syzbot


WARNING in kfree (2)
Status: fixed on 2020/06/28 13:52
Reported-by: syzbot+50ef5e5e5ea5f812f0c2@syzkaller.appspotmail.com
Fix commit: 0d1c3530 net_sched: keep alloc_hash updated after hash allocation
First crash: 148d, last: 148d

Cause bisection: introduced by (bisect log):

commit 599be01ee567b61f4471ee8078870847d0a11e8e
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Mon Feb 3 05:14:35 2020 +0000

  net_sched: fix an OOB access in cls_tcindex

Crash: KASAN: invalid-free in tcf_exts_destroy (log)
Repro: syz .config

Fix bisection: fixed by (bisect log):

commit 0d1c3530e1bd38382edef72591b78e877e0edcd3
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Mar 12 05:42:28 2020 +0000

  net_sched: keep alloc_hash updated after hash allocation

similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream WARNING in kfree C cause 2 341d 340d 14/17 fixed on 2019/10/15 23:40

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-386 2020/03/10 00:54 upstream 2c523b34 35f53e45 .config log report syz davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com