syzbot


WARNING in mark_lock
Status: fixed on 2019/08/27 17:15
Reported-by: syzbot+a861f52659ae2596492b@syzkaller.appspotmail.com
Fix commit: 95fa145479fb bpf: sockmap/tls, close can race with map free
First crash: 894d, last: 835d

Cause bisection: introduced by (bisect log) :
commit e9db4ef6bf4ca9894bb324c76e01b8f1a16b2650
Author: John Fastabend <john.fastabend@gmail.com>
Date: Sat Jun 30 13:17:47 2018 +0000

  bpf: sockhash fix omitted bucket lock in sock_close

Crash: KASAN: use-after-free Write in bpf_tcp_close (log)
Repro: syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in mark_lock (3) C done inconclusive 69 554d 735d 0/22 upstream: reported C repro on 2019/11/26 09:05
upstream WARNING in mark_lock (2) 14 771d 798d 14/22 fixed on 2019/10/27 22:28
Patch testing requests:
Created Duration User Patch Repo Result
2019/07/08 16:21 17m john.fastabend@gmail.com git://github.com/cilium/linux fix-unhash OK
2019/07/01 05:32 11m john.fastabend@gmail.com git://github.com/cilium/linux ktls-unhash report log

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2019/06/20 23:45 linux-next dc636f5d78de 34bf9440 .config log report syz
ci2-upstream-usb 2019/08/19 02:05 https://github.com/google/kasan.git usb-fuzzer d0847550e22d b8ceabfc .config log report