syzbot


KASAN: use-after-free Read in __list_del_entry_valid (4)
Status: fixed on 2020/05/10 10:41
Reported-by: syzbot+29ee8f76017ce6cf03da@syzkaller.appspotmail.com
Fix commit: 7c119107 RDMA/ucma: Put a lock around every call to the rdma_cm layer
First crash: 830d, last: 141d

Cause bisection: the bug happens on the oldest tested release
Crash: WARNING in cma_cancel_operation (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: use-after-free Read in __list_del_entry_valid (3) C 15 836d 849d 13/17 closed as dup on 2018/03/22 15:31
upstream KASAN: use-after-free Read in __list_del_entry_valid (2) C 11 925d 927d 3/17 fixed on 2018/01/11 01:23

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro
ci-upstream-kasan-gce 2020/02/11 22:27 upstream 0a679e13 e033c1f1 .config log report syz C
ci-upstream-kasan-gce 2020/01/12 22:04 upstream 040a3c33 e033c1f1 .config log report syz C
ci-upstream-kasan-gce-root 2019/12/10 15:05 upstream 6794862a e033c1f1 .config log report syz C
ci-upstream-kasan-gce-root 2019/08/01 03:15 upstream 3eb2ce82 e033c1f1 .config log report syz C
Crashes (16):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce 2018/03/26 04:05 upstream cb641659 e033c1f1 .config log report syz C dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-root 2018/03/26 03:42 upstream 3eb2ce82 e033c1f1 .config log report syz C dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/03/26 03:55 upstream cb641659 e033c1f1 .config log report syz dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/03/24 20:37 upstream bcfc1f45 2e9d9054 .config log report syz dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-root 2018/03/27 04:28 upstream 3eb2ce82 0ca7878b .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-root 2018/03/26 03:25 upstream 3eb2ce82 e033c1f1 .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/04/01 09:31 upstream 10b84dad 0174c6c8 .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/04/01 07:09 upstream 10b84dad 0174c6c8 .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/04/01 01:57 upstream 10b84dad 0174c6c8 .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/03/31 12:29 upstream b5dbc287 8fbce0e4 .config log report davem@davemloft.net, jon.maloy@ericsson.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, tipc-discussion@lists.sourceforge.net, ying.xue@windriver.com
ci-upstream-kasan-gce-386 2018/03/30 04:02 upstream 0b412605 d47f0ed6 .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/03/29 11:28 upstream 0b412605 d47f0ed6 .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/03/29 06:04 upstream a2601d78 bf5e585c .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/03/29 05:50 upstream a2601d78 bf5e585c .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/03/29 04:31 upstream a2601d78 bf5e585c .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com
ci-upstream-kasan-gce-386 2018/03/24 20:18 upstream bcfc1f45 2e9d9054 .config log report dasaratharaman.chandramouli@intel.com, dledford@redhat.com, jgg@ziepe.ca, leonro@mellanox.com, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, markb@mellanox.com, monis@mellanox.com, parav@mellanox.com