syzbot


KASAN: use-after-free Read in cipso_v4_genopt
Status: upstream: reported C repro on 2021/03/02 11:01
Reported-by: syzbot+9ec037722d2603a9f52e@syzkaller.appspotmail.com
Fix commit: ad5d07f4a9cd cipso,calipso: resolve a number of problems with the DOI refcounts 1165affd4848 net: mac802154: Fix general protection fault
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce], missing on: [ci-qemu2-arm32 ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-linux-next-kasan-gce-root ci2-upstream-usb]
First crash: 232d, last: 227d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: KASAN: use-after-free Read in cipso_v4_genopt (log)
Repro: C syz .config
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
KASAN: use-after-free Write in cipso_v4_doi_putdef 2 229d 227d 0/22 closed as dup on 2021/03/05 07:49
Patch testing requests:
Created Duration User Patch Repo Result
2021/03/04 11:31 13m paskripkin@gmail.com https://linux.googlesource.com/linux/kernel/git/torvalds/linux refs/changes/19/8819/1 report log

Sample crash report:

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/03/02 19:24 upstream 7a7fd0de4a98 92ead296 .config log report syz C KASAN: use-after-free Read in cipso_v4_genopt
ci-upstream-kasan-gce-smack-root 2021/03/03 19:25 upstream f69d02e37a85 06ed56cd .config log report info KASAN: use-after-free Read in cipso_v4_genopt
ci-upstream-kasan-gce-smack-root 2021/03/02 14:30 upstream 7a7fd0de4a98 92ead296 .config log report info KASAN: use-after-free Read in cipso_v4_genopt
ci-upstream-kasan-gce-smack-root 2021/02/27 22:34 upstream 5695e5161974 4c37c133 .config log report info KASAN: use-after-free Read in cipso_v4_genopt
ci-upstream-kasan-gce-smack-root 2021/02/26 10:56 upstream 2c87f7a38f93 76f7fc95 .config log report info KASAN: use-after-free Read in cipso_v4_genopt