KASAN: use-after-free Read in j1939_tp_txtimer
Status: fixed on 2020/09/16 22:51
Fix commit: cd3b3636 can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
First crash: 299d, last: 100d

Cause bisection: introduced by (bisect log):

commit 9d71dd0c70099914fcd063135da3c580865e924c
Author: The j1939 authors <>
Date: Mon Oct 8 09:48:36 2018 +0000

  can: add support of SAE J1939 protocol

Crash: KASAN: use-after-free Read in j1939_session_deactivate (log)
Repro: C syz .config

Fix bisection: failed (bisect log)

Sample crash report:

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-kasan-gce-selinux-root 2019/12/26 04:30 upstream 46cf053e be5c2c81 .config log report syz C,,,,,,,,
ci-upstream-kasan-gce-selinux-root 2020/01/12 06:53 upstream ac61145a 4c04afaa .config log report syz,,,,,,,,
ci-upstream-linux-next-kasan-gce-root 2020/02/16 06:23 linux-next 9f01828e 5d7b90f1 .config log report syz,,,,,,,,,
ci-upstream-kasan-gce-root 2020/07/12 05:11 upstream a581387e 18d18b59 .config log report,,,,,,,,,
ci-upstream-kasan-gce-selinux-root 2019/12/25 23:01 upstream 46cf053e be5c2c81 .config log report,,,,,,,,