syzbot


KASAN: use-after-free Read in macvlan_broadcast
Status: fixed on 2020/02/18 14:31
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
First crash: 692d, last: 690d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: KASAN: slab-out-of-bounds Read in macvlan_broadcast (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in macvlan_broadcast C done 7 689d 692d 1/1 fixed on 2020/02/09 09:28
linux-4.14 KASAN: use-after-free Read in macvlan_broadcast C done 8 689d 692d 1/1 fixed on 2020/02/09 09:28

Sample crash report:

Crashes (12):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/01/07 22:36 upstream ae6088216ce4 1bcd407e .config log report syz C
ci-upstream-kasan-gce-root 2020/01/07 15:04 upstream ae6088216ce4 1bcd407e .config log report syz C
ci-upstream-kasan-gce-root 2020/01/07 07:32 upstream ec7b3f5372e2 53430d97 .config log report syz C
ci-upstream-kasan-gce-386 2020/01/07 06:44 upstream ec7b3f5372e2 53430d97 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/01/06 16:43 net d89091a4930e 438e1227 .config log report syz C
ci-upstream-net-kasan-gce 2020/01/07 13:34 net-next 1b935183aeff 1bcd407e .config log report syz C
ci-upstream-net-kasan-gce 2020/01/06 19:42 net-next de1b23b9b4c1 438e1227 .config log report syz C
ci-upstream-net-kasan-gce 2020/01/06 18:48 net-next de1b23b9b4c1 438e1227 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/01/08 17:48 upstream ae6088216ce4 ddc3e859 .config log report syz
ci-upstream-kasan-gce-386 2020/01/07 01:24 upstream c79f46a28239 53430d97 .config log report syz
ci-upstream-net-this-kasan-gce 2020/01/07 04:00 net d89091a4930e 53430d97 .config log report syz
ci-upstream-net-this-kasan-gce 2020/01/06 13:52 net f11421ba4af7 438e1227 .config log report