syzbot


KASAN: use-after-free Read in lock_sock_nested
Status: upstream: reported C repro on 2019/01/02 10:41
Reported-by: syzbot+500c69d1e21d970e461b@syzkaller.appspotmail.com
First crash: 992d, last: 3h41m

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: inconsistent lock state in nr_find_socket (log)
Repro: syz .config

Fix bisection: fixed by (bisect log) :
commit a07e3324538a989b7cdbf2c679be6a7f9df2544f
Author: Thomas Bogendoerfer <tbogendoerfer@suse.de>
Date: Mon May 13 11:47:25 2019 +0000

  MIPS: kernel: only use i8253 clocksource with periodic clockevent

similar bugs (10):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in lock_sock_nested C 322 3d07h 786d 0/1 upstream: reported C repro on 2019/07/26 21:27
linux-4.14 KASAN: use-after-free Read in lock_sock_nested C inconclusive 318 47d 880d 0/1 upstream: reported C repro on 2019/04/24 06:28
android-44 KASAN: use-after-free Read in lock_sock_nested C 40 1122d 893d 0/2 public: reported C repro on 2019/04/11 08:44
android-49 KASAN: use-after-free Read in lock_sock_nested C 39 1124d 1317d 0/3 closed as invalid on 2019/03/07 05:41
upstream BUG: unable to handle kernel paging request in lock_sock_nested 41 1d21h 410d 0/22 upstream: reported on 2020/08/05 16:09
linux-4.19 KASAN: wild-memory-access Write in lock_sock_nested 2 234d 303d 0/1 auto-closed as invalid on 2021/05/28 14:35
linux-4.14 general protection fault in lock_sock_nested 4 135d 353d 0/1 auto-closed as invalid on 2021/09/04 19:35
linux-4.14 BUG: unable to handle kernel paging request in lock_sock_nested 4 128d 248d 0/1 auto-closed as invalid on 2021/09/11 11:51
upstream KASAN: slab-out-of-bounds Read in lock_sock_nested syz unreliable 22 28d 404d 0/22 upstream: reported syz repro on 2020/08/11 16:59
linux-4.19 KASAN: slab-out-of-bounds Read in lock_sock_nested 8 27d 311d 0/1 upstream: reported on 2020/11/12 16:53
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/01 21:45 10m anant.thazhemadam@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git a07e3324538a989b7cdbf2c679be6a7f9df2544f report log
2020/09/01 21:34 10m anant.thazhemadam@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log

Sample crash report:

Crashes (1739):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2020/08/15 14:51 upstream b923f1247b72 424dd8e7 .config log report syz C
ci-upstream-kasan-gce-smack-root 2019/07/27 09:44 upstream 3ea54d9b0d65 c85e1c5b .config log report syz C
ci-upstream-kasan-gce-root 2021/09/18 20:28 upstream 4357f03d6611 70b76c1d .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/09/18 16:38 upstream 4357f03d6611 70b76c1d .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/09/12 15:06 upstream 78e709522d2c 5ae8508a .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/09/11 14:19 upstream 926de8c4326c 5ae8508a .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/09/06 11:13 upstream 0319b848b155 d236a457 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/08/29 21:41 upstream 3f5ad13cb012 be2c130d .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/29 13:29 upstream 3f5ad13cb012 be2c130d .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/08/24 18:28 upstream d5ae8d7f85b7 b599f2fc .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/24 12:37 upstream d5ae8d7f85b7 b599f2fc .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/22 13:45 upstream 9ff50bf2f2ff b599f2fc .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/21 07:57 upstream 8ba9fbe1e4b8 b599f2fc .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/08/20 16:12 upstream f87d64319e6f b599f2fc .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/18 04:44 upstream 794c7931a242 a2fe1cb5 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/17 01:53 upstream a2824f19e606 33c26cb7 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/15 05:10 upstream ba31f97d43be 2489ab88 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/14 21:10 upstream dfa377c35d70 2489ab88 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/14 15:50 upstream dfa377c35d70 2489ab88 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/13 23:01 upstream f8e6dfc64f61 3fd2ea69 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/11 06:47 upstream 9a73fa375d58 6972b106 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/09 21:46 upstream 36a21d51725a 6972b106 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/09 17:38 upstream 36a21d51725a 6972b106 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/08 03:03 upstream c9194f32bfd9 6972b106 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/07 23:23 upstream c9194f32bfd9 6972b106 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/06 20:11 upstream 902e7f373fff f9e341e3 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/08/06 13:54 upstream 902e7f373fff f9e341e3 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/04 06:33 upstream d5ad8ec3cfb5 6c236867 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/01 17:28 upstream f3438b4c4e69 6c236867 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/07/29 10:01 upstream 4010a528219e 9a4781d4 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/09/06 21:23 net 57f780f1c433 6ca60148 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/09/02 03:22 net 57f780f1c433 7eb7e152 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/08/30 23:18 net 57f780f1c433 8f58a0ef .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/08/02 01:59 net c7d102232649 6c236867 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/07/27 13:05 net 92766c4628ea fd511809 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/02 05:52 net-next 29ce8f970107 7eb7e152 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/31 00:44 net-next 27c779437cbc 8f58a0ef .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/02 02:02 net-next 3e12361b6d23 6c236867 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/08/26 11:29 linux-next 7636510f976d b599f2fc .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/08/23 09:42 linux-next 86ed57fd8c93 b599f2fc .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/08/20 21:13 linux-next 86ed57fd8c93 b599f2fc .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/08/08 23:38 linux-next 7999516e20bd 6972b106 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/08/04 05:36 linux-next 8d4b477da1a8 6c236867 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/08/01 21:52 linux-next 8d4b477da1a8 6c236867 .config log report syz KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2019/02/15 05:24 linux-next b3418f8bddf4 76dd003f .config log report syz
ci-upstream-kasan-gce-smack-root 2021/09/20 05:36 upstream 20621d2f27a0 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/09/19 14:23 upstream d4d016caa4b8 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/09/19 06:10 upstream 93ff9f13be91 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/09/17 19:09 upstream ddf21bd8ab98 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/09/17 05:14 upstream bdb575f87217 5b989942 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/09/16 21:25 upstream ff1ffd71d5f0 aae492f2 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/09/16 12:27 upstream b7213ffa0e58 07e953c1 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/09/14 20:48 upstream 1619b69edce1 07e953c1 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/09/14 15:45 upstream d0ee23f9d78b 07e953c1 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/09/13 00:25 upstream f306b90c69ce 5ae8508a .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/09/07 23:59 upstream a2b28235335f 064c9eb7 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/09/02 13:47 upstream 4ac6d90867a4 15cea0a3 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/31 14:29 upstream b91db6a0b52e 8f58a0ef .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/31 12:29 upstream b91db6a0b52e 8f58a0ef .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/28 16:44 upstream 64b4fc45bea6 be2c130d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/27 09:07 upstream 77dd11439b86 b318694d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/25 22:37 upstream fe67f4dd8daa b599f2fc .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/24 01:18 upstream d5ae8d7f85b7 b599f2fc .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-root 2021/08/22 00:37 upstream fa54d366a6e4 b599f2fc .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2021/08/18 11:34 upstream 614cb2751d31 a2fe1cb5 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-smack-root 2021/08/17 16:21 upstream 794c7931a242 a2fe1cb5 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream 2021/06/11 14:41 upstream 06af8679449d 1ba81399 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-qemu-upstream-386 2021/08/03 21:26 upstream d5ad8ec3cfb5 6c236867 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/09/06 23:54 net 57f780f1c433 6ca60148 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/08/30 03:54 net 57f780f1c433 be2c130d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/08/18 17:29 net 1b80fec7b043 a2fe1cb5 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/08/16 13:36 net 19d1532a1876 33c26cb7 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-this-kasan-gce 2021/08/15 23:25 net 5f7735196390 2489ab88 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/20 02:37 net-next 9eb7b5e7cb50 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/19 20:46 net-next 9eb7b5e7cb50 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/19 11:18 net-next 983e59a27b92 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/18 10:50 net-next 0efcc3f20145 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/18 04:59 net-next 5ef8a0291513 70b76c1d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/17 13:46 net-next 561bed688bff 5b989942 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/16 20:06 net-next 52583c8d8b12 aae492f2 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/10 10:47 net-next 626bf91a292e 5ae8508a .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/09 04:34 net-next 626bf91a292e e2776ee4 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/08 16:07 net-next 626bf91a292e e2776ee4 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/07 03:48 net-next 27151f177827 6ca60148 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/06 03:37 net-next 29ce8f970107 d236a457 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/09/03 10:57 net-next 29ce8f970107 f62a5829 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/27 16:04 net-next 3aa7857fe1d7 b318694d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/27 12:06 net-next 3aa7857fe1d7 b318694d .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/25 00:40 net-next 3a62c333497b b599f2fc .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/22 09:57 net-next 9b60ac54ab7c b599f2fc .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/21 21:34 net-next 4af14dbaeae0 b599f2fc .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/21 17:05 net-next 4af14dbaeae0 b599f2fc .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/17 17:54 net-next 752be2976405 a2fe1cb5 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/17 07:32 net-next e3faa49bcecd 33c26cb7 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/17 04:24 net-next e3faa49bcecd 33c26cb7 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-net-kasan-gce 2021/08/16 21:38 net-next 849d2f83f52e 33c26cb7 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/09/06 17:24 linux-next c1b13fe76e95 6ca60148 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-linux-next-kasan-gce-root 2021/09/03 23:54 linux-next c1b13fe76e95 d236a457 .config log report info KASAN: use-after-free Read in lock_sock_nested
ci-upstream-kasan-gce-selinux-root 2019/01/01 20:21 upstream e1ef035d272e 3d85f48c .config log report
ci-upstream-net-this-kasan-gce 2021/01/17 07:21 net 66c556025d68 65a7a854 .config log report info