syzbot


KASAN: use-after-free Read in bitmap_port_ext_cleanup
Status: fixed on 2020/02/18 14:31
Reported-by: syzbot+4c3cc6dbe7259dbf9054@syzkaller.appspotmail.com
Fix commit: c120959387ef netfilter: fix a use-after-free in mtype_destroy()
First crash: 699d, last: 689d

Cause bisection: introduced by (bisect log) :
commit b9a1e627405d68d475a3c1f35e685ccfb5bbe668
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Jul 4 00:21:13 2019 +0000

  hsr: implement dellink to clean up resources

Crash: general protection fault in send_hsr_supervision_frame (log)
Repro: C syz .config

Sample crash report:

Crashes (11):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/01/19 12:07 upstream 244dc2689085 bc8bc756 .config log report syz C
ci-upstream-kasan-gce 2020/01/19 03:39 upstream 244dc2689085 bc8bc756 .config log report syz C
ci-upstream-kasan-gce-root 2020/01/18 20:57 upstream 25e73aadf297 3de7aabb .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/01/10 17:40 upstream e69ec487b2c7 4de4e9f0 .config log report syz C
ci-upstream-kasan-gce 2020/01/09 12:14 upstream b07f636fca1c ddc3e859 .config log report syz C
ci-upstream-kasan-gce-386 2020/01/18 18:29 upstream 25e73aadf297 3de7aabb .config log report syz C
ci-upstream-kasan-gce-386 2020/01/09 12:04 upstream b07f636fca1c ddc3e859 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/01/09 11:22 net 2f806c2a16b3 ddc3e859 .config log report syz C
ci-upstream-net-kasan-gce 2020/01/18 11:27 net-next 56f200c78ce4 3de7aabb .config log report syz C
ci-upstream-net-kasan-gce 2020/01/09 11:51 net-next 53ebeca24a87 ddc3e859 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/01/09 10:59 net 2f806c2a16b3 ddc3e859 .config log report