syzbot


KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup
Status: fixed on 2020/03/17 22:09
Reported-by: syzbot+6491ea8f6dddbf04930e@syzkaller.appspotmail.com
Fix commit: 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
First crash: 685d, last: 669d

Cause bisection: introduced by (bisect log) :
commit d68dbb0c9ac8b1ff52eb09aa58ce6358400fa939
Author: Christian Brauner <christian@brauner.io>
Date: Thu Jun 20 23:26:35 2019 +0000

  arch: handle arches who do not yet define clone3

Crash: general protection fault in batadv_iv_ogm_queue_add (log)
Repro: C syz .config

Fix bisection: fixed by (bisect log) :
commit 32c72165dbd0e246e69d16a3ad348a4851afd415
Author: Kadlecsik Jรณzsef <kadlec@blackhole.kfki.hu>
Date: Sun Jan 19 21:06:49 2020 +0000

  netfilter: ipset: use bitmap infrastructure completely


Sample crash report:

Crashes (8):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/01/21 04:34 upstream d96d875ef5dd d2557fb5 .config log report syz C
ci-upstream-kasan-gce-root 2020/01/20 18:33 upstream def9d2780727 d2557fb5 .config log report syz C
ci-upstream-kasan-gce 2020/01/20 09:38 upstream def9d2780727 0342f8c7 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/01/19 20:24 net 09d4f10a5e78 0342f8c7 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2020/02/02 12:29 linux-next 2747d5fdab78 2274ad39 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2020/02/04 23:39 linux-next 2747d5fdab78 93e5e335 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/02/03 12:55 linux-next 2747d5fdab78 93e5e335 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/02/03 10:23 linux-next 2747d5fdab78 93e5e335 .config log report