syzbot


KASAN: use-after-free Read in hci_cmd_timeout
Status: upstream: reported C repro on 2019/05/07 09:10
Reported-by: syzbot+19a9f729f05272857487@syzkaller.appspotmail.com
First crash: 998d, last: 1d21h

Cause bisection: introduced by (bisect log) :
commit ff92b9dd9268507e23fc10cc4341626cef50367c
Author: Suganath Prabu <suganath-prabu.subramani@broadcom.com>
Date: Thu Oct 25 14:03:40 2018 +0000

  scsi: mpt3sas: Update MPI headers to support Aero controllers

Crash: KASAN: use-after-free Read in hci_cmd_timeout (log)
Repro: C syz .config

Fix bisection: failed (bisect log)
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in hci_cmd_timeout syz error 11 123d 875d 0/1 upstream: reported syz repro on 2019/09/01 02:37
linux-4.14 KASAN: use-after-free Read in hci_cmd_timeout C inconclusive 11 5d23h 869d 0/1 upstream: reported C repro on 2019/09/06 20:31
Patch testing requests:
Created Duration User Patch Repo Result
2021/08/14 15:41 18m phind.uet@gmail.com linux-next OK
2020/10/27 16:43 18m anmol.karan123@gmail.com upstream OK

Sample crash report:

Crashes (168):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2021/12/30 00:56 upstream e7c124bd0463 6cc879d4 .config log report syz C KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/07/11 15:14 upstream 3dbdb38e2869 8f5a7b8c .config log report syz C KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2019/07/03 13:11 upstream eca94432934f 55565fa0 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2021/12/13 07:21 linux-next ea922272cbe5 49ca1f59 .config log report syz KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2020/06/16 19:24 upstream 435faf5c218a 4ea9d964 .config log report syz
ci-qemu-upstream 2022/01/19 21:34 upstream 1d1df41c5a33 5da9499f .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2022/01/18 23:27 upstream 99613159ad74 731a2d23 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2022/01/18 20:49 upstream 99613159ad74 731a2d23 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2022/01/17 07:48 upstream 79e06c4c4950 723cfaf0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2022/01/16 10:38 upstream d0a231f01e5b 723cfaf0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2022/01/16 04:46 upstream a33f5c380c4b 723cfaf0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2022/01/15 23:22 upstream a33f5c380c4b 723cfaf0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2022/01/15 19:55 upstream a33f5c380c4b 723cfaf0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2022/01/15 14:25 upstream 112450df61b7 723cfaf0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2022/01/12 15:17 upstream daadb3bd0e8d 44d1319a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2022/01/12 07:03 upstream 6f38be8f2ccd 44d1319a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2022/01/11 16:13 upstream fe8152b38d3a 1884f55a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/12/29 11:03 upstream e7c124bd0463 76c8cf06 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/12/15 22:22 upstream 2b14864acbaa 572bcb40 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/12/15 09:22 upstream 5472f14a3742 f752fb53 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/12/13 22:26 upstream 2585cf9dfaad 49ca1f59 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2021/12/07 13:47 upstream f80ef9e49fdf 0230ba3e .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/12/05 06:30 upstream bbef3c7a63d2 a617004c .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/30 05:32 upstream d58071a8a76d d0830353 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/30 04:09 upstream d58071a8a76d d0830353 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/11/27 21:51 upstream 741392771338 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/26 19:57 upstream a4849f6000e2 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/11/26 16:20 upstream a4849f6000e2 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/11/25 07:37 upstream 5f53fa508db0 545ab074 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/11/19 19:51 upstream 4c388a8e740d 3a9d0024 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/11/18 15:35 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/10/24 08:09 upstream 9c0c4d24ac00 282f03fb .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2022/01/21 15:13 upstream 1f40caa08047 214351e1 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/12/11 17:57 upstream 6f513529296f 49ca1f59 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/12/03 07:53 upstream a51e3ac43ddb 61f86278 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/12/02 08:03 upstream 58e1100fdc59 61f86278 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/29 03:29 upstream d06c942efea4 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/11/22 20:00 upstream 136057256686 545ab074 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/10/11 11:57 upstream 64570fbc14f8 838e7e2c .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2022/01/20 14:16 linux-next 7fc5253f5a13 5da9499f .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2022/01/14 07:12 linux-next 27c9d5b3c24a b8d780ab .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2022/01/12 02:20 linux-next a70bf4a85b43 44d1319a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2022/01/12 00:24 linux-next a70bf4a85b43 44d1319a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2022/01/09 17:43 linux-next b8170452cd51 2ca0d385 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2022/01/09 09:22 linux-next b8170452cd51 2ca0d385 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/12/23 20:25 linux-next 79f063d60c8c 6caa12e4 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/12/21 06:04 linux-next 07f8c60fe60f 62bd192b .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/12/14 04:05 linux-next ea922272cbe5 5d14b1ea .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/12/14 02:40 linux-next ea922272cbe5 5d14b1ea .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/12/04 11:53 linux-next f81e94e91878 a617004c .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/12/03 18:03 linux-next f81e94e91878 c7c20675 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/30 13:07 linux-next f81e94e91878 80270552 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/28 10:55 linux-next f81e94e91878 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/27 17:03 linux-next f81e94e91878 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/26 07:58 linux-next f81e94e91878 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/26 05:30 linux-next f81e94e91878 63eeac02 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/24 17:23 linux-next 4b74e088fef6 545ab074 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/19 09:59 linux-next 5191249f8803 31a30fc0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/11/19 00:13 linux-next 5191249f8803 31a30fc0 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/01/14 09:52 upstream 65f0d2414b70 269d24e8 .config log report info
ci-upstream-kasan-gce 2019/04/30 13:29 upstream 83a50840e72a 20f16bef .config log report
ci-upstream-linux-next-kasan-gce-root 2022/01/13 00:15 linux-next 32ce2abb03cf 44d1319a .config log report info KFENCE: use-after-free in hci_cmd_timeout