syzbot


KASAN: use-after-free Read in nfc_llcp_put_ssap
Status: upstream: reported syz repro on 2021/05/01 05:50
Reported-by: syzbot+e4689b43d2ed2ed63611@syzkaller.appspotmail.com
Fix commit: c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 99d, last: 84d

Cause bisection: introduced by (bisect log) :
commit 997acaf6b4b59c6a9c259740312a69ea549cc684
Author: Mark Rutland <mark.rutland@arm.com>
Date: Mon Jan 11 15:37:07 2021 +0000

  lockdep: report broken irq restoration

Crash: WARNING in kvm_wait (log)
Repro: syz .config

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-kasan-gce 2021/05/08 14:02 net-next 95aafe911db6 bc5434be .config log report syz KASAN: use-after-free Read in nfc_llcp_put_ssap
ci-upstream-kasan-gce-selinux-root 2021/05/08 00:18 upstream d2b6f8a17919 bc5434be .config log report info KASAN: use-after-free Read in nfc_llcp_put_ssap
ci-upstream-kasan-gce-root 2021/04/23 22:58 upstream 18a3c5f7abfd 17f0b706 .config log report info KASAN: use-after-free Read in nfc_llcp_put_ssap
ci-upstream-net-kasan-gce 2021/05/07 10:29 net-next 95aafe911db6 f6da8120 .config log report info KASAN: use-after-free Read in nfc_llcp_put_ssap