syzbot


KASAN: use-after-free Read in nr_release
Status: fixed on 2019/08/27 17:15
Reported-by: syzbot+6eaef7158b19e3fec3a0@syzkaller.appspotmail.com
Fix commit: 4638faac netrom: hold sock when setting skb->destructor
First crash: 107d, last: 27d
Bisection: introduced by (bisect log):

commit c8c8218ec5af5d2598381883acbefbf604e56b5e
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Jun 27 21:30:58 2019 +0000

  netrom: fix a memory leak in nr_rx_frame()

Tree: net-next
Crash: WARNING: refcount bug in nr_insert_socket (log)
Repro: syz .config
similar bugs (3):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in nr_release C 8 14d 43d 0/1 upstream: reported C repro on 2019/08/10 01:07
linux-4.14 KASAN: use-after-free Read in nr_release syz 12 3d20h 40d 0/1 upstream: reported syz repro on 2019/08/13 12:20
upstream KASAN: use-after-free Read in nr_release (2) syz cause 10 8h28m 24d 0/13 upstream: reported syz repro on 2019/08/29 11:28

Sample crash report:

All crashes (25):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-root 2019/07/27 09:54 upstream 3ea54d9b c85e1c5b .config log report syz C davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-root 2019/08/20 23:45 upstream 5f97cbe2 cfc9868f .config log report syz C davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-net-kasan-gce 2019/07/27 15:56 net-next 31cc088a c85e1c5b .config log report syz C davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-linux-next-kasan-gce-root 2019/08/21 00:14 linux-next 54c851a8 cfc9868f .config log report syz C davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-selinux-root 2019/07/25 05:16 upstream bed38c3e 32329ceb .config log report syz davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-net-kasan-gce 2019/07/17 16:10 net-next 192f0f8e f613a7c4 .config log report syz
ci-upstream-kasan-gce-selinux-root 2019/08/12 16:13 upstream d45331b0 acb51638 .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-selinux-root 2019/08/12 01:00 upstream 296d05cb acb51638 .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-root 2019/08/10 01:46 upstream 7f20fd23 acb51638 .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-root 2019/08/06 01:31 upstream 0eb0ce0a 6affd8e8 .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-root 2019/08/05 13:21 upstream e21a712a 6affd8e8 .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-smack-root 2019/08/03 17:49 upstream dcb8cfbd 6affd8e8 .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-selinux-root 2019/07/25 02:16 upstream bed38c3e 32329ceb .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-root 2019/07/24 04:56 upstream c6dd78fc de453f34 .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-kasan-gce-selinux-root 2019/07/22 08:34 upstream c6dd78fc b3c615f5 .config log report
ci-upstream-kasan-gce-root 2019/07/20 15:48 upstream abdfd52a 1656845f .config log report
ci-upstream-net-this-kasan-gce 2019/06/06 22:14 net 85cb9287 698773cb .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-net-this-kasan-gce 2019/07/21 14:30 net 1a03bb53 1656845f .config log report
ci-upstream-net-this-kasan-gce 2019/06/26 16:31 net b8e8a863 4d342240 .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-net-this-kasan-gce 2019/06/13 23:08 net b8003cef a139f92f .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-net-this-kasan-gce 2019/06/13 21:42 net b8003cef a139f92f .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-net-this-kasan-gce 2019/06/07 07:52 net 85cb9287 698773cb .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-linux-next-kasan-gce-root 2019/08/26 08:57 linux-next 9733a7c6 d21c5d9d .config log report davem@davemloft.net, linux-hams@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, ralf@linux-mips.org
ci-upstream-linux-next-kasan-gce-root 2019/07/18 10:28 linux-next 6d21a41b 7bb222f7 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/07/17 14:30 linux-next e40115c0 f613a7c4 .config log report