syzbot


KASAN: use-after-free Read in ucma_close (2)
Status: fixed on 2020/11/16 12:12
Reported-by: syzbot+cc6fc752b3819e082d0c@syzkaller.appspotmail.com
Fix commit: f5449e74802c RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
First crash: 375d, last: 375d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: WARNING in sysfs_warn_dup (log)
Repro: syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in ucma_close C 176 1280d 1294d 4/22 fixed on 2018/03/23 18:14
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/11 18:19 16m jgg@ziepe.ca https://github.com/jgunthorpe/linux ucma_migrate_fix OK
2020/09/11 12:02 16m jgg@ziepe.ca git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma.git 308571debccd7004acf02ea1b7163a96ad772292 report log
2020/09/11 04:00 11m anant.thazhemadam@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2020/09/10 11:25 upstream 34d4ddd359db 409809d8 .config log report syz