syzbot


KASAN: slab-out-of-bounds Read in __nla_put_nohdr
Status: upstream: reported C repro on 2020/01/21 19:47
Reported-by: syzbot+5af9a90dad568aa9f611@syzkaller.appspotmail.com
Fix commit: 61678d28 net_sched: fix datalen for ematch
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-kmsan-gce]
First crash: 26d, last: 26d

Cause bisection: the bug happens on the oldest tested release
Crash: WARNING in sysfs_warn_dup (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.14 KASAN: slab-out-of-bounds Read in __nla_put_nohdr C 2 20d 20d 0/1 upstream: reported C repro on 2020/01/27 22:05
linux-4.19 KASAN: slab-out-of-bounds Read in __nla_put_nohdr C 1 19d 19d 0/1 upstream: reported C repro on 2020/01/29 00:02

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce 2020/01/21 21:37 upstream d96d875e 8eda0b95 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-kasan-gce-386 2020/01/21 17:18 upstream d96d875e 8eda0b95 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-net-this-kasan-gce 2020/01/21 13:16 net 80892772 8eda0b95 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-net-kasan-gce 2020/01/21 14:59 net-next 17e10a15 8eda0b95 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com