KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs
Status: fixed on 2019/12/13 00:31
Fix commit: ab5b526d net: genetlink: always allocate separate attrs for dumpit ops
First crash: 417d, last: 417d

Cause bisection: introduced by (bisect log) :
commit 75cdbdd089003cd53560ff87b690ae911fa7df8e
Author: Jiri Pirko <>
Date: Sat Oct 5 18:04:37 2019 +0000

  net: ieee802154: have genetlink code to parse the attrs during dumpit

Crash: KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs (2) C error done 5 145d 144d 17/17 fixed on 2020/11/16 12:12

Sample crash report:

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-net-kasan-gce 2019/10/06 23:28 net-next 056ddc38 f3f7d9c8 .config log report syz C,,,,,
ci-upstream-net-kasan-gce 2019/10/06 22:38 net-next 056ddc38 f3f7d9c8 .config log report,,,,,
ci-upstream-net-kasan-gce 2019/10/06 22:32 net-next 056ddc38 f3f7d9c8 .config log report,,,,,