syzbot


KASAN: use-after-free Read in remove_wait_queue
Status: fixed on 2018/03/05 12:02
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 72766d75 ANDROID: binder: synchronize_rcu() when using POLLFREE.
First crash: 643d, last: 633d
similar bugs (3):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: use-after-free Read in remove_wait_queue (2) C 4 616d 626d 6/14 fixed on 2018/06/07 13:52
linux-4.14 KASAN: use-after-free Read in remove_wait_queue 1 82d 82d 0/1 upstream: reported on 2019/08/26 16:10
upstream KASAN: use-after-free Read in remove_wait_queue C 7 633d 642d 4/14 fixed on 2018/02/26 20:04

Sample crash report:

Crashes (6):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-android-49-kasan-gce 2018/02/21 14:24 android-4.9 cdfc8df1 04cbdbd1 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-android-49-kasan-gce-386 2018/02/21 14:39 android-4.9 cdfc8df1 04cbdbd1 .config log report syz linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-android-49-kasan-gce 2018/02/11 16:56 android-4.9 8a174b47 4e9b726d .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-android-49-kasan-gce 2018/02/21 14:01 android-4.9 cdfc8df1 04cbdbd1 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-android-49-kasan-gce 2018/02/18 07:14 android-4.9 cdfc8df1 833f78c7 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-android-49-kasan-gce 2018/02/14 18:19 android-4.9 1a938310 17061fc0 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk