syzbot


KASAN: use-after-free Write in j1939_can_recv
Status: upstream: reported on 2021/02/20 10:00
Reported-by: syzbot+bdf710cfc41c186fdff3@syzkaller.appspotmail.com
Fix commit: 22c696fed25c can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32 ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 163d, last: 125d

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2021/03/25 19:05 upstream e138138003eb 6a383ecf .config log report info KASAN: use-after-free Write in j1939_can_recv
ci-upstream-kasan-gce-386 2021/02/16 09:51 upstream f40ddce88593 98682e5e .config log report info KASAN: use-after-free Write in j1939_can_recv