KASAN: use-after-free Read in __fput (3)
Status: upstream: reported syz repro on 2020/08/31 23:08
First crash: 515d, last: 515d

Cause bisection: introduced by (bisect log) :
commit a9ed4a6560b8562b7e2e2bed9527e88001f7b682
Author: Marc Zyngier <>
Date: Wed Aug 19 16:12:17 2020 +0000

  epoll: Keep a reference on files added to the check list

Crash: kernel BUG at fs/inode.c:LINE! (log)
Repro: syz .config

Fix bisection: fixed by (bisect log) [no-op commit]:
commit 4b04e0decd2518e54e3f371abf3d883b3198663d
Author: Sumanth Korikkar <>
Date: Mon Aug 17 07:27:54 2020 +0000

  perf test: Fix basic bpf filtering test

similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in __fput 23 1510d 1544d 4/22 fixed on 2018/02/13 04:59
upstream KASAN: use-after-free Read in __fput (2) 1 1384d 1376d 0/22 auto-closed as invalid on 2019/02/22 10:26
linux-4.19 KASAN: use-after-free Read in __fput syz done 1 509d 509d 1/1 fixed on 2020/10/03 03:32
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/02 05:12 11m master report log

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/08/27 23:04 upstream 15bc20c6af4c 816e0689 .config log report syz