syzbot


KASAN: global-out-of-bounds Read in __xfrm6_tunnel_spi_lookup
Status: upstream: reported C repro on 2020/07/14 06:27
Reported-by: syzbot+cd59712012813594d659@syzkaller.appspotmail.com
First crash: 98d, last: 92d

Cause bisection: the cause commit could be any of (bisect log):

  08622869ed3f ip6_vti: support IP6IP6 tunnel processing with .cb_handler
  e6ce64570f24 ip_vti: support IPIP6 tunnel processing
  2ab110cbb0c0 ip6_vti: support IP6IP tunnel processing
  87e66b9682d7 ip_vti: support IPIP tunnel processing with .cb_handler
  86afc7031826 tunnel6: add tunnel6_input_afinfo for ipip and ipv6 tunnels
  d5a7a5057387 ipcomp: assign if_id to child tunnel from parent tunnel
  6df2db5d37ba tunnel4: add cb_handler to struct xfrm_tunnel
  d7b360c2869f xfrm: interface: support IP6IP6 and IP6IP tunnels processing with .cb_handler
  1475ee0ac9a1 xfrm: add is_ipip to struct xfrm_input_afinfo
  da9bbf0598c9 xfrm: interface: support IPIP and IPIP6 tunnels processing with .cb_handler
  2d4c7986dbc6 Merge remote-tracking branch 'origin/testing'
  428d2459cceb xfrm: introduce oseq-may-wrap flag
  bdf0acad6dce Merge remote-tracking branch 'ipsec-next/master'

Sample crash report:

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-linux-next-kasan-gce-root 2020/07/13 22:44 linux-next be978f8f f90ec899 .config log report syz C davem@davemloft.net, herbert@gondor.apana.org.au, kuba@kernel.org, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com, yoshfuji@linux-ipv6.org
ci-upstream-linux-next-kasan-gce-root 2020/07/20 02:02 linux-next 4c43049f 9c812472 .config log report davem@davemloft.net, herbert@gondor.apana.org.au, kuba@kernel.org, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com, yoshfuji@linux-ipv6.org
ci-upstream-linux-next-kasan-gce-root 2020/07/18 18:53 linux-next 4c43049f 9c812472 .config log report davem@davemloft.net, herbert@gondor.apana.org.au, kuba@kernel.org, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com, yoshfuji@linux-ipv6.org
ci-upstream-linux-next-kasan-gce-root 2020/07/17 22:16 linux-next 4c43049f 9c812472 .config log report davem@davemloft.net, herbert@gondor.apana.org.au, kuba@kernel.org, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com, yoshfuji@linux-ipv6.org
ci-upstream-linux-next-kasan-gce-root 2020/07/15 21:19 linux-next ca0e494a f3bec699 .config log report davem@davemloft.net, herbert@gondor.apana.org.au, kuba@kernel.org, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com, yoshfuji@linux-ipv6.org
ci-upstream-linux-next-kasan-gce-root 2020/07/14 21:57 linux-next 5fb3d604 609fb517 .config log report davem@davemloft.net, herbert@gondor.apana.org.au, kuba@kernel.org, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com, yoshfuji@linux-ipv6.org
ci-upstream-linux-next-kasan-gce-root 2020/07/13 22:30 linux-next be978f8f f90ec899 .config log report davem@davemloft.net, herbert@gondor.apana.org.au, kuba@kernel.org, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com, yoshfuji@linux-ipv6.org