syzbot


KASAN: use-after-free Read in macvlan_broadcast
Status: fixed on 2020/02/18 14:31
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 96cc4b69 macvlan: do not assume mac_header is set in macvlan_broadcast()
First crash: 46d, last: 44d

Cause bisection: the bug happens on the oldest tested release
Crash: KASAN: slab-out-of-bounds Read in macvlan_broadcast (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in macvlan_broadcast C fix 7 43d 46d 1/1 fixed on 2020/02/09 09:28
linux-4.14 KASAN: use-after-free Read in macvlan_broadcast C fix 8 43d 46d 1/1 fixed on 2020/02/09 09:28

Sample crash report:

Crashes (12):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-selinux-root 2020/01/07 22:36 upstream ae608821 1bcd407e .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-root 2020/01/07 15:04 upstream ae608821 1bcd407e .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-root 2020/01/07 07:32 upstream ec7b3f53 53430d97 .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-386 2020/01/07 06:44 upstream ec7b3f53 53430d97 .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-this-kasan-gce 2020/01/06 16:43 net d89091a4 438e1227 .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/01/07 13:34 net-next 1b935183 1bcd407e .config log report syz C ap420073@gmail.com, davem@davemloft.net, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org
ci-upstream-net-kasan-gce 2020/01/06 19:42 net-next de1b23b9 438e1227 .config log report syz C ap420073@gmail.com, davem@davemloft.net, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org
ci-upstream-net-kasan-gce 2020/01/06 18:48 net-next de1b23b9 438e1227 .config log report syz C ap420073@gmail.com, davem@davemloft.net, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce-selinux-root 2020/01/08 17:48 upstream ae608821 ddc3e859 .config log report syz ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-386 2020/01/07 01:24 upstream c79f46a2 53430d97 .config log report syz ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-this-kasan-gce 2020/01/07 04:00 net d89091a4 53430d97 .config log report syz ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-this-kasan-gce 2020/01/06 13:52 net f11421ba 438e1227 .config log report ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de