Re: KASAN: slab-out-of-bounds Write in validate_chain

From: John Fastabend
Date: Wed Jun 26 2019 - 18:25:03 EST


Eric Biggers wrote:
> Hi John,
>
> On Tue, Jun 25, 2019 at 04:07:00PM -0700, syzbot wrote:
> > syzbot has bisected this bug to:
> >
> > commit e9db4ef6bf4ca9894bb324c76e01b8f1a16b2650
> > Author: John Fastabend <john.fastabend@xxxxxxxxx>
> > Date: Sat Jun 30 13:17:47 2018 +0000
> >
> > bpf: sockhash fix omitted bucket lock in sock_close
> >
>
> Are you working on this? This is the 6th open syzbot report that has been
> bisected to this commit, and I suspect it's the cause of many of the other
> 30 open syzbot reports I assigned to the bpf subsystem too
> (https://lore.kernel.org/bpf/20190624050114.GA30702@xxxxxxxxxxxxxxx/).
>
> Also, this is happening in mainline (v5.2-rc6).
>
> - Eric

Should have a fix today. It seems syzbot has found this bug repeatedly.

.John