syzbot


KASAN: slab-out-of-bounds Read in tcp_retransmit_timer
Status: auto-closed as invalid on 2021/09/06 04:07
Reported-by: syzbot+5d9c74c22a58196140a8@syzkaller.appspotmail.com
First crash: 235d, last: 160d
similar bugs (8):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in tcp_retransmit_timer (5) 4260 5m 600d 0/22 upstream: reported on 2020/02/24 07:40
linux-4.19 KASAN: use-after-free Read in tcp_retransmit_timer (2) 6 89d 256d 0/1 upstream: reported on 2021/02/02 04:20
upstream KASAN: slab-out-of-bounds Read in tcp_retransmit_timer 90 360d 601d 0/22 auto-closed as invalid on 2021/01/18 22:17
linux-4.19 KASAN: use-after-free Read in tcp_retransmit_timer 2 659d 660d 0/1 auto-closed as invalid on 2020/04/25 09:53
upstream KASAN: use-after-free Read in tcp_retransmit_timer (2) 1 944d 944d 0/22 closed as invalid on 2019/04/19 21:45
upstream KASAN: use-after-free Read in tcp_retransmit_timer (3) 5 856d 875d 0/22 closed as invalid on 2019/07/01 18:06
upstream KASAN: use-after-free Read in tcp_retransmit_timer 4 987d 1100d 0/22 closed as invalid on 2019/03/10 18:51
upstream KASAN: use-after-free Read in tcp_retransmit_timer (4) 2 800d 801d 0/22 closed as invalid on 2019/10/03 04:18

Sample crash report:

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2021/02/23 02:08 linux-4.14.y 29c52025152b fcc6d71b .config log report info KASAN: slab-out-of-bounds Read in tcp_retransmit_timer
ci2-linux-4-14 2021/05/09 04:07 linux-4.14.y 7d7d1c0ab3eb bc5434be .config log report info KASAN: use-after-free Read in tcp_retransmit_timer
ci2-linux-4-14 2021/05/06 09:44 linux-4.14.y 7d7d1c0ab3eb 06c27ff5 .config log report info KASAN: use-after-free Read in tcp_retransmit_timer
ci2-linux-4-14 2021/04/02 23:36 linux-4.14.y bd634aa64163 6a81331a .config log report info KASAN: use-after-free Read in tcp_retransmit_timer
ci2-linux-4-14 2021/02/28 18:53 linux-4.14.y 3242aa3a635c 4c37c133 .config log report info KASAN: use-after-free Read in tcp_retransmit_timer