* Re: KASAN: use-after-free Write in hci_sock_release [not found] <0000000000003692760578e651dd@google.com> @ 2019-03-22 12:04 ` syzbot 2019-03-22 12:16 ` Dmitry Vyukov 2020-05-16 21:27 ` syzbot 1 sibling, 1 reply; 5+ messages in thread From: syzbot @ 2019-03-22 12:04 UTC (permalink / raw) To: davem, johan.hedberg, linux-bluetooth, linux-kbuild, linux-kernel, marcel, mmarek, netdev, syzkaller-bugs, torvalds syzbot has bisected this bug to: commit c470abd4fde40ea6a0846a2beab642a578c0b8cd Author: Linus Torvalds <torvalds@linux-foundation.org> Date: Sun Feb 19 22:34:00 2017 +0000 Linux 4.10 bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1664c6df200000 start commit: c470abd4 Linux 4.10 git tree: upstream kernel config: https://syzkaller.appspot.com/x/.config?x=7308e68273924137 dashboard link: https://syzkaller.appspot.com/bug?extid=b364ed862aa07c74bc62 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=152532bb400000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13f73320c00000 Reported-by: syzbot+b364ed862aa07c74bc62@syzkaller.appspotmail.com Fixes: c470abd4fde4 ("Linux 4.10") For information about bisection process see: https://goo.gl/tpsmEJ#bisection ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: KASAN: use-after-free Write in hci_sock_release 2019-03-22 12:04 ` KASAN: use-after-free Write in hci_sock_release syzbot @ 2019-03-22 12:16 ` Dmitry Vyukov 2019-03-23 20:25 ` Cong Wang 0 siblings, 1 reply; 5+ messages in thread From: Dmitry Vyukov @ 2019-03-22 12:16 UTC (permalink / raw) To: syzbot Cc: David Miller, Johan Hedberg, linux-bluetooth, open list:KERNEL BUILD + fi..., LKML, Marcel Holtmann, Michal Marek, netdev, syzkaller-bugs, Linus Torvalds On Fri, Mar 22, 2019 at 1:04 PM syzbot <syzbot+b364ed862aa07c74bc62@syzkaller.appspotmail.com> wrote: > > syzbot has bisected this bug to: > > commit c470abd4fde40ea6a0846a2beab642a578c0b8cd > Author: Linus Torvalds <torvalds@linux-foundation.org> > Date: Sun Feb 19 22:34:00 2017 +0000 > > Linux 4.10 > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1664c6df200000 > start commit: c470abd4 Linux 4.10 > git tree: upstream > kernel config: https://syzkaller.appspot.com/x/.config?x=7308e68273924137 > dashboard link: https://syzkaller.appspot.com/bug?extid=b364ed862aa07c74bc62 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=152532bb400000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13f73320c00000 > > Reported-by: syzbot+b364ed862aa07c74bc62@syzkaller.appspotmail.com > Fixes: c470abd4fde4 ("Linux 4.10") > > For information about bisection process see: https://goo.gl/tpsmEJ#bisection The same story of HCI being broken before v4.10, so this is bisected to the release. ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: KASAN: use-after-free Write in hci_sock_release 2019-03-22 12:16 ` Dmitry Vyukov @ 2019-03-23 20:25 ` Cong Wang 2019-03-25 8:04 ` Dmitry Vyukov 0 siblings, 1 reply; 5+ messages in thread From: Cong Wang @ 2019-03-23 20:25 UTC (permalink / raw) To: Dmitry Vyukov Cc: syzbot, David Miller, Johan Hedberg, linux-bluetooth, open list:KERNEL BUILD + fi..., LKML, Marcel Holtmann, Michal Marek, netdev, syzkaller-bugs, Linus Torvalds On Fri, Mar 22, 2019 at 5:19 AM Dmitry Vyukov <dvyukov@google.com> wrote: > > On Fri, Mar 22, 2019 at 1:04 PM syzbot > <syzbot+b364ed862aa07c74bc62@syzkaller.appspotmail.com> wrote: > > > > syzbot has bisected this bug to: > > > > commit c470abd4fde40ea6a0846a2beab642a578c0b8cd > > Author: Linus Torvalds <torvalds@linux-foundation.org> > > Date: Sun Feb 19 22:34:00 2017 +0000 > > > > Linux 4.10 > > > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1664c6df200000 > > start commit: c470abd4 Linux 4.10 > > git tree: upstream > > kernel config: https://syzkaller.appspot.com/x/.config?x=7308e68273924137 > > dashboard link: https://syzkaller.appspot.com/bug?extid=b364ed862aa07c74bc62 > > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=152532bb400000 > > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13f73320c00000 > > > > Reported-by: syzbot+b364ed862aa07c74bc62@syzkaller.appspotmail.com > > Fixes: c470abd4fde4 ("Linux 4.10") > > > > For information about bisection process see: https://goo.gl/tpsmEJ#bisection > > The same story of HCI being broken before v4.10, so this is bisected > to the release. Does syzbot test the latest upstream? Isn't this supposed to be fixed by commit e20a2e9c42c9e4002d9e338d74e7819e88d77162 Author: Myungho Jung <mhjungk@gmail.com> Date: Sat Feb 2 16:56:36 2019 -0800 Bluetooth: Fix decrementing reference count twice in releasing socket ? ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: KASAN: use-after-free Write in hci_sock_release 2019-03-23 20:25 ` Cong Wang @ 2019-03-25 8:04 ` Dmitry Vyukov 0 siblings, 0 replies; 5+ messages in thread From: Dmitry Vyukov @ 2019-03-25 8:04 UTC (permalink / raw) To: Cong Wang Cc: syzbot, David Miller, Johan Hedberg, linux-bluetooth, open list:KERNEL BUILD + fi..., LKML, Marcel Holtmann, Michal Marek, netdev, syzkaller-bugs, Linus Torvalds On Sat, Mar 23, 2019 at 9:25 PM Cong Wang <xiyou.wangcong@gmail.com> wrote: > > On Fri, Mar 22, 2019 at 5:19 AM Dmitry Vyukov <dvyukov@google.com> wrote: > > > > On Fri, Mar 22, 2019 at 1:04 PM syzbot > > <syzbot+b364ed862aa07c74bc62@syzkaller.appspotmail.com> wrote: > > > > > > syzbot has bisected this bug to: > > > > > > commit c470abd4fde40ea6a0846a2beab642a578c0b8cd > > > Author: Linus Torvalds <torvalds@linux-foundation.org> > > > Date: Sun Feb 19 22:34:00 2017 +0000 > > > > > > Linux 4.10 > > > > > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1664c6df200000 > > > start commit: c470abd4 Linux 4.10 > > > git tree: upstream > > > kernel config: https://syzkaller.appspot.com/x/.config?x=7308e68273924137 > > > dashboard link: https://syzkaller.appspot.com/bug?extid=b364ed862aa07c74bc62 > > > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=152532bb400000 > > > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13f73320c00000 > > > > > > Reported-by: syzbot+b364ed862aa07c74bc62@syzkaller.appspotmail.com > > > Fixes: c470abd4fde4 ("Linux 4.10") > > > > > > For information about bisection process see: https://goo.gl/tpsmEJ#bisection > > > > The same story of HCI being broken before v4.10, so this is bisected > > to the release. > > Does syzbot test the latest upstream? Yes, it does. > Isn't this supposed to be fixed by > > commit e20a2e9c42c9e4002d9e338d74e7819e88d77162 > Author: Myungho Jung <mhjungk@gmail.com> > Date: Sat Feb 2 16:56:36 2019 -0800 > > Bluetooth: Fix decrementing reference count twice in releasing socket > > ? I and syzbot have no idea. You may know better. Is it? If yes, please tell syzbot about the fix. ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: KASAN: use-after-free Write in hci_sock_release [not found] <0000000000003692760578e651dd@google.com> 2019-03-22 12:04 ` KASAN: use-after-free Write in hci_sock_release syzbot @ 2020-05-16 21:27 ` syzbot 1 sibling, 0 replies; 5+ messages in thread From: syzbot @ 2020-05-16 21:27 UTC (permalink / raw) To: bigeasy, davem, dvyukov, jack, johan.hedberg, linux-bluetooth, linux-kbuild, linux-kernel, marcel, mmarek, netdev, syzkaller-bugs, tglx, torvalds, xiyou.wangcong syzbot suspects this bug was fixed by commit: commit f1e67e355c2aafeddf1eac31335709236996d2fe Author: Thomas Gleixner <tglx@linutronix.de> Date: Mon Nov 18 13:28:24 2019 +0000 fs/buffer: Make BH_Uptodate_Lock bit_spin_lock a regular spinlock_t bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1761ce06100000 start commit: 645ff1e8 Merge branch 'for-linus' of git://git.kernel.org/.. git tree: upstream kernel config: https://syzkaller.appspot.com/x/.config?x=7308e68273924137 dashboard link: https://syzkaller.appspot.com/bug?extid=b364ed862aa07c74bc62 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=152532bb400000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13f73320c00000 If the result looks correct, please mark the bug fixed by replying with: #syz fix: fs/buffer: Make BH_Uptodate_Lock bit_spin_lock a regular spinlock_t For information about bisection process see: https://goo.gl/tpsmEJ#bisection ^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2020-05-16 21:27 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <0000000000003692760578e651dd@google.com>
2019-03-22 12:04 ` KASAN: use-after-free Write in hci_sock_release syzbot
2019-03-22 12:16 ` Dmitry Vyukov
2019-03-23 20:25 ` Cong Wang
2019-03-25 8:04 ` Dmitry Vyukov
2020-05-16 21:27 ` syzbot
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox