linux-kernel - Re: [syzbot] [sctp?] BUG: corrupted list in sctp_destroy

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20251107003518.8936-1-hdanton@sina.com>
Date: Fri,  7 Nov 2025 08:35:16 +0800
From: Hillf Danton <hdanton@...a.com>
To: syzbot <syzbot+ba535cb417f106327741@...kaller.appspotmail.com>
Cc: linux-kernel@...r.kernel.org,
	syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] [sctp?] BUG: corrupted list in sctp_destroy_sock

> Date: Thu, 06 Nov 2025 14:30:29 -0800
> Hello,
> 
> syzbot found the following issue on:
> 
> HEAD commit:    1a2352ad82b5 Merge git://git.kernel.org/pub/scm/linux/kern..
> git tree:       net-next
> console output: https://syzkaller.appspot.com/x/log.txt?x=1110fe7c580000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=810aeb811fb1cca1
> dashboard link: https://syzkaller.appspot.com/bug?extid=ba535cb417f106327741
> compiler:       Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=12ff9704580000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=11372bcd980000

#syz test net-next main

--- x/net/sctp/socket.c
+++ y/net/sctp/socket.c
@@ -4895,6 +4895,7 @@ static struct sock *sctp_clone_sock(stru
 	sk_sockets_allocated_inc(newsk);
 	sock_prot_inuse_add(sock_net(sk), newsk->sk_prot, 1);
 
+	newsp->do_auto_asconf = 0;
 	err = sctp_sock_migrate(sk, newsk, asoc, type);
 	if (err)
 		goto out_release;
--