syzbot


KASAN: use-after-free Read in bitmap_ip_ext_cleanup
Status: upstream: reported C repro on 2020/01/19 12:57
Reported-by: syzbot+b554d01b6c7870b17da2@syzkaller.appspotmail.com
First crash: 28d, last: 28d

Cause bisection: introduced by (bisect log):

commit 3d26eb8ad1e9b906433903ce05f775cf038e747f
Author: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
Date: Tue Jul 2 12:00:20 2019 +0000

  net: bridge: don't cache ether dest pointer on input

Crash: general protection fault in batadv_iv_ogm_queue_add (log)
Repro: C syz .config

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-386 2020/01/19 22:34 upstream 8f8972a3 0342f8c7 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, florent.fourcot@wifirst.fr, fw@strlen.de, jeremy@azazel.net, johannes.berg@intel.com, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org
ci-upstream-net-kasan-gce 2020/01/19 12:37 net-next 9aaa2949 bc8bc756 .config log report syz C coreteam@netfilter.org, davem@davemloft.net, florent.fourcot@wifirst.fr, fw@strlen.de, jeremy@azazel.net, johannes.berg@intel.com, kadlec@netfilter.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pablo@netfilter.org