syzbot


KASAN: use-after-free Read in tipc_recvmsg
Status: upstream: reported C repro on 2021/07/18 17:15
Reported-by: syzbot+e6741b97d5552f97c24d@syzkaller.appspotmail.com
Fix commit: cc19862ffe45 tipc: fix an use-after-free issue in tipc_recvmsg
Patched on: [ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-riscv64]
First crash: 72d, last: 63d

Cause bisection: introduced by (bisect log) :
commit 67a3156453859ceb40dc4448b7a6a99ea0ad27c7
Author: Rob Herring <robh@kernel.org>
Date: Thu May 27 19:45:47 2021 +0000

  of: Merge of_address_to_resource() and of_pci_address_to_resource() implementations

Crash: WARNING: ODEBUG bug in netdev_run_todo (log)
Repro: C syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2021/07/23 16:49 18m paskripkin@gmail.com patch linux-next OK
2021/07/23 16:36 0m paskripkin@gmail.com patch upstream error

Sample crash report:

Crashes (2198):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-kasan-gce 2021/07/17 06:24 net-next ab0441b4a920 f115ae98 .config log report syz C KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 20:57 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 19:42 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 17:55 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 17:49 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 16:25 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 15:23 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 15:05 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 13:58 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 13:01 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 11:41 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 08:52 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 08:41 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 06:37 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 06:02 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 04:55 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 04:37 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/25 03:35 net-next c5381154393d 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-net-kasan-gce 2021/07/17 04:33 net-next ab0441b4a920 f115ae98 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 21:26 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 19:33 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 19:25 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 18:06 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 17:44 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 16:29 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 15:27 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 14:17 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 13:16 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 12:28 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 12:20 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 12:16 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 11:00 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 09:47 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 09:25 linux-next 90d856e71443 fd511809 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 04:49 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 03:47 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 02:00 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/26 00:49 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/25 23:18 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/25 22:22 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/25 18:48 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/25 16:46 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/25 11:57 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/25 10:39 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/25 10:04 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/25 07:39 linux-next 90d856e71443 4d1b57d4 .config log report info KASAN: use-after-free Read in tipc_recvmsg
ci-upstream-linux-next-kasan-gce-root 2021/07/22 09:55 linux-next 7468cbf5c917 29c3f20f .config log report info KFENCE: use-after-free in tipc_recvmsg