syzbot


KASAN: slab-out-of-bounds Read in tick_sched_handle
Status: fixed on 2019/03/17 10:55
Reported-by: syzbot+09d51a30df9fe76edb2a@syzkaller.appspotmail.com
Fix commit: bc6e019b fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
First crash: 158d, last: 130d

Bisection: introduced by (bisect log):

commit b8a51b38e4d4dec3e379d52c0fe1a66827f7cf1e
Author: Stefano Brivio <sbrivio@redhat.com>
Date: Thu Nov 8 11:19:23 2018 +0000

  fou, fou6: ICMP error handlers for FoU and GUE

Tree: upstream
Crash: KASAN: use-after-free Read in tick_sched_handle (log)
Repro: C syz .config

Sample crash report:

All crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-smack-root 2019/01/14 00:40 upstream 6b529fb0 c3f3344c .config log report syz C fweisbec@gmail.com, linux-kernel@vger.kernel.org, mingo@kernel.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2018/12/16 18:37 net-next c151acc6 def91db3 .config log report syz C fweisbec@gmail.com, linux-kernel@vger.kernel.org, mingo@kernel.org, tglx@linutronix.de
ci-upstream-linux-next-kasan-gce-root 2018/12/23 21:39 linux-next 6648e120 e3bd7ab8 .config log report syz C fweisbec@gmail.com, linux-kernel@vger.kernel.org, mingo@kernel.org, tglx@linutronix.de
ci-upstream-linux-next-kasan-gce-root 2018/12/23 02:46 linux-next 6648e120 e3bd7ab8 .config log report syz C fweisbec@gmail.com, linux-kernel@vger.kernel.org, mingo@kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce 2019/01/14 00:54 upstream 1c7fc5cb c3f3344c .config log report fweisbec@gmail.com, linux-kernel@vger.kernel.org, mingo@kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-smack-root 2019/01/07 01:35 upstream 574823bf ee332608 .config log report fweisbec@gmail.com, linux-kernel@vger.kernel.org, mingo@kernel.org, tglx@linutronix.de
ci-upstream-linux-next-kasan-gce-root 2018/12/16 22:52 linux-next d14b746c def91db3 .config log report fweisbec@gmail.com, linux-kernel@vger.kernel.org, mingo@kernel.org, tglx@linutronix.de