syzbot


KASAN: use-after-free Read in bitmap_ip_destroy
Status: fixed on 2020/02/19 15:55
Reported-by: syzbot+8b5f151de2f35100bbc5@syzkaller.appspotmail.com
Fix commit: 32c72165 netfilter: ipset: use bitmap infrastructure completely
First crash: 247d, last: 247d

Cause bisection: introduced by (bisect log):

commit 354d0fab649d47045517cf7cae03d653a4dcb3b8
Author: Peng Li <lipeng321@huawei.com>
Date: Thu Jul 4 14:04:26 2019 +0000

  net: hns3: add default value for tc_size and tc_offset

Crash: general protection fault in batadv_iv_ogm_queue_add (log)
Repro: C syz .config

Fix bisection: fixed by (bisect log):

commit 32c72165dbd0e246e69d16a3ad348a4851afd415
Author: Kadlecsik Jรณzsef <kadlec@blackhole.kfki.hu>
Date: Sun Jan 19 21:06:49 2020 +0000

  netfilter: ipset: use bitmap infrastructure completely


Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-kasan-gce-smack-root 2020/01/19 19:56 upstream 8f8972a3 0342f8c7 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, florent.fourcot@wifirst.fr, fw@strlen.de, jeremy@azazel.net, johannes.berg@intel.com, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org