From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Biggers Date: Wed, 24 Jul 2019 02:28:10 +0000 Subject: Reminder: 6 open syzbot bugs in "net/dccp" subsystem Message-Id: <20190724022810.GP643@sol.localdomain> List-Id: References: <20190702061818.GE27702@sol.localdomain> In-Reply-To: <20190702061818.GE27702@sol.localdomain> MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: quoted-printable To: dccp@vger.kernel.org [This email was generated by a script. Let me know if you have any suggest= ions to make it better, or if you want it re-generated with the latest status.] Of the currently open syzbot reports against the upstream kernel, I've manu= ally marked 6 of them as possibly being bugs in the "net/dccp" subsystem. I've listed these reports below, sorted by an algorithm that tries to list first= the reports most likely to be still valid, important, and actionable. If you believe a bug is no longer valid, please close the syzbot report by sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the original thread, as explained at https://goo.gl/tpsmEJ#status If you believe I misattributed a bug to the "net/dccp" subsystem, please le= t me know, and if possible forward the report to the correct people or mailing l= ist. Here are the bugs: ---------------------------------------------------------------------------= ----- Title: KASAN: use-after-free Read in ccid2_hc_tx_packet_recv Last occurred: 26 days ago Reported: 477 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id1f032fe94df7aca6ce5= d45455f6acefa26515e4 Original thread: https://lkml.kernel.org/lkml/0000000000003872fd0568da18= 5f@google.com/T/#u This bug has a C reproducer. No one replied to the original thread for this bug. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+554ccde221001ab5479a@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to = reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/0000000000003872fd0568da185f@google.com ---------------------------------------------------------------------------= ----- Title: BUG: please report to dccp@vger.kernel.org =3D> prev = =3D 0, last =3D 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_hist_= sample_rtt() Last occurred: 21 days ago Reported: 625 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id=0881c535c265ca965e= dc49c0ac3d0a9850d26eb1 Original thread: https://groups.google.com/d/msgid/syzkaller-bugs/94eb2c= 05611406f6a5055d38a272%40google.com This bug has a C reproducer. For some reason the original report email for this bug is missing from the = LKML archive at lore.kernel.org, so my script couldn't check whether anyone has replied to it or not. The Google Groups link above should still work, thou= gh.=20 Also try searching for the bug title. ---------------------------------------------------------------------------= ----- Title: KASAN: use-after-free Read in ccid_hc_tx_delete Last occurred: 66 days ago Reported: 330 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id>769c60cb2d1cab692f= d541dae957b1fd31bde4 Original thread: https://lkml.kernel.org/lkml/000000000000de3c7705746dcb= b7@google.com/T/#u This bug has a C reproducer. No one replied to the original thread for this bug. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+3967c1caf256f4d5aefe@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to = reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/000000000000de3c7705746dcbb7@google.com ---------------------------------------------------------------------------= ----- Title: KMSAN: uninit-value in dccp_invalid_packet Last occurred: 458 days ago Reported: 460 days ago Branches: Mainline (with KMSAN patches) Dashboard link: https://syzkaller.appspot.com/bug?id=89916fdba284272cdb= d0bf00de942f41d052c3f4 Original thread: https://lkml.kernel.org/lkml/0000000000000e2bf3056a3696= 2d@google.com/T/#u This bug has a C reproducer. No one replied to the original thread for this bug. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+00763607efc31f91b276@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to = reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/0000000000000e2bf3056a36962d@google.com ---------------------------------------------------------------------------= ----- Title: suspicious RCU usage at ./include/net/inet_sock.h:LINE Last occurred: 535 days ago Reported: 625 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?idxf9fe251de26a75a606= 90bc2384d62d2db32299 Original thread: https://groups.google.com/d/msgid/syzkaller-bugs/001a11= 40ad88c4f006055d3836d2%40google.com This bug has a C reproducer. For some reason the original report email for this bug is missing from the = LKML archive at lore.kernel.org, so my script couldn't check whether anyone has replied to it or not. The Google Groups link above should still work, thou= gh.=20 Also try searching for the bug title. ---------------------------------------------------------------------------= ----- Title: WARNING: suspicious RCU usage in pid_task Last occurred: 302 days ago Reported: 402 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id[9f20bfdfb67155f627= c5e13c258ca56eff026a Original thread: https://lkml.kernel.org/lkml/0000000000002b532a056ebcb3= eb@google.com/T/#u This bug has a C reproducer. The original thread for this bug received 1 reply, 323 days ago. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+c2d4c3ae3fd90bbaf059@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to = reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/0000000000002b532a056ebcb3eb@google.com