syzbot


KASAN: use-after-free Read in j1939_sk_recv
Status: fixed on 2019/11/29 15:48
Reported-by: syzbot+07ca5bce8530070a5650@syzkaller.appspotmail.com
Fix commit: ddeeb7d4822e can: j1939: j1939_can_recv(): add priv refcounting
First crash: 755d, last: 755d

Cause bisection: introduced by (bisect log) :
commit 9d71dd0c70099914fcd063135da3c580865e924c
Author: The j1939 authors <linux-can@vger.kernel.org>
Date: Mon Oct 8 09:48:36 2018 +0000

  can: add support of SAE J1939 protocol

Crash: KASAN: use-after-free Read in j1939_sk_recv (log)
Repro: C syz .config

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2019/11/10 18:38 linux-next 5591cf003452 dc438b91 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2019/11/10 14:06 linux-next 5591cf003452 dc438b91 .config log report