syzbot


general protection fault in nft_tunnel_get_init
Status: fixed on 2020/02/18 14:31
Reported-by: syzbot+76d0b80493ac881ff77b@syzkaller.appspotmail.com
Fix commit: 1c702bf9 netfilter: nft_tunnel: fix null-attribute check
First crash: 37d, last: 36d

Cause bisection: the cause commit could be any of (bisect log):

  9e619d87b277 netfilter: nf_tables: flow event notifier must use transaction mutex
  1974d2453fa7 netfilter: nf_tables: remove unused variable
  ddba40be59c9 netfilter: nfnetlink_osf: rename nf_osf header file to nfnetlink_osf
  7cca1ed0bb24 netfilter: nf_osf: move nf_osf_fingers to non-uapi header file
  c75303269009 netfilter: cttimeout: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUT
  033eab53fff7 netfilter: nft_tproxy: Add missing config check
  285189c78eeb netfilter: use kvmalloc_array to allocate memory for hashtable
  4ed8eb6570a4 netfilter: nf_tables: Add native tproxy support
  af308b94a2a4 netfilter: nf_tables: add tunnel support
  aaecfdb5c5dd netfilter: nf_tables: match on tunnel metadata
  b96af92d6eaf netfilter: nf_tables: implement Passive OS fingerprint module in nft_osf
  94276fa8a2a4 netfilter: bridge: Expose nf_tables bridge hook priorities through uapi
  f9324952088f netfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c
  445509eb9b00 netfilter: nf_tables: simplify NLM_F_CREATE handling
  f6b7b5f4f3bc netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.c
  33b78aaa4457 netfilter: use PTR_ERR_OR_ZERO()
  7bdfcea875ad netfilter: kconfig: remove ct zone/label dependencies
  020f6cc5f755 netfilter: conntrack: avoid use-after free on rmmod
  51c23b47e6b8 netfilter: nf_osf: add nf_osf_find()
  222440b4e832 netfilter: nf_tables: handle meta/lookup with direct call
  483f3fdcc70b netfilter: nft_tunnel: fix sparse errors
  074fb8801667 Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.19 general protection fault in nft_tunnel_get_init C fix 1 36d 36d 1/1 fixed on 2020/02/16 09:59

Sample crash report:

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-selinux-root 2020/01/16 03:27 upstream 51d69817 f9b69507 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org
ci-upstream-kasan-gce-root 2020/01/16 01:53 upstream 51d69817 f9b69507 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org
ci-upstream-kasan-gce 2020/01/15 23:47 upstream 51d69817 f9b69507 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org
ci-upstream-kasan-gce-smack-root 2020/01/15 23:20 upstream 51d69817 f9b69507 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org
ci-upstream-kasan-gce-386 2020/01/16 03:37 upstream 51d69817 f9b69507 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org
ci-upstream-net-this-kasan-gce 2020/01/15 22:44 net 8b792f84 f9b69507 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org
ci-upstream-net-kasan-gce 2020/01/15 21:21 net-next 4e2fa6b9 f9b69507 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, fw@strlen.de, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org