syzbot


KASAN: use-after-free Read in tcp_init_tso_segs
Status: fixed on 2019/10/04 12:05
Reported-by: syzbot+14330efdeec0df0b4c01@syzkaller.appspotmail.com
Fix commit: f1dcc5ed4bea tcp: Reset send_head when removing skb from write-queue
First crash: 982d, last: 972d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 KASAN: use-after-free Read in tcp_init_tso_segs 1 1174d 1131d 0/2 auto-closed as invalid on 2019/08/29 08:15
android-414 KASAN: use-after-free Read in tcp_init_tso_segs C 1131 971d 982d 0/1 public: reported C repro on 2019/09/10 11:54

Sample crash report:

Crashes (1424):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2019/09/21 05:31 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 05:04 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 04:39 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 04:34 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 04:13 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 03:54 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 03:29 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 02:49 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 02:32 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 02:17 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 01:52 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 01:28 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 01:00 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/21 00:12 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 23:55 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 23:50 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 23:23 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 23:01 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 22:49 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 22:31 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 22:08 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 21:32 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 21:10 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 20:46 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 20:04 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 19:42 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 19:15 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 18:40 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 18:16 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 18:09 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 17:48 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 17:01 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 16:38 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 16:13 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 15:48 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 15:21 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 15:01 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 14:38 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/20 13:49 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz C
ci2-linux-4-14 2019/09/10 14:01 linux-4.14.y e2cd24b62938 a60cb4cd .config log report syz C
ci2-linux-4-14 2019/09/21 04:06 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz
ci2-linux-4-14 2019/09/21 03:23 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report syz
ci2-linux-4-14 2019/09/21 05:21 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report
ci2-linux-4-14 2019/09/20 22:53 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report
ci2-linux-4-14 2019/09/20 15:07 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report
ci2-linux-4-14 2019/09/20 14:13 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report
ci2-linux-4-14 2019/09/20 12:15 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report
ci2-linux-4-14 2019/09/20 10:50 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report
ci2-linux-4-14 2019/09/20 09:28 linux-4.14.y b10ab5e2c476 d96e88f3 .config log report
ci2-linux-4-14 2019/09/20 06:43 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config log report
ci2-linux-4-14 2019/09/20 00:23 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config log report
ci2-linux-4-14 2019/09/19 21:54 linux-4.14.y b10ab5e2c476 4d3ae0b7 .config log report
ci2-linux-4-14 2019/09/19 19:19 linux-4.14.y b10ab5e2c476 eb940044 .config log report
ci2-linux-4-14 2019/09/19 15:06 linux-4.14.y b10ab5e2c476 eb940044 .config log report
ci2-linux-4-14 2019/09/19 12:46 linux-4.14.y b10ab5e2c476 eb940044 .config log report
ci2-linux-4-14 2019/09/19 09:33 linux-4.14.y b10ab5e2c476 eb940044 .config log report
ci2-linux-4-14 2019/09/19 09:09 linux-4.14.y b10ab5e2c476 eb940044 .config log report
ci2-linux-4-14 2019/09/19 02:34 linux-4.14.y 968722f5371a 46c0be24 .config log report
ci2-linux-4-14 2019/09/18 19:44 linux-4.14.y 968722f5371a 46c0be24 .config log report
ci2-linux-4-14 2019/09/18 17:09 linux-4.14.y 968722f5371a 46c0be24 .config log report
ci2-linux-4-14 2019/09/18 15:41 linux-4.14.y 968722f5371a 1037b424 .config log report
ci2-linux-4-14 2019/09/18 13:30 linux-4.14.y 968722f5371a 1037b424 .config log report
ci2-linux-4-14 2019/09/18 12:18 linux-4.14.y 968722f5371a c2dcd700 .config log report
ci2-linux-4-14 2019/09/18 08:33 linux-4.14.y 968722f5371a 03e0d245 .config log report
ci2-linux-4-14 2019/09/18 00:31 linux-4.14.y 968722f5371a 03e0d245 .config log report
ci2-linux-4-14 2019/09/17 22:50 linux-4.14.y 968722f5371a 13dcda9b .config log report
ci2-linux-4-14 2019/09/17 19:35 linux-4.14.y 968722f5371a 13dcda9b .config log report
ci2-linux-4-14 2019/09/17 15:11 linux-4.14.y 968722f5371a 13dcda9b .config log report
ci2-linux-4-14 2019/09/17 12:09 linux-4.14.y 968722f5371a 13dcda9b .config log report
ci2-linux-4-14 2019/09/16 22:08 linux-4.14.y 968722f5371a 51ca0454 .config log report
ci2-linux-4-14 2019/09/16 20:49 linux-4.14.y 968722f5371a 51ca0454 .config log report
ci2-linux-4-14 2019/09/16 09:41 linux-4.14.y 968722f5371a 55c50e70 .config log report
ci2-linux-4-14 2019/09/16 08:00 linux-4.14.y 968722f5371a 55c50e70 .config log report
ci2-linux-4-14 2019/09/16 06:39 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/15 18:35 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/15 15:28 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/15 09:21 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/15 03:30 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/14 19:04 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/14 07:29 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/14 02:55 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/13 22:04 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/13 16:25 linux-4.14.y e2cd24b62938 32d59357 .config log report
ci2-linux-4-14 2019/09/10 11:22 linux-4.14.y e2cd24b62938 a60cb4cd .config log report