syzbot


KASAN: slab-out-of-bounds Write in tcindex_set_parms
Status: fixed on 2020/05/10 10:42
Reported-by: syzbot+c72da7b9ed57cde6fca2@syzkaller.appspotmail.com
Fix commit: 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
First crash: 636d, last: 615d

Cause bisection: introduced by (bisect log) :
commit 599be01ee567b61f4471ee8078870847d0a11e8e
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Mon Feb 3 05:14:35 2020 +0000

  net_sched: fix an OOB access in cls_tcindex

Crash: KASAN: slab-out-of-bounds Write in tcindex_set_parms (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: slab-out-of-bounds Write in tcindex_set_parms C done 2 633d 633d 1/1 fixed on 2020/04/12 11:41
linux-4.14 KASAN: slab-out-of-bounds Write in tcindex_set_parms C done 2 626d 626d 1/1 fixed on 2020/04/17 19:57
Patch testing requests:
Created Duration User Patch Repo Result
2020/03/11 00:34 18m xiyou.wangcong@gmail.com https://github.com/congwang/linux.git tcindex OK

Sample crash report:

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/03/22 20:09 upstream b74b991fb8b9 78267cec .config log report syz C
ci-upstream-kasan-gce-root 2020/03/19 08:01 upstream 5076190daded 0a96a13c .config log report syz C
ci-upstream-kasan-gce 2020/03/10 06:28 upstream 30bb5572ce7a 35f53e45 .config log report syz C
ci-upstream-kasan-gce-386 2020/03/10 01:42 upstream 2c523b344dfa 35f53e45 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/03/11 06:57 net ece0d7bd7461 35f53e45 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/03/11 06:16 net ece0d7bd7461 35f53e45 .config log report syz C
ci-upstream-net-kasan-gce 2020/03/10 22:17 net-next 6c9ee3069380 35f53e45 .config log report syz C
ci-upstream-net-kasan-gce 2020/03/08 09:44 net-next 425c075dcbb2 2e9971bb .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2020/03/30 00:55 linux-next 770fbb32d34e 05736b29 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2020/03/29 23:35 linux-next 770fbb32d34e 05736b29 .config log report syz C