syzbot


KASAN: use-after-free Read in ext4_xattr_set_entry
Status: fixed on 2020/03/30 09:03
Reported-by: syzbot+1634adac0cb6d2d930ef@syzkaller.appspotmail.com
Fix commit: cb1702c4 ext4: validate the debug_want_extra_isize mount option at parse time
First crash: 279d, last: 31d

Fix bisection: fixed by (bisect log):

commit cb1702c403ad392a9ae6e090702a17cca98a38ca
Author: Theodore Ts'o <tytso@mit.edu>
Date: Sun Dec 15 06:09:03 2019 +0000

  ext4: validate the debug_want_extra_isize mount option at parse time

similar bugs (8):
Kernel Title Repro Bisected Count Last Reported Patched Status
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 6 151d 207d 0/1 auto-closed as invalid on 2020/02/28 13:35
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 1 7d23h 7d23h 0/1 upstream: reported on 2020/03/23 03:20
upstream KASAN: use-after-free Read in ext4_xattr_set_entry 1 612d 612d 0/17 closed as invalid on 2018/07/29 11:55
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry 4 459d 352d 0/1 auto-closed as invalid on 2019/06/26 01:15
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (3) 1 22d 21d 0/17 upstream: reported on 2020/03/09 05:43
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (2) C cause 19 105d 514d 16/17 fixed on 2020/02/14 01:19
android-54 KASAN: use-after-free Read in ext4_xattr_set_entry 2 49d 52d 0/1 upstream: reported on 2020/02/07 21:52
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry C fix 9 59d 151d 1/1 fixed on 2020/03/01 21:06

Sample crash report:

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-linux-4-19 2019/12/13 12:48 linux-4.19.y 312017a4 2a752b7c .config log report syz adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2020/02/28 23:27 linux-4.19.y a083db76 c88c7b75 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2020/02/04 20:45 linux-4.19.y 32ee7492 93e5e335 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2020/01/19 02:28 linux-4.19.y dc4ba5be bc8bc756 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2019/12/23 16:08 linux-4.19.y 672481c2 be5c2c81 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2019/12/09 05:24 linux-4.19.y fb683b5e 1508f453 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2019/12/05 20:13 linux-4.19.y fb683b5e 9fd5a512 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2019/10/24 16:37 linux-4.19.y c3038e71 d01bb02a .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2019/07/03 06:09 linux-4.19.y aec3002d 55565fa0 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-19 2019/06/25 19:29 linux-4.19.y aec3002d 0a8d1a96 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu