syzbot


general protection fault in hash_ipportnet4_uadt
Status: fixed on 2020/02/18 14:31
Reported-by: syzbot+34bd2369d38707f3f4a7@syzkaller.appspotmail.com
Fix commit: 22dad713 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
First crash: 259d, last: 257d

Cause bisection: introduced by (bisect log):

commit 23c42a403a9cfdbad6004a556c927be7dd61a8ee
Author: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Date: Sat Oct 27 13:07:40 2018 +0000

  netfilter: ipset: Introduction of new commands and protocol version 7

Crash: general protection fault in hash_ipportnet4_uadt (log)
Repro: C syz .config
duplicates (11):
Title Repro Bisected Count Last Reported Patched Status
general protection fault in hash_ip6_uadt C 6 257d 258d 0/17 closed as dup on 2020/01/08 09:52
general protection fault in hash_netnet4_uadt C 7 257d 258d 0/17 closed as dup on 2020/01/08 09:53
general protection fault in hash_netport4_uadt C 12 257d 258d 0/17 closed as dup on 2020/01/08 09:54
general protection fault in hash_ipportip4_uadt 2 258d 258d 0/17 closed as dup on 2020/01/08 15:53
general protection fault in hash_netport6_uadt syz 6 257d 258d 0/17 closed as dup on 2020/01/08 09:53
general protection fault in hash_ipport4_uadt syz 6 257d 258d 0/17 closed as dup on 2020/01/08 09:52
general protection fault in hash_mac4_uadt C cause 6 258d 259d 0/17 closed as dup on 2020/01/08 09:54
general protection fault in hash_ip4_uadt C cause 12 256d 258d 0/17 closed as dup on 2020/01/08 09:53
general protection fault in hash_ipportip6_uadt C 6 257d 258d 0/17 closed as dup on 2020/01/08 16:06
general protection fault in hash_net4_uadt C cause 5 257d 258d 0/17 closed as dup on 2020/01/08 09:53
general protection fault in hash_ipportnet6_uadt C 6 257d 258d 0/17 closed as dup on 2020/01/08 09:53

Sample crash report:

Crashes (13):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-kasan-gce-selinux-root 2020/01/09 09:35 upstream b07f636f ddc3e859 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, info@metux.net, jeremy@azazel.net, kadlec@netfilter.org, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-kasan-gce-selinux-root 2020/01/09 02:05 upstream b07f636f ddc3e859 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, jeremy@azazel.net, kadlec@netfilter.org, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-kasan-gce-root 2020/01/08 15:23 upstream ae608821 ddc3e859 .config log report syz C allison@lohutok.net, coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, info@metux.net, jeremy@azazel.net, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-kasan-gce 2020/01/08 08:14 upstream ae608821 6738e0b3 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, info@metux.net, jeremy@azazel.net, kadlec@netfilter.org, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-kasan-gce-root 2020/01/08 05:19 upstream ae608821 6738e0b3 .config log report syz C allison@lohutok.net, coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, info@metux.net, jeremy@azazel.net, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-kasan-gce-386 2020/01/08 09:24 upstream ae608821 6738e0b3 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, info@metux.net, jeremy@azazel.net, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-kasan-gce-386 2020/01/08 03:35 upstream ae608821 6738e0b3 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, jeremy@azazel.net, kadlec@netfilter.org, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-net-this-kasan-gce 2020/01/07 23:16 net c101fffc 1bcd407e .config log report syz C allison@lohutok.net, coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, jeremy@azazel.net, kadlec@netfilter.org, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-net-this-kasan-gce 2020/01/07 17:27 net c101fffc 1bcd407e .config log report syz C allison@lohutok.net, coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, info@metux.net, jeremy@azazel.net, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/01/08 02:34 net-next 1ece2fbe 6738e0b3 .config log report syz C allison@lohutok.net, coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, jeremy@azazel.net, kadlec@netfilter.org, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/01/07 19:52 net-next 1b935183 1bcd407e .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, jeremy@azazel.net, kadlec@netfilter.org, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/01/10 00:44 net-next 4a4a52d4 4de4e9f0 .config log report coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, gregkh@linuxfoundation.org, info@metux.net, jeremy@azazel.net, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/01/07 13:47 net-next 1b935183 1bcd407e .config log report allison@lohutok.net, coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, info@metux.net, jeremy@azazel.net, kadlec@netfilter.org, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org, tglx@linutronix.de