syzbot


WARNING: refcount bug in free_nsproxy (2)
Status: upstream: reported C repro on 2020/01/14 22:04
Reported-by: syzbot+a98eee31f5df4261d88c@syzkaller.appspotmail.com
First crash: 36d, last: 36d

Cause bisection: introduced by (bisect log):

commit 14215108a1fd7e002c0a1f9faf8fbaf41fdda50d
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Feb 21 05:37:42 2019 +0000

  net_sched: initialize net pointer inside tcf_exts_init()

Crash: KASAN: use-after-free Read in cleanup_net (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream WARNING: refcount bug in free_nsproxy 4 689d 713d 6/16 fixed on 2018/05/08 18:30

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-linux-next-kasan-gce-root 2020/01/11 18:53 linux-next 6c09d7db 4c04afaa .config log report syz C allison@lohutok.net, armijn@tjaldur.nl, gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, tglx@linutronix.de