syzbot


KASAN: use-after-free Read in blk_mq_exit_sched
Status: upstream: reported C repro on 2021/06/09 05:23
Reported-by: syzbot+77ba3d171a25c56756ea@syzkaller.appspotmail.com
Fix commit: f0c1c4d2864e blk-mq: fix use-after-free in blk_mq_exit_sched
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32 ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 48d, last: 29d

Cause bisection: introduced by (bisect log) :
commit f9006acc8dfe59e25aa75729728ac57a8d84fc32
Author: Florian Westphal <fw@strlen.de>
Date: Wed Apr 21 07:51:08 2021 +0000

  netfilter: arp_tables: pass table pointer via nf_hook_ops

Crash: WARNING in __nf_unregister_net_hook (log)
Repro: C syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2021/06/14 15:22 19m chouhan.shreyansh630@gmail.com upstream OK

Sample crash report:

Crashes (9):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2021/06/09 22:15 linux-next a1f92694393a 84fe5d96 .config log report syz C KASAN: use-after-free Read in blk_mq_exit_sched
ci-upstream-linux-next-kasan-gce-root 2021/06/23 19:16 linux-next a1f92694393a aba2b2fb .config log report info KASAN: use-after-free Read in blk_mq_exit_sched
ci-upstream-linux-next-kasan-gce-root 2021/06/22 02:49 linux-next a1f92694393a aba2b2fb .config log report info KASAN: use-after-free Read in blk_mq_exit_sched
ci-upstream-linux-next-kasan-gce-root 2021/06/18 18:03 linux-next a1f92694393a aba2b2fb .config log report info KASAN: use-after-free Read in blk_mq_exit_sched
ci-upstream-linux-next-kasan-gce-root 2021/06/18 16:52 linux-next a1f92694393a aba2b2fb .config log report info KASAN: use-after-free Read in blk_mq_exit_sched
ci-upstream-linux-next-kasan-gce-root 2021/06/17 16:22 linux-next a1f92694393a aba2b2fb .config log report info KASAN: use-after-free Read in blk_mq_exit_sched
ci-upstream-linux-next-kasan-gce-root 2021/06/17 06:38 linux-next a1f92694393a aba2b2fb .config log report info KASAN: use-after-free Read in blk_mq_exit_sched
ci-upstream-linux-next-kasan-gce-root 2021/06/09 21:13 linux-next a1f92694393a 84fe5d96 .config log report info KASAN: use-after-free Read in blk_mq_exit_sched
ci-upstream-linux-next-kasan-gce-root 2021/06/05 03:26 linux-next a1f92694393a 966a236b .config log report info KASAN: use-after-free Read in blk_mq_exit_sched