syzbot


KASAN: use-after-free Read in fscache_alloc_cookie
Status: upstream: reported syz repro on 2020/09/25 08:57
Reported-by: syzbot+2d0585e5efcd43d113c2@syzkaller.appspotmail.com
Fix commit: 1d0e850a afs: Fix cell removal
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 29d, last: 29d

Cause bisection: introduced by (bisect log) :
commit c99c2171fc61476afac0dfb59fb2c447a01fb1e0
Author: David Howells <dhowells@redhat.com>
Date: Thu Nov 1 23:07:27 2018 +0000

  afs: Use fs_context to pass parameters over automount

Crash: KASAN: use-after-free Write in afs_manage_cell (log)
Repro: syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2020/10/13 20:13 13m dhowells@redhat.com git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git f8eb8d1c6a853f617ca9ee233bb2d230401c5bdc report log

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-kasan-gce-root 2020/09/25 03:45 upstream 171d4ff7 54289b08 .config log report syz dhowells@redhat.com, linux-cachefs@redhat.com, linux-kernel@vger.kernel.org