syzbot


KASAN: use-after-free Read in lock_sock_nested
Status: upstream: reported C repro on 2019/01/02 10:41
Reported-by: syzbot+500c69d1e21d970e461b@syzkaller.appspotmail.com
First crash: 795d, last: 2h41m

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: inconsistent lock state in nr_find_socket (log)
Repro: syz .config

Fix bisection: fixed by (bisect log) :
commit a07e3324538a989b7cdbf2c679be6a7f9df2544f
Author: Thomas Bogendoerfer <tbogendoerfer@suse.de>
Date: Mon May 13 11:47:25 2019 +0000

  MIPS: kernel: only use i8253 clocksource with periodic clockevent

similar bugs (9):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in lock_sock_nested C 167 1d23h 589d 0/1 upstream: reported C repro on 2019/07/26 21:27
linux-4.14 KASAN: use-after-free Read in lock_sock_nested C inconclusive 205 14h56m 682d 0/1 upstream: reported C repro on 2019/04/24 06:28
android-44 KASAN: use-after-free Read in lock_sock_nested C 40 925d 695d 0/2 public: reported C repro on 2019/04/11 08:44
android-49 KASAN: use-after-free Read in lock_sock_nested C 39 927d 1120d 0/3 closed as invalid on 2019/03/07 05:41
upstream BUG: unable to handle kernel paging request in lock_sock_nested 25 4d04h 213d 0/21 upstream: reported on 2020/08/05 16:09
linux-4.19 KASAN: wild-memory-access Write in lock_sock_nested 2 37d 106d 0/1 upstream: reported on 2020/11/20 18:06
linux-4.14 general protection fault in lock_sock_nested 3 35d 156d 0/1 upstream: reported on 2020/10/01 19:05
upstream KASAN: slab-out-of-bounds Read in lock_sock_nested syz unreliable 15 9d12h 207d 0/21 upstream: reported syz repro on 2020/08/11 16:59
linux-4.19 KASAN: slab-out-of-bounds Read in lock_sock_nested 3 9d07h 114d 0/1 upstream: reported on 2020/11/12 16:53
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/01 21:45 10m anant.thazhemadam@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git a07e3324538a989b7cdbf2c679be6a7f9df2544f report log
2020/09/01 21:34 10m anant.thazhemadam@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log

Sample crash report:

Crashes (1156):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-this-kasan-gce 2021/02/26 05:28 net 8f1c0fd2 76f7fc95 .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/07 15:29 net 225353c0 2ce644fc .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/04 06:42 net a4dc7eee 624dad51 .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/01 23:47 net eb4e8fac e6b95f32 .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/25 23:46 net-next d310ec03 76f7fc95 .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/14 10:08 net-next c4762993 98682e5e .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/07 20:10 net-next badc6ac3 2ce644fc .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/04 05:19 net-next 32d1bbb1 624dad51 .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/01 22:27 net-next 14e8e0f6 e6b95f32 .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/01/31 11:49 net-next 14e8e0f6 fc9fd31e .config log report syz C KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2020/08/15 14:51 upstream b923f124 424dd8e7 .config log report syz C
ci-upstream-kasan-gce-smack-root 2019/07/27 09:44 upstream 3ea54d9b c85e1c5b .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/02/16 04:48 upstream f40ddce8 98682e5e .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/01/31 16:15 upstream 6642d600 fc9fd31e .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/01/18 22:18 upstream 19c329f6 63631df1 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/14 11:47 net 57baf8cc 98682e5e .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/09 15:52 net 6bbc088d 2bd9619f .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/01/31 17:41 net eb4e8fac fc9fd31e .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/01/30 16:55 net 5399d522 fc9fd31e .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/01/27 15:26 net b491e6a7 a0ebf917 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/01/25 17:01 net 344db93a 52e37319 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/01/21 11:12 net 75439bc4 d4f4eca5 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/01/19 00:46 net 79267ae2 63631df1 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/09 17:41 net-next 5ea3c72c 2bd9619f .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/01/31 18:19 net-next 14e8e0f6 fc9fd31e .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/01/27 17:18 net-next 6626a026 a0ebf917 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/01/25 15:21 net-next a61e4b60 52e37319 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/01/21 08:46 net-next 0fe2f273 d4f4eca5 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/01/19 00:09 net-next 220723dc 63631df1 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/01/18 22:05 net-next 220723dc 63631df1 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2020/12/29 09:11 upstream dea8dcf2 8259d56c .config log report syz
ci-upstream-kasan-gce-root 2020/12/28 21:18 upstream 5c8fe583 8259d56c .config log report syz
ci-upstream-kasan-gce-selinux-root 2020/12/21 09:07 upstream 6a447b0e 04201c06 .config log report syz
ci-upstream-net-this-kasan-gce 2021/01/14 00:04 net c8a8ead0 a945f0a3 .config log report syz
ci-upstream-net-this-kasan-gce 2021/01/10 18:45 net f97844f9 2c1f2513 .config log report syz
ci-upstream-net-this-kasan-gce 2021/01/07 15:02 net 1f685e6a c104d4a3 .config log report syz
ci-upstream-net-this-kasan-gce 2021/01/05 07:10 net 862aecbd 2a28ff1f .config log report syz
ci-upstream-net-this-kasan-gce 2020/12/25 04:22 net 1f45dc22 c2c1d1dd .config log report syz
ci-upstream-net-kasan-gce 2021/01/13 22:34 net-next f50e2f9f a945f0a3 .config log report syz
ci-upstream-net-kasan-gce 2021/01/07 13:02 net-next 8209f5bc c104d4a3 .config log report syz
ci-upstream-net-kasan-gce 2021/01/05 07:30 net-next 3db1a3fa 2a28ff1f .config log report syz
ci-upstream-net-kasan-gce 2020/12/25 04:27 net-next 3db1a3fa c2c1d1dd .config log report syz
ci-upstream-linux-next-kasan-gce-root 2019/02/15 05:24 linux-next b3418f8b 76dd003f .config log report syz
ci-upstream-kasan-gce-selinux-root 2021/03/05 07:10 upstream cee407c5 9d751681 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/03/04 15:50 upstream f69d02e3 d7e4e604 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream 2021/03/02 21:01 upstream 7a7fd0de e5b64d68 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/03/01 14:52 upstream fe07bfda 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream 2021/02/28 23:11 upstream cd278456 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream 2021/02/28 02:55 upstream 5695e516 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream 2021/02/27 23:07 upstream 5695e516 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/02/26 14:54 upstream 2c87f7a3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/02/26 10:16 upstream 2c87f7a3 76f7fc95 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/02/25 00:28 upstream 719bbd4a fcc6d71b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/02/24 06:04 upstream c03c21ba fcc6d71b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/02/23 18:28 upstream 3b9cdafb fcc6d71b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/02/23 16:56 upstream 3b9cdafb fcc6d71b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/02/22 19:28 upstream a99163e9 c26fb06b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/02/18 07:02 upstream f40ddce8 14052202 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/03/05 11:52 upstream 280d542f 9d751681 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/03/05 10:50 upstream 280d542f 9d751681 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/03/03 04:56 upstream f69d02e3 e5b64d68 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/03/02 08:43 upstream 7a7fd0de 92ead296 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/02/26 12:20 upstream 2c87f7a3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/03/05 16:52 net ad5d07f4 9d751681 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/03/05 01:42 net d93ef301 9d751681 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/03/02 15:31 net 8811f4a9 92ead296 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/03/01 21:51 net 73f476aa 183afb6c .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/03/01 17:59 net 447621e3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/03/01 04:47 net 447621e3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/03/01 01:18 net 447621e3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/28 22:39 net 447621e3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/28 18:32 net eee7ede6 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/28 12:20 net eee7ede6 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/27 15:01 net eee7ede6 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/27 12:51 net eee7ede6 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/27 10:22 net eee7ede6 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/27 05:22 net eee7ede6 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/27 03:58 net 2c87f7a3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/26 23:41 net 2c87f7a3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/02/26 15:32 net 2c87f7a3 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/07 01:17 net-next d310ec03 e4b4d570 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/06 22:56 net-next d310ec03 e4b4d570 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/06 21:36 net-next d310ec03 e4b4d570 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/06 18:35 net-next d310ec03 e4b4d570 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/05 04:35 net-next d310ec03 9d751681 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/04 23:26 net-next d310ec03 9d751681 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/03 16:53 net-next d310ec03 06ed56cd .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/03 07:28 net-next d310ec03 e5b64d68 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/02 11:39 net-next d310ec03 92ead296 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/02 06:00 net-next d310ec03 183afb6c .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/03/02 03:56 net-next d310ec03 183afb6c .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/27 17:20 net-next d310ec03 4c37c133 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/25 19:51 net-next d310ec03 76f7fc95 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/25 18:40 net-next d310ec03 76f7fc95 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/24 23:10 net-next d310ec03 fcc6d71b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/02/24 18:58 net-next d310ec03 fcc6d71b .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/03/02 23:35 linux-next 92f791eb e5b64d68 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2019/01/01 20:21 upstream e1ef035d 3d85f48c .config log report
ci-upstream-net-this-kasan-gce 2021/01/17 07:21 net 66c55602 65a7a854 .config log report info