syzbot


KASAN: use-after-free Read in __d_alloc (2)
Status: fixed on 2021/11/10 00:50
Reported-by: syzbot+fb0d60a179096e8c2731@syzkaller.appspotmail.com
Fix commit: 0766ec82e5fb namei: Fix use after free in kern_path_locked
First crash: 104d, last: 61d

Cause bisection: introduced by (bisect log) [no-op commit]:
commit b9fc8b4a591811546fec2dbef7e9f809362100c9
Author: Grant Seltzer <grantseltzer@gmail.com>
Date: Mon Feb 22 19:58:46 2021 +0000

  bpf: Add kernel/modules BTF presence checks to bpftool feature command

Crash: WARNING in kvm_wait (log)
Repro: C syz .config
duplicates (5):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
bpf-next test error: KFENCE: use-after-free in kvm_fastop_exception 2 75d 80d 0/22 closed as dup on 2021/09/11 10:43
upstream boot error: KFENCE: use-after-free in kvm_fastop_exception 2 79d 77d 0/22 closed as dup on 2021/09/12 14:35
KFENCE: use-after-free in kvm_fastop_exception C done 15107 61d 104d 0/22 closed as dup on 2021/09/11 10:44
upstream test error: KFENCE: use-after-free in kvm_fastop_exception 5 79d 85d 0/22 closed as dup on 2021/09/11 10:44
net test error: KFENCE: use-after-free in kvm_fastop_exception 1 81d 80d 0/22 closed as dup on 2021/09/11 10:42
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in __d_alloc 1 421d 417d 0/22 auto-closed as invalid on 2021/01/31 11:20

Sample crash report:

Crashes (6774):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2021/09/12 06:09 upstream c605c39677b9 5ae8508a .config log report syz C KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/09 11:44 upstream 730bf31b8fc8 e2776ee4 .config log report syz C KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/08 07:33 upstream a2b28235335f 064c9eb7 .config log report syz C KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/05 15:38 upstream 49624efa65ac d236a457 .config log report syz C KASAN: use-after-free Read in __d_alloc
ci-upstream-net-this-kasan-gce 2021/09/11 23:44 net 08dad2f4d541 5ae8508a .config log report syz C KASAN: use-after-free Read in __d_alloc
ci-upstream-net-kasan-gce 2021/09/07 10:40 net-next 27151f177827 6ca60148 .config log report syz C KASAN: use-after-free Read in __d_alloc
ci-upstream-linux-next-kasan-gce-root 2021/08/17 01:13 linux-next b9011c7e671d 33c26cb7 .config log report syz C KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-smack-root 2021/09/12 17:39 upstream 78e709522d2c 5ae8508a .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce 2021/09/12 14:05 upstream 78e709522d2c 5ae8508a .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/11 17:48 upstream 926de8c4326c 5ae8508a .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-smack-root 2021/09/11 12:35 upstream 926de8c4326c 5ae8508a .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/11 00:04 upstream bf9f243f23e6 5ae8508a .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/10 21:22 upstream bf9f243f23e6 5ae8508a .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/10 19:44 upstream bf9f243f23e6 5ae8508a .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-smack-root 2021/09/09 22:59 upstream a3fa7a101dcf e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce 2021/09/09 21:41 upstream a3fa7a101dcf e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/09 14:13 upstream 730bf31b8fc8 e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-smack-root 2021/09/09 11:08 upstream 2d338201d531 e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-selinux-root 2021/09/09 09:17 upstream 730bf31b8fc8 e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/08 22:33 upstream ac08b1c68d1b e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce 2021/09/07 20:13 upstream 4b93c544e90e 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-selinux-root 2021/09/07 03:53 upstream 27151f177827 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce 2021/09/06 23:17 upstream 27151f177827 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce 2021/09/06 18:09 upstream 27151f177827 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/05 17:19 upstream 49624efa65ac d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/12 02:38 upstream c605c39677b9 5ae8508a .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/10 03:53 upstream a3fa7a101dcf e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/10 01:00 upstream a3fa7a101dcf e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/09 23:22 upstream a3fa7a101dcf e2776ee4 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/08 04:02 upstream a2b28235335f 064c9eb7 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/07 19:51 upstream 4b93c544e90e 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/07 18:15 upstream 4b93c544e90e 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/07 05:28 upstream 27151f177827 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/07 00:39 upstream 27151f177827 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/06 21:11 upstream 27151f177827 6ca60148 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/06 09:11 upstream 0319b848b155 d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/06 03:04 upstream 0319b848b155 d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/06 01:22 upstream 0319b848b155 d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/06 00:57 upstream 0319b848b155 d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/05 16:53 upstream 49624efa65ac d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-386 2021/09/05 16:00 upstream 49624efa65ac d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-linux-next-kasan-gce-root 2021/09/06 10:50 linux-next c1b13fe76e95 d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-linux-next-kasan-gce-root 2021/09/05 17:43 linux-next c1b13fe76e95 d236a457 .config log report syz KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-selinux-root 2021/09/12 19:49 upstream 78e709522d2c 5ae8508a .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce 2021/09/12 16:14 upstream 78e709522d2c 5ae8508a .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-kasan-gce-root 2021/09/12 11:45 upstream 78e709522d2c 5ae8508a .config log report info KASAN: use-after-free Read in __d_alloc
ci-qemu2-arm64 2021/09/12 20:11 upstream 78e709522d2c 3ce60af8 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/29 02:05 bpf 79e2c3066675 d82cb927 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 23:37 bpf 79e2c3066675 d82cb927 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 21:25 bpf 79e2c3066675 d82cb927 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 20:07 bpf 79e2c3066675 d82cb927 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 18:27 bpf 79e2c3066675 d82cb927 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 16:44 bpf 79e2c3066675 d82cb927 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 14:42 bpf 79e2c3066675 d82cb927 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 13:04 bpf 79e2c3066675 d82cb927 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 12:27 bpf 79e2c3066675 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 11:14 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 09:54 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 08:25 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 07:08 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 04:47 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 04:00 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 02:30 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 01:22 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/28 00:08 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 23:07 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 21:45 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 19:59 bpf 2248c2fca9c2 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 19:20 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 18:19 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 17:05 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 17:00 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 15:46 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 14:23 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 13:16 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 12:28 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 11:11 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 10:05 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 08:38 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 08:11 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 07:00 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 05:51 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 04:38 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 02:26 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 02:00 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/27 00:52 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/26 23:46 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/26 22:30 bpf a3debf177f21 78494d16 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/26 19:53 bpf a3debf177f21 8cac236e .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-kasan-gce 2021/09/26 18:44 bpf a3debf177f21 8cac236e .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-net-this-kasan-gce 2021/09/16 21:14 net 98dc68f8b0c2 aae492f2 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-bpf-next-kasan-gce 2021/09/18 09:18 bpf-next ca21a3e5edfd 70b76c1d .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-net-kasan-gce 2021/09/16 16:48 net-next 52583c8d8b12 aae492f2 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-linux-next-kasan-gce-root 2021/09/09 22:49 linux-next f7f581157d1c e2776ee4 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-linux-next-kasan-gce-root 2021/08/16 08:25 linux-next b9011c7e671d 2489ab88 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-linux-next-kasan-gce-root 2021/08/16 08:06 linux-next b9011c7e671d 2489ab88 .config log report info KASAN: use-after-free Read in __d_alloc
ci-upstream-linux-next-kasan-gce-root 2021/08/19 13:17 linux-next 33e65b1f975c a2fe1cb5 .config log report info KFENCE: use-after-free in __d_alloc