syzbot

 sign-in | mailing list | source | docs
🐞 Open [979] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12474] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KASAN: null-ptr-deref Read in llcp_sock_getname

Status: closed as invalid on 2021/12/14 20:22
First crash: 1651d, last: 990d
Cause bisection: introduced by (bisect log) :
commit a0c2dc1fe63e2869b74c1c7f6a81d1745c8a695d
Author: Eric Dumazet <edumazet@google.com>
Date: Fri Oct 4 18:08:34 2019 +0000

  nfc: fix memory leak in llcp_sock_bind()

Crash: KASAN: null-ptr-deref Read in llcp_sock_getname (log)
Repro: C syz .config
  
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: null-ptr-deref Read in llcp_sock_getname C 37 1072d 1632d 1/1 fixed on 2021/06/10 12:07
linux-4.14 KASAN: null-ptr-deref Read in llcp_sock_getname C error 58 798d 1648d 0/1 upstream: reported C repro on 2019/10/14 09:43
▶ ▼ Fix bisection attempts (4)
Created Duration User Patch Repo Result
2021/09/02 21:35 8h14m bisect fix upstream error job log (0)
2021/08/02 16:48 24m bisect fix upstream job log (0) log
2021/04/25 22:03 19m bisect fix upstream job log (0) log
2020/10/23 21:57 20m bisect fix upstream job log (0) log

Sample crash report:
==================================================================
BUG: KASAN: null-ptr-deref in memcpy include/linux/string.h:380 [inline]
BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x358/0x460 net/nfc/llcp_sock.c:519
Read of size 43 at addr 0000000000000000 by task syz-executor212/9788

CPU: 0 PID: 9788 Comm: syz-executor212 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x197/0x210 lib/dump_stack.c:118
 __kasan_report.cold+0x5/0x41 mm/kasan/report.c:510
 kasan_report+0x12/0x20 mm/kasan/common.c:639
 check_memory_region_inline mm/kasan/generic.c:185 [inline]
 check_memory_region+0x134/0x1a0 mm/kasan/generic.c:192
 memcpy+0x24/0x50 mm/kasan/common.c:125
 memcpy include/linux/string.h:380 [inline]
 llcp_sock_getname+0x358/0x460 net/nfc/llcp_sock.c:519
 __sys_getpeername+0x12b/0x290 net/socket.c:1933
 __do_sys_getpeername net/socket.c:1946 [inline]
 __se_sys_getpeername net/socket.c:1943 [inline]
 __x64_sys_getpeername+0x73/0xb0 net/socket.c:1943
 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x440349
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fffb8bb6758 EFLAGS: 00000246 ORIG_RAX: 0000000000000034
RAX: ffffffffffffffda RBX: fe7f62c7329d9aaa RCX: 0000000000440349
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 65e500001d7ef6cc R08: 00007fffb8bb68c8 R09: 00007fffb8bb68c8
R10: 00007fffb8bb68c8 R11: 0000000000000246 R12: 211e267fffffffff
R13: ffff000000004d02 R14: aac8030fa4d62b9c R15: d303a55487e71188
==================================================================

Crashes (242):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/09 22:06 upstream e42617b825f8 b31eda3d .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/12/09 16:01 upstream e42617b825f8 b31eda3d .config console log report syz C ci-upstream-kasan-gce-root
2019/12/01 03:37 upstream 32ef9553635a a76bf83f .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/11/30 13:26 upstream 81b6b96475ac 3a75be00 .config console log report syz C ci-upstream-kasan-gce-root
2019/10/31 11:28 upstream e472c64aa4fa a41ca8fa .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/10/31 11:18 upstream e472c64aa4fa a41ca8fa .config console log report syz C ci-upstream-kasan-gce-root
2019/10/23 21:50 upstream 13b86bc4cd64 b602d64b .config console log report syz C ci-upstream-kasan-gce-root
2019/10/22 21:30 upstream 3b7c59a1950c 5681358a .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/10/22 18:45 upstream 3b7c59a1950c 5681358a .config console log report syz C ci-upstream-kasan-gce-root
2019/10/21 23:06 upstream 7d194c2100ad b24d2b8a .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/10/21 06:30 upstream 4fe34d61a3a9 8c88c9c1 .config console log report syz C ci-upstream-kasan-gce-root
2019/10/19 19:59 upstream 998d75510e37 8c88c9c1 .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/10/19 14:50 upstream b9959c7a347d 8c88c9c1 .config console log report syz C ci-upstream-kasan-gce-root
2019/12/08 20:31 net-old 0fc75219fe9a 1508f453 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/11/30 05:58 net-old 2745aea6750f 3a75be00 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/10/31 09:25 net-old b7265a0df82c a41ca8fa .config console log report syz C ci-upstream-net-this-kasan-gce
2019/10/19 06:39 net-old 38b4fe320119 8c88c9c1 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/10/17 05:24 net-old bd74708cd979 8c88c9c1 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/10/14 12:29 net-old 33902b4a4227 a6aef847 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/10/12 04:13 net-old 82ad862115c2 426631dd .config console log report syz C ci-upstream-net-this-kasan-gce
2019/12/08 20:31 net-next-old 596cf45cbf6e 1508f453 .config console log report syz C ci-upstream-net-kasan-gce
2019/11/30 03:58 net-next-old 81b6b96475ac 3a75be00 .config console log report syz C ci-upstream-net-kasan-gce
2019/10/31 06:35 net-next-old c4917bfc3a6f a41ca8fa .config console log report syz C ci-upstream-net-kasan-gce
2019/10/19 06:39 net-next-old ebcd670d05d5 8c88c9c1 .config console log report syz C ci-upstream-net-kasan-gce
2019/10/17 05:23 net-next-old d9f45ab9e671 8c88c9c1 .config console log report syz C ci-upstream-net-kasan-gce
2019/10/12 04:31 net-next-old 41441d85b671 426631dd .config console log report syz C ci-upstream-net-kasan-gce
2019/12/22 00:33 linux-next 7ddd09fc4b74 bc586918 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2021/05/30 21:26 upstream b90e90f40b4f 325a8dab .config console log report info ci-upstream-kasan-gce-smack-root KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/29 06:52 upstream 5ff2756afde0 858ea628 .config console log report info ci-upstream-kasan-gce-smack-root KASAN: null-ptr-deref Read in llcp_sock_getname
2021/02/16 01:16 upstream f40ddce88593 98682e5e .config console log report info ci-upstream-kasan-gce-selinux-root KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/11 07:00 net-old ddb6e00f8413 ca873091 .config console log report info ci-upstream-net-this-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/08 04:46 net-old 55bc1af3d911 bc5434be .config console log report info ci-upstream-net-this-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/03/02 17:59 net-old 8811f4a9836e 92ead296 .config console log report info ci-upstream-net-this-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/02/20 18:52 net-old 3af409ca278d 3e5ed8b4 .config console log report info ci-upstream-net-this-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/01/31 18:47 net-old eb4e8fac00d1 fc9fd31e .config console log report info ci-upstream-net-this-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/06/06 05:32 net-next-old 1a42624aecba 500c2339 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/06/04 09:11 net-next-old b596ce68fd4a 0740de69 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/23 16:15 net-next-old f5120f599880 3c7fef33 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/23 09:35 net-next-old f5120f599880 3c7fef33 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/20 15:43 net-next-old a49e72b3bda7 c560a65d .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/18 05:52 net-next-old 58fee5fc8365 a343ba6b .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/17 05:33 net-next-old 77091933e453 f54a5c09 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/14 15:39 net-next-old ea89c862f01e 8bdd5343 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/11 20:01 net-next-old 3913ba732e97 b3c3bb8e .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/03/26 19:34 net-next-old 6c996e19949b a8529b82 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/03/16 16:26 net-next-old 0f13b5e6bf28 fdb2bb2c .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/02/28 16:17 net-next-old d310ec03a34e 4c37c133 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/02/09 02:57 net-next-old 8e57158683c5 2bd9619f .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/02/01 07:31 net-next-old 14e8e0f60088 fc9fd31e .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/01/29 17:39 net-next-old 462512824f90 6593fd32 .config console log report info ci-upstream-net-kasan-gce KASAN: null-ptr-deref Read in llcp_sock_getname
2021/07/03 15:22 linux-next a1f92694393a 55aa55c2 .config console log report info ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in llcp_sock_getname
2021/07/01 12:40 linux-next a1f92694393a 658ebc66 .config console log report info ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in llcp_sock_getname
2021/05/26 19:29 linux-next a1f92694393a 54f0bcf1 .config console log report info ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in llcp_sock_getname
2021/01/07 17:54 upstream 71c061d24438 c104d4a3 .config console log report info ci-upstream-kasan-gce-root
2020/08/31 02:28 upstream dcc5c6f013d8 d5a3ae1f .config console log report ci-upstream-kasan-gce-smack-root
2020/12/26 11:56 net-old 1f45dc220667 821e0b09 .config console log report info ci-upstream-net-this-kasan-gce
2020/12/18 20:26 net-old d64c6f96ba86 04201c06 .config console log report info ci-upstream-net-this-kasan-gce
2020/12/09 05:44 net-old 72d05c00d7ec 40cc414d .config console log report info ci-upstream-net-this-kasan-gce
2020/09/03 20:39 net-old 8b4a11c67da5 abf9ba4f .config console log report ci-upstream-net-this-kasan-gce
2020/09/02 01:52 net-old a609d0259183 abf9ba4f .config console log report ci-upstream-net-this-kasan-gce
2020/08/24 13:24 net-old cb95712138ec 67b599d1 .config console log report ci-upstream-net-this-kasan-gce
2021/01/17 07:24 net-next-old c761b2df9df0 65a7a854 .config console log report info ci-upstream-net-kasan-gce
2020/12/28 12:06 net-next-old 3db1a3fa9880 2242f77f .config console log report info ci-upstream-net-kasan-gce
2020/12/28 07:12 net-next-old 3db1a3fa9880 2242f77f .config console log report info ci-upstream-net-kasan-gce
2020/12/09 19:49 net-next-old afae3cc2da10 c090b4da .config console log report info ci-upstream-net-kasan-gce
2020/12/06 12:56 net-next-old 00649542f1ba f12ba0c5 .config console log report info ci-upstream-net-kasan-gce
2020/11/28 09:46 net-next-old fb3158ea612c 486f93ef .config console log report info ci-upstream-net-kasan-gce
2020/11/25 17:57 net-next-old 470dfd808ac4 1a1f4bd8 .config console log report info ci-upstream-net-kasan-gce
2020/11/24 14:56 net-next-old 5112cf59d76d 1ab681a4 .config console log report info ci-upstream-net-kasan-gce
2020/11/23 22:27 net-next-old 8e1e33ffa696 878fb17a .config console log report info ci-upstream-net-kasan-gce
2020/11/18 15:13 net-next-old 6997faa997ba 09323409 .config console log report info ci-upstream-net-kasan-gce
2020/11/10 03:10 net-next-old a3ce2b109a59 64069d48 .config console log report info ci-upstream-net-kasan-gce
2020/09/23 21:57 net-next-old 748d1c8a425e 287cd75a .config console log report info ci-upstream-net-kasan-gce
2020/09/02 14:11 net-next-old dc1a9bf2c816 abf9ba4f .config console log report ci-upstream-net-kasan-gce
2020/09/02 08:12 net-next-old dc1a9bf2c816 abf9ba4f .config console log report ci-upstream-net-kasan-gce
2020/09/01 12:08 net-next-old c30a3c957c88 d5a3ae1f .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.