syzbot


KASAN: invalid-free in packet_set_ring
Status: internal: reported C repro on 2021/12/12 10:38
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: ec6af094ea28 net/packet: rx_owner_map depends on pg_vec
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64 ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 43d, last: 43d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: KASAN: invalid-free in packet_set_ring (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: invalid-free in packet_set_ring C error 1 43d 43d 0/1 upstream: reported C repro on 2021/12/12 11:35
android-54 KASAN: invalid-free in packet_set_ring C 1 43d 43d 0/1 upstream: reported C repro on 2021/12/12 11:34

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2021/12/12 11:11 upstream a763d5a5abd6 49ca1f59 .config log report syz C KASAN: invalid-free in packet_set_ring
ci-upstream-net-this-kasan-gce 2021/12/12 11:41 net ee60e626d536 49ca1f59 .config log report syz C KASAN: invalid-free in packet_set_ring
ci-upstream-net-kasan-gce 2021/12/12 16:42 net-next 8c8b7aa7fb0c 49ca1f59 .config log report syz C KASAN: invalid-free in packet_set_ring
ci-upstream-kasan-gce-selinux-root 2021/12/12 10:37 upstream a763d5a5abd6 49ca1f59 .config log report info KASAN: invalid-free in packet_set_ring