syzbot


KASAN: use-after-free Read in __list_del_entry_valid (4)
Status: fixed on 2020/05/10 10:41
Reported-by: syzbot+29ee8f76017ce6cf03da@syzkaller.appspotmail.com
Fix commit: 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
First crash: 1354d, last: 665d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: WARNING in cma_cancel_operation (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in __list_del_entry_valid (3) C 15 1359d 1373d 13/22 closed as dup on 2018/03/22 15:31
upstream KASAN: use-after-free Read in __list_del_entry_valid (2) C 11 1449d 1451d 3/22 fixed on 2018/01/11 01:23

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2020/02/11 22:27 upstream 0a679e13ea30 e033c1f1 .config log report syz C
ci-upstream-kasan-gce 2020/01/12 22:04 upstream 040a3c33623b e033c1f1 .config log report syz C
ci-upstream-kasan-gce-root 2019/12/10 15:05 upstream 6794862a16ef e033c1f1 .config log report syz C
ci-upstream-kasan-gce-root 2019/08/01 03:15 upstream 3eb2ce825ea1 e033c1f1 .config log report syz C
Crashes (16):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2018/03/26 04:05 upstream cb6416592bc2 e033c1f1 .config log report syz C
ci-upstream-kasan-gce-root 2018/03/26 03:42 upstream 3eb2ce825ea1 e033c1f1 .config log report syz C
ci-upstream-kasan-gce-386 2018/03/26 03:55 upstream cb6416592bc2 e033c1f1 .config log report syz
ci-upstream-kasan-gce-386 2018/03/24 20:37 upstream bcfc1f455466 2e9d9054 .config log report syz
ci-upstream-kasan-gce-root 2018/03/27 04:28 upstream 3eb2ce825ea1 0ca7878b .config log report
ci-upstream-kasan-gce-root 2018/03/26 03:25 upstream 3eb2ce825ea1 e033c1f1 .config log report
ci-upstream-kasan-gce-386 2018/04/01 09:31 upstream 10b84daddbec 0174c6c8 .config log report
ci-upstream-kasan-gce-386 2018/04/01 07:09 upstream 10b84daddbec 0174c6c8 .config log report
ci-upstream-kasan-gce-386 2018/04/01 01:57 upstream 10b84daddbec 0174c6c8 .config log report
ci-upstream-kasan-gce-386 2018/03/31 12:29 upstream b5dbc28762fd 8fbce0e4 .config log report
ci-upstream-kasan-gce-386 2018/03/30 04:02 upstream 0b412605ef5f d47f0ed6 .config log report
ci-upstream-kasan-gce-386 2018/03/29 11:28 upstream 0b412605ef5f d47f0ed6 .config log report
ci-upstream-kasan-gce-386 2018/03/29 06:04 upstream a2601d78b77a bf5e585c .config log report
ci-upstream-kasan-gce-386 2018/03/29 05:50 upstream a2601d78b77a bf5e585c .config log report
ci-upstream-kasan-gce-386 2018/03/29 04:31 upstream a2601d78b77a bf5e585c .config log report
ci-upstream-kasan-gce-386 2018/03/24 20:18 upstream bcfc1f455466 2e9d9054 .config log report