On Tue, Oct 09, 2018 at 09:59:36AM -0700, Alexei Starovoitov wrote: > BUG: KASAN: slab-out-of-bounds in _decode_session6+0x1331/0x14e0 > net/ipv6/xfrm6_policy.c:161 > Read of size 1 at addr ffff8801d882eec7 by task syz-executor1/6667 > Call Trace: > __dump_stack lib/dump_stack.c:77 [inline] > dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113 > print_address_description+0x6c/0x20b mm/kasan/report.c:256 > kasan_report_error mm/kasan/report.c:354 [inline] > kasan_report.cold.7+0x242/0x30d mm/kasan/report.c:412 > __asan_report_load1_noabort+0x14/0x20 mm/kasan/report.c:430 > _decode_session6+0x1331/0x14e0 net/ipv6/xfrm6_policy.c:161 > __xfrm_decode_session+0x71/0x140 net/xfrm/xfrm_policy.c:2299 > xfrm_decode_session include/net/xfrm.h:1232 [inline] > vti6_tnl_xmit+0x3c3/0x1bc1 net/ipv6/ip6_vti.c:542 > __netdev_start_xmit include/linux/netdevice.h:4313 [inline] > netdev_start_xmit include/linux/netdevice.h:4322 [inline] > xmit_one net/core/dev.c:3217 [inline] > dev_hard_start_xmit+0x272/0xc10 net/core/dev.c:3233 > __dev_queue_xmit+0x2ab2/0x3870 net/core/dev.c:3803 > dev_queue_xmit+0x17/0x20 net/core/dev.c:3836 > > Reported-by: syzbot+acffccec848dc13fe...@syzkaller.appspotmail.com > Reported-by: Eric Dumazet <eduma...@google.com> > Signed-off-by: Alexei Starovoitov <a...@kernel.org>
This looks good, applied to the ipsec tree. Thanks Alexei!
