syzbot


KASAN: use-after-free Read in rpc_net_ns
Status: fixed on 2020/07/17 17:58
Reported-by: syzbot+22b5ef302c7c40d94ea8@syzkaller.appspotmail.com
Fix commit: 31e9a7f35352 SUNRPC: fix use-after-free in rpc_free_client_work()
First crash: 580d, last: 570d

Cause bisection: introduced by (bisect log) :
commit 7c4310ff56422ea43418305d22bbc5fe19150ec4
Author: NeilBrown <neilb@suse.de>
Date: Fri Apr 3 03:33:41 2020 +0000

  SUNRPC: defer slow parts of rpc_free_client() to a workqueue.

Crash: KASAN: use-after-free Read in rpc_net_ns (log)
Repro: syz .config

Sample crash report:

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2020/05/06 05:16 upstream dc56c5acd850 35b8eb30 .config log report syz
ci-upstream-kasan-gce-selinux-root 2020/05/03 10:16 upstream f66ed1ebbfde 5457883a .config log report syz
ci-upstream-kasan-gce-root 2020/05/13 09:31 upstream 24085f70a6e1 a44eb8f7 .config log report
ci-upstream-kasan-gce-smack-root 2020/05/12 20:12 upstream 24085f70a6e1 160c7698 .config log report
ci-upstream-kasan-gce-smack-root 2020/05/11 09:52 upstream 2ef96a5bb12b f8f57555 .config log report
ci-upstream-kasan-gce-smack-root 2020/05/10 10:35 upstream 1d3962ae3b3d 8742a2b9 .config log report
ci-upstream-kasan-gce-smack-root 2020/05/08 15:25 upstream 79dede78c057 2b98fdbc .config log report
ci-upstream-kasan-gce-root 2020/05/06 02:48 upstream dc56c5acd850 35b8eb30 .config log report
ci-upstream-kasan-gce-selinux-root 2020/05/05 13:42 upstream 47cf1b422e60 4b76dd25 .config log report
ci-upstream-kasan-gce-selinux-root 2020/05/03 09:26 upstream f66ed1ebbfde 5457883a .config log report