syzbot


KASAN: use-after-free Read in sixpack_close
Status: upstream: reported C repro on 2021/11/14 13:18
Reported-by: syzbot+b6cb97f812986fb71e8f@syzkaller.appspotmail.com
Fix commit: 81b1d548d00b hamradio: remove needs_free_netdev to avoid UAF
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64 ci-upstream-bpf-next-kasan-gce ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 21d, last: 12d

Cause bisection: introduced by (bisect log) :
commit 0b9111922b1f399aba6ed1e1b8f2079c3da1aed8
Author: Lin Ma <linma@zju.edu.cn>
Date: Mon Nov 8 10:37:59 2021 +0000

  hamradio: defer 6pack kfree after unregister_netdev

Crash: KASAN: use-after-free Read in sixpack_close (log)
Repro: C syz .config

Sample crash report:

Crashes (879):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2021/11/14 01:06 linux-next f2e19fd15bd7 83f5c9b5 .config log report syz C KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/19 10:10 upstream 6fdf886424cf 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/19 08:43 upstream 6fdf886424cf 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream 2021/11/19 07:19 upstream 6fdf886424cf 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/19 05:48 upstream 6fdf886424cf 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/19 04:16 upstream 6fdf886424cf 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/19 02:47 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/19 01:34 upstream 6fdf886424cf 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/18 23:25 upstream 6fdf886424cf 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/18 22:18 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/18 22:16 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/18 20:53 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream 2021/11/18 19:52 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-selinux-root 2021/11/18 18:50 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/18 15:41 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-selinux-root 2021/11/18 12:16 upstream 42eb8fdac2fc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-selinux-root 2021/11/18 10:22 upstream 42eb8fdac2fc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/18 08:35 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/18 06:04 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/18 04:56 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/18 03:44 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/18 02:38 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/18 02:23 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-selinux-root 2021/11/18 00:17 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-selinux-root 2021/11/17 23:10 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream 2021/11/17 22:07 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/17 21:05 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream 2021/11/17 20:27 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/17 18:31 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-selinux-root 2021/11/17 16:58 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream 2021/11/17 15:31 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream 2021/11/17 14:02 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/17 12:35 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/17 12:27 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-selinux-root 2021/11/17 11:27 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-smack-root 2021/11/17 10:22 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/17 09:14 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/17 07:36 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-selinux-root 2021/11/17 05:35 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/17 03:53 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/17 02:47 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-kasan-gce-root 2021/11/16 20:59 upstream 8ab774587903 600426bd .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream 2021/11/16 19:53 upstream 8ab774587903 600426bd .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/18 17:42 upstream 42eb8fdac2fc 31a30fc0 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/18 13:30 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/18 13:22 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/18 07:19 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/18 01:20 upstream ee1703cda8dc cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/17 06:45 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/17 01:33 upstream 8ab774587903 cafff8b6 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/16 18:41 upstream 8ab774587903 600426bd .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-linux-next-kasan-gce-root 2021/11/14 00:06 linux-next f2e19fd15bd7 83f5c9b5 .config log report info KASAN: use-after-free Read in sixpack_close
ci-upstream-linux-next-kasan-gce-root 2021/11/10 13:14 linux-next 73e5c18006f5 75b04091 .config log report info KASAN: use-after-free Read in sixpack_close
ci-qemu-upstream-386 2021/11/18 07:28 upstream ee1703cda8dc cafff8b6 .config log report info KFENCE: use-after-free in sixpack_close