syzbot


KASAN: use-after-free Read in delete_and_unsubscribe_port (2)
Status: upstream: reported syz repro on 2020/07/09 08:59
Reported-by: syzbot+1a54a94bd32716796edd@syzkaller.appspotmail.com
Fix commit: ALSA: seq: oss: Serialize ioctls
Patched on: [ci-qemu-upstream-386 ci2-upstream-kcsan-gce], missing on: [ci-qemu-upstream ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-usb]
First crash: 33d, last: 3d04h

Cause bisection: the bug happens on the oldest tested release
Crash: WARNING in sysfs_warn_dup (log)
Repro: syz .config
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: use-after-free Read in delete_and_unsubscribe_port 1 590d 586d 0/17 auto-closed as invalid on 2019/06/23 16:41
linux-4.14 KASAN: use-after-free Read in delete_and_unsubscribe_port syz 2 7d15h 7d15h 0/1 upstream: reported syz repro on 2020/07/30 12:26
Patch testing requests:
Created Duration User Patch Repo Result
2020/08/04 12:07 16m tiwai@suse.de git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git test/seq-oss-serialize OK

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-smack-root 2020/07/30 04:10 upstream d3590ebf 233283a1 .config log report syz alsa-devel@alsa-project.org, linux-kernel@vger.kernel.org, perex@perex.cz, tiwai@suse.com
ci-upstream-kasan-gce-smack-root 2020/07/30 03:32 upstream d3590ebf 233283a1 .config log report syz alsa-devel@alsa-project.org, linux-kernel@vger.kernel.org, perex@perex.cz, tiwai@suse.com
ci-upstream-linux-next-kasan-gce-root 2020/08/03 23:25 linux-next 01830e6c 196277c4 .config log report syz alsa-devel@alsa-project.org, linux-kernel@vger.kernel.org, perex@perex.cz, tiwai@suse.com
ci-upstream-kasan-gce-386 2020/07/04 22:42 upstream 7cc2a8ea 51095195 .config log report alsa-devel@alsa-project.org, linux-kernel@vger.kernel.org, perex@perex.cz, tiwai@suse.com