From: patchwork-bot+netdevbpf@kernel.org
To: Eric Dumazet <edumazet@google.com>
Cc: davem@davemloft.net, kuba@kernel.org, pabeni@redhat.com,
horms@kernel.org, jhs@mojatatu.com, xiyou.wangcong@gmail.com,
jiri@resnulli.us, netdev@vger.kernel.org, eric.dumazet@gmail.com,
syzbot+5cf914f193dffde3bd3c@syzkaller.appspotmail.com,
yotam.gi@gmail.com
Subject: Re: [PATCH net] net/sched: act_ife: avoid possible NULL deref
Date: Thu, 22 Jan 2026 16:10:18 +0000 [thread overview]
Message-ID: <176909821810.1785789.2790553125370808839.git-patchwork-notify@kernel.org> (raw)
In-Reply-To: <20260121133724.3400020-1-edumazet@google.com>
Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@kernel.org>:
On Wed, 21 Jan 2026 13:37:24 +0000 you wrote:
> tcf_ife_encode() must make sure ife_encode() does not return NULL.
>
> syzbot reported:
>
> Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
> KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
> RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 net/ife/ife.c:166
> CPU: 3 UID: 0 PID: 8990 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full)
> Call Trace:
> <TASK>
> ife_encode_meta_u32+0x153/0x180 net/sched/act_ife.c:101
> tcf_ife_encode net/sched/act_ife.c:841 [inline]
> tcf_ife_act+0x1022/0x1de0 net/sched/act_ife.c:877
> tc_act include/net/tc_wrapper.h:130 [inline]
> tcf_action_exec+0x1c0/0xa20 net/sched/act_api.c:1152
> tcf_exts_exec include/net/pkt_cls.h:349 [inline]
> mall_classify+0x1a0/0x2a0 net/sched/cls_matchall.c:42
> tc_classify include/net/tc_wrapper.h:197 [inline]
> __tcf_classify net/sched/cls_api.c:1764 [inline]
> tcf_classify+0x7f2/0x1380 net/sched/cls_api.c:1860
> multiq_classify net/sched/sch_multiq.c:39 [inline]
> multiq_enqueue+0xe0/0x510 net/sched/sch_multiq.c:66
> dev_qdisc_enqueue+0x45/0x250 net/core/dev.c:4147
> __dev_xmit_skb net/core/dev.c:4262 [inline]
> __dev_queue_xmit+0x2998/0x46c0 net/core/dev.c:4798
>
> [...]
Here is the summary with links:
- [net] net/sched: act_ife: avoid possible NULL deref
https://git.kernel.org/netdev/net/c/27880b0b0d35
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
prev parent reply other threads:[~2026-01-22 16:10 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-01-21 13:37 [PATCH net] net/sched: act_ife: avoid possible NULL deref Eric Dumazet
2026-01-21 15:35 ` Jamal Hadi Salim
2026-01-22 16:10 ` patchwork-bot+netdevbpf [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=176909821810.1785789.2790553125370808839.git-patchwork-notify@kernel.org \
--to=patchwork-bot+netdevbpf@kernel.org \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=eric.dumazet@gmail.com \
--cc=horms@kernel.org \
--cc=jhs@mojatatu.com \
--cc=jiri@resnulli.us \
--cc=kuba@kernel.org \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=syzbot+5cf914f193dffde3bd3c@syzkaller.appspotmail.com \
--cc=xiyou.wangcong@gmail.com \
--cc=yotam.gi@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox