syzbot


KASAN: use-after-free Write in tcindex_change
Status: upstream: reported C repro on 2020/03/18 00:57
Reported-by: syzbot+ba4bcf1563f90386910f@syzkaller.appspotmail.com
First crash: 117d, last: 116d

Cause bisection: introduced by (bisect log):

commit 599be01ee567b61f4471ee8078870847d0a11e8e
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Mon Feb 3 05:14:35 2020 +0000

  net_sched: fix an OOB access in cls_tcindex

Crash: KASAN: use-after-free Write in tcindex_set_parms (log)
Repro: C syz .config

Fix bisection: fixed by (bisect log):

commit 0d1c3530e1bd38382edef72591b78e877e0edcd3
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Mar 12 05:42:28 2020 +0000

  net_sched: keep alloc_hash updated after hash allocation


Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-smack-root 2020/03/18 15:15 upstream ac309e77 97bc55ce .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-kasan-gce-smack-root 2020/03/18 03:28 upstream ac309e77 97bc55ce .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-kasan-gce-smack-root 2020/03/18 02:07 upstream ac309e77 97bc55ce .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-kasan-gce-smack-root 2020/03/17 21:05 upstream fb33c651 749688d2 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com