syzbot


KASAN: use-after-free Read in ext4_xattr_set_entry (2)
Status: fixed on 2021/10/13 07:23
Reported-by: syzbot+b0fe9558904a8bb778ac@syzkaller.appspotmail.com
Fix commit: c481607ba522 ext4: fix race writing to an inline_data file while its xattrs are changing
First crash: 707d, last: 249d

Fix bisection: fixed by (bisect log) :
commit c481607ba522e31e6ed01efefc19cc1d0e0a46fa
Author: Theodore Ts'o <tytso@mit.edu>
Date: Sat Aug 21 03:44:17 2021 +0000

  ext4: fix race writing to an inline_data file while its xattrs are changing

similar bugs (13):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (3) C error 1 83d 568d 0/1 upstream: reported C repro on 2020/10/28 15:08
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 6 931d 987d 0/1 auto-closed as invalid on 2020/02/28 13:35
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 1 788d 788d 0/1 auto-closed as invalid on 2020/07/21 03:20
upstream KASAN: use-after-free Read in ext4_xattr_set_entry 1 1392d 1392d 0/22 closed as invalid on 2018/07/29 11:55
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry 4 1239d 1132d 0/1 auto-closed as invalid on 2019/06/26 01:15
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (3) 4 683d 801d 0/22 auto-closed as invalid on 2020/11/02 08:32
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry syz done 10 811d 1059d 1/1 fixed on 2020/03/30 09:03
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (4) C error done 21 87d 474d 22/22 fixed on 2022/03/28 10:17
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (2) C done 19 885d 1294d 16/22 fixed on 2020/02/14 01:19
android-54 KASAN: use-after-free Read in ext4_xattr_set_entry 6 651d 832d 0/2 auto-closed as invalid on 2020/12/04 21:44
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry C done 9 839d 931d 1/1 fixed on 2020/03/01 21:06
android-54 KASAN: out-of-bounds Read in ext4_xattr_set_entry C 1 424d 424d 0/2 upstream: reported C repro on 2021/03/21 22:06
linux-4.14 KASAN: out-of-bounds Read in ext4_xattr_set_entry C 2 8d18h 402d 0/1 upstream: reported C repro on 2021/04/12 14:20

Sample crash report:

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-19 2021/04/11 17:20 linux-4.19.y 830a059cbba6 6a81331a .config log report syz C KASAN: out-of-bounds Read in ext4_xattr_set_entry
ci2-linux-4-19 2020/11/06 23:19 linux-4.19.y b94de4d19498 cba33199 .config log report syz C
ci2-linux-4-19 2021/04/15 16:15 linux-4.19.y 0f1b4cb77d7f fcdb12ba .config log report syz KASAN: out-of-bounds Read in ext4_xattr_set_entry
ci2-linux-4-19 2021/02/22 22:04 linux-4.19.y 255b58a2b3af c26fb06b .config log report info KASAN: use-after-free Read in ext4_xattr_set_entry
ci2-linux-4-19 2020/08/29 22:22 linux-4.19.y f6d5cb9e2c06 d5a3ae1f .config log report
ci2-linux-4-19 2020/06/21 19:47 linux-4.19.y 3fc898571b97 4f2acff9 .config log report
ci2-linux-4-19 2020/06/11 12:56 linux-4.19.y 3fc898571b97 3ab7a05a .config log report