syzbot


KASAN: use-after-free Read in handle_userfault
Status: fixed on 2018/01/10 09:03
Reported-by: syzbot+998c483ca801a50e3ce5b63a845216588ada5e2a@syzkaller.appspotmail.com
Fix commit: 0cbb4b4f userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
First crash: 1066d, last: 956d
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: use-after-free Read in handle_userfault (3) 1 547d 547d 0/17 closed as invalid on 2019/02/12 06:42
upstream KASAN: use-after-free Read in handle_userfault (2) 1 609d 608d 0/17 closed as dup on 2019/01/07 09:45

Sample crash report:

Crashes (151):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce 2017/12/18 21:35 upstream 1291a0d5 1c4160ef .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/12/18 18:05 upstream 1291a0d5 1c4160ef .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/10/02 07:17 upstream 368f8998 c26ea367 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/12/18 20:15 upstream 1291a0d5 1c4160ef .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/12/18 18:06 upstream 1291a0d5 1c4160ef .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-next-kasan-gce 2017/09/11 07:00 linux-next a31cc455 449b6f15 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-next-kasan-gce 2017/09/11 06:53 linux-next a31cc455 449b6f15 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-mmots-kasan-gce 2017/09/11 06:48 mmots d95e159c 449b6f15 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/12/28 11:33 upstream 5f520fc3 7d240098 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/12/25 04:46 upstream 464e1d5f 73aba437 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/11/10 03:30 upstream 87df2617 e0a2b195 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/11/03 23:52 upstream 866ba84e e930d6f6 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/10/29 17:06 upstream 25a5d23b 80c74880 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/10/22 14:21 upstream b5ac3beb ab829b1b .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2017/09/16 08:13 upstream b38923a0 96b8e399 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/12/26 13:11 upstream 464e1d5f 73aba437 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/12/11 07:00 upstream 50c4c4e2 5ad0ce95 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/11/29 13:16 upstream 43570f03 34f2c233 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/11/28 19:33 upstream 43f462f1 ac93d7e1 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/11/28 18:49 upstream 43f462f1 ac93d7e1 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/11/28 09:52 upstream 4fbd8d19 ac93d7e1 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/11/27 16:57 upstream 4fbd8d19 ac93d7e1 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/11/24 11:34 net-next 1d3b78bb deb5f6ae .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/10/26 04:02 upstream f3415787 83d9c302 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/10/24 10:56 upstream 6cff0a11 92f543f0 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/10/15 04:26 upstream e7a36a6e c26ea367 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/10/12 05:30 upstream 56ae414e c26ea367 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2017/09/29 22:54 upstream 770b782f c26ea367 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-mmots-kasan-gce 2017/12/29 09:44 mmots 37759fa6 7d240098 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-mmots-kasan-gce 2017/12/24 21:38 mmots 37759fa6 73aba437 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-mmots-kasan-gce 2017/12/24 17:08 mmots 37759fa6 73aba437 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
skylake-linux-next-kasan-qemu 2017/11/02 23:08 linux-next fa8785e8 02b8363d .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-next-kasan-gce 2017/10/29 14:05 linux-next 36ef71ca e511d9f8 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
skylake-linux-next-kasan-qemu 2017/10/27 21:35 linux-next 36ef71ca e511d9f8 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-next-kasan-gce 2017/10/22 00:09 linux-next 36ef71ca e511d9f8 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-next-kasan-gce 2017/10/07 06:40 linux-next 1418b852 c26ea367 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-next-kasan-gce 2017/09/21 20:36 linux-next 43ec4ba6 c26ea367 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-next-kasan-gce 2017/09/20 18:27 linux-next 0b093a56 4e341009 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-mmots-kasan-gce 2017/09/17 18:21 mmots 720bbe53 c26ea367 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
skylake-linux-next-kasan-qemu 2017/09/15 00:17 linux-next 31fc38c4 96b8e399 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
skylake-linux-next-kasan-qemu 2017/09/13 16:14 linux-next 6f20b7a5 96b8e399 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk