From: Eric Biggers <ebiggers@kernel.org>
To: linux-hams@vger.kernel.org, netdev@vger.kernel.org,
Ralf Baechle <ralf@linux-mips.org>,
"David S. Miller" <davem@davemloft.net>,
Cong Wang <xiyou.wangcong@gmail.com>
Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com
Subject: Reminder: 13 open syzbot bugs in "net/netrom" subsystem
Date: Tue, 23 Jul 2019 18:47:23 -0700 [thread overview]
Message-ID: <20190724014723.GJ643@sol.localdomain> (raw)
[This email was generated by a script. Let me know if you have any suggestions
to make it better, or if you want it re-generated with the latest status.]
Of the currently open syzbot reports against the upstream kernel, I've manually
marked 13 of them as possibly being bugs in the "net/netrom" subsystem. I've
listed these reports below, sorted by an algorithm that tries to list first the
reports most likely to be still valid, important, and actionable.
Of these 13 bugs, 8 were seen in mainline in the last week.
Of these 13 bugs, 4 were bisected to commits from the following person:
Cong Wang <xiyou.wangcong@gmail.com>
If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status
If you believe I misattributed a bug to the "net/netrom" subsystem, please let
me know, and if possible forward the report to the correct people or mailing
list.
Here are the bugs:
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in nr_insert_socket
Last occurred: 0 days ago
Reported: 5 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=44bc727f1e55f249c97e876dd9163484c889b3ad
Original thread: https://lkml.kernel.org/lkml/00000000000035f65d058df39aed@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit c8c8218ec5af5d2598381883acbefbf604e56b5e
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Jun 27 21:30:58 2019 +0000
netrom: fix a memory leak in nr_rx_frame()
The original thread for this bug has received 1 reply, 5 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+9399c158fcc09b21d0d2@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 5 days ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/00000000000035f65d058df39aed@google.com
--------------------------------------------------------------------------------
Title: WARNING: refcount bug in nr_rx_frame
Last occurred: 0 days ago
Reported: 5 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=4ffee6ac0fb5068b34959147b4d492bad89e98ab
Original thread: https://lkml.kernel.org/lkml/000000000000222512058df13ac9@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit c8c8218ec5af5d2598381883acbefbf604e56b5e
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Jun 27 21:30:58 2019 +0000
netrom: fix a memory leak in nr_rx_frame()
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+622bdabb128acc33427d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000222512058df13ac9@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in lock_sock_nested
Last occurred: 3 days ago
Reported: 202 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=6c137905024f86513297b035845acecb55fa9dab
Original thread: https://lkml.kernel.org/lkml/0000000000007a5aad057e7748c9@google.com/T/#u
This bug has a syzkaller reproducer only.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+500c69d1e21d970e461b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000007a5aad057e7748c9@google.com
--------------------------------------------------------------------------------
Title: memory leak in nr_create
Last occurred: 1 day ago
Reported: 57 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=24be997a573ef9d497d6d7302518779b75d8119a
Original thread: https://lkml.kernel.org/lkml/0000000000009412c60589e804d8@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+10f1194569953b72f1ae@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009412c60589e804d8@google.com
--------------------------------------------------------------------------------
Title: WARNING: held lock freed in nr_release
Last occurred: 0 days ago
Reported: 6 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=5c3fd3a41060d8d775822814f4651f86a68eb0aa
Original thread: https://lkml.kernel.org/lkml/00000000000015d943058ddcb1b3@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit c8c8218ec5af5d2598381883acbefbf604e56b5e
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Jun 27 21:30:58 2019 +0000
netrom: fix a memory leak in nr_rx_frame()
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a34e5f3d0300163f0c87@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000015d943058ddcb1b3@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in nr_release
Last occurred: 1 day ago
Reported: 45 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=5332f4a9ce674d6378f0bd91af752d2be80f3aba
Original thread: https://lkml.kernel.org/lkml/0000000000007e8b70058acbd60f@google.com/T/#u
This bug has a syzkaller reproducer only.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6eaef7158b19e3fec3a0@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000007e8b70058acbd60f@google.com
--------------------------------------------------------------------------------
Title: WARNING: refcount bug in nr_insert_socket
Last occurred: 0 days ago
Reported: 14 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=521a764b3fc8145496efa50600dfe2a67e49b90b
Original thread: https://lkml.kernel.org/lkml/0000000000000595ea058d411c35@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+ec1fd464d849d91c3665@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000595ea058d411c35@google.com
--------------------------------------------------------------------------------
Title: general protection fault in prepare_to_wait
Last occurred: 18 days ago
Reported: 201 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=c670fb9da2ce08f7b5101baa9426083b39ee9f90
Original thread: https://lkml.kernel.org/lkml/000000000000fa6a2c057e8b7064@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+55f9d3e51d49e20b2ce5@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000fa6a2c057e8b7064@google.com
--------------------------------------------------------------------------------
Title: WARNING: held lock freed! (2)
Last occurred: 18 days ago
Reported: 15 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=e19c72fff579b255a707a12853df187bdfc81ea3
Original thread: https://lkml.kernel.org/lkml/000000000000c3810f058d30910b@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit c8c8218ec5af5d2598381883acbefbf604e56b5e
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Jun 27 21:30:58 2019 +0000
netrom: fix a memory leak in nr_rx_frame()
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e54ed2cb16c6da22c549@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000c3810f058d30910b@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Write in nr_insert_socket
Last occurred: 1 day ago
Reported: 0 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=e2f70927690b76d55da8d228e55832274d7c0bd0
Original thread: https://lkml.kernel.org/lkml/0000000000006241fe058e5b9490@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug has received 1 reply, 9 hours ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5e54e8e637bc970bbd2b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 9 hours ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/0000000000006241fe058e5b9490@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in nr_rx_frame (2)
Last occurred: 4 days ago
Reported: 0 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=35d6bc3fe6f43d63357b5d70379d196aa420d6b7
Original thread: https://lkml.kernel.org/lkml/000000000000e42667058e554371@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug has received 1 reply, 16 hours ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+701728447042217b67c1@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 16 hours ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/000000000000e42667058e554371@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in refcount_inc_not_zero_checked (2)
Last occurred: 97 days ago
Reported: 129 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=b0192a79bb2d222d3e723d7db60dfb5e0ec0e570
Original thread: https://lkml.kernel.org/lkml/000000000000eea12405843bc43c@google.com/T/#u
This bug has a syzkaller reproducer only.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+eff6b596cc8194e2f029@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000eea12405843bc43c@google.com
--------------------------------------------------------------------------------
Title: memory leak in nr_loopback_queue
Last occurred: 55 days ago
Reported: 55 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=20e5b6ff68ec36b9ba8ac5225e560a3a563f343a
Original thread: https://lkml.kernel.org/lkml/000000000000a7f012058a0c7a65@google.com/T/#u
This bug has a syzkaller reproducer only.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+470d1a4a7b7a7c225881@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000a7f012058a0c7a65@google.com
next reply other threads:[~2019-07-24 1:47 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-07-24 1:47 Eric Biggers [this message]
2019-07-24 17:02 ` Reminder: 13 open syzbot bugs in "net/netrom" subsystem Cong Wang
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190724014723.GJ643@sol.localdomain \
--to=ebiggers@kernel.org \
--cc=davem@davemloft.net \
--cc=linux-hams@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=ralf@linux-mips.org \
--cc=syzkaller-bugs@googlegroups.com \
--cc=xiyou.wangcong@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.