syzbot


KASAN: use-after-free Read in hci_cmd_timeout
Status: upstream: reported C repro on 2019/05/07 09:10
Reported-by: syzbot+19a9f729f05272857487@syzkaller.appspotmail.com
First crash: 781d, last: 4d18h

Cause bisection: introduced by (bisect log) :
commit ff92b9dd9268507e23fc10cc4341626cef50367c
Author: Suganath Prabu <suganath-prabu.subramani@broadcom.com>
Date: Thu Oct 25 14:03:40 2018 +0000

  scsi: mpt3sas: Update MPI headers to support Aero controllers

Crash: KASAN: use-after-free Read in hci_cmd_timeout (log)
Repro: C syz .config

Fix bisection: failed (bisect log)
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in hci_cmd_timeout syz error 10 30d 658d 0/1 upstream: reported syz repro on 2019/09/01 02:37
linux-4.14 KASAN: use-after-free Read in hci_cmd_timeout C inconclusive 10 22d 652d 0/1 upstream: reported C repro on 2019/09/06 20:31
Patch testing requests:
Created Duration User Patch Repo Result
2020/10/27 16:43 18m anmol.karan123@gmail.com upstream OK

Sample crash report:

Crashes (51):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2019/07/03 13:11 upstream eca94432 55565fa0 .config log report syz C
ci-qemu-upstream 2020/06/16 19:24 upstream 435faf5c 4ea9d964 .config log report syz
ci-upstream-kasan-gce-smack-root 2021/06/15 11:50 upstream 009c9aa5 58636922 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/06/14 19:26 upstream 009c9aa5 1ba81399 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/06/10 21:43 upstream f09eacca 1ba81399 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/06/08 06:10 upstream 614124be b718257f .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/06/07 12:17 upstream 614124be e59537be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/06/05 04:34 upstream 9d32fa5d 500c2339 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/06/03 21:11 upstream 324c92e5 0740de69 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/05/20 10:47 upstream 293837b9 a343ba6b .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/05/11 10:16 upstream 1140ab59 ca873091 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/04/19 20:24 upstream bf05bf16 50f523d7 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/04/02 09:45 upstream ffd9fb54 6a81331a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/03/01 00:44 upstream cd278456 4c37c133 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/02/20 10:40 upstream f40ddce8 053a2b26 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/02/17 20:45 upstream f40ddce8 14052202 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2021/02/14 21:13 upstream 358fecee 98682e5e .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/02/10 07:42 upstream e0756cfc 2bd9619f .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2021/02/05 12:48 upstream dd86e7fa 23a562df .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/02/01 02:43 upstream 6642d600 fc9fd31e .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/06/09 09:28 upstream 4c8684fe 5c2fe346 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/03/31 12:58 upstream 5e46d1b7 6a81331a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/04/09 10:19 upstream 4fa56ad0 6a81331a .config log report info KFENCE: use-after-free in hci_cmd_timeout
ci-upstream-kasan-gce 2021/01/14 09:52 upstream 65f0d241 269d24e8 .config log report info
ci-upstream-kasan-gce 2021/01/13 13:16 upstream e609571b a945f0a3 .config log report info
ci-upstream-kasan-gce 2020/12/12 16:39 upstream 7f376f19 bca53db9 .config log report info
ci-upstream-kasan-gce 2020/12/03 01:56 upstream 3bb61aa6 8c9190ef .config log report info
ci-upstream-kasan-gce 2020/11/24 11:42 upstream d5beb314 1ab681a4 .config log report info
ci-upstream-kasan-gce 2020/11/08 20:11 upstream 9dbc1c03 64069d48 .config log report info
ci-upstream-kasan-gce-smack-root 2020/09/29 10:03 upstream fb0155a0 1b88c6d5 .config log report info
ci-upstream-kasan-gce-selinux-root 2020/09/27 03:36 upstream eeddbe68 2d5ea0cb .config log report info
ci-upstream-kasan-gce 2020/09/23 01:30 upstream eff48dde 3e8f6c27 .config log report info
ci-upstream-kasan-gce-root 2020/09/13 03:08 upstream 729e3d09 ce441f06 .config log report
ci-upstream-kasan-gce 2020/09/05 04:38 upstream 59126901 abf9ba4f .config log report
ci-upstream-kasan-gce-root 2020/09/04 04:42 upstream e28f0104 abf9ba4f .config log report
ci-upstream-kasan-gce 2020/08/29 14:00 upstream 4d41ead6 d5a3ae1f .config log report
ci-upstream-kasan-gce-root 2020/08/19 02:06 upstream 18445bf4 e1c29030 .config log report
ci-upstream-kasan-gce-smack-root 2020/02/22 05:21 upstream b0dd1eb2 2ffa6679 .config log report
ci-upstream-kasan-gce-root 2020/02/17 08:31 upstream 11a48a5a 1f448cd6 .config log report
ci-upstream-kasan-gce 2019/11/30 08:00 upstream 81b6b964 3a75be00 .config log report
ci-upstream-kasan-gce-root 2019/09/11 10:30 upstream 3120b9a6 a60cb4cd .config log report
ci-upstream-kasan-gce-selinux-root 2019/06/19 11:42 upstream bed3c0d8 34bf9440 .config log report
ci-upstream-kasan-gce 2019/04/30 13:29 upstream 83a50840 20f16bef .config log report
ci-upstream-kasan-gce-386 2020/12/24 04:16 upstream 58cf05f5 c2c1d1dd .config log report info
ci-upstream-kasan-gce-386 2020/12/19 10:22 upstream 3644e2d2 04201c06 .config log report info
ci-upstream-kasan-gce-386 2020/11/20 10:56 upstream 4d02da97 0767f13f .config log report info
ci-upstream-kasan-gce-386 2020/10/03 05:16 upstream d3d45f82 2653fa43 .config log report info
ci-upstream-kasan-gce-386 2019/09/13 20:17 upstream a7f89616 32d59357 .config log report
ci-upstream-kasan-gce-386 2019/06/16 14:30 upstream e01e060f 442206d7 .config log report
ci-upstream-kasan-gce-386 2019/05/04 00:24 upstream a4ccb5f9 d28f4ce5 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/10/10 16:59 linux-next d67bc781 4a77ae0b .config log report info