syzbot


INFO: task hung in tcf_ife_init
Status: fixed on 2020/10/10 01:52
Reported-by: syzbot+80e32b5d1f9923f8ace6@syzkaller.appspotmail.com
Fix commit: cc8e58f8 act_ife: load meta modules before tcf_idr_check_alloc()
First crash: 293d, last: 288d

Cause bisection: introduced by (bisect log) :
commit 4e8ddd7f1758ca4ddd0c1f7cf3e66fce736241d2
Author: Vlad Buslov <vladbu@mellanox.com>
Date: Thu Jul 5 14:24:30 2018 +0000

  net: sched: don't release reference on action overwrite

Crash: KASAN: use-after-free Read in __tcf_action_put (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in tcf_ife_init C 2 1d09h 293d 0/1 upstream: reported C repro on 2020/09/03 06:16
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/03 18:49 17m xiyou.wangcong@gmail.com https://github.com/congwang/linux.git net OK

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/09/07 21:57 upstream f4d51dff abf9ba4f .config log report syz C
ci-upstream-kasan-gce-root 2020/09/06 08:58 upstream 9322c47b abf9ba4f .config log report syz C
ci-upstream-net-this-kasan-gce 2020/09/03 05:53 net 1996cf46 abf9ba4f .config log report syz C
ci-upstream-net-kasan-gce 2020/09/03 08:35 net-next d3dfc362 abf9ba4f .config log report syz C