syzbot


KASAN: use-after-free Read in sock_def_write_space
Status: fixed on 2020/07/20 08:03
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: a9b11101 llc: make sure applications use ARPHRD_ETHER
First crash: 700d, last: 335d

Cause bisection: introduced by (bisect log) :
commit 31c03aef9bc22a64a8324d650ca4198819ef3a33
Author: Willem de Bruijn <willemb@google.com>
Date: Thu Jun 13 16:24:57 2019 +0000

  virtio_net: enable napi_tx by default

Crash: KASAN: use-after-free Read in sock_def_write_space (log)
Repro: syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in sock_def_write_space (2) C error 29 276d 334d 17/22 fixed on 2020/09/16 22:51

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2019/11/12 00:28 upstream 72d5ac67 6affd8e8 .config log report syz
ci-upstream-kasan-gce-selinux-root 2019/10/03 06:14 upstream dcb8cfbd 6affd8e8 .config log report syz
ci-upstream-kasan-gce-selinux-root 2019/09/03 05:41 upstream dcb8cfbd 6affd8e8 .config log report syz
Crashes (67):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/07/17 03:34 upstream f8456690 54b3c45e .config log report syz C
ci-upstream-kasan-gce 2020/07/16 11:07 upstream 994e99a9 f3bec699 .config log report syz C
ci-upstream-kasan-gce-386 2020/07/16 10:14 upstream 994e99a9 f3bec699 .config log report syz C
ci-qemu-upstream-386 2020/06/14 22:19 upstream 435faf5c 2a22c77a .config log report syz C
ci-qemu-upstream-386 2019/12/16 02:23 upstream 510c9788 eef6e580 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2019/08/04 05:07 upstream dcb8cfbd 6affd8e8 .config log report syz
ci-upstream-kasan-gce 2020/07/18 07:37 upstream 88825726 9c812472 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/18 03:52 upstream 88825726 9c812472 .config log report
ci-upstream-kasan-gce-selinux-root 2020/07/17 00:22 upstream f8456690 54b3c45e .config log report
ci-upstream-kasan-gce 2020/07/16 23:24 upstream f8456690 54b3c45e .config log report
ci-upstream-kasan-gce-root 2020/07/15 03:23 upstream e9919e11 609fb517 .config log report
ci-upstream-kasan-gce 2020/07/12 02:29 upstream a581387e 18d18b59 .config log report
ci-upstream-kasan-gce-root 2020/07/03 09:51 upstream cd77006e bed10395 .config log report
ci-upstream-kasan-gce 2020/06/30 20:38 upstream 9ebcfadb 917afeaa .config log report
ci-upstream-kasan-gce-smack-root 2020/06/30 02:08 upstream 4e99b321 a2cdad9d .config log report
ci-upstream-kasan-gce-smack-root 2020/06/29 06:07 upstream 4e99b321 a2cdad9d .config log report
ci-upstream-kasan-gce 2020/06/28 02:59 upstream 1590a2e1 ffec44b5 .config log report
ci-upstream-kasan-gce 2020/06/27 05:11 upstream 1590a2e1 ffec44b5 .config log report
ci-upstream-kasan-gce-root 2020/06/25 11:28 upstream 7ae77150 54566aff .config log report
ci-upstream-kasan-gce 2020/06/25 06:39 upstream 7ae77150 54566aff .config log report
ci-qemu-upstream 2020/06/12 20:36 upstream 435faf5c d1c1c849 .config log report
ci-upstream-kasan-gce-smack-root 2020/05/22 15:32 upstream 051143e1 9682898d .config log report
ci-qemu-upstream 2020/05/18 22:40 upstream 642b151f 684d3606 .config log report
ci-qemu-upstream 2020/05/12 18:36 upstream 152036d1 a44eb8f7 .config log report
ci-qemu-upstream 2020/05/12 07:26 upstream 152036d1 44aa8310 .config log report
ci-qemu-upstream 2020/04/16 05:45 upstream 00086336 c743fcb3 .config log report
ci-upstream-kasan-gce-root 2020/04/10 23:05 upstream c0cc2711 a8c6a3f8 .config log report
ci-qemu-upstream 2020/01/24 05:44 upstream 4703d911 2e95ab33 .config log report
ci-qemu-upstream 2019/12/22 11:26 upstream b8e382a1 8b967267 .config log report
ci-qemu-upstream 2019/12/21 11:28 upstream f1fd1610 bc586918 .config log report
ci-qemu-upstream 2019/12/20 18:40 upstream 6398b9fc aa56acc6 .config log report
ci-qemu-upstream 2019/12/17 10:57 upstream ea200dec 2b31345f .config log report
ci-qemu-upstream 2019/12/14 03:03 upstream e31736d9 eef6e580 .config log report
ci-upstream-kasan-gce-selinux-root 2019/08/04 02:04 upstream dcb8cfbd 6affd8e8 .config log report
ci-upstream-kasan-gce-root 2019/08/03 12:18 upstream 755f1fed 6affd8e8 .config log report
ci-upstream-kasan-gce-root 2019/07/31 21:07 upstream 4010b622 c692b5bd .config log report
ci-upstream-kasan-gce-386 2020/07/13 16:54 upstream 11ba4688 f90ec899 .config log report
ci-upstream-kasan-gce-386 2020/07/09 04:41 upstream 0bddd227 bc238812 .config log report
ci-upstream-kasan-gce-386 2020/07/07 20:49 upstream 7cc2a8ea 51095195 .config log report
ci-upstream-kasan-gce-386 2020/07/04 16:57 upstream 7cc2a8ea 51095195 .config log report
ci-upstream-kasan-gce-386 2020/07/03 07:26 upstream cd77006e bed10395 .config log report
ci-upstream-kasan-gce-386 2020/06/25 00:00 upstream 7ae77150 54566aff .config log report
ci-qemu-upstream-386 2020/03/22 07:33 upstream b74b991f 78267cec .config log report
ci-qemu-upstream-386 2020/03/19 17:49 upstream cd607737 2c31c529 .config log report
ci-qemu-upstream-386 2020/02/18 22:24 upstream b1da3acc 135c18aa .config log report
ci-qemu-upstream-386 2020/01/28 19:25 upstream c677124e c8e81ce4 .config log report
ci-qemu-upstream-386 2019/12/15 11:48 upstream 510c9788 eef6e580 .config log report
ci-qemu-upstream-386 2019/12/14 02:57 upstream e31736d9 eef6e580 .config log report
ci-upstream-net-this-kasan-gce 2020/07/15 07:34 net d113c0f2 609fb517 .config log report
ci-upstream-net-this-kasan-gce 2020/05/13 23:11 net 99addbe3 a885920d .config log report
ci-upstream-net-this-kasan-gce 2020/02/01 07:10 net 9f68e365 c30117b2 .config log report
ci-upstream-net-this-kasan-gce 2020/01/30 20:35 net ccd1f273 5ed23f9a .config log report
ci-upstream-net-this-kasan-gce 2019/12/10 09:40 net 991a3459 4b83c8fb .config log report
ci-upstream-net-this-kasan-gce 2019/10/12 14:57 net 82ad8621 426631dd .config log report
ci-upstream-net-this-kasan-gce 2019/07/21 21:54 net 1a03bb53 1656845f .config log report
ci-upstream-net-kasan-gce 2020/07/15 06:23 net-next 07dd1b7e 609fb517 .config log report
ci-upstream-net-kasan-gce 2020/07/06 12:33 net-next e44f65fd 51095195 .config log report
ci-upstream-net-kasan-gce 2020/06/02 07:40 net-next 9a25c1df a0331e89 .config log report
ci-upstream-net-kasan-gce 2019/07/20 17:37 net-next 31cc088a 1656845f .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/20 00:17 linux-next 4c43049f 9c812472 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/19 19:34 linux-next 4c43049f 9c812472 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/17 18:25 linux-next 4c43049f 9c812472 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/07/16 08:25 linux-next ca0e494a f3bec699 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/07/22 15:51 linux-next 6d21a41b b3c615f5 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/07/21 19:37 linux-next 6d21a41b 1656845f .config log report