syzbot


KASAN: use-after-free Read in napi_gro_frags
Status: fixed on 2019/06/18 17:49
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: a4270d6795b0 net-gro: fix use-after-free read in napi_gro_frags()
First crash: 1086d, last: 1084d

Cause bisection: introduced by (bisect log) :
commit aa6daacaa113cda96760c8d3157bae937908f6e3
Author: Eric Dumazet <edumazet@google.com>
Date: Sun Nov 18 15:37:33 2018 +0000

  tun: use netdev_alloc_frag() in tun_napi_alloc_frags()

Crash: KASAN: out-of-bounds Read in napi_gro_frags (log)
Repro: C syz .config

Sample crash report:

Crashes (16):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2019/05/31 10:12 upstream 20f944965601 d9aaf3c2 .config log report syz C
ci-upstream-kasan-gce-root 2019/05/31 09:35 upstream 20f944965601 d9aaf3c2 .config log report syz C
ci-upstream-kasan-gce-root 2019/05/31 07:47 upstream 20f944965601 d9aaf3c2 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2019/05/29 19:00 upstream 9fb67d643f6f 5457ef34 .config log report syz C
ci-upstream-kasan-gce-smack-root 2019/05/29 18:57 upstream 9fb67d643f6f 5457ef34 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2019/05/29 17:32 upstream 9fb67d643f6f 5457ef34 .config log report syz C
ci-upstream-kasan-gce-smack-root 2019/05/29 17:21 upstream 9fb67d643f6f 5457ef34 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2019/05/29 16:50 upstream 9fb67d643f6f 5457ef34 .config log report syz C
ci-upstream-kasan-gce-smack-root 2019/05/29 16:42 upstream 9fb67d643f6f 5457ef34 .config log report syz C
ci-upstream-net-this-kasan-gce 2019/05/29 18:53 net a6cd0d2d493a 5457ef34 .config log report syz C
ci-upstream-net-this-kasan-gce 2019/05/29 16:59 net a6cd0d2d493a 5457ef34 .config log report syz C
ci-upstream-net-this-kasan-gce 2019/05/29 16:18 net a6cd0d2d493a 5457ef34 .config log report syz C
ci-upstream-net-kasan-gce 2019/05/29 20:25 net-next 36f18439ea16 5457ef34 .config log report syz C
ci-upstream-net-kasan-gce 2019/05/29 19:13 net-next 36f18439ea16 5457ef34 .config log report syz C
ci-upstream-net-kasan-gce 2019/05/29 15:51 net-next 36f18439ea16 5457ef34 .config log report syz C
ci-upstream-net-kasan-gce 2019/05/29 15:19 net-next 36f18439ea16 5457ef34 .config log report