syzbot


KASAN: use-after-free Read in nf_hook_entries_grow
Status: upstream: reported C repro on 2021/12/20 07:51
Reported-by: syzbot+e918523f77e62790d6d9@syzkaller.appspotmail.com
First crash: 37d, last: 37d

Cause bisection: introduced by (bisect log) :
commit 6001a930ce0378b62210d4f83583fc88a903d89d
Author: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Mon Feb 15 11:28:07 2021 +0000

  netfilter: nftables: introduce table ownership

Crash: KASAN: use-after-free Read in nf_hook_entries_grow (log)
Repro: C syz .config

Fix bisection: fixed by (bisect log) :
commit 8dce43919566f06e865f7e8949f5c10d8c2493f5
Author: Antony Antony <antony.antony@secunet.com>
Date: Sun Dec 12 10:34:30 2021 +0000

  xfrm: interface with if_id 0 should return error


Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/12/18 12:51 upstream 9eaa88c7036e 44068e19 .config log report syz C KASAN: use-after-free Read in nf_hook_entries_grow
ci-upstream-net-this-kasan-gce 2021/12/18 13:13 net 158b515f703e 44068e19 .config log report syz C KASAN: use-after-free Read in nf_hook_entries_grow
ci-upstream-net-kasan-gce 2021/12/18 13:16 net-next 7e1c5d7b6926 44068e19 .config log report syz C KASAN: use-after-free Read in nf_hook_entries_grow
ci-upstream-kasan-gce-smack-root 2021/12/18 11:59 upstream 9eaa88c7036e 44068e19 .config log report info KASAN: use-after-free Read in nf_hook_entries_grow