KASAN: slab-out-of-bounds Write in eth_header_parse

Status: fixed on 2018/08/28 17:48
Subsystems: net
[Documentation on labels]
Fix commit: 4576cd469d98 packet: refine ring v3 block size test to hold one frame
First crash: 2919d, last: 2906d

Sample crash report:
IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
8021q: adding VLAN 0 to HW filter on device team0
IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
tpacket_rcv: packet too big, clamped from 76 to 4294967264. macoff=96
==================================================================
BUG: KASAN: slab-out-of-bounds in memcpy include/linux/string.h:345 [inline]
BUG: KASAN: slab-out-of-bounds in eth_header_parse+0x88/0xb0 net/ethernet/eth.c:215
Write of size 6 at addr ffff8801abadfffc by task swapper/0/0

CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.18.0-rc6+ #165
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/28 02:25 upstream 864af0d40cdc ebf656d7 .config console log report syz C ci-upstream-kasan-gce
2018/08/10 03:06 net-next-old 82b94f5d6891 1fb62d58 .config console log report syz C ci-upstream-net-kasan-gce
2018/07/28 02:22 linux-next d1e0b8e0cb7a ebf656d7 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/28 02:29 upstream 864af0d40cdc ebf656d7 .config console log report syz ci-upstream-kasan-gce-386
2018/08/06 01:15 upstream a8c199208cd6 1beb8136 .config console log report ci-upstream-kasan-gce-386
2018/08/04 16:53 net-next-old a01512b14d4f 3476a2df .config console log report ci-upstream-net-kasan-gce
2018/07/28 01:30 net-next-old 19725496da56 ebf656d7 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.