syzbot


KASAN: slab-out-of-bounds Read in macvlan_broadcast
Status: internal: reported C repro on 2020/01/06 14:24
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 96cc4b69 macvlan: do not assume mac_header is set in macvlan_broadcast()
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-kmsan-gce]
First crash: 41d, last: 39d

Cause bisection: the bug happens on the oldest tested release
Crash: KASAN: slab-out-of-bounds Read in macvlan_broadcast (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.19 KASAN: slab-out-of-bounds Read in macvlan_broadcast C fix 10 36d 41d 1/1 fixed on 2020/02/10 15:38
linux-4.14 KASAN: slab-out-of-bounds Read in macvlan_broadcast C fix 6 37d 41d 1/1 fixed on 2020/02/10 15:38

Sample crash report:

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-selinux-root 2020/01/08 05:12 upstream ae608821 6738e0b3 .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-selinux-root 2020/01/07 23:14 upstream ae608821 1bcd407e .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-root 2020/01/07 07:03 upstream ec7b3f53 53430d97 .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce 2020/01/07 04:22 upstream ec7b3f53 53430d97 .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-this-kasan-gce 2020/01/06 17:53 net d89091a4 438e1227 .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-this-kasan-gce 2020/01/06 14:23 net f11421ba 438e1227 .config log report syz C ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/01/06 18:18 net-next de1b23b9 438e1227 .config log report syz C ap420073@gmail.com, davem@davemloft.net, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org
ci-upstream-kasan-gce 2020/01/07 07:39 upstream ec7b3f53 53430d97 .config log report syz ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-386 2020/01/07 00:52 upstream c79f46a2 53430d97 .config log report syz ap420073@gmail.com, davem@davemloft.net, gustavo@embeddedor.com, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-net-kasan-gce 2020/01/09 05:58 net-next 53ebeca2 ddc3e859 .config log report ap420073@gmail.com, davem@davemloft.net, linux-kernel@vger.kernel.org, liuhangbin@gmail.com, netdev@vger.kernel.org