Re: KASAN: use-after-free Read in bitmap_ip_destroy

From: syzbot
Date: Tue Feb 18 2020 - 21:08:05 EST


syzbot suspects this bug was fixed by commit:

commit 32c72165dbd0e246e69d16a3ad348a4851afd415
Author: Kadlecsik JÃzsef <kadlec@xxxxxxxxxxxxxxxxx>
Date: Sun Jan 19 21:06:49 2020 +0000

netfilter: ipset: use bitmap infrastructure completely

bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=17fc79b5e00000
start commit: 8f8972a3 Merge tag 'mtd/fixes-for-5.5-rc7' of git://git.ke..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=cfbb8fa33f49f9f3
dashboard link: https://syzkaller.appspot.com/bug?extid=8b5f151de2f35100bbc5
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12e22559e00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16056faee00000

If the result looks correct, please mark the bug fixed by replying with:

#syz fix: netfilter: ipset: use bitmap infrastructure completely

For information about bisection process see: https://goo.gl/tpsmEJ#bisection