syzbot


KASAN: use-after-free Write in skb_release_data (2)
Status: upstream: reported C repro on 2018/10/15 06:30
Reported-by: syzbot+580be3953ed99133804f@syzkaller.appspotmail.com
First crash: 1017d, last: 205d

Cause bisection: introduced by (bisect log) :
commit 472c2e07eef045145bc1493cc94a01c87140780a
Author: Eric Dumazet <edumazet@google.com>
Date: Fri Mar 22 15:56:39 2019 +0000

  tcp: add one skb cache for tx

Crash: KASAN: use-after-free Write in skb_release_data (log)
Repro: C syz .config

Fix bisection: fixed by (bisect log) [no-op commit]:
commit 31867b23d7d1ee3535136c6a410a6cf56f666bfc
Author: Jaegeuk Kim <jaegeuk@kernel.org>
Date: Fri Dec 28 19:00:38 2018 +0000

  f2fs: wait on atomic writes to count F2FS_CP_WB_DATA

similar bugs (5):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Write in skb_release_data C 1903 1155d 1208d 9/22 fixed on 2018/08/07 13:43
android-414 KASAN: use-after-free Write in skb_release_data 3 646d 725d 0/1 auto-closed as invalid on 2020/02/13 13:09
linux-4.19 KASAN: use-after-free Write in skb_release_data 1 468d 468d 0/1 auto-closed as invalid on 2020/08/10 01:37
linux-4.19 KASAN: use-after-free Write in skb_release_data (2) 3 82d 159d 0/1 upstream: reported on 2021/02/15 01:48
android-54 KASAN: use-after-free Write in skb_release_data 2 359d 390d 0/1 auto-closed as invalid on 2020/11/26 21:03

Sample crash report:

Crashes (874):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-kasan-gce 2019/03/26 05:48 net-next 68cc2999f692 55684ce1 .config log report syz C
ci-upstream-net-kasan-gce 2019/03/25 03:30 net-next 68cc2999f692 2c86e0a5 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2019/03/26 06:24 linux-next 9e864317704b 55684ce1 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/12/31 00:18 upstream f6e1ea196492 ecb8c012 .config log report info
ci-upstream-kasan-gce-root 2018/11/20 02:07 upstream f2ce1065e767 adf636a8 .config log report
ci-upstream-bpf-kasan-gce 2020/06/29 04:00 bpf 7a64135f3229 a2cdad9d .config log report
ci-upstream-bpf-kasan-gce 2020/06/25 12:56 bpf 4e15507fea70 54566aff .config log report
ci-upstream-bpf-kasan-gce 2020/06/24 18:00 bpf 4e15507fea70 54566aff .config log report
ci-upstream-bpf-kasan-gce 2020/06/17 23:25 bpf 29fcb05bbf1a b9f3810b .config log report
ci-upstream-bpf-kasan-gce 2020/06/12 10:58 bpf 2c4779eff837 58802067 .config log report
ci-upstream-bpf-kasan-gce 2020/05/19 05:14 bpf f85c1598ddfe 684d3606 .config log report
ci-upstream-net-this-kasan-gce 2018/12/08 10:01 net 1b4e5ad5d6b9 65ed2472 .config log report
ci-upstream-bpf-next-kasan-gce 2020/07/11 16:23 bpf-next eef8a42d6ce0 18d18b59 .config log report
ci-upstream-bpf-next-kasan-gce 2020/07/09 18:47 bpf-next 5cfd607b49db bc238812 .config log report
ci-upstream-bpf-next-kasan-gce 2020/07/09 12:25 bpf-next 5cfd607b49db bc238812 .config log report
ci-upstream-bpf-next-kasan-gce 2020/07/08 08:16 bpf-next cb8e59cc8720 51095195 .config log report
ci-upstream-bpf-next-kasan-gce 2020/07/02 12:53 bpf-next cb8e59cc8720 bed10395 .config log report
ci-upstream-bpf-next-kasan-gce 2020/07/02 08:32 bpf-next cb8e59cc8720 bed10395 .config log report
ci-upstream-bpf-next-kasan-gce 2020/07/01 22:28 bpf-next cb8e59cc8720 39acb39d .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/19 16:21 bpf-next cb8e59cc8720 bc258b50 .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/18 05:03 bpf-next cb8e59cc8720 b9f3810b .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/14 04:16 bpf-next cb8e59cc8720 dbce178a .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/09 12:28 bpf-next cb8e59cc8720 0d60b78a .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/07 06:32 bpf-next cb8e59cc8720 e6b89e4e .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/07 03:21 bpf-next cb8e59cc8720 e6b89e4e .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/06 16:05 bpf-next cb8e59cc8720 e6b89e4e .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/06 14:17 bpf-next cb8e59cc8720 e6b89e4e .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/06 00:07 bpf-next cb8e59cc8720 f243c88f .config log report
ci-upstream-bpf-next-kasan-gce 2020/06/03 09:04 bpf-next e8224bfe7729 f3ba1b5b .config log report
ci-upstream-net-kasan-gce 2019/03/28 02:02 net-next 5133a4a800fd 4e668495 .config log report
ci-upstream-net-kasan-gce 2019/03/28 00:58 net-next 5133a4a800fd 4e668495 .config log report
ci-upstream-net-kasan-gce 2019/03/28 00:49 net-next 5133a4a800fd 4e668495 .config log report
ci-upstream-net-kasan-gce 2019/03/27 23:48 net-next 5133a4a800fd 4e668495 .config log report
ci-upstream-net-kasan-gce 2019/03/27 22:48 net-next 5133a4a800fd 4e668495 .config log report
ci-upstream-net-kasan-gce 2019/03/27 20:15 net-next 5133a4a800fd 4e668495 .config log report
ci-upstream-net-kasan-gce 2019/03/27 18:26 net-next 5133a4a800fd 4e668495 .config log report
ci-upstream-net-kasan-gce 2019/03/27 17:23 net-next 5133a4a800fd 4e668495 .config log report
ci-upstream-net-kasan-gce 2019/03/27 13:01 net-next be67101fbf27 55684ce1 .config log report
ci-upstream-net-kasan-gce 2019/03/27 10:37 net-next be67101fbf27 55684ce1 .config log report
ci-upstream-net-kasan-gce 2019/03/27 10:06 net-next be67101fbf27 55684ce1 .config log report
ci-upstream-net-kasan-gce 2019/03/27 09:06 net-next be67101fbf27 55684ce1 .config log report
ci-upstream-net-kasan-gce 2019/03/27 08:00 net-next be67101fbf27 55684ce1 .config log report
ci-upstream-net-kasan-gce 2018/10/11 05:22 net-next e40a826a6cbc 5f818b4b .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/28 03:04 linux-next a392ee45bae7 f94f56fe .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 21:47 linux-next a392ee45bae7 4e668495 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 21:17 linux-next a392ee45bae7 4e668495 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 19:03 linux-next a392ee45bae7 4e668495 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 16:16 linux-next a392ee45bae7 4e668495 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 15:09 linux-next a392ee45bae7 4e668495 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 15:06 linux-next a392ee45bae7 4e668495 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 14:02 linux-next a392ee45bae7 4e668495 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 11:38 linux-next a392ee45bae7 55684ce1 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/03/27 06:35 linux-next a392ee45bae7 55684ce1 .config log report