syzbot


WARNING: refcount bug in skb_set_owner_w
Status: fixed on 2020/01/08 01:06
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 501a90c94510 net-backports: inet: protect against too small mtu values.
First crash: 738d, last: 737d

Cause bisection: introduced by (bisect log) :
commit 6e237d099fac1f73a7b6d7287bb9191f29585a4e
Author: David Ahern <dsahern@gmail.com>
Date: Thu Dec 7 04:09:12 2017 +0000

  netlink: Relax attr validation for fixed length types

Crash: kernel BUG at ADDR [verbose debug info unavailable] (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 WARNING: refcount bug in skb_set_owner_w syz 2 738d 852d 0/1 public: reported syz repro on 2019/08/09 14:49

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2019/12/02 05:16 upstream b94ae8ad9fe7 f879db37 .config log report syz C
ci-upstream-kasan-gce-root 2019/12/02 13:54 upstream ceb307474506 f879db37 .config log report syz