syzbot


KASAN: use-after-free Read in netlbl_catmap_walk
Status: upstream: reported C repro on 2021/08/25 17:21
Reported-by: syzbot+3f91de0b813cc3d19a80@syzkaller.appspotmail.com
Fix commit: 0817534ff9ea smackfs: Fix use-after-free in netlbl_catmap_walk()
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64 ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 98d, last: 98d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: KASAN: use-after-free Read in _netlbl_catmap_getnode (log)
Repro: C syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2021/09/03 03:34 36m pawan.kumar.gupta@linux.intel.com https://github.com/pa1gupta/linux.git smack OK
2021/09/03 01:03 45m pawan.kumar.gupta@linux.intel.com git://github.com/pa1gupta/linux.git smack OK

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/08/25 14:11 upstream 6e764bcd1cf7 b599f2fc .config log report syz C KASAN: use-after-free Read in netlbl_catmap_walk