Re: [syzbot] [kernel?] KASAN: slab-use-after-free Read in __unix_gc

From: Kuniyuki Iwashima
Date: Sat Feb 10 2024 - 03:11:13 EST


From: syzbot <syzbot+5a630f8ca0120ab43f55@xxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 09 Feb 2024 06:57:17 -0800
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit: e7689879d14e ethtool: do not use rtnl in ethnl_default_dum..
> git tree: net-next
> console+strace: https://syzkaller.appspot.com/x/log.txt?x=1195b6e0180000
> kernel config: https://syzkaller.appspot.com/x/.config?x=ac1116e4986e7570
> dashboard link: https://syzkaller.appspot.com/bug?extid=5a630f8ca0120ab43f55
> compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=121d9b5c180000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=165f9cec180000
>
> Downloadable assets:
> disk image: https://storage.googleapis.com/syzbot-assets/c5b791d72e1e/disk-e7689879.raw.xz
> vmlinux: https://storage.googleapis.com/syzbot-assets/472cf2131e7b/vmlinux-e7689879.xz
> kernel image: https://storage.googleapis.com/syzbot-assets/c1e5a4b33244/bzImage-e7689879.xz
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+5a630f8ca0120ab43f55@xxxxxxxxxxxxxxxxxxxxxxxxx
>
> ==================================================================
> BUG: KASAN: slab-use-after-free in __unix_gc+0xe0f/0xf70

#syz dup: INFO: task hung in unix_dgram_sendmsg

Here's a fix.
https://lore.kernel.org/netdev/20240209220453.96053-1-kuniyu@xxxxxxxxxx/

Thanks!