228 a7aac492 .config log report syz C
ci2-upstream-usb 2020/10/25 12:16 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 270315b8 a1839e81 .config log report syz C
ci2-upstream-usb 2020/10/23 02:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 270315b8 4e740c00 .config log report syz C
ci2-upstream-usb 2020/10/21 02:46 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 270315b8 ff4a3345 .config log report syz C
ci2-upstream-usb 2020/10/20 08:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 270315b8 ff4a3345 .config log report syz C
ci2-upstream-usb 2020/10/18 17:41 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e fea47c01 .config log report syz C
ci2-upstream-usb 2020/10/17 08:57 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e 6e262c73 .config log report syz C
ci2-upstream-usb 2020/10/17 02:04 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e 6e262c73 .config log report syz C
ci2-upstream-usb 2020/10/16 10:41 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 726eb70e 6e262c73 .config log report syz C
ci2-upstream-usb 2020/10/12 09:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 93578a25 4a77ae0b .config log report syz C
ci2-upstream-usb 2020/10/05 17:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 168ae5a7 1880b4a9 .config log report syz C
ci2-upstream-usb 2020/10/05 13:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 168ae5a7 1880b4a9 .config log report syz C
ci2-upstream-usb 2020/08/28 01:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing cb06b385 816e0689 .config log report syz C
ci2-upstream-usb 2020/08/14 06:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 449dc8c9 54ce1ed6 .config log report syz C
ci2-upstream-usb 2020/08/11 12:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 449dc8c9 5d3ebca9 .config log report syz C
ci2-upstream-usb 2020/08/06 13:57 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 47ec5303 4ca1c0ea .config log report syz C
ci2-upstream-usb 2020/08/04 08:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e3ee0e74 96dd3623 .config log report syz C
ci2-upstream-usb 2020/07/28 17:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 25252919 cb93dc6a .config log report syz C
ci2-upstream-usb 2020/07/28 06:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ca637790 cb93dc6a .config log report syz C
ci2-upstream-usb 2020/07/25 01:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9a360a7c 0a13649c .config log report syz C
ci2-upstream-usb 2020/07/18 19:55 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 313da01a 9c812472 .config log report syz C
ci2-upstream-usb 2020/06/30 12:56 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9cf6ffae 917afeaa .config log report syz C
ci2-upstream-usb 2020/06/30 00:37 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9cf6ffae 917afeaa .config log report syz C
ci2-upstream-usb 2020/06/21 18:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c 4f2acff9 .config log report syz C
ci2-upstream-usb 2020/06/20 16:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c c655ec77 .config log report syz C
ci2-upstream-usb 2020/06/20 16:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c c655ec77 .config log report syz C
ci2-upstream-usb 2020/06/20 16:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c c655ec77 .config log report syz C
ci2-upstream-usb 2020/06/20 11:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c c655ec77 .config log report syz C
ci2-upstream-usb 2020/06/19 19:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c 123cf502 .config log report syz C
ci2-upstream-usb 2020/06/08 19:02 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 7604bb03 .config log report syz C
ci2-upstream-usb 2020/06/08 03:12 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 7751efd0 .config log report syz C
ci2-upstream-usb 2020/06/06 05:37 https://github.com/google/kasan.git usb-fuzzer 2089c6ed c3e9afb3 .config log report syz C
ci2-upstream-usb 2020/05/30 03:44 https://github.com/google/kasan.git usb-fuzzer 2089c6ed 954bd312 .config log report syz C
ci2-upstream-usb 2020/05/21 05:35 https://github.com/google/kasan.git usb-fuzzer 806d8acc 4afdfa20 .config log report syz C
ci2-upstream-usb 2020/05/21 04:58 https://github.com/google/kasan.git usb-fuzzer 806d8acc 4afdfa20 .config log report syz C
ci2-upstream-usb 2020/05/19 05:33 https://github.com/google/kasan.git usb-fuzzer 806d8acc 684d3606 .config log report syz C
ci2-upstream-usb 2020/05/19 01:27 https://github.com/google/kasan.git usb-fuzzer 806d8acc 684d3606 .config log report syz C
ci2-upstream-usb 2020/05/17 08:56 https://github.com/google/kasan.git usb-fuzzer 806d8acc 37bccd4e .config log report syz C
ci2-upstream-usb 2020/03/28 03:17 https://github.com/google/kasan.git usb-fuzzer e17994d1 831e9a81 .config log report syz C
ci2-upstream-usb 2020/03/25 21:20 https://github.com/google/kasan.git usb-fuzzer e17994d1 e8e6c7d2 .config log report syz C
ci2-upstream-usb 2020/08/09 18:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 449dc8c9 70301872 .config log report syz
ci2-upstream-usb 2020/08/07 17:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 7b4ea945 28ac5c9e .config log report syz
ci2-upstream-usb 2020/05/19 07:00 https://github.com/google/kasan.git usb-fuzzer 806d8acc 684d3606 .config log report syz
ci-upstream-kasan-gce-root 2020/11/09 14:02 upstream f8394f23 64069d48 .config log report info
ci-upstream-kasan-gce-smack-root 2020/11/07 21:09 upstream 659caaf6 64069d48 .config log report info
ci2-upstream-usb 2020/11/16 11:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 0fb2c41f 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/16 09:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 0fb2c41f 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/16 06:38 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/16 03:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/16 01:45 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/16 00:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/15 20:45 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/15 19:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/15 17:12 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/15 13:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/15 11:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/15 03:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/15 01:46 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/14 15:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 56c62080 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/14 13:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e7018751 1bf9a662 .config log report info
ci2-upstream-usb 2020/11/13 21:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e625f3de 4a7fa9b4 .config log report info
ci2-upstream-usb 2020/11/13 19:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e625f3de 4a7fa9b4 .config log report info
ci2-upstream-usb 2020/11/13 13:45 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 4a7fa9b4 .config log report info
ci2-upstream-usb 2020/11/13 08:48 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 16fca0c8 .config log report info
ci2-upstream-usb 2020/11/13 04:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 16fca0c8 .config log report info
ci2-upstream-usb 2020/11/13 01:33 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 16fca0c8 .config log report info
ci2-upstream-usb 2020/11/12 22:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 77a55c8e .config log report info
ci2-upstream-usb 2020/11/12 15:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 77a55c8e .config log report info
ci2-upstream-usb 2020/11/12 15:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 77a55c8e .config log report info
ci2-upstream-usb 2020/11/12 13:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 77a55c8e .config log report info
ci2-upstream-usb 2020/11/12 09:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/12 03:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/12 00:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/11 22:06 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/11 16:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/11 10:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/11 09:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/11 03:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/11 01:56 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/11 00:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/10 20:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cca87986 .config log report info
ci2-upstream-usb 2020/11/10 06:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cba33199 .config log report info
ci2-upstream-usb 2020/11/10 04:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cba33199 .config log report info
ci2-upstream-usb 2020/11/09 18:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cba33199 .config log report info
ci2-upstream-usb 2020/11/09 13:43 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cba33199 .config log report info
ci2-upstream-usb 2020/11/09 12:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 57cde551 cba33199 .config log report info
ci2-upstream-usb 2020/11/09 05:10 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9e39aef3 cba33199 .config log report info
ci2-upstream-usb 2020/11/09 03:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9e39aef3 cba33199 .config log report info
ci2-upstream-usb 2020/11/09 01:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9e39aef3 cba33199 .config log report info
ci2-upstream-usb 2020/11/09 00:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9e39aef3 cba33199 .config log report info
ci2-upstream-usb 2020/11/08 21:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9e39aef3 cba33199 .config log report info
ci2-upstream-usb 2020/11/08 19:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9e39aef3 cba33199 .config log report info
ci2-upstream-usb 2020/11/08 14:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9e39aef3 cba33199 .config log report info
ci-upstream-linux-next-kasan-gce-root 2020/11/01 04:31 linux-next 4e78c578 8bc4594f .config log report info