syzbot


KASAN: use-after-free Read in eth_type_trans
Status: upstream: reported C repro on 2019/12/23 14:55
Reported-by: syzbot+6745e272378d071cac7f@syzkaller.appspotmail.com
First crash: 59d, last: 21d

Cause bisection: introduced by (bisect log):

commit 90e33d45940793def6f773b2d528e9f3c84ffdc7
Author: Petar Penkov <peterpenkov96@gmail.com>
Date: Fri Sep 22 20:49:15 2017 +0000

  tun: enable napi_gro_frags() for TUN/TAP driver

Crash: KASAN: use-after-free Read in eth_type_trans (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in eth_type_trans C 1 29d 59d 0/1 upstream: reported C repro on 2019/12/19 12:15

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro
ci-upstream-kasan-gce-root 2020/01/26 23:47 upstream 5cf9ad0e 36650b4b .config log report syz C
Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-root 2019/12/19 23:09 upstream 4a94c433 36650b4b .config log report syz C daniel@iogearbox.net, davem@davemloft.net, edumazet@google.com, hkallweit1@gmail.com, linux-kernel@vger.kernel.org, maximmi@mellanox.com, netdev@vger.kernel.org, sdf@google.com, tglx@linutronix.de
ci-upstream-kasan-gce-selinux-root 2019/12/19 14:49 upstream 4a94c433 79b211f7 .config log report syz C daniel@iogearbox.net, davem@davemloft.net, edumazet@google.com, hkallweit1@gmail.com, linux-kernel@vger.kernel.org, maximmi@mellanox.com, netdev@vger.kernel.org, sdf@google.com, tglx@linutronix.de
ci-upstream-linux-next-kasan-gce-root 2019/12/27 20:52 linux-next 7ddd09fc be5c2c81 .config log report syz C daniel@iogearbox.net, davem@davemloft.net, edumazet@google.com, hkallweit1@gmail.com, linux-kernel@vger.kernel.org, maximmi@mellanox.com, netdev@vger.kernel.org, sdf@google.com, tglx@linutronix.de