syzbot


divide error in nft_limit_init
Status: internal: reported C repro on 2021/04/09 14:20
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: b895bdf5d643 netfilter: nft_limit: avoid possible divide error in nft_limit_init
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 113d, last: 112d

Cause bisection: introduced by (bisect log) :
commit 65038428b2c6c5be79d3f78a6b79c0cdc3a58a41
Author: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Tue Mar 17 13:13:46 2020 +0000

  netfilter: nf_tables: allow to specify stateful expression in set definition

Crash: UBSAN: undefined-behaviour in nft_limit_init (log)
Repro: C syz .config

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-this-kasan-gce 2021/04/09 14:33 net 864db232dc70 6a81331a .config log report syz C divide error in nft_limit_init
ci-upstream-net-kasan-gce 2021/04/09 14:56 net-next 4438669eb703 6a81331a .config log report syz C divide error in nft_limit_init
ci-upstream-net-this-kasan-gce 2021/04/09 14:19 net 864db232dc70 6a81331a .config log report info divide error in nft_limit_init
ci-upstream-net-kasan-gce 2021/04/10 23:40 net-next 626b598aa8be bfeda1b1 .config log report info divide error in nft_limit_init