syzbot


KASAN: use-after-free Read in ext4_xattr_set_entry
Status: fixed on 2020/03/01 21:06
Reported-by: syzbot+4e00aede6dbcb9c7d9d9@syzkaller.appspotmail.com
Fix commit: 08e4a312 ext4: validate the debug_want_extra_isize mount option at parse time
First crash: 153d, last: 61d

Fix bisection: fixed by (bisect log):

commit 08e4a312439c294b9753166537baf3cc0bd6bb07
Author: Theodore Ts'o <tytso@mit.edu>
Date: Sun Dec 15 06:09:03 2019 +0000

  ext4: validate the debug_want_extra_isize mount option at parse time

similar bugs (8):
Kernel Title Repro Bisected Count Last Reported Patched Status
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 6 153d 208d 0/1 auto-closed as invalid on 2020/02/28 13:35
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 1 9d14h 9d14h 0/1 upstream: reported on 2020/03/23 03:20
upstream KASAN: use-after-free Read in ext4_xattr_set_entry 1 613d 613d 0/17 closed as invalid on 2018/07/29 11:55
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry 4 460d 353d 0/1 auto-closed as invalid on 2019/06/26 01:15
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (3) 1 24d 23d 0/17 upstream: reported on 2020/03/09 05:43
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry syz fix 10 32d 280d 1/1 fixed on 2020/03/30 09:03
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (2) C cause 19 107d 516d 16/17 fixed on 2020/02/14 01:19
android-54 KASAN: use-after-free Read in ext4_xattr_set_entry 2 50d 53d 0/1 upstream: reported on 2020/02/07 21:52

Sample crash report:

Crashes (9):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-linux-4-14 2019/12/16 17:47 linux-4.14.y a844dc4c 0ae38e44 .config log report syz C adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-14 2019/12/13 12:48 linux-4.14.y a844dc4c 2a752b7c .config log report syz adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-14 2020/01/31 17:11 linux-4.14.y 9fa690a2 5ed23f9a .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-14 2020/01/10 09:36 linux-4.14.y b0cdffaa 4de4e9f0 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-14 2019/12/28 06:47 linux-4.14.y e1f7d50a be5c2c81 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-14 2019/12/25 22:01 linux-4.14.y e1f7d50a be5c2c81 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-14 2019/12/15 16:18 linux-4.14.y a844dc4c eef6e580 .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-14 2019/12/13 10:09 linux-4.14.y a844dc4c 2a752b7c .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci2-linux-4-14 2019/10/31 13:37 linux-4.14.y ddef1e8e a41ca8fa .config log report adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu