syzbot


KASAN: use-after-free Read in tcf_action_init
Status: upstream: reported C repro on 2020/09/28 07:27
Reported-by: syzbot+9f43bb6a66ff96a21931@syzkaller.appspotmail.com
Fix commit: 0fedc63f net_sched: commit action insertions together
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 30d, last: 30d

Cause bisection: introduced by (bisect log) :
commit 974e6f02e27e1b46c6c5e600e70ced25079f73eb
Author: Enric Balletbo i Serra <enric.balletbo@collabora.com>
Date: Mon Aug 1 09:54:35 2016 +0000

  iio: cros_ec_sensors_core: Add common functions for the ChromeOS EC Sensor Hub.

Crash: WARNING in nf_unregister_net_hook (log)
Repro: C syz .config

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-kasan-gce-smack-root 2020/09/25 14:30 upstream 171d4ff7 54289b08 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com