syzbot


WARNING in mark_lock
Status: fixed on 2019/08/27 17:15
Reported-by: syzbot+a861f52659ae2596492b@syzkaller.appspotmail.com
Fix commit: 95fa1454 bpf: sockmap/tls, close can race with map free
First crash: 90d, last: 30d
Bisection: introduced by (bisect log):

commit e9db4ef6bf4ca9894bb324c76e01b8f1a16b2650
Author: John Fastabend <john.fastabend@gmail.com>
Date: Sat Jun 30 13:17:47 2018 +0000

  bpf: sockhash fix omitted bucket lock in sock_close

Tree: linux-next
Crash: KASAN: use-after-free Write in bpf_tcp_close (log)
Repro: syz .config

Sample crash report:

All crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-linux-next-kasan-gce-root 2019/06/20 23:45 linux-next dc636f5d 34bf9440 .config log report syz linux-kernel@vger.kernel.org, tglx@linutronix.de
ci2-upstream-usb 2019/08/19 02:05 https://github.com/google/kasan.git usb-fuzzer d0847550 b8ceabfc .config log report gregkh@linuxfoundation.org, len.brown@intel.com, linux-kernel@vger.kernel.org, linux-pm@vger.kernel.org, pavel@ucw.cz, rjw@rjwysocki.net