Received: by 2002:a05:6a10:16a7:0:0:0:0 with SMTP id gp39csp495205pxb; Tue, 3 Nov 2020 05:16:06 -0800 (PST) X-Google-Smtp-Source: ABdhPJxTqDkrrZbrOBUtsRoFFVv6VvW2ymg6U3Mg85qX/mvwQ31LDljdHfXpwqbRolBM1KerZQLU X-Received: by 2002:a50:e686:: with SMTP id z6mr13853016edm.188.1604409366099; Tue, 03 Nov 2020 05:16:06 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1604409366; cv=none; d=google.com; s=arc-20160816; b=MC34JzLx0r28GabZI6uujBI2ZqwwiQa/LvUtNUZx6KSh/d3uXNRBNdWM3TDWBn5zMf cre1hPSemc1uJH75aSEPiil4NVh2uUiOQb1BAEsf/tSWZHY+Aes9Np065Wb8Yykfq6jL FtbBG4juQVjIl6sJ84dK2U0+p9g6knI9VSu9dDVrLziKk7DhBHCBOD+5ffVi39z1sAnW PbJtduBWhLdeKqowW6UJziFcH/HB68iV0CcdG1iMMDQEcKNRL81zO2GUhbBCJqBBnrc6 P9JBDMVSAJaqq21RoG2Xf533nDUw9Qf9rcEUpcl3K9g+l8yvzficIoGDcD5OI68dCbJD tQhA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=0YHS/4LvDDFoixg/k7JisZUeQpF8iffOcuETYi8OTNM=; b=H8s/2lUuyhjGqWpQSgr8UL+jSUP5pBtvIHYn1gr77Mjx2tzVE8bXGZgrpvqFudQW0+ A6REzZA40fx9sUlC+w6Q8M/8KKBsX/V3o4JL1GPUYC94n64Jdr8jY587hk6TtdhoYEDX 0bI7R7R6EBm5NjqoAUV0l6cE0VNpIQKVpwTGVcrjUolSQSr3mWfTDo1nm1+Yh0P2TBjz tzvH0a8nEFZQcc95vitvQe7qjB9D9bas79aWC5PD+vRZDpxV/Zne6MRsZD1kEJoEMLC1 78rEEIZv3QdFuUvHUuROO6zlrpc/2hM000WmW0VVCPDFudXOqF7JHj2IhcOmX2W+/kAo FvnQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=KsCT0oU5; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id j10si13075167edt.142.2020.11.03.05.15.41; Tue, 03 Nov 2020 05:16:06 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=KsCT0oU5; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729179AbgKCNOO (ORCPT + 99 others); Tue, 3 Nov 2020 08:14:14 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:35494 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1729160AbgKCNON (ORCPT ); Tue, 3 Nov 2020 08:14:13 -0500 Received: from mail-wm1-x341.google.com (mail-wm1-x341.google.com [IPv6:2a00:1450:4864:20::341]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 7088AC0613D1; Tue, 3 Nov 2020 05:14:13 -0800 (PST) Received: by mail-wm1-x341.google.com with SMTP id c18so12703203wme.2; Tue, 03 Nov 2020 05:14:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=0YHS/4LvDDFoixg/k7JisZUeQpF8iffOcuETYi8OTNM=; b=KsCT0oU5Be7Ny6mUPzkvD3LP/R8aSjRvghI5F+bx6VwrdW+9CLs4SYYE54x7uxXWw9 2CW4cxAxuiNw2W44+Lhqvr6U9vQmrkHimqRUM/Rib0XjrxUJsVyiSvhl0f4lFZXXcJV0 cDzxz+aCR5Q3VezUrcVT92BufoY7hswt5BdAGYiCNkGeSjKcN9mbei45hLyVtn/Ui6Ud NxaWBiv5UIl/QBTy9w1051xCjjehcCsMHrMPmAumujDLla7rs0iaC9iQotaCCxtZQOu3 HHNvl6AgipcCsKhOOhARP3pPrtYPcpD/glCpajFnUZL/fvU3rWD+aWj4n8xnUiDQPDxD 2Opg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=0YHS/4LvDDFoixg/k7JisZUeQpF8iffOcuETYi8OTNM=; b=qFFj2E4jru7xc0QMTApTB6OSxY6h6wdyqU4dp3QNNLeeUkBCPX7hsINW9YN5tJV/CR TslIxnL2nFchuyDnN/gPzHistXM6THd/RNQG5/pSPuopUc3/pkD0oImaZ715EaSGsd7F GL1LTsu/j/3kiiTaKYp8bMQMYECHyzmEclM+zEyJtr0OFwv2ZYz8fo7y6hX3jzr5GOje mqlvj2HMrfREzvX32y3/TEXsNgp7xY2fXP7EGhoG1QppTIQSUgSOxZfd7aysJXPGkp/q ZFxWwPl1rke42WMcy9DjWScz1e5NloBLhPu2Csbzg6In964LRLdDt8Z9bo2MfZjJx8Aa 1t5Q== X-Gm-Message-State: AOAM533LmP4G/KHU8OKHBPWdSdH7IrFQ9oxFizpCgZFbQPt0N72Jorfm aZdbd1uW9w6MJ8vZOUcVvZQrQlxYZCMZXGQJoCM= X-Received: by 2002:a05:600c:210:: with SMTP id 16mr3529929wmi.122.1604409252243; Tue, 03 Nov 2020 05:14:12 -0800 (PST) MIME-Version: 1.0 References: <00000000000013259505a931dd26@google.com> <0000000000002d865a05b3051076@google.com> In-Reply-To: <0000000000002d865a05b3051076@google.com> From: Xin Long Date: Tue, 3 Nov 2020 21:14:00 +0800 Message-ID: Subject: Re: KASAN: use-after-free Read in decode_session6 To: syzbot Cc: davem , Herbert Xu , Jakub Kicinski , LKML , Marcelo Ricardo Leitner , network dev , Steffen Klassert , syzkaller-bugs Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Nov 1, 2020 at 1:40 PM syzbot wrote: > > syzbot has bisected this issue to: > > commit bcd623d8e9fa5f82bbd8cd464dc418d24139157b > Author: Xin Long > Date: Thu Oct 29 07:05:05 2020 +0000 > > sctp: call sk_setup_caps in sctp_packet_transmit instead > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=14df9cb8500000 > start commit: 68bb4665 Merge branch 'l2-multicast-forwarding-for-ocelot-.. > git tree: net-next > final oops: https://syzkaller.appspot.com/x/report.txt?x=16df9cb8500000 > console output: https://syzkaller.appspot.com/x/log.txt?x=12df9cb8500000 > kernel config: https://syzkaller.appspot.com/x/.config?x=eac680ae76558a0e > dashboard link: https://syzkaller.appspot.com/bug?extid=5be8aebb1b7dfa90ef31 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11286398500000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11bbf398500000 > > Reported-by: syzbot+5be8aebb1b7dfa90ef31@syzkaller.appspotmail.com > Fixes: bcd623d8e9fa ("sctp: call sk_setup_caps in sctp_packet_transmit instead") > > For information about bisection process see: https://goo.gl/tpsmEJ#bisection I'm looking into this, Thanks.