From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.6 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id C042FC5B57D for ; Tue, 2 Jul 2019 06:18:25 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 8F108216C8 for ; Tue, 2 Jul 2019 06:18:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1562048305; bh=IxbrC5K9TC/Kv5iK1DLlG+8ia477FeG/8e82AOrQ8Rs=; h=Date:From:To:Cc:Subject:List-ID:From; b=vuw+u2CUoMQIeF4d4KG12hqJ5342Zc5N2ZwxB1Olnyvh66yq7r88uHMm9tbP7w6Sf 7e3nOZ+BEnG5YzKP0ziXFhRezZWmCFzhCal5BEkaVCSAhvAJC6MibFPnTGCd4BSd9K iUxrmcZnCJ5EtBAsOiNp65vCOI17ePIG/WDCquaE= Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726103AbfGBGSW (ORCPT ); Tue, 2 Jul 2019 02:18:22 -0400 Received: from mail.kernel.org ([198.145.29.99]:48946 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725802AbfGBGSV (ORCPT ); Tue, 2 Jul 2019 02:18:21 -0400 Received: from sol.localdomain (c-24-5-143-220.hsd1.ca.comcast.net [24.5.143.220]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id 26C4D2146F; Tue, 2 Jul 2019 06:18:20 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1562048300; bh=IxbrC5K9TC/Kv5iK1DLlG+8ia477FeG/8e82AOrQ8Rs=; h=Date:From:To:Cc:Subject:From; b=upBKdPKrGf3ce3dFHcbmuihW5ewLNuEpFOx9RngVAJX4wEyY+igBpcLxMwlC8vJYH 5Ecko+AcWok3bYJueLT1ZMhT/KXtWXyrzLYnWqDi2jrmH6tEpY2pFs8sk0RRKk7XHp KuYPLFr7QLtWNon8wDKYDu0BwlJIQXmRIcrPDIAc= Date: Mon, 1 Jul 2019 23:18:18 -0700 From: Eric Biggers To: dccp@vger.kernel.org, netdev@vger.kernel.org, Gerrit Renker , "David S. Miller" Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Reminder: 6 open syzbot bugs in "net/dccp" subsystem Message-ID: <20190702061818.GE27702@sol.localdomain> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.12.1 (2019-06-15) Sender: netdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org [This email was generated by a script. Let me know if you have any suggestions to make it better, or if you want it re-generated with the latest status.] Of the currently open syzbot reports against the upstream kernel, I've manually marked 6 of them as possibly being bugs in the "net/dccp" subsystem. I've listed these reports below, sorted by an algorithm that tries to list first the reports most likely to be still valid, important, and actionable. Of these 6 bugs, 1 was seen in mainline in the last week. If you believe a bug is no longer valid, please close the syzbot report by sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the original thread, as explained at https://goo.gl/tpsmEJ#status If you believe I misattributed a bug to the "net/dccp" subsystem, please let me know, and if possible forward the report to the correct people or mailing list. Here are the bugs: -------------------------------------------------------------------------------- Title: BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_hist_sample_rtt() Last occurred: 3 days ago Reported: 603 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id=0881c535c265ca965edc49c0ac3d0a9850d26eb1 Original thread: https://groups.google.com/d/msgid/syzkaller-bugs/94eb2c05611406f6a5055d38a272%40google.com This bug has a C reproducer. For some reason the original report email for this bug is missing from the LKML archive at lore.kernel.org, so my script couldn't check whether anyone has replied to it or not. The Google Groups link above should still work, though. Also try searching for the bug title. -------------------------------------------------------------------------------- Title: KASAN: use-after-free Read in ccid2_hc_tx_packet_recv Last occurred: 4 days ago Reported: 455 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id=31f032fe94df7aca6ce5d45455f6acefa26515e4 Original thread: https://lkml.kernel.org/lkml/0000000000003872fd0568da185f@google.com/T/#u This bug has a C reproducer. No one replied to the original thread for this bug. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+554ccde221001ab5479a@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/0000000000003872fd0568da185f@google.com -------------------------------------------------------------------------------- Title: KASAN: use-after-free Read in ccid_hc_tx_delete Last occurred: 45 days ago Reported: 308 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id=3e769c60cb2d1cab692fd541dae957b1fd31bde4 Original thread: https://lkml.kernel.org/lkml/000000000000de3c7705746dcbb7@google.com/T/#u This bug has a C reproducer. No one replied to the original thread for this bug. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+3967c1caf256f4d5aefe@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/000000000000de3c7705746dcbb7@google.com -------------------------------------------------------------------------------- Title: KMSAN: uninit-value in dccp_invalid_packet Last occurred: 437 days ago Reported: 438 days ago Branches: Mainline (with KMSAN patches) Dashboard link: https://syzkaller.appspot.com/bug?id=89916fdba284272cdbd0bf00de942f41d052c3f4 Original thread: https://lkml.kernel.org/lkml/0000000000000e2bf3056a36962d@google.com/T/#u This bug has a C reproducer. No one replied to the original thread for this bug. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+00763607efc31f91b276@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/0000000000000e2bf3056a36962d@google.com -------------------------------------------------------------------------------- Title: suspicious RCU usage at ./include/net/inet_sock.h:LINE Last occurred: 513 days ago Reported: 603 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id=78f9fe251de26a75a60690bc2384d62d2db32299 Original thread: https://groups.google.com/d/msgid/syzkaller-bugs/001a1140ad88c4f006055d3836d2%40google.com This bug has a C reproducer. For some reason the original report email for this bug is missing from the LKML archive at lore.kernel.org, so my script couldn't check whether anyone has replied to it or not. The Google Groups link above should still work, though. Also try searching for the bug title. -------------------------------------------------------------------------------- Title: WARNING: suspicious RCU usage in pid_task Last occurred: 280 days ago Reported: 380 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id=5b9f20bfdfb67155f627c5e13c258ca56eff026a Original thread: https://lkml.kernel.org/lkml/0000000000002b532a056ebcb3eb@google.com/T/#u This bug has a C reproducer. The original thread for this bug received 1 reply, 301 days ago. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+c2d4c3ae3fd90bbaf059@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/0000000000002b532a056ebcb3eb@google.com