syzbot


KASAN: use-after-free Read in hci_cmd_timeout
Status: upstream: reported C repro on 2019/05/07 09:10
Reported-by: syzbot+19a9f729f05272857487@syzkaller.appspotmail.com
First crash: 873d, last: 1d05h

Cause bisection: introduced by (bisect log) :
commit ff92b9dd9268507e23fc10cc4341626cef50367c
Author: Suganath Prabu <suganath-prabu.subramani@broadcom.com>
Date: Thu Oct 25 14:03:40 2018 +0000

  scsi: mpt3sas: Update MPI headers to support Aero controllers

Crash: KASAN: use-after-free Read in hci_cmd_timeout (log)
Repro: C syz .config

Fix bisection: failed (bisect log)
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in hci_cmd_timeout syz error 10 122d 750d 0/1 upstream: reported syz repro on 2019/09/01 02:37
linux-4.14 KASAN: use-after-free Read in hci_cmd_timeout C inconclusive 10 114d 744d 0/1 upstream: reported C repro on 2019/09/06 20:31
Patch testing requests:
Created Duration User Patch Repo Result
2021/08/14 15:41 18m phind.uet@gmail.com linux-next OK
2020/10/27 16:43 18m anmol.karan123@gmail.com upstream OK

Sample crash report:

Crashes (73):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-386 2021/07/11 15:14 upstream 3dbdb38e2869 8f5a7b8c .config log report syz C KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2019/07/03 13:11 upstream eca94432934f 55565fa0 .config log report syz C
ci-qemu-upstream 2020/06/16 19:24 upstream 435faf5c218a 4ea9d964 .config log report syz
ci-upstream-kasan-gce 2021/09/10 02:34 upstream a3fa7a101dcf e2776ee4 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2021/09/05 21:22 upstream 0319b848b155 d236a457 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/09/04 14:13 upstream f1583cb1be35 d236a457 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/08/28 12:44 upstream 64b4fc45bea6 be2c130d .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/08/27 17:25 upstream 77dd11439b86 b318694d .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/08/26 20:15 upstream 1a6d80ff2419 b318694d .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/08/22 20:26 upstream 1bdc3d5be7e1 b599f2fc .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/08/12 11:34 upstream 1746f4db5135 6972b106 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/08/12 07:38 upstream 761c6d7ec820 6972b106 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/07/18 06:45 upstream ccbb22b9ab86 f115ae98 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/07/14 15:15 upstream 40226a3d96ef 484502bd .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/06/15 11:50 upstream 009c9aa5be65 58636922 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-root 2021/06/14 19:26 upstream 009c9aa5be65 1ba81399 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/06/10 21:43 upstream f09eacca59d2 1ba81399 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/06/08 06:10 upstream 614124bea77e b718257f .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/06/07 12:17 upstream 614124bea77e e59537be .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/06/05 04:34 upstream 9d32fa5d74b1 500c2339 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/06/03 21:11 upstream 324c92e5e0ee 0740de69 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/05/20 10:47 upstream 293837b9ac8d a343ba6b .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/05/11 10:16 upstream 1140ab592e2e ca873091 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/04/19 20:24 upstream bf05bf16c76b 50f523d7 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/04/02 09:45 upstream ffd9fb546d49 6a81331a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/03/01 00:44 upstream cd278456d4ca 4c37c133 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream 2021/02/20 10:40 upstream f40ddce88593 053a2b26 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/02/17 20:45 upstream f40ddce88593 14052202 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2021/02/14 21:13 upstream 358feceebbf6 98682e5e .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-smack-root 2021/02/10 07:42 upstream e0756cfc7d7c 2bd9619f .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-selinux-root 2021/02/05 12:48 upstream dd86e7fa07a3 23a562df .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/02/01 02:43 upstream 6642d600b541 fc9fd31e .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/08/01 00:06 upstream f3438b4c4e69 6c236867 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/07/29 11:58 upstream 4010a528219e b44001ce .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-qemu-upstream-386 2021/07/19 06:13 upstream 2734d6c1b1a0 f115ae98 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/06/09 09:28 upstream 4c8684fe555e 5c2fe346 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce-386 2021/03/31 12:58 upstream 5e46d1b78a03 6a81331a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/09/19 02:30 linux-next 9004fd387338 70b76c1d .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/09/13 07:13 linux-next 24a36d3171e4 5ae8508a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/09/13 05:08 linux-next 24a36d3171e4 5ae8508a .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/08/01 12:26 linux-next 8d4b477da1a8 6c236867 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/07/24 08:38 linux-next 90d856e71443 bc5f1d88 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/07/24 04:15 linux-next 90d856e71443 bc5f1d88 .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-linux-next-kasan-gce-root 2021/06/29 10:36 linux-next a1f92694393a 9d2ab5df .config log report info KASAN: use-after-free Read in hci_cmd_timeout
ci-upstream-kasan-gce 2021/04/09 10:19 upstream 4fa56ad0d12e 6a81331a .config log report info KFENCE: use-after-free in hci_cmd_timeout
ci-upstream-kasan-gce 2021/01/14 09:52 upstream 65f0d2414b70 269d24e8 .config log report info
ci-upstream-kasan-gce 2021/01/13 13:16 upstream e609571b5ffa a945f0a3 .config log report info
ci-upstream-kasan-gce 2020/12/12 16:39 upstream 7f376f1917d7 bca53db9 .config log report info
ci-upstream-kasan-gce 2020/12/03 01:56 upstream 3bb61aa61828 8c9190ef .config log report info
ci-upstream-kasan-gce 2020/11/24 11:42 upstream d5beb3140f91 1ab681a4 .config log report info
ci-upstream-kasan-gce 2020/11/08 20:11 upstream 9dbc1c03eeb5 64069d48 .config log report info
ci-upstream-kasan-gce-smack-root 2020/09/29 10:03 upstream fb0155a09b02 1b88c6d5 .config log report info
ci-upstream-kasan-gce-selinux-root 2020/09/27 03:36 upstream eeddbe6841cd 2d5ea0cb .config log report info
ci-upstream-kasan-gce 2020/09/23 01:30 upstream eff48ddeab78 3e8f6c27 .config log report info
ci-upstream-kasan-gce-root 2020/09/13 03:08 upstream 729e3d091984 ce441f06 .config log report
ci-upstream-kasan-gce 2020/09/05 04:38 upstream 59126901f200 abf9ba4f .config log report
ci-upstream-kasan-gce-root 2020/09/04 04:42 upstream e28f0104343d abf9ba4f .config log report
ci-upstream-kasan-gce 2020/08/29 14:00 upstream 4d41ead6ead9 d5a3ae1f .config log report
ci-upstream-kasan-gce-root 2020/08/19 02:06 upstream 18445bf405cb e1c29030 .config log report
ci-upstream-kasan-gce-smack-root 2020/02/22 05:21 upstream b0dd1eb220c0 2ffa6679 .config log report
ci-upstream-kasan-gce-root 2020/02/17 08:31 upstream 11a48a5a18c6 1f448cd6 .config log report
ci-upstream-kasan-gce 2019/11/30 08:00 upstream 81b6b96475ac 3a75be00 .config log report
ci-upstream-kasan-gce-root 2019/09/11 10:30 upstream 3120b9a6a3f7 a60cb4cd .config log report
ci-upstream-kasan-gce-selinux-root 2019/06/19 11:42 upstream bed3c0d84e7e 34bf9440 .config log report
ci-upstream-kasan-gce 2019/04/30 13:29 upstream 83a50840e72a 20f16bef .config log report
ci-upstream-kasan-gce-386 2020/12/24 04:16 upstream 58cf05f597b0 c2c1d1dd .config log report info
ci-upstream-kasan-gce-386 2020/12/19 10:22 upstream 3644e2d2dda7 04201c06 .config log report info
ci-upstream-kasan-gce-386 2020/11/20 10:56 upstream 4d02da974ea8 0767f13f .config log report info
ci-upstream-kasan-gce-386 2020/10/03 05:16 upstream d3d45f8220d6 2653fa43 .config log report info
ci-upstream-kasan-gce-386 2019/09/13 20:17 upstream a7f89616b737 32d59357 .config log report
ci-upstream-kasan-gce-386 2019/06/16 14:30 upstream e01e060fe00d 442206d7 .config log report
ci-upstream-kasan-gce-386 2019/05/04 00:24 upstream a4ccb5f9dc6c d28f4ce5 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/10/10 16:59 linux-next d67bc7812221 4a77ae0b .config log report info