syzbot


KASAN: use-after-free Read in ext4_xattr_set_entry (2)
Status: fixed on 2020/02/14 01:19
Reported-by: syzbot+4a39a025912b265cacef@syzkaller.appspotmail.com
Fix commit: 9803387c ext4: validate the debug_want_extra_isize mount option at parse time
First crash: 645d, last: 211d

Cause bisection: introduced by (bisect log):

commit 8835cae5f2abd7f7a3143afe357f416aff5517a4
Author: Chris Lapa <chris@lapa.com.au>
Date: Wed Jan 11 01:44:47 2017 +0000

  power: supply: bq27xxx: adds specific support for bq27520-g4 revision.

Crash: WARNING in batadv_mcast_mla_update (log)
Repro: C syz .config
similar bugs (9):
Kernel Title Repro Bisected Count Last Reported Patched Status
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 6 257d 312d 0/1 auto-closed as invalid on 2020/02/28 13:35
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 1 113d 113d 0/1 upstream: reported on 2020/03/23 03:20
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 2 22d 33d 0/1 upstream: reported on 2020/06/11 12:57
upstream KASAN: use-after-free Read in ext4_xattr_set_entry 1 717d 717d 0/17 closed as invalid on 2018/07/29 11:55
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry 4 564d 457d 0/1 auto-closed as invalid on 2019/06/26 01:15
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (3) 4 9d08h 127d 0/17 upstream: reported on 2020/03/09 05:43
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry syz fix 10 136d 384d 1/1 fixed on 2020/03/30 09:03
android-54 KASAN: use-after-free Read in ext4_xattr_set_entry 5 11d 157d 0/1 upstream: reported on 2020/02/07 21:52
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry C fix 9 165d 257d 1/1 fixed on 2020/03/01 21:06
Patch testing requests:
Created Duration User Patch Repo Result
2019/12/15 06:30 18m tytso@mit.edu patch https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git master OK

Sample crash report:

Crashes (19):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-selinux-root 2019/12/16 14:14 upstream 07c4b9e9 eef6e580 .config log report syz C adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root 2019/12/13 18:20 upstream ae4b064e 08003f64 .config log report syz C adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root 2019/12/04 02:31 upstream 76bb8b05 ae13a849 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-smack-root 2019/11/17 14:57 upstream fe30021c d5696d51 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-smack-root 2019/11/05 05:54 upstream a99d8080 76630fc9 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root 2019/09/29 18:43 upstream 02dc96ef c1ad5441 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root 2019/08/30 20:52 upstream 6525771f fd37b39e .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root 2019/08/09 16:51 upstream b678c568 ede31a9b .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-smack-root 2019/06/30 18:31 upstream 6fbc7275 7509bf36 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root 2019/04/28 13:18 upstream 037904a2 b617407b .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root 2019/04/17 10:55 upstream 444fe991 b0e8efcb .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-smack-root 2019/03/04 23:58 upstream 736706be 7c693b52 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root 2019/01/05 20:03 upstream 3fed6ae4 53be0a37 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root 2019/01/05 15:07 upstream 3fed6ae4 53be0a37 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-smack-root 2019/01/04 08:59 upstream 645ff1e8 7da23925 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root 2018/11/16 00:41 upstream da5322e6 3a41052e .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root 2018/11/01 09:35 upstream 59fc453b 1f38e9ae .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root 2018/10/07 22:54 upstream fb1c592c 8b311eaf .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-linux-next-kasan-gce-root 2019/04/28 19:52 linux-next 3ddfa8af b617407b .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu