From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1751716AbeAWS6x (ORCPT <rfc822;w@1wt.eu>);
        Tue, 23 Jan 2018 13:58:53 -0500
Received: from mail-pg0-f45.google.com ([74.125.83.45]:39172 "EHLO
        mail-pg0-f45.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with ESMTP id S1751389AbeAWS6v (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Tue, 23 Jan 2018 13:58:51 -0500
X-Google-Smtp-Source: AH8x2245xNrKjKlLW2vz56moktpPEyhti+sSIAJhlhFk6obtR9L3Cd9PrnRPRKIiDw7pc1Tcr6ZjBQ==
Subject: Re: KASAN: slab-out-of-bounds Read in erspan_xmit
To: William Tu <u9012063@gmail.com>
Cc: syzbot <syzbot+9723f2d288e49b492cf0@syzkaller.appspotmail.com>,
        David Miller <davem@davemloft.net>,
        Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>, linux-kernel@vger.kernel.org,
        Linux Kernel Network Developers <netdev@vger.kernel.org>,
        syzkaller-bugs@googlegroups.com,
        Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>
References: <001a113e9f281d2cc3056362d99a@google.com>
 <7d3e467c-543c-7076-e900-25028a2c54b5@gmail.com>
 <CALDO+SYve37kS1C_NdLg_pO2B9zLuM_Mjv_mNV4h+phngxdV_A@mail.gmail.com>
 <CALDO+SYScmeUsG5fqngNAuYAZZbPjkfFERKHuKgry_r+W194SA@mail.gmail.com>
From: David Ahern <dsahern@gmail.com>
Message-ID: <32f1adea-f2e3-9f29-bb1b-1b2116f13903@gmail.com>
Date: Tue, 23 Jan 2018 11:58:56 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0)
 Gecko/20100101 Thunderbird/52.5.2
MIME-Version: 1.0
In-Reply-To: <CALDO+SYScmeUsG5fqngNAuYAZZbPjkfFERKHuKgry_r+W194SA@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On 1/23/18 11:50 AM, William Tu wrote:
> Hi,
> 
> I'm new to kasan and trying to follow this instruction to reproduce the issue:
> https://github.com/google/syzkaller/blob/master/docs/executing_syzkaller_programs.md
> 
> After re-compile my kernel with KASAN related config enable, I run
> $ ./syz-execprog -cover=0 -repeat=0 -procs=16 program
> 
> I wonder does the "program" mean the repro.c.txt? or I should compile
> it to binary?
> # gcc -o program repro.c.txt
> # ./syz-execprog myprogram
> 2018/01/23 10:45:19 parsed 0 programs
> 
> And how to use the "repro.syz.txt"?
> It seems to have some command like "syz_emit_ethernet" to generate packet.
> but I have no clue where to run it. Maybe I'm still missing something?
> 

In the past I have only compiled a kernel with KASAN, compiled the
reproducer program and run it in a VM. No need for the syzbot overhead.