syzbot


KASAN: use-after-free Read in lock_sock_nested
Status: upstream: reported C repro on 2019/01/02 10:41
Reported-by: syzbot+500c69d1e21d970e461b@syzkaller.appspotmail.com
First crash: 900d, last: 50m

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: inconsistent lock state in nr_find_socket (log)
Repro: syz .config

Fix bisection: fixed by (bisect log) :
commit a07e3324538a989b7cdbf2c679be6a7f9df2544f
Author: Thomas Bogendoerfer <tbogendoerfer@suse.de>
Date: Mon May 13 11:47:25 2019 +0000

  MIPS: kernel: only use i8253 clocksource with periodic clockevent

similar bugs (10):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in lock_sock_nested C 262 6d22h 694d 0/1 upstream: reported C repro on 2019/07/26 21:27
linux-4.14 KASAN: use-after-free Read in lock_sock_nested C inconclusive 316 5h50m 787d 0/1 upstream: reported C repro on 2019/04/24 06:28
android-44 KASAN: use-after-free Read in lock_sock_nested C 40 1030d 800d 0/2 public: reported C repro on 2019/04/11 08:44
android-49 KASAN: use-after-free Read in lock_sock_nested C 39 1031d 1225d 0/3 closed as invalid on 2019/03/07 05:41
upstream BUG: unable to handle kernel paging request in lock_sock_nested 36 13d 318d 0/22 upstream: reported on 2020/08/05 16:09
linux-4.19 KASAN: wild-memory-access Write in lock_sock_nested 2 142d 211d 0/1 auto-closed as invalid on 2021/05/28 14:35
linux-4.14 general protection fault in lock_sock_nested 4 43d 261d 0/1 upstream: reported on 2020/10/01 19:05
linux-4.14 BUG: unable to handle kernel paging request in lock_sock_nested 4 36d 155d 0/1 upstream: reported on 2021/01/15 05:46
upstream KASAN: slab-out-of-bounds Read in lock_sock_nested syz unreliable 20 5h41m 312d 0/22 upstream: reported syz repro on 2020/08/11 16:59
linux-4.19 KASAN: slab-out-of-bounds Read in lock_sock_nested 6 36d 219d 0/1 upstream: reported on 2020/11/12 16:53
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/01 21:45 10m anant.thazhemadam@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git a07e3324538a989b7cdbf2c679be6a7f9df2544f report log
2020/09/01 21:34 10m anant.thazhemadam@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log

Sample crash report:

Crashes (1526):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-this-kasan-gce 2021/04/08 08:09 net 5219d601 6a81331a .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/04/05 05:52 net a14d273b 6a81331a .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/26 05:28 net 8f1c0fd2 76f7fc95 .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/04/08 06:41 net-next 0b35e0de 6a81331a .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/25 23:46 net-next d310ec03 76f7fc95 .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2020/08/15 14:51 upstream b923f124 424dd8e7 .config log report syz C
ci-upstream-kasan-gce-smack-root 2019/07/27 09:44 upstream 3ea54d9b c85e1c5b .config log report syz C
ci-upstream-kasan-gce-smack-root 2021/06/13 17:08 upstream 8ecfa36c 1ba81399 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/13 03:58 upstream ad347abe 1ba81399 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/06/07 23:58 upstream 614124be e59537be .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/06/06 21:55 upstream f5b6eb1e 500c2339 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/05 14:41 upstream 9d32fa5d 500c2339 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/03 05:32 upstream 324c92e5 0740de69 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/06/01 05:32 upstream c2131f7e 032639db .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/31 03:39 upstream b90e90f4 325a8dab .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/30 20:26 upstream b90e90f4 325a8dab .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/05/28 17:08 upstream 97e5bf60 858ea628 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/05/28 02:56 upstream d7c5303f 858ea628 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/24 19:15 upstream c4681547 3c7fef33 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/05/16 12:11 upstream c12a29ed f54a5c09 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/05 15:12 upstream d2b6f8a1 06c27ff5 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/04/27 11:43 upstream 4a0225c3 805b5003 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/02/16 04:48 upstream f40ddce8 98682e5e .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/06/07 05:10 net 3822d067 500c2339 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/05/12 20:26 net 440c3247 da958a4d .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/05/05 19:48 net bbd6f0a9 06c27ff5 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/04/29 08:10 net bbd6f0a9 77e2b668 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/04/20 17:23 net 4acd4764 c0ced557 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/04/18 06:10 net 88a5af94 7e2b734b .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/04/15 06:28 net 00423969 fcdb12ba .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/04/10 20:01 net 4e04e751 bfeda1b1 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/03/29 09:33 net 1b479fb8 a8529b82 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/06/07 03:42 net-next 1a42624a 500c2339 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/05 18:50 net-next 95aafe91 06c27ff5 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/04/29 09:39 net-next 95aafe91 77e2b668 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/04/28 00:28 net-next 95aafe91 805b5003 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/04/20 17:26 net-next e7ad33fa c0ced557 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/04/18 07:46 net-next e7ad33fa 7e2b734b .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/04/10 22:39 net-next 626b598a bfeda1b1 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/04/05 05:19 net-next 7d42e84e 6a81331a .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/29 11:17 net-next 72642f41 a8529b82 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/06/19 11:55 linux-next a1f92694 aba2b2fb .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/06/19 01:44 linux-next a1f92694 aba2b2fb .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/06/01 15:11 linux-next a1f92694 032639db .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/04/16 10:05 linux-next 1216f02e c59079a6 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2019/02/15 05:24 linux-next b3418f8b 76dd003f .config log report syz
ci-upstream-kasan-gce-selinux-root 2021/06/16 23:14 upstream 6b00bc63 aba2b2fb .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/16 01:15 upstream 94f0b2d4 990d3cbe .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/13 21:08 upstream e4e45343 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/13 05:26 upstream 8ecfa36c 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/06/12 14:34 upstream ad347abe 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream 2021/06/11 14:41 upstream 06af8679 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/10 05:42 upstream cd1245d7 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/10 02:41 upstream cd1245d7 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/06/03 23:03 upstream f88cd3fb 0740de69 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/06/03 17:18 upstream 324c92e5 0740de69 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/31 05:37 upstream 8124c8a6 325a8dab .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/05/30 16:34 upstream b90e90f4 325a8dab .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/29 17:51 upstream 6799d4f2 325a8dab .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/28 22:57 upstream 5ff2756a 858ea628 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/05/28 04:04 upstream 97e5bf60 858ea628 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/05/26 08:08 upstream ad9f25d3 93d3a9f6 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/25 18:08 upstream a050a6d2 93d3a9f6 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/25 16:41 upstream a050a6d2 93d3a9f6 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/05/24 02:27 upstream 6ebb6814 3c7fef33 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/06/20 00:08 upstream 913ec3c2 aba2b2fb .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/06/11 15:58 upstream 06af8679 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/06/04 21:39 upstream 16f0596f 966a236b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/05/30 09:17 upstream b90e90f4 325a8dab .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/06/09 02:24 net 7a6b1ab7 5c2fe346 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/06/03 10:02 net ab00f3e0 0740de69 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/05/30 10:22 net 6850ec97 325a8dab .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/05/30 04:56 net 6850ec97 325a8dab .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/06/16 11:30 net-next c7654495 c06f97ad .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/06/13 10:40 net-next ffbbc5e5 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/06/11 19:29 net-next 76cf404c 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/06/08 16:06 net-next dc8cf755 b718257f .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/06/04 23:28 net-next ebbf5fcb 966a236b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/06/04 07:17 net-next b596ce68 0740de69 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/06/02 05:48 net-next 7fc6d3ab 032639db .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/31 03:34 net-next d3f2c48d 325a8dab .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/29 07:35 net-next 38e9673c 858ea628 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/28 07:56 net-next af9207ad 858ea628 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/27 18:13 net-next 59c56342 858ea628 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/25 22:41 net-next c1eaf3c0 93d3a9f6 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/24 18:38 net-next ec7d6dd8 3c7fef33 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/24 13:42 net-next 5d6c3d91 3c7fef33 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/23 11:33 net-next f5120f59 3c7fef33 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/23 10:29 net-next f5120f59 3c7fef33 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/23 08:23 net-next f5120f59 3c7fef33 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/23 03:59 net-next f5120f59 3c7fef33 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/05/22 22:11 net-next f5120f59 3c7fef33 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/06/08 23:24 linux-next a1f92694 5c2fe346 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/05/31 15:41 linux-next a1f92694 032639db .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/05/31 12:59 linux-next a1f92694 032639db .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/05/31 09:25 linux-next a1f92694 325a8dab .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2019/01/01 20:21 upstream e1ef035d 3d85f48c .config log report
ci-upstream-net-this-kasan-gce 2021/01/17 07:21 net 66c55602 65a7a854 .config log report info