syzbot


KASAN: use-after-free Write in get_ucounts
Status: upstream: reported syz repro on 2021/07/08 07:56
Reported-by: syzbot+8c3af233123df0578a5c@syzkaller.appspotmail.com
Fix commit: ucounts: Fix race condition between alloc_ucounts and put_ucounts
Patched on: [], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 71d, last: 43d

Cause bisection: introduced by (bisect log) [no-op commit]:
commit b9fc8b4a591811546fec2dbef7e9f809362100c9
Author: Grant Seltzer <grantseltzer@gmail.com>
Date: Mon Feb 22 19:58:46 2021 +0000

  bpf: Add kernel/modules BTF presence checks to bpftool feature command

Crash: WARNING in kvm_wait (log)
Repro: syz .config

Fix bisection: fixed by (bisect log) :
commit 345daff2e994ee844d6a609c37f085695fbb4c4d
Author: Alexey Gladkov <legion@kernel.org>
Date: Tue Jul 27 15:24:18 2021 +0000

  ucounts: Fix race condition between alloc_ucounts and put_ucounts


Sample crash report:

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/08/04 01:12 upstream d5ad8ec3cfb5 6c236867 .config log report syz KASAN: use-after-free Write in get_ucounts
ci-upstream-kasan-gce-smack-root 2021/07/07 15:12 upstream 3dbdb38e2869 4846d5c1 .config log report syz KASAN: use-after-free Write in get_ucounts
ci-upstream-kasan-gce-smack-root 2021/08/04 22:30 upstream 251a1524293d b97d64c9 .config log report info KASAN: use-after-free Write in get_ucounts
ci-upstream-kasan-gce-smack-root 2021/08/03 20:45 upstream d5ad8ec3cfb5 6c236867 .config log report info KASAN: use-after-free Write in get_ucounts
ci-upstream-kasan-gce-smack-root 2021/07/31 22:49 upstream f3438b4c4e69 6c236867 .config log report info KASAN: use-after-free Write in get_ucounts
ci-upstream-kasan-gce-smack-root 2021/07/18 09:05 upstream 1d67c8d993ba f115ae98 .config log report info KASAN: use-after-free Write in get_ucounts
ci-upstream-kasan-gce-smack-root 2021/07/08 01:59 upstream 3dbdb38e2869 95793bce .config log report info KASAN: use-after-free Write in get_ucounts