syzbot


KASAN: use-after-free Read in ext4_xattr_set_entry
Status: fixed on 2020/03/01 21:06
Reported-by: syzbot+4e00aede6dbcb9c7d9d9@syzkaller.appspotmail.com
Fix commit: 08e4a312439c ext4: validate the debug_want_extra_isize mount option at parse time
First crash: 689d, last: 597d

Fix bisection: fixed by (bisect log) :
commit 08e4a312439c294b9753166537baf3cc0bd6bb07
Author: Theodore Ts'o <tytso@mit.edu>
Date: Sun Dec 15 06:09:03 2019 +0000

  ext4: validate the debug_want_extra_isize mount option at parse time

similar bugs (11):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (3) C 1 26d 326d 0/1 upstream: reported C repro on 2020/10/28 15:08
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 6 689d 745d 0/1 auto-closed as invalid on 2020/02/28 13:35
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 1 545d 545d 0/1 auto-closed as invalid on 2020/07/21 03:20
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry (2) C 7 7d06h 465d 0/1 upstream: reported C repro on 2020/06/11 12:57
upstream KASAN: use-after-free Read in ext4_xattr_set_entry 1 1150d 1150d 0/22 closed as invalid on 2018/07/29 11:55
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry 4 997d 890d 0/1 auto-closed as invalid on 2019/06/26 01:15
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (3) 4 441d 559d 0/22 auto-closed as invalid on 2020/11/02 08:32
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry syz done 10 569d 817d 1/1 fixed on 2020/03/30 09:03
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (4) C error 4 14d 232d 0/22 upstream: reported C repro on 2021/01/30 11:05
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (2) C done 19 643d 1052d 16/22 fixed on 2020/02/14 01:19
android-54 KASAN: use-after-free Read in ext4_xattr_set_entry 6 409d 590d 0/1 auto-closed as invalid on 2020/12/04 21:44

Sample crash report:

Crashes (9):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2019/12/16 17:47 linux-4.14.y a844dc4c5442 0ae38e44 .config log report syz C
ci2-linux-4-14 2019/12/13 12:48 linux-4.14.y a844dc4c5442 2a752b7c .config log report syz
ci2-linux-4-14 2020/01/31 17:11 linux-4.14.y 9fa690a2a016 5ed23f9a .config log report
ci2-linux-4-14 2020/01/10 09:36 linux-4.14.y b0cdffaa546e 4de4e9f0 .config log report
ci2-linux-4-14 2019/12/28 06:47 linux-4.14.y e1f7d50ae3a3 be5c2c81 .config log report
ci2-linux-4-14 2019/12/25 22:01 linux-4.14.y e1f7d50ae3a3 be5c2c81 .config log report
ci2-linux-4-14 2019/12/15 16:18 linux-4.14.y a844dc4c5442 eef6e580 .config log report
ci2-linux-4-14 2019/12/13 10:09 linux-4.14.y a844dc4c5442 2a752b7c .config log report
ci2-linux-4-14 2019/10/31 13:37 linux-4.14.y ddef1e8e3f6e a41ca8fa .config log report