Received-SPF: pass (google.com: domain of linux-kernel+bounces-180549-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) client-ip=2604:1380:4601:e00::3;
Subject: Re: [syzbot] [bpf?] KASAN: stack-out-of-bounds Read in hash
To: syzbot <syzbot+9459b5d7fab774cf182f@syzkaller.appspotmail.com>,
 bpf@vger.kernel.org
References: <000000000000485a2d06187fc7a7@google.com>
Cc: alexei.starovoitov@gmail.com, andrii@kernel.org, ast@kernel.org,
 daniel@iogearbox.net, eddyz87@gmail.com, haoluo@google.com,
 joannekoong@fb.com, john.fastabend@gmail.com, jolsa@kernel.org,
 kpsingh@kernel.org, linux-kernel@vger.kernel.org, martin.lau@linux.dev,
 netdev@vger.kernel.org, sdf@google.com, song@kernel.org,
 syzkaller-bugs@googlegroups.com, yonghong.song@linux.dev
From: Hou Tao <houtao@huaweicloud.com>
Message-ID: <e8b52077-f0f2-bfa7-a170-09202c86dd24@huaweicloud.com>
Date: Thu, 16 May 2024 09:35:50 +0800
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
 Thunderbird/78.6.0
Precedence: bulk
MIME-Version: 1.0
In-Reply-To: <000000000000485a2d06187fc7a7@google.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Content-Language: en-US


On 5/15/2024 11:29 PM, syzbot wrote:
> syzbot has bisected this issue to:
>
> commit 9330986c03006ab1d33d243b7cfe598a7a3c1baa
> Author: Joanne Koong <joannekoong@fb.com>
> Date:   Wed Oct 27 23:45:00 2021 +0000
>
>     bpf: Add bloom filter map implementation
>
> bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=1543bd5c980000
> start commit:   443574b03387 riscv, bpf: Fix kfunc parameters incompatibil..
> git tree:       bpf
> final oops:     https://syzkaller.appspot.com/x/report.txt?x=1743bd5c980000
> console output: https://syzkaller.appspot.com/x/log.txt?x=1343bd5c980000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=6fb1be60a193d440
> dashboard link: https://syzkaller.appspot.com/bug?extid=9459b5d7fab774cf182f
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=13d86795180000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=143eff76180000
>
> Reported-by: syzbot+9459b5d7fab774cf182f@syzkaller.appspotmail.com
> Fixes: 9330986c0300 ("bpf: Add bloom filter map implementation")
>
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection
>
> .

#syz fix: bpf: Check bloom filter map value size