syzbot


KASAN: slab-out-of-bounds Read in br_mrp_parse
Status: upstream: reported C repro on 2020/05/20 18:23
Reported-by: syzbot+9c6f0f1f8e32223df9a4@syzkaller.appspotmail.com
Fix commit: 617504c6 bridge: mrp: Fix out-of-bounds read in br_mrp_parse
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 53d, last: 52d

Cause bisection: introduced by (bisect log):

commit 6536993371fab3de4e8379649b60e94d03e6ff37
Author: Horatiu Vultur <horatiu.vultur@microchip.com>
Date: Sun Apr 26 13:22:07 2020 +0000

  bridge: mrp: Integrate MRP into the bridge

Crash: KASAN: slab-out-of-bounds Read in br_mrp_parse (log)
Repro: C syz .config

Sample crash report:

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-bpf-next-kasan-gce 2020/05/20 00:57 bpf-next dda18a5c 67fa1f59 .config log report syz C bridge@lists.linux-foundation.org, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, nikolay@cumulusnetworks.com, roopa@cumulusnetworks.com
ci-upstream-bpf-next-kasan-gce 2020/05/21 22:59 bpf-next dda18a5c 1f30020f .config log report bridge@lists.linux-foundation.org, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, nikolay@cumulusnetworks.com, roopa@cumulusnetworks.com
ci-upstream-net-kasan-gce 2020/05/20 12:24 net-next 4f65e2f4 1255f02a .config log report bridge@lists.linux-foundation.org, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, nikolay@cumulusnetworks.com, roopa@cumulusnetworks.com
ci-upstream-bpf-next-kasan-gce 2020/05/20 00:36 bpf-next dda18a5c 67fa1f59 .config log report bridge@lists.linux-foundation.org, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, nikolay@cumulusnetworks.com, roopa@cumulusnetworks.com
ci-upstream-bpf-next-kasan-gce 2020/05/20 00:26 bpf-next dda18a5c 67fa1f59 .config log report bridge@lists.linux-foundation.org, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, nikolay@cumulusnetworks.com, roopa@cumulusnetworks.com