syzbot


KASAN: use-after-free Read in sock_def_write_space
Status: internal: reported C repro on 2019/07/20 18:38
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: llc: make sure applications use ARPHRD_ETHER
Patched on: [ci-upstream-bpf-kasan-gce ci-upstream-linux-next-kasan-gce-root ci-upstream-net-this-kasan-gce], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 350d, last: 5h03m

Cause bisection: introduced by (bisect log):

commit 31c03aef9bc22a64a8324d650ca4198819ef3a33
Author: Willem de Bruijn <willemb@google.com>
Date: Thu Jun 13 16:24:57 2019 +0000

  virtio_net: enable napi_tx by default

Crash: KASAN: use-after-free Read in sock_def_write_space (log)
Repro: syz .config

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro
ci-upstream-kasan-gce-selinux-root 2019/11/12 00:28 upstream 72d5ac67 6affd8e8 .config log report syz
ci-upstream-kasan-gce-selinux-root 2019/10/03 06:14 upstream dcb8cfbd 6affd8e8 .config log report syz
ci-upstream-kasan-gce-selinux-root 2019/09/03 05:41 upstream dcb8cfbd 6affd8e8 .config log report syz
Crashes (47):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-qemu-upstream-386 2020/06/14 22:19 upstream 435faf5c 2a22c77a .config log report syz C davem@davemloft.net, intel-wired-lan@lists.osuosl.org, jeffrey.t.kirsher@intel.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-qemu-upstream-386 2019/12/16 02:23 upstream 510c9788 eef6e580 .config log report syz C davem@davemloft.net, intel-wired-lan@lists.osuosl.org, jeffrey.t.kirsher@intel.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2019/08/04 05:07 upstream dcb8cfbd 6affd8e8 .config log report syz ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, xdp-newbies@vger.kernel.org, yhs@fb.com
ci-upstream-kasan-gce-root 2020/07/03 09:51 upstream cd77006e bed10395 .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/06/30 20:38 upstream 9ebcfadb 917afeaa .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce-smack-root 2020/06/30 02:08 upstream 4e99b321 a2cdad9d .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce-smack-root 2020/06/29 06:07 upstream 4e99b321 a2cdad9d .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/06/28 02:59 upstream 1590a2e1 ffec44b5 .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/06/27 05:11 upstream 1590a2e1 ffec44b5 .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce-root 2020/06/25 11:28 upstream 7ae77150 54566aff .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-kasan-gce 2020/06/25 06:39 upstream 7ae77150 54566aff .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-qemu-upstream 2020/06/12 20:36 upstream 435faf5c d1c1c849 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-kasan-gce-smack-root 2020/05/22 15:32 upstream 051143e1 9682898d .config log report davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-qemu-upstream 2020/05/18 22:40 upstream 642b151f 684d3606 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2020/05/12 18:36 upstream 152036d1 a44eb8f7 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2020/05/12 07:26 upstream 152036d1 44aa8310 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2020/04/16 05:45 upstream 00086336 c743fcb3 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-kasan-gce-root 2020/04/10 23:05 upstream c0cc2711 a8c6a3f8 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2020/01/24 05:44 upstream 4703d911 2e95ab33 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2019/12/22 11:26 upstream b8e382a1 8b967267 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2019/12/21 11:28 upstream f1fd1610 bc586918 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2019/12/20 18:40 upstream 6398b9fc aa56acc6 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2019/12/17 10:57 upstream ea200dec 2b31345f .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-qemu-upstream 2019/12/14 03:03 upstream e31736d9 eef6e580 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-kasan-gce-selinux-root 2019/08/04 02:04 upstream dcb8cfbd 6affd8e8 .config log report ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, xdp-newbies@vger.kernel.org, yhs@fb.com
ci-upstream-kasan-gce-root 2019/08/03 12:18 upstream 755f1fed 6affd8e8 .config log report ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, xdp-newbies@vger.kernel.org, yhs@fb.com
ci-upstream-kasan-gce-root 2019/07/31 21:07 upstream 4010b622 c692b5bd .config log report ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, xdp-newbies@vger.kernel.org, yhs@fb.com
ci-upstream-kasan-gce-386 2020/07/04 16:57 upstream 7cc2a8ea 51095195 .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce-386 2020/07/03 07:26 upstream cd77006e bed10395 .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce-386 2020/06/25 00:00 upstream 7ae77150 54566aff .config log report christophe.jaillet@wanadoo.fr, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, navid.emamdoost@gmail.com, netdev@vger.kernel.org
ci-qemu-upstream-386 2020/03/22 07:33 upstream b74b991f 78267cec .config log report davem@davemloft.net, intel-wired-lan@lists.osuosl.org, jeffrey.t.kirsher@intel.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-qemu-upstream-386 2020/03/19 17:49 upstream cd607737 2c31c529 .config log report davem@davemloft.net, intel-wired-lan@lists.osuosl.org, jeffrey.t.kirsher@intel.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-qemu-upstream-386 2020/02/18 22:24 upstream b1da3acc 135c18aa .config log report davem@davemloft.net, intel-wired-lan@lists.osuosl.org, jeffrey.t.kirsher@intel.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-qemu-upstream-386 2020/01/28 19:25 upstream c677124e c8e81ce4 .config log report davem@davemloft.net, intel-wired-lan@lists.osuosl.org, jeffrey.t.kirsher@intel.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-qemu-upstream-386 2019/12/15 11:48 upstream 510c9788 eef6e580 .config log report davem@davemloft.net, intel-wired-lan@lists.osuosl.org, jeffrey.t.kirsher@intel.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-qemu-upstream-386 2019/12/14 02:57 upstream e31736d9 eef6e580 .config log report davem@davemloft.net, intel-wired-lan@lists.osuosl.org, jeffrey.t.kirsher@intel.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-net-this-kasan-gce 2020/05/13 23:11 net 99addbe3 a885920d .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-net-this-kasan-gce 2020/02/01 07:10 net 9f68e365 c30117b2 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-net-this-kasan-gce 2020/01/30 20:35 net ccd1f273 5ed23f9a .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-net-this-kasan-gce 2019/12/10 09:40 net 991a3459 4b83c8fb .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-net-this-kasan-gce 2019/10/12 14:57 net 82ad8621 426631dd .config log report ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jakub.kicinski@netronome.com, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-net-this-kasan-gce 2019/07/21 21:54 net 1a03bb53 1656845f .config log report
ci-upstream-net-kasan-gce 2020/06/02 07:40 net-next 9a25c1df a0331e89 .config log report andriin@fb.com, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, hawk@kernel.org, jasowang@redhat.com, john.fastabend@gmail.com, kafai@fb.com, kpsingh@chromium.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mst@redhat.com, netdev@vger.kernel.org, songliubraving@fb.com, virtualization@lists.linux-foundation.org, yhs@fb.com
ci-upstream-net-kasan-gce 2019/07/20 17:37 net-next 31cc088a 1656845f .config log report
ci-upstream-linux-next-kasan-gce-root 2019/07/22 15:51 linux-next 6d21a41b b3c615f5 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/07/21 19:37 linux-next 6d21a41b 1656845f .config log report