Re: KASAN: use-after-free Read in kfree_skb (3)

From: syzbot
Date: Mon Jun 10 2019 - 20:07:28 EST


syzbot has bisected this bug to:

commit 5ec8c48a6235175f7ff59ed1acbe91d4d0398026
Author: Thierry Reding <thierry.reding@xxxxxxxxx>
Date: Thu Jul 6 15:16:47 2017 +0000

Merge branch 'for-4.13/drivers' into for-next

bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=14ef22daa00000
start commit: d1fdb6d8 Linux 5.2-rc4
git tree: upstream
final crash: https://syzkaller.appspot.com/x/report.txt?x=16ef22daa00000
console output: https://syzkaller.appspot.com/x/log.txt?x=12ef22daa00000
kernel config: https://syzkaller.appspot.com/x/.config?x=fa9f7e1b6a8bb586
dashboard link: https://syzkaller.appspot.com/bug?extid=dcb1305dd05699c40640
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13c787f2a00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10e32801a00000

Reported-by: syzbot+dcb1305dd05699c40640@xxxxxxxxxxxxxxxxxxxxxxxxx
Fixes: 5ec8c48a6235 ("Merge branch 'for-4.13/drivers' into for-next")

For information about bisection process see: https://goo.gl/tpsmEJ#bisection