syzbot


KASAN: use-after-free Read in ext4_xattr_set_entry
Status: fixed on 2020/03/30 09:03
Reported-by: syzbot+1634adac0cb6d2d930ef@syzkaller.appspotmail.com
Fix commit: cb1702c403ad ext4: validate the debug_want_extra_isize mount option at parse time
First crash: 814d, last: 566d

Fix bisection: fixed by (bisect log) :
commit cb1702c403ad392a9ae6e090702a17cca98a38ca
Author: Theodore Ts'o <tytso@mit.edu>
Date: Sun Dec 15 06:09:03 2019 +0000

  ext4: validate the debug_want_extra_isize mount option at parse time

similar bugs (11):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (3) C 1 23d 323d 0/1 upstream: reported C repro on 2020/10/28 15:08
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 6 687d 742d 0/1 auto-closed as invalid on 2020/02/28 13:35
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 1 543d 543d 0/1 auto-closed as invalid on 2020/07/21 03:20
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry (2) C 7 4d18h 463d 0/1 upstream: reported C repro on 2020/06/11 12:57
upstream KASAN: use-after-free Read in ext4_xattr_set_entry 1 1147d 1147d 0/22 closed as invalid on 2018/07/29 11:55
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry 4 994d 887d 0/1 auto-closed as invalid on 2019/06/26 01:15
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (3) 4 439d 557d 0/22 auto-closed as invalid on 2020/11/02 08:32
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (4) C error 4 12d 230d 0/22 upstream: reported C repro on 2021/01/30 11:05
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (2) C done 19 640d 1049d 16/22 fixed on 2020/02/14 01:19
android-54 KASAN: use-after-free Read in ext4_xattr_set_entry 6 406d 587d 0/1 auto-closed as invalid on 2020/12/04 21:44
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry C done 9 594d 686d 1/1 fixed on 2020/03/01 21:06

Sample crash report:

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-19 2019/12/13 12:48 linux-4.19.y 312017a460d5 2a752b7c .config log report syz
ci2-linux-4-19 2020/02/28 23:27 linux-4.19.y a083db76118d c88c7b75 .config log report
ci2-linux-4-19 2020/02/04 20:45 linux-4.19.y 32ee7492f104 93e5e335 .config log report
ci2-linux-4-19 2020/01/19 02:28 linux-4.19.y dc4ba5be1bab bc8bc756 .config log report
ci2-linux-4-19 2019/12/23 16:08 linux-4.19.y 672481c2deff be5c2c81 .config log report
ci2-linux-4-19 2019/12/09 05:24 linux-4.19.y fb683b5e3f53 1508f453 .config log report
ci2-linux-4-19 2019/12/05 20:13 linux-4.19.y fb683b5e3f53 9fd5a512 .config log report
ci2-linux-4-19 2019/10/24 16:37 linux-4.19.y c3038e718a19 d01bb02a .config log report
ci2-linux-4-19 2019/07/03 06:09 linux-4.19.y aec3002d07fd 55565fa0 .config log report
ci2-linux-4-19 2019/06/25 19:29 linux-4.19.y aec3002d07fd 0a8d1a96 .config log report