syzbot


WARNING: refcount bug in crypto_mod_get
Status: fixed on 2020/07/17 17:58
Reported-by: syzbot+afb77bdbaca0cda9e991@syzkaller.appspotmail.com
Fix commit: 6603523b crypto: api - Fix use-after-free and race in crypto_spawn_alg
First crash: 106d, last: 91d

Cause bisection: introduced by (bisect log):

commit b877ad1a135c802d4529a72aa82faf46ef5db097
Author: Ard Biesheuvel <ardb@kernel.org>
Date: Tue Nov 5 14:01:04 2019 +0000

  crypto: omap-aes-gcm - check length of assocdata in RFC4106 mode

Crash: BUG: corrupted list in crypto_drop_spawn (log)
Repro: C syz .config

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-root 2020/04/27 16:54 upstream 6a8b55ed 0ce7569e .config log report syz C davem@davemloft.net, herbert@gondor.apana.org.au, linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org
ci-qemu-upstream 2020/05/13 00:24 upstream 24085f70 a44eb8f7 .config log report davem@davemloft.net, herbert@gondor.apana.org.au, linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org