* Re: [PATCH next 0/3] blackhole device to invalidate dst
From: Mahesh Bandewar (महेश बंडेवार) @ 2019-06-25 4:17 UTC (permalink / raw)
To: Michael Chan
Cc: Netdev, Eric Dumazet, David Miller, Daniel Axtens,
Mahesh Bandewar
In-Reply-To: <CACKFLinDN+cOEBfm9wnoXU-iDDtZZpCu+NPMHs9aCQ1RjJcNBw@mail.gmail.com>
On Mon, Jun 24, 2019 at 9:00 PM Michael Chan <michael.chan@broadcom.com> wrote:
>
> On Fri, Jun 21, 2019 at 5:45 PM Mahesh Bandewar <maheshb@google.com> wrote:
>
> > Well, I'm not a TCP expert and though we have experienced
> > these corner cases in our environment, I could not reproduce
> > this case reliably in my test setup to try this fix myself.
> > However, Michael Chan <michael.chan@broadcom.com> had a setup
> > where these fixes helped him mitigate the issue and not cause
> > the crash.
> >
>
> I will ask the lab to test these patches tomorrow. Thanks.
Thank you Michael.
^ permalink raw reply
* [iproute2-next v6] tipc: support interface name when activating UDP bearer
From: Hoang Le @ 2019-06-25 4:34 UTC (permalink / raw)
To: dsahern, jon.maloy, maloy, ying.xue, netdev, tipc-discussion
Support for indicating interface name has an ip address in parallel
with specifying ip address when activating UDP bearer.
This liberates the user from keeping track of the current ip address
for each device.
Old command syntax:
$tipc bearer enable media udp name NAME localip IP
New command syntax:
$tipc bearer enable media udp name NAME [localip IP|dev DEVICE]
v2:
- Removed initial value for fd
- Fixed the returning value for cmd_bearer_validate_and_get_addr
to make its consistent with using: zero or non-zero
v3: - Switch to use helper 'get_ifname' to retrieve interface name
v4: - Replace legacy SIOCGIFADDR by netlink
v5: - Fix leaky rtnl_handle
Acked-by: Ying Xue <ying.xue@windriver.com>
Signed-off-by: Hoang Le <hoang.h.le@dektech.com.au>
---
tipc/bearer.c | 94 ++++++++++++++++++++++++++++++++++++++++++++++++---
1 file changed, 89 insertions(+), 5 deletions(-)
diff --git a/tipc/bearer.c b/tipc/bearer.c
index 1f3a4d44441e..4470819e4a96 100644
--- a/tipc/bearer.c
+++ b/tipc/bearer.c
@@ -19,10 +19,12 @@
#include <linux/tipc_netlink.h>
#include <linux/tipc.h>
#include <linux/genetlink.h>
+#include <linux/if.h>
#include <libmnl/libmnl.h>
#include <sys/socket.h>
+#include "utils.h"
#include "cmdl.h"
#include "msg.h"
#include "bearer.h"
@@ -68,7 +70,7 @@ static void cmd_bearer_enable_l2_help(struct cmdl *cmdl, char *media)
static void cmd_bearer_enable_udp_help(struct cmdl *cmdl, char *media)
{
fprintf(stderr,
- "Usage: %s bearer enable [OPTIONS] media %s name NAME localip IP [UDP OPTIONS]\n\n"
+ "Usage: %s bearer enable [OPTIONS] media %s name NAME [localip IP|device DEVICE] [UDP OPTIONS]\n\n"
"OPTIONS\n"
" domain DOMAIN - Discovery domain\n"
" priority PRIORITY - Bearer priority\n\n"
@@ -119,6 +121,76 @@ static int generate_multicast(short af, char *buf, int bufsize)
return 0;
}
+static struct ifreq ifr;
+static int nl_dump_req_filter(struct nlmsghdr *nlh, int reqlen)
+{
+ struct ifaddrmsg *ifa = NLMSG_DATA(nlh);
+
+ ifa->ifa_index = ifr.ifr_ifindex;
+
+ return 0;
+}
+
+static int nl_dump_addr_filter(struct nlmsghdr *nlh, void *arg)
+{
+ struct ifaddrmsg *ifa = NLMSG_DATA(nlh);
+ char *r_addr = (char *)arg;
+ int len = nlh->nlmsg_len;
+ struct rtattr *addr_attr;
+
+ if (ifr.ifr_ifindex != ifa->ifa_index)
+ return 0;
+
+ if (strlen(r_addr) > 0)
+ return 0;
+
+ addr_attr = parse_rtattr_one(IFA_ADDRESS, IFA_RTA(ifa),
+ len - NLMSG_LENGTH(sizeof(*ifa)));
+ if (!addr_attr)
+ return 0;
+
+ if (ifa->ifa_family == AF_INET) {
+ struct sockaddr_in ip4addr;
+ memcpy(&ip4addr.sin_addr, RTA_DATA(addr_attr),
+ sizeof(struct in_addr));
+ inet_ntop(AF_INET, &ip4addr.sin_addr, r_addr,
+ INET_ADDRSTRLEN);
+ } else if (ifa->ifa_family == AF_INET6) {
+ struct sockaddr_in6 ip6addr;
+ memcpy(&ip6addr.sin6_addr, RTA_DATA(addr_attr),
+ sizeof(struct in6_addr));
+ inet_ntop(AF_INET6, &ip6addr.sin6_addr, r_addr,
+ INET6_ADDRSTRLEN);
+ }
+ return 0;
+}
+
+static int cmd_bearer_validate_and_get_addr(const char *name, char *r_addr)
+{
+ struct rtnl_handle rth = { .fd = -1 };
+ int err = -1;
+
+ memset(&ifr, 0, sizeof(ifr));
+ if (!name || !r_addr || get_ifname(ifr.ifr_name, name))
+ return err;
+
+ ifr.ifr_ifindex = ll_name_to_index(ifr.ifr_name);
+ if (!ifr.ifr_ifindex)
+ return err;
+
+ /* remove from cache */
+ ll_drop_by_index(ifr.ifr_ifindex);
+
+ if ((err = rtnl_open(&rth, 0)) < 0)
+ return err;
+
+ if ((err = rtnl_addrdump_req(&rth, AF_UNSPEC, nl_dump_req_filter)) > 0)
+ err = rtnl_dump_filter(&rth, nl_dump_addr_filter, r_addr);
+
+ rtnl_close(&rth);
+ return err;
+}
+
static int nl_add_udp_enable_opts(struct nlmsghdr *nlh, struct opt *opts,
struct cmdl *cmdl)
{
@@ -136,13 +208,25 @@ static int nl_add_udp_enable_opts(struct nlmsghdr *nlh, struct opt *opts,
.ai_family = AF_UNSPEC,
.ai_socktype = SOCK_DGRAM
};
+ char addr[INET6_ADDRSTRLEN] = {0};
- if (!(opt = get_opt(opts, "localip"))) {
- fprintf(stderr, "error, udp bearer localip missing\n");
- cmd_bearer_enable_udp_help(cmdl, "udp");
+ opt = get_opt(opts, "device");
+ if (opt && cmd_bearer_validate_and_get_addr(opt->val, addr) < 0) {
+ fprintf(stderr, "error, no device name available\n");
return -EINVAL;
}
- locip = opt->val;
+
+ if (strlen(addr) > 0) {
+ locip = addr;
+ } else {
+ opt = get_opt(opts, "localip");
+ if (!opt) {
+ fprintf(stderr, "error, udp bearer localip/device missing\n");
+ cmd_bearer_enable_udp_help(cmdl, "udp");
+ return -EINVAL;
+ }
+ locip = opt->val;
+ }
if ((opt = get_opt(opts, "remoteip")))
remip = opt->val;
--
2.17.1
^ permalink raw reply related
* Re: [PATCH 1/2] tty: ldisc: Fix misuse of proc_dointvec "ldisc_autoload"
From: Eiichi Tsukata @ 2019-06-25 4:40 UTC (permalink / raw)
To: Greg KH; +Cc: jslaby, davem, kuznet, yoshfuji, linux-kernel, netdev
In-Reply-To: <20190625033216.GA11902@kroah.com>
On 2019/06/25 12:32, Greg KH wrote:
> On Tue, Jun 25, 2019 at 12:08:00PM +0900, Eiichi Tsukata wrote:
>> /proc/sys/dev/tty/ldisc_autoload assumes given value to be 0 or 1. Use
>> proc_dointvec_minmax instead of proc_dointvec.
>>
>> Fixes: 7c0cca7c847e "(tty: ldisc: add sysctl to prevent autoloading of ldiscs)"
>> Signed-off-by: Eiichi Tsukata <devel@etsukata.com>
>> ---
>> drivers/tty/tty_ldisc.c | 2 +-
>> 1 file changed, 1 insertion(+), 1 deletion(-)
>>
>> diff --git a/drivers/tty/tty_ldisc.c b/drivers/tty/tty_ldisc.c
>> index e38f104db174..a8ea7a35c94e 100644
>> --- a/drivers/tty/tty_ldisc.c
>> +++ b/drivers/tty/tty_ldisc.c
>> @@ -863,7 +863,7 @@ static struct ctl_table tty_table[] = {
>> .data = &tty_ldisc_autoload,
>> .maxlen = sizeof(tty_ldisc_autoload),
>> .mode = 0644,
>> - .proc_handler = proc_dointvec,
>> + .proc_handler = proc_dointvec_minmax,
>> .extra1 = &zero,
>> .extra2 = &one,
>
> Ah, nice catch. But this really isn't an issue as if you use a bigger
> value, things will not "break", right?
>
Someone may misuse -1 to disable ldisc autoload, but basically it does not
"break".
Thanks,
Eiichi
^ permalink raw reply
* Re: [PATCH] p54usb: Fix race between disconnect and firmware loading
From: Kalle Valo @ 2019-06-25 4:43 UTC (permalink / raw)
To: Alan Stern
Cc: Christian Lamparter, syzbot, davem, andreyknvl, syzkaller-bugs,
Kernel development list, USB list, linux-wireless, netdev
In-Reply-To: <Pine.LNX.4.44L0.1905201042110.1498-100000@iolanthe.rowland.org>
Alan Stern <stern@rowland.harvard.edu> wrote:
> The syzbot fuzzer found a bug in the p54 USB wireless driver. The
> issue involves a race between disconnect and the firmware-loader
> callback routine, and it has several aspects.
>
> One big problem is that when the firmware can't be loaded, the
> callback routine tries to unbind the driver from the USB _device_ (by
> calling device_release_driver) instead of from the USB _interface_ to
> which it is actually bound (by calling usb_driver_release_interface).
>
> The race involves access to the private data structure. The driver's
> disconnect handler waits for a completion that is signalled by the
> firmware-loader callback routine. As soon as the completion is
> signalled, you have to assume that the private data structure may have
> been deallocated by the disconnect handler -- even if the firmware was
> loaded without errors. However, the callback routine does access the
> private data several times after that point.
>
> Another problem is that, in order to ensure that the USB device
> structure hasn't been freed when the callback routine runs, the driver
> takes a reference to it. This isn't good enough any more, because now
> that the callback routine calls usb_driver_release_interface, it has
> to ensure that the interface structure hasn't been freed.
>
> Finally, the driver takes an unnecessary reference to the USB device
> structure in the probe function and drops the reference in the
> disconnect handler. This extra reference doesn't accomplish anything,
> because the USB core already guarantees that a device structure won't
> be deallocated while a driver is still bound to any of its interfaces.
>
> To fix these problems, this patch makes the following changes:
>
> Call usb_driver_release_interface() rather than
> device_release_driver().
>
> Don't signal the completion until after the important
> information has been copied out of the private data structure,
> and don't refer to the private data at all thereafter.
>
> Lock udev (the interface's parent) before unbinding the driver
> instead of locking udev->parent.
>
> During the firmware loading process, take a reference to the
> USB interface instead of the USB device.
>
> Don't take an unnecessary reference to the device during probe
> (and then don't drop it during disconnect).
>
> Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
> Reported-and-tested-by: syzbot+200d4bb11b23d929335f@syzkaller.appspotmail.com
> CC: <stable@vger.kernel.org>
> Acked-by: Christian Lamparter <chunkeey@gmail.com>
Patch applied to wireless-drivers-next.git, thanks.
6e41e2257f10 p54usb: Fix race between disconnect and firmware loading
--
https://patchwork.kernel.org/patch/10951527/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
^ permalink raw reply
* Re: [PATCH] net: stmmac: add sanity check to device_property_read_u32_array call
From: Martin Blumenstingl @ 2019-06-25 4:44 UTC (permalink / raw)
To: Colin Ian King
Cc: alexandre.torgue, davem, joabreu, kernel-janitors,
linux-arm-kernel, linux-kernel, linux-stm32, mcoquelin.stm32,
netdev, peppe.cavallaro
In-Reply-To: <CAFBinCDmYVPDMcwAAYhMfxxuTsG=xunduN58_8e20zE_Mhmb7Q@mail.gmail.com>
Hi Colin,
On Thu, Jun 20, 2019 at 3:34 AM Martin Blumenstingl
<martin.blumenstingl@googlemail.com> wrote:
>
> Hi Colin,
>
> On Wed, Jun 19, 2019 at 8:55 AM Colin Ian King <colin.king@canonical.com> wrote:
> >
> > On 19/06/2019 06:13, Martin Blumenstingl wrote:
> > > Hi Colin,
> > >
> > >> Currently the call to device_property_read_u32_array is not error checked
> > >> leading to potential garbage values in the delays array that are then used
> > >> in msleep delays. Add a sanity check to the property fetching.
> > >>
> > >> Addresses-Coverity: ("Uninitialized scalar variable")
> > >> Signed-off-by: Colin Ian King <colin.king@canonical.com>
> > > I have also sent a patch [0] to fix initialize the array.
> > > can you please look at my patch so we can work out which one to use?
> > >
> > > my concern is that the "snps,reset-delays-us" property is optional,
> > > the current dt-bindings documentation states that it's a required
> > > property. in reality it isn't, there are boards (two examples are
> > > mentioned in my patch: [0]) without it.
> > >
> > > so I believe that the resulting behavior has to be:
> > > 1. don't delay if this property is missing (instead of delaying for
> > > <garbage value> ms)
> > > 2. don't error out if this property is missing
> > >
> > > your patch covers #1, can you please check whether #2 is also covered?
> > > I tested case #2 when submitting my patch and it worked fine (even
> > > though I could not reproduce the garbage values which are being read
> > > on some boards)
in the meantime I have tested your patch.
when I don't set the "snps,reset-delays-us" property then I get the
following error:
invalid property snps,reset-delays-us
my patch has landed in the meantime: [0]
how should we proceed with your patch?
Martin
[0] https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c?id=84ce4d0f9f55b4f4ca4d4edcbb54a23d9dad1aae
^ permalink raw reply
* Re: [PATCH] perf cs-etm: Improve completeness for kernel address space
From: Leo Yan @ 2019-06-25 4:51 UTC (permalink / raw)
To: Arnaldo Carvalho de Melo
Cc: Mathieu Poirier, Linux Kernel Mailing List, linux-arm-kernel,
netdev, bpf, Alexander Shishkin, Jiri Olsa, Namhyung Kim,
Peter Zijlstra, Suzuki Poulouse, Coresight ML
In-Reply-To: <20190624190009.GE4181@kernel.org>
Hi Arnaldo,
On Mon, Jun 24, 2019 at 04:00:09PM -0300, Arnaldo Carvalho de Melo wrote:
[...]
> > > > diff --git a/tools/perf/util/cs-etm.c b/tools/perf/util/cs-etm.c
> > > > index 0c7776b51045..ae831f836c70 100644
> > > > --- a/tools/perf/util/cs-etm.c
> > > > +++ b/tools/perf/util/cs-etm.c
> > > > @@ -613,10 +613,34 @@ static void cs_etm__free(struct perf_session *session)
> > > > static u8 cs_etm__cpu_mode(struct cs_etm_queue *etmq, u64 address)
> > > > {
> > > > struct machine *machine;
> > > > + u64 fixup_kernel_start = 0;
> > > > + const char *arch;
> > > >
> > > > machine = etmq->etm->machine;
> > > > + arch = perf_env__arch(machine->env);
> > > >
> > > > - if (address >= etmq->etm->kernel_start) {
> > > > + /*
> > > > + * Since arm and arm64 specify some memory regions prior to
> > > > + * 'kernel_start', kernel addresses can be less than 'kernel_start'.
> > > > + *
> > > > + * For arm architecture, the 16MB virtual memory space prior to
> > > > + * 'kernel_start' is allocated to device modules, a PMD table if
> > > > + * CONFIG_HIGHMEM is enabled and a PGD table.
> > > > + *
> > > > + * For arm64 architecture, the root PGD table, device module memory
> > > > + * region and BPF jit region are prior to 'kernel_start'.
> > > > + *
> > > > + * To reflect the complete kernel address space, compensate these
> > > > + * pre-defined regions for kernel start address.
> > > > + */
> > > > + if (!strcmp(arch, "arm64"))
> > > > + fixup_kernel_start = etmq->etm->kernel_start -
> > > > + ARM64_PRE_START_SIZE;
> > > > + else if (!strcmp(arch, "arm"))
> > > > + fixup_kernel_start = etmq->etm->kernel_start -
> > > > + ARM_PRE_START_SIZE;
> > >
> > > I will test your work but from a quick look wouldn't it be better to
> > > have a single define name here? From looking at the modifications you
> > > did to Makefile.config there doesn't seem to be a reason to have two.
> >
> > Thanks for suggestion. I changed to use single define
> > ARM_PRE_START_SIZE and sent patch v2 [1].
> >
> > If possible, please test patch v2.
> >
> > Thanks,
> > Leo Yan
>
> So just for the record, I'm waiting for Mathieu on this one, i.e. for
> him to test/ack v3.
Yes, this makes sense. I'd like to get Mathieu's green light as well,
it needs to take much time to build llvm/clang on SBC, so it's no rush.
Thanks,
Leo Yan
^ permalink raw reply
* Re: [PATCH] rtlwifi: remove redundant assignment to variable badworden
From: Kalle Valo @ 2019-06-25 4:59 UTC (permalink / raw)
To: Colin King
Cc: Ping-Ke Shih, David S . Miller, linux-wireless, netdev,
kernel-janitors, linux-kernel
In-Reply-To: <20190530184044.8479-1-colin.king@canonical.com>
Colin King <colin.king@canonical.com> wrote:
> From: Colin Ian King <colin.king@canonical.com>
>
> The variable badworden is assigned with a value that is never read and
> it is re-assigned a new value immediately afterwards. The assignment is
> redundant and can be removed.
>
> Addresses-Coverity: ("Unused value")
> Signed-off-by: Colin Ian King <colin.king@canonical.com>
> Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
Patch applied to wireless-drivers-next.git, thanks.
5315f9d40191 rtlwifi: remove redundant assignment to variable badworden
--
https://patchwork.kernel.org/patch/10969175/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
^ permalink raw reply
* Re: [PATCH] rtlwifi: remove redundant assignment to variable k
From: Kalle Valo @ 2019-06-25 5:00 UTC (permalink / raw)
To: Colin King
Cc: Ping-Ke Shih, David S . Miller, linux-wireless, netdev,
kernel-janitors, linux-kernel
In-Reply-To: <20190531141412.18632-1-colin.king@canonical.com>
Colin King <colin.king@canonical.com> wrote:
> From: Colin Ian King <colin.king@canonical.com>
>
> The assignment of 0 to variable k is never read once we break out of
> the loop, so the assignment is redundant and can be removed.
>
> Addresses-Coverity: ("Unused value")
> Signed-off-by: Colin Ian King <colin.king@canonical.com>
Patch applied to wireless-drivers-next.git, thanks.
f0822dfc5887 rtlwifi: remove redundant assignment to variable k
--
https://patchwork.kernel.org/patch/10970261/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
^ permalink raw reply
* Re: [PATCH v4 0/7] Hexdump Enhancements
From: Joe Perches @ 2019-06-25 5:01 UTC (permalink / raw)
To: Alastair D'Silva, alastair
Cc: Jani Nikula, Joonas Lahtinen, Rodrigo Vivi, David Airlie,
Daniel Vetter, Dan Carpenter, Karsten Keil, Jassi Brar,
Tom Lendacky, David S. Miller, Jose Abreu, Kalle Valo,
Stanislaw Gruszka, Benson Leung, Enric Balletbo i Serra,
James E.J. Bottomley, Martin K. Petersen, Greg Kroah-Hartman,
Alexander Viro, Petr Mladek, Sergey Senozhatsky, Steven Rostedt,
David Laight, Andrew Morton, intel-gfx, dri-devel, linux-kernel,
netdev, ath10k, linux-wireless, linux-scsi, linux-fbdev, devel,
linux-fsdevel
In-Reply-To: <20190625031726.12173-1-alastair@au1.ibm.com>
On Tue, 2019-06-25 at 13:17 +1000, Alastair D'Silva wrote:
> From: Alastair D'Silva <alastair@d-silva.org>
>
> Apologies for the large CC list, it's a heads up for those responsible
> for subsystems where a prototype change in generic code causes a change
> in those subsystems.
[]
> The default behaviour of hexdump is unchanged, however, the prototype
> for hex_dump_to_buffer() has changed, and print_hex_dump() has been
> renamed to print_hex_dump_ext(), with a wrapper replacing it for
> compatibility with existing code, which would have been too invasive to
> change.
I believe this cover letter is misleading.
The point of the wrapper is to avoid unnecessary changes
in existing
code.
^ permalink raw reply
* Re: [PATCH v4 4/7] lib/hexdump.c: Replace ascii bool in hex_dump_to_buffer with flags
From: Joe Perches @ 2019-06-25 5:01 UTC (permalink / raw)
To: Alastair D'Silva, alastair
Cc: Jani Nikula, Joonas Lahtinen, Rodrigo Vivi, David Airlie,
Daniel Vetter, Dan Carpenter, Karsten Keil, Jassi Brar,
Tom Lendacky, David S. Miller, Jose Abreu, Kalle Valo,
Stanislaw Gruszka, Benson Leung, Enric Balletbo i Serra,
James E.J. Bottomley, Martin K. Petersen, Greg Kroah-Hartman,
Alexander Viro, Petr Mladek, Sergey Senozhatsky, Steven Rostedt,
David Laight, Andrew Morton, intel-gfx, dri-devel, linux-kernel,
netdev, ath10k, linux-wireless, linux-scsi, linux-fbdev, devel,
linux-fsdevel
In-Reply-To: <20190625031726.12173-5-alastair@au1.ibm.com>
On Tue, 2019-06-25 at 13:17 +1000, Alastair D'Silva wrote:
> From: Alastair D'Silva <alastair@d-silva.org>
>
> In order to support additional features, rename hex_dump_to_buffer to
> hex_dump_to_buffer_ext, and replace the ascii bool parameter with flags.
[]
> diff --git a/drivers/gpu/drm/i915/intel_engine_cs.c b/drivers/gpu/drm/i915/intel_engine_cs.c
[]
> @@ -1338,9 +1338,8 @@ static void hexdump(struct drm_printer *m, const void *buf, size_t len)
> }
>
> WARN_ON_ONCE(hex_dump_to_buffer(buf + pos, len - pos,
> - rowsize, sizeof(u32),
> - line, sizeof(line),
> - false) >= sizeof(line));
> + rowsize, sizeof(u32), line,
> + sizeof(line)) >= sizeof(line));
Huh? Why do this?
> diff --git a/drivers/isdn/hardware/mISDN/mISDNisar.c b/drivers/isdn/hardware/mISDN/mISDNisar.c
[]
> @@ -70,8 +70,9 @@ send_mbox(struct isar_hw *isar, u8 his, u8 creg, u8 len, u8 *msg)
> int l = 0;
>
> while (l < (int)len) {
> - hex_dump_to_buffer(msg + l, len - l, 32, 1,
> - isar->log, 256, 1);
> + hex_dump_to_buffer_ext(msg + l, len - l, 32, 1,
> + isar->log, 256,
> + HEXDUMP_ASCII);
Again, why do any of these?
The point of the wrapper is to avoid changing these.
^ permalink raw reply
* Re: [PATCH][next] qtnfmac: Use struct_size() in kzalloc()
From: Kalle Valo @ 2019-06-25 5:01 UTC (permalink / raw)
To: Gustavo A. R. Silva
Cc: Igor Mitsyanko, Avinash Patil, Sergey Matyukevich,
David S. Miller, linux-wireless, netdev, linux-kernel,
Gustavo A. R. Silva
In-Reply-To: <20190607191745.GA19120@embeddedor>
"Gustavo A. R. Silva" <gustavo@embeddedor.com> wrote:
> One of the more common cases of allocation size calculations is finding
> the size of a structure that has a zero-sized array at the end, along
> with memory for some number of elements for that array. For example:
>
> struct ieee80211_regdomain {
> ...
> struct ieee80211_reg_rule reg_rules[];
> };
>
> instance = kzalloc(sizeof(*mac->rd) +
> sizeof(struct ieee80211_reg_rule) *
> count, GFP_KERNEL);
>
> Instead of leaving these open-coded and prone to type mistakes, we can
> now use the new struct_size() helper:
>
> instance = kzalloc(struct_size(instance, reg_rules, count), GFP_KERNEL);
>
> This code was detected with the help of Coccinelle.
>
> Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>
> Reviewed-by: Sergey Matyukevich <sergey.matyukevich.os@quantenna.com>
Patch applied to wireless-drivers-next.git, thanks.
9a1ace64ca3b qtnfmac: Use struct_size() in kzalloc()
--
https://patchwork.kernel.org/patch/10982675/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
^ permalink raw reply
* Re: [PATCH] rtlwifi: rtl8188ee: remove redundant assignment to rtstatus
From: Kalle Valo @ 2019-06-25 5:02 UTC (permalink / raw)
To: Colin King
Cc: Ping-Ke Shih, David S . Miller, linux-wireless, netdev,
kernel-janitors, linux-kernel
In-Reply-To: <20190608105800.26571-1-colin.king@canonical.com>
Colin King <colin.king@canonical.com> wrote:
> From: Colin Ian King <colin.king@canonical.com>
>
> Variable rtstatus is being initialized with a value that is never read
> as rtstatus is being re-assigned a little later on. The assignment is
> redundant and hence can be removed.
>
> Addresses-Coverity: ("Unused value")
> Signed-off-by: Colin Ian King <colin.king@canonical.com>
Patch applied to wireless-drivers-next.git, thanks.
25a986e426b0 rtlwifi: rtl8188ee: remove redundant assignment to rtstatus
--
https://patchwork.kernel.org/patch/10983111/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
^ permalink raw reply
* Re: [PATCH v4 4/7] lib/hexdump.c: Replace ascii bool in hex_dump_to_buffer with flags
From: Alastair D'Silva @ 2019-06-25 5:06 UTC (permalink / raw)
To: Joe Perches
Cc: Jani Nikula, Joonas Lahtinen, Rodrigo Vivi, David Airlie,
Daniel Vetter, Dan Carpenter, Karsten Keil, Jassi Brar,
Tom Lendacky, David S. Miller, Jose Abreu, Kalle Valo,
Stanislaw Gruszka, Benson Leung, Enric Balletbo i Serra,
James E.J. Bottomley, Martin K. Petersen, Greg Kroah-Hartman,
Alexander Viro, Petr Mladek, Sergey Senozhatsky, Steven Rostedt,
David Laight, Andrew Morton, intel-gfx, dri-devel, linux-kernel,
netdev, ath10k, linux-wireless, linux-scsi, linux-fbdev, devel,
linux-fsdevel
In-Reply-To: <3340b520a57e00a483eae170be97316c8d18c22c.camel@perches.com>
On Mon, 2019-06-24 at 22:01 -0700, Joe Perches wrote:
> On Tue, 2019-06-25 at 13:17 +1000, Alastair D'Silva wrote:
> > From: Alastair D'Silva <alastair@d-silva.org>
> >
> > In order to support additional features, rename hex_dump_to_buffer
> > to
> > hex_dump_to_buffer_ext, and replace the ascii bool parameter with
> > flags.
> []
> > diff --git a/drivers/gpu/drm/i915/intel_engine_cs.c
> > b/drivers/gpu/drm/i915/intel_engine_cs.c
> []
> > @@ -1338,9 +1338,8 @@ static void hexdump(struct drm_printer *m,
> > const void *buf, size_t len)
> > }
> >
> > WARN_ON_ONCE(hex_dump_to_buffer(buf + pos, len - pos,
> > - rowsize, sizeof(u32),
> > - line, sizeof(line),
> > - false) >=
> > sizeof(line));
> > + rowsize, sizeof(u32),
> > line,
> > + sizeof(line)) >=
> > sizeof(line));
>
> Huh? Why do this?
>
> > diff --git a/drivers/isdn/hardware/mISDN/mISDNisar.c
> > b/drivers/isdn/hardware/mISDN/mISDNisar.c
> []
> > @@ -70,8 +70,9 @@ send_mbox(struct isar_hw *isar, u8 his, u8 creg,
> > u8 len, u8 *msg)
> > int l = 0;
> >
> > while (l < (int)len) {
> > - hex_dump_to_buffer(msg + l, len - l,
> > 32, 1,
> > - isar->log, 256, 1);
> > + hex_dump_to_buffer_ext(msg + l, len -
> > l, 32, 1,
> > + isar->log, 256,
> > + HEXDUMP_ASCII);
>
> Again, why do any of these?
>
> The point of the wrapper is to avoid changing these.
>
>
The change actions Jani's suggestion:
https://lkml.org/lkml/2019/6/20/343
--
Alastair D'Silva mob: 0423 762 819
skype: alastair_dsilva
Twitter: @EvilDeece
blog: http://alastair.d-silva.org
^ permalink raw reply
* Re: [PATCH 1/5] iwlegacy: 3945: no need to check return value of debugfs_create functions
From: Kalle Valo @ 2019-06-25 5:08 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: Johannes Berg, Greg Kroah-Hartman, Stanislaw Gruszka,
David S. Miller, linux-wireless, netdev
In-Reply-To: <20190612142658.12792-1-gregkh@linuxfoundation.org>
Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
> When calling debugfs functions, there is no need to ever check the
> return value. This driver was saving the debugfs file away to be
> removed at a later time. However, the 80211 core would delete the whole
> directory that the debugfs files are created in, after it asks the
> driver to do the deletion, so just rely on the 80211 core to do all of
> the cleanup for us, making us not need to keep a pointer to the dentries
> around at all.
>
> This cleans up the structure of the driver data a bit and makes the code
> a tiny bit smaller.
>
> Cc: Stanislaw Gruszka <sgruszka@redhat.com>
> Cc: Kalle Valo <kvalo@codeaurora.org>
> Cc: "David S. Miller" <davem@davemloft.net>
> Cc: linux-wireless@vger.kernel.org
> Cc: netdev@vger.kernel.org
> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2 patches applied to wireless-drivers-next.git, thanks.
f503c7695343 iwlegacy: 3945: no need to check return value of debugfs_create functions
ffb92649f4d9 iwlegacy: 4965: no need to check return value of debugfs_create functions
--
https://patchwork.kernel.org/patch/10990125/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
^ permalink raw reply
* Re: [PATCH 1/2] net: macb: Fix compilation on systems without COMMON_CLK
From: Harini Katakam @ 2019-06-25 5:16 UTC (permalink / raw)
To: Nicolas Ferre
Cc: palmer, Harini Katakam, David Miller, netdev, linux-kernel,
Michal Simek
In-Reply-To: <8bf8f052-cb9e-a4a6-4a7f-584cbd20582d@microchip.com>
On Tue, Jun 25, 2019 at 4:17 AM <Nicolas.Ferre@microchip.com> wrote:
>
> On 24/06/2019 at 11:57, Palmer Dabbelt wrote:
> > External E-Mail
> >
> >
> > On Mon, 24 Jun 2019 02:40:21 PDT (-0700), Nicolas.Ferre@microchip.com wrote:
> >> On 24/06/2019 at 08:16, Palmer Dabbelt wrote:
> >>> External E-Mail
> >>>
> >>>
> >>> The patch to add support for the FU540-C000 added a dependency on
> >>> COMMON_CLK, but didn't express that via Kconfig. This fixes the build
> >>> failure by adding CONFIG_MACB_FU540, which depends on COMMON_CLK and
> >>> conditionally enables the FU540-C000 support.
> >>
> >> Let's try to limit the use of #ifdef's throughout the code. We are
> >> using them in this driver but only for the hot paths and things that
> >> have an impact on performance. I don't think it's the case here: so
> >> please find another option => NACK.
> >
> > OK. Would you accept adding a Kconfig dependency of the generic MACB driver on
> > COMMON_CLK, as suggested in the cover letter?
>
> Yes: all users of this peripheral have COMMON_CLK set.
> You can remove it from the PCI wrapper then.
>
Yes, +1, both Zynq and ZynqMP have COMMON_CLK set, thanks.
Regards,
Harini
^ permalink raw reply
* Re: [PATCH v4 4/7] lib/hexdump.c: Replace ascii bool in hex_dump_to_buffer with flags
From: Joe Perches @ 2019-06-25 5:17 UTC (permalink / raw)
To: Alastair D'Silva
Cc: Jani Nikula, Joonas Lahtinen, Rodrigo Vivi, David Airlie,
Daniel Vetter, Dan Carpenter, Karsten Keil, Jassi Brar,
Tom Lendacky, David S. Miller, Jose Abreu, Kalle Valo,
Stanislaw Gruszka, Benson Leung, Enric Balletbo i Serra,
James E.J. Bottomley, Martin K. Petersen, Greg Kroah-Hartman,
Alexander Viro, Petr Mladek, Sergey Senozhatsky, Steven Rostedt,
David Laight, Andrew Morton, intel-gfx, dri-devel, linux-kernel,
netdev, ath10k, linux-wireless, linux-scsi, linux-fbdev, devel,
linux-fsdevel
In-Reply-To: <746098160c4ff6527d573d2af23c403b6d4e5b80.camel@d-silva.org>
On Tue, 2019-06-25 at 15:06 +1000, Alastair D'Silva wrote:
> On Mon, 2019-06-24 at 22:01 -0700, Joe Perches wrote:
> > On Tue, 2019-06-25 at 13:17 +1000, Alastair D'Silva wrote:
> > > From: Alastair D'Silva <alastair@d-silva.org>
> > >
> > > In order to support additional features, rename hex_dump_to_buffer
> > > to
> > > hex_dump_to_buffer_ext, and replace the ascii bool parameter with
> > > flags.
> > []
> > > diff --git a/drivers/gpu/drm/i915/intel_engine_cs.c
> > > b/drivers/gpu/drm/i915/intel_engine_cs.c
> > []
> > > @@ -1338,9 +1338,8 @@ static void hexdump(struct drm_printer *m,
> > > const void *buf, size_t len)
> > > }
> > >
> > > WARN_ON_ONCE(hex_dump_to_buffer(buf + pos, len - pos,
> > > - rowsize, sizeof(u32),
> > > - line, sizeof(line),
> > > - false) >=
> > > sizeof(line));
> > > + rowsize, sizeof(u32),
> > > line,
> > > + sizeof(line)) >=
> > > sizeof(line));
> >
> > Huh? Why do this?
[]
> The change actions Jani's suggestion:
> https://lkml.org/lkml/2019/6/20/343
I think you need to read this change again.
^ permalink raw reply
* Re: [PATCH v4 4/7] lib/hexdump.c: Replace ascii bool in hex_dump_to_buffer with flags
From: Joe Perches @ 2019-06-25 5:19 UTC (permalink / raw)
To: Alastair D'Silva
Cc: Jani Nikula, Joonas Lahtinen, Rodrigo Vivi, David Airlie,
Daniel Vetter, Dan Carpenter, Karsten Keil, Jassi Brar,
Tom Lendacky, David S. Miller, Jose Abreu, Kalle Valo,
Stanislaw Gruszka, Benson Leung, Enric Balletbo i Serra,
James E.J. Bottomley, Martin K. Petersen, Greg Kroah-Hartman,
Alexander Viro, Petr Mladek, Sergey Senozhatsky, Steven Rostedt,
David Laight, Andrew Morton, intel-gfx, dri-devel, linux-kernel,
netdev, ath10k, linux-wireless, linux-scsi, linux-fbdev, devel,
linux-fsdevel
In-Reply-To: <746098160c4ff6527d573d2af23c403b6d4e5b80.camel@d-silva.org>
On Tue, 2019-06-25 at 15:06 +1000, Alastair D'Silva wrote:
> The change actions Jani's suggestion:
> https://lkml.org/lkml/2019/6/20/343
I suggest not changing any of the existing uses of
hex_dump_to_buffer and only use hex_dump_to_buffer_ext
when necessary for your extended use cases.
^ permalink raw reply
* Re: [PATCH v4 5/7] lib/hexdump.c: Allow multiple groups to be separated by lines '|'
From: Joe Perches @ 2019-06-25 5:37 UTC (permalink / raw)
To: Alastair D'Silva, alastair
Cc: Jani Nikula, Joonas Lahtinen, Rodrigo Vivi, David Airlie,
Daniel Vetter, Dan Carpenter, Karsten Keil, Jassi Brar,
Tom Lendacky, David S. Miller, Jose Abreu, Kalle Valo,
Stanislaw Gruszka, Benson Leung, Enric Balletbo i Serra,
James E.J. Bottomley, Martin K. Petersen, Greg Kroah-Hartman,
Alexander Viro, Petr Mladek, Sergey Senozhatsky, Steven Rostedt,
David Laight, Andrew Morton, intel-gfx, dri-devel, linux-kernel,
netdev, ath10k, linux-wireless, linux-scsi, linux-fbdev, devel,
linux-fsdevel
In-Reply-To: <20190625031726.12173-6-alastair@au1.ibm.com>
On Tue, 2019-06-25 at 13:17 +1000, Alastair D'Silva wrote:
> From: Alastair D'Silva <alastair@d-silva.org>
>
> With the wider display format, it can become hard to identify how many
> bytes into the line you are looking at.
>
> The patch adds new flags to hex_dump_to_buffer() and print_hex_dump() to
> print vertical lines to separate every N groups of bytes.
>
> eg.
> buf:00000000: 454d414e 43415053|4e495f45 00584544 NAMESPAC|E_INDEX.
> buf:00000010: 00000000 00000002|00000000 00000000 ........|........
>
> Signed-off-by: Alastair D'Silva <alastair@d-silva.org>
> ---
> include/linux/printk.h | 3 +++
> lib/hexdump.c | 59 ++++++++++++++++++++++++++++++++++++------
> 2 files changed, 54 insertions(+), 8 deletions(-)
>
> diff --git a/include/linux/printk.h b/include/linux/printk.h
[]
> @@ -485,6 +485,9 @@ enum {
>
> #define HEXDUMP_ASCII BIT(0)
> #define HEXDUMP_SUPPRESS_REPEATED BIT(1)
> +#define HEXDUMP_2_GRP_LINES BIT(2)
> +#define HEXDUMP_4_GRP_LINES BIT(3)
> +#define HEXDUMP_8_GRP_LINES BIT(4)
These aren't really bits as only one value should be set
as 8 overrides 4 and 4 overrides 2.
I would also expect this to be a value of 2 in your above
example, rather than 8. It's described as groups not bytes.
The example is showing a what would normally be a space ' '
separator as a vertical bar '|' every 2nd grouping.
^ permalink raw reply
* Reminder: 94 open syzbot bugs in net subsystem
From: Eric Biggers @ 2019-06-25 5:48 UTC (permalink / raw)
To: netdev, David S. Miller, David Ahern, Eric Dumazet,
Florian Westphal
Cc: linux-kernel, syzkaller-bugs
[This email was generated by a script. Let me know if you have any suggestions
to make it better.]
Of the currently open syzbot reports against the upstream kernel, I've manually
marked 94 of them as possibly being bugs in the net subsystem. This category
only includes the networking bugs that I couldn't assign to a more specific
component (bpf, xfrm, bluetooth, tls, tipc, sctp, wireless, etc.). I've listed
these reports below, sorted by an algorithm that tries to list first the reports
most likely to be still valid, important, and actionable.
Of these 94 bugs, 21 were seen in mainline in the last week.
Of these 94 bugs, 3 were bisected to commits from the following people:
David Ahern <dsahern@gmail.com>
Eric Dumazet <edumazet@google.com>
Florian Westphal <fw@strlen.de>
If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status
If you believe I misattributed a bug to the net subsystem, please let me know,
and if possible forward the report to the correct people or mailing list.
Here are the bugs:
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in bond_start_xmit (2)
Last occurred: 0 days ago
Reported: 282 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=a9d5a8daec53b47baf50dd4185ff471c637d9c07
Original thread: https://lkml.kernel.org/lkml/000000000000ab5ff60575e86bb9@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e5be16aa39ad6e755391@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ab5ff60575e86bb9@google.com
--------------------------------------------------------------------------------
Title: unregister_netdevice: waiting for DEV to become free (2)
Last occurred: 0 days ago
Reported: 313 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=bae9a2236bfede42cf3d219e6bf6740c583568a4
Original thread: https://lkml.kernel.org/lkml/00000000000056268e05737dcb95@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug received 27 replies; the last was 51 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+30209ea299c09d8785c9@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000056268e05737dcb95@google.com
--------------------------------------------------------------------------------
Title: kernel BUG at net/core/skbuff.c:LINE! (3)
Last occurred: 0 days ago
Reported: 508 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=9c55af67ce995cf6c4f11ab6f5d3ee805d67fc00
Original thread: https://groups.google.com/d/msgid/syzkaller-bugs/001a114372a6074e6505642b7f72%40google.com
This bug has a C reproducer.
For some reason the original report email for this bug is missing from the LKML
archive at lore.kernel.org, so my script couldn't check whether anyone has
replied to it or not. The Google Groups link above should still work, though.
Also try searching for the bug title.
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in ip6_parse_tlv
Last occurred: 0 days ago
Reported: 277 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=a446d3718ee6322911a0c6d34db57909e1838fe7
Original thread: https://lkml.kernel.org/lkml/00000000000030779c057653b9ef@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f08ac29f2ac8aea19826@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000030779c057653b9ef@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in do_ip_vs_set_ctl
Last occurred: 0 days ago
Reported: 283 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=46ebfb92a8a812621a001ef04d90dfa459520fe2
Original thread: https://lkml.kernel.org/lkml/00000000000015a13b0575d8eae8@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+23b5f9e7caf61d9a3898@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000015a13b0575d8eae8@google.com
--------------------------------------------------------------------------------
Title: WARNING in rollback_registered_many (2)
Last occurred: 0 days ago
Reported: 229 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=d39aca7a05a76d146ba96cddbb3242075d9171a7
Original thread: https://lkml.kernel.org/lkml/000000000000d9f094057a17b97b@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug received 1 reply, 73 days ago.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+40918e4d826fb2ff9b96@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000d9f094057a17b97b@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in ip_rcv_core
Last occurred: 7 days ago
Reported: 281 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=abe95dc3e3e9667fc23b8d81f29ecad95c6f106f
Original thread: https://lkml.kernel.org/lkml/0000000000002407700575fb00f4@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+2e406a9ac75bb71d4b7a@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000002407700575fb00f4@google.com
--------------------------------------------------------------------------------
Title: general protection fault in ip6_dst_lookup_tail (2)
Last occurred: 5 days ago
Reported: 56 days ago
Branches: bpf-next, linux-next, net, and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=079bd8408abd95b492f127edf0df44ddc09d9405
Original thread: https://lkml.kernel.org/lkml/0000000000006b30f30587a5b569@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit f40b6ae2b612446dc970d7b51eeec47bd1619f82
Author: David Ahern <dsahern@gmail.com>
Date: Thu May 23 03:27:55 2019 +0000
ipv6: Move pcpu cached routes to fib6_nh
The original thread for this bug has received 1 reply, 56 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+58d8f704b86e4e3fb4d3@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000006b30f30587a5b569@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in gre_parse_header
Last occurred: 0 days ago
Reported: 1 day ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=af9d9384bbda6732044cf6335966df874a40cff1
Original thread: https://lkml.kernel.org/lkml/000000000000dc4531058bfb4605@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f583ce3d4ddf9836b27a@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000dc4531058bfb4605@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in ax88772_bind
Last occurred: 0 days ago
Reported: 21 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=c4199edd5d559780b6f0fb3874fcc253f070786f
Original thread: https://lkml.kernel.org/lkml/00000000000008f06d058a6e9783@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+8a3fc6674bbc3978ed4e@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000008f06d058a6e9783@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in bcmp
Last occurred: 0 days ago
Reported: 16 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=38933ca8abb1b8f0ee10c430f3a6c1f6a68a2519
Original thread: https://lkml.kernel.org/lkml/0000000000008f00f7058ad13ec8@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+d8b02c920ae8f3e0be75@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000008f00f7058ad13ec8@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in r871xu_drv_init
Last occurred: 1 day ago
Reported: 18 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=3cd92b1d85428b128503bfa7a250294c9ae00bd8
Original thread: https://lkml.kernel.org/lkml/000000000000417702058aa80506@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6f5ecd144854c0d8580b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000417702058aa80506@google.com
--------------------------------------------------------------------------------
Title: general protection fault in gro_cells_destroy
Last occurred: 1 day ago
Reported: 165 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=1e493023b2e9f4b6738977af63ed5b521201e74a
Original thread: https://lkml.kernel.org/lkml/00000000000029bf02057f1e1596@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6fe674089f9deb9f7726@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000029bf02057f1e1596@google.com
--------------------------------------------------------------------------------
Title: memory leak in fdb_create
Last occurred: 0 days ago
Reported: 0 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=7ca7d71ade3608a7f92ac4b8c9c499cf130e68a9
Original thread: https://lkml.kernel.org/lkml/0000000000005e6124058c0cbdbe@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+88533dc8b582309bf3ee@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005e6124058c0cbdbe@google.com
--------------------------------------------------------------------------------
Title: kernel BUG at net/ipv6/route.c:LINE! (2)
Last occurred: 2 days ago
Reported: 168 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=5789609f5b68813f3bf496c9786b9df683dbaa2f
Original thread: https://lkml.kernel.org/lkml/000000000000114562057edb528d@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+be0943c590bb47aefb9e@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000114562057edb528d@google.com
--------------------------------------------------------------------------------
Title: KASAN: null-ptr-deref Read in ip6_hold_safe
Last occurred: 6 days ago
Reported: 161 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=9b5576748203154c7b7703aac19d0a5adc8f987e
Original thread: https://lkml.kernel.org/lkml/00000000000075c0ef057f657b8d@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug received 1 reply, 161 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+8433ca0841e308ef4cc7@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000075c0ef057f657b8d@google.com
--------------------------------------------------------------------------------
Title: general protection fault in dev_get_by_index_rcu
Last occurred: 1 day ago
Reported: 123 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=e9d52597e9cbdd22621b6790702c9fefe071af25
Original thread: https://lkml.kernel.org/lkml/00000000000095c8f005826888fd@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+48127bec5a5cd81411e3@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000095c8f005826888fd@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in unregister_netdevice_notifier (3)
Last occurred: 1 day ago
Reported: 127 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=1724d278c83ca6e6df100a2e320c10d991cf2bce
Original thread: https://lkml.kernel.org/lkml/0000000000009d787a0582128cbe@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0f1827363a305f74996f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009d787a0582128cbe@google.com
--------------------------------------------------------------------------------
Title: memory leak in __nf_hook_entries_try_shrink
Last occurred: 4 days ago
Reported: 11 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=a00ae6ea26b62609c1df4d7f0d21e4a7635d8203
Original thread: https://lkml.kernel.org/lkml/0000000000005718ef058b3a0fcf@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c51f73e78e7e2ce3a31e@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005718ef058b3a0fcf@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in ip_send_unicast_reply
Last occurred: 3 days ago
Reported: 138 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=b2fcf1ea1f7f874f9ae3ede65e0f47e82a02b3a1
Original thread: https://lkml.kernel.org/lkml/0000000000005e6094058132a09a@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f1741fbf71635c029556@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005e6094058132a09a@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in usb_kill_anchored_urbs
Last occurred: 13 days ago
Reported: 13 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=18b605fd212e6e477e038c699430b44ca5946eac
Original thread: https://lkml.kernel.org/lkml/000000000000e84a3a058b0f9307@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+eb6ab607626fd1dac0f1@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e84a3a058b0f9307@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in tcp_sk_exit
Last occurred: 7 days ago
Reported: 138 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=24c7faa7497a843d2c714efffcc747853c55b669
Original thread: https://lkml.kernel.org/lkml/000000000000ddb37c0581329cc5@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f797267da5e5012d0920@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ddb37c0581329cc5@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in mii_nway_restart
Last occurred: 15 days ago
Reported: 20 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=835562bfa4dd92c72f323f29ad388c9cb4b0e63f
Original thread: https://lkml.kernel.org/lkml/000000000000f71859058a7cfdc8@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+1f53a30781af65d2c955@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f71859058a7cfdc8@google.com
--------------------------------------------------------------------------------
Title: memory leak in start_sync_thread
Last occurred: 9 days ago
Reported: 27 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=8383817177a44b0715b1d781b2e840212f364aec
Original thread: https://lkml.kernel.org/lkml/0000000000006d7e520589f6d3a9@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 2 replies; the last was 13 days
ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+7e2e50c8adfccd2e5041@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 13 days ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/0000000000006d7e520589f6d3a9@google.com
--------------------------------------------------------------------------------
Title: general protection fault in cdev_del
Last occurred: 18 days ago
Reported: 27 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=dc0ead75c30e6aa27153b6cab86194e55e290a98
Original thread: https://lkml.kernel.org/lkml/000000000000532b860589f0669a@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+67b2bd0e34f952d0321e@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000532b860589f0669a@google.com
--------------------------------------------------------------------------------
Title: kernel panic: stack is corrupted in __lock_acquire (4)
Last occurred: 0 days ago
Reported: 14 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=b75c6f861ac07fc8410957c22e74802b4313ec3d
Original thread: https://lkml.kernel.org/lkml/0000000000009b3b80058af452ae@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+83979935eb6304f8cd46@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009b3b80058af452ae@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Write in skb_release_data (2)
Last occurred: 88 days ago
Reported: 252 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=8340d4b8c7304ff0b43490a1b69ab3833dd7ad20
Original thread: https://lkml.kernel.org/lkml/0000000000003ba80905783e9189@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit 472c2e07eef045145bc1493cc94a01c87140780a
Author: Eric Dumazet <edumazet@google.com>
Date: Fri Mar 22 15:56:39 2019 +0000
tcp: add one skb cache for tx
The original thread for this bug received 3 replies; the last was 90 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+580be3953ed99133804f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003ba80905783e9189@google.com
--------------------------------------------------------------------------------
Title: WARNING in xt_compat_add_offset
Last occurred: 24 days ago
Reported: 122 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=28b6bf730a5e8d288db5c794d5c6ccc49f746d74
Original thread: https://lkml.kernel.org/lkml/00000000000081994205827ea9a0@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit 2035f3ff8eaa29cfb5c8e2160b0f6e85eeb21a95
Author: Florian Westphal <fw@strlen.de>
Date: Mon Jan 21 20:54:36 2019 +0000
netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are present
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+276ddebab3382bbf72db@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000081994205827ea9a0@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in addrconf_dad_work
Last occurred: 9 days ago
Reported: 128 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=7293d6f37a448b017658dc1001452ff193cdb566
Original thread: https://lkml.kernel.org/lkml/0000000000001d37cd0582003c53@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f4290c15a8ab6dee87c9@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000001d37cd0582003c53@google.com
--------------------------------------------------------------------------------
Title: general protection fault in drain_workqueue
Last occurred: 10 days ago
Reported: 42 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=4a4b04b94b33e7d1de6f1213355499ab529a3018
Original thread: https://lkml.kernel.org/lkml/000000000000caab290588c4083e@google.com/T/#u
This bug has a syzkaller reproducer only.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+09139d1a5ed6b898e29d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000caab290588c4083e@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in __dev_mc_del
Last occurred: 58 days ago
Reported: 280 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=a84ac404cf07db753e289b918981964b540359bd
Original thread: https://lkml.kernel.org/lkml/00000000000011d524057617eb4a@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0ffee94c5c059dbbc2a9@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000011d524057617eb4a@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in __netif_receive_skb_core
Last occurred: 56 days ago
Reported: 438 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=0c8e5c99b3db338c8956fcb7231eb1f7e2d707f9
Original thread: https://lkml.kernel.org/lkml/94eb2c059ce01f643c0569a228ee@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug received 3 replies; the last was 437 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+b202b7208664142954fa@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/94eb2c059ce01f643c0569a228ee@google.com
--------------------------------------------------------------------------------
Title: INFO: trying to register non-static key in __icmp_send
Last occurred: 13 days ago
Reported: 111 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=8375400c5f4e129bf049227adce14e4698a4bc33
Original thread: https://lkml.kernel.org/lkml/000000000000de803205836436dd@google.com/T/#u
This bug has a syzkaller reproducer only.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f09d845ad631ed93737b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000de803205836436dd@google.com
--------------------------------------------------------------------------------
Title: WARNING: ODEBUG bug in netdev_freemem (2)
Last occurred: 0 days ago
Reported: 0 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=96a64fde216dca408a5c25db4e57838c51e435aa
Original thread: https://lkml.kernel.org/lkml/000000000000d6a8ba058c0df076@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug has received 6 replies; the last was 5 hours
ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c4521ac872a4ccc3afec@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 5 hours ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/000000000000d6a8ba058c0df076@google.com
--------------------------------------------------------------------------------
Title: KASAN: null-ptr-deref Write in dst_release
Last occurred: 6 days ago
Reported: 168 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=e25580ce7d7f1e6c3bed77954ec56dfd7ce89805
Original thread: https://lkml.kernel.org/lkml/00000000000012073a057edb3996@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+1f4f4025b8564c8da9d4@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000012073a057edb3996@google.com
--------------------------------------------------------------------------------
Title: general protection fault in fib6_nh_init
Last occurred: 5 days ago
Reported: 20 days ago
Branches: bpf-next and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=29b9955ae85cdd2f20baf5d975763a446f2783df
Original thread: https://lkml.kernel.org/lkml/0000000000008ee293058a787e2d@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug has received 1 reply, 19 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+1b2927fda48c5bf2e931@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000008ee293058a787e2d@google.com
--------------------------------------------------------------------------------
Title: WARNING: ODEBUG bug in del_timer (3)
Last occurred: 35 days ago
Reported: 48 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=d1853700c9f62752d8498e05189f5d0f21a55631
Original thread: https://lkml.kernel.org/lkml/000000000000dace5e0588529558@google.com/T/#u
This bug has a syzkaller reproducer only.
The original thread for this bug has received 1 reply, 47 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+13d91ed9bbcd7dc13230@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000dace5e0588529558@google.com
--------------------------------------------------------------------------------
Title: WARNING: locking bug in lock_sock_nested
Last occurred: 52 days ago
Reported: 71 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=a9f61ee7d10b848190610b0fe298bd9030a8288c
Original thread: https://lkml.kernel.org/lkml/000000000000e8cf3805867bd715@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+605a69fff339d9cc221e@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e8cf3805867bd715@google.com
--------------------------------------------------------------------------------
Title: general protection fault in tcp_v6_connect
Last occurred: 6 days ago
Reported: 23 days ago
Branches: bpf-next and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=71eb43337087b631994f0811b2d84dfbc4bfcfc4
Original thread: https://lkml.kernel.org/lkml/000000000000aa7a27058a3ce9aa@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5ee26b4e30c45930bd3c@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000aa7a27058a3ce9aa@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in __dev_mc_add
Last occurred: 75 days ago
Reported: 271 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=0766d38c656abeace60621896d705743aeefed51
Original thread: https://lkml.kernel.org/lkml/0000000000005e2e530576c6f9ce@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug received 3 replies; the last was 269 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+001516d86dbe88862cec@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005e2e530576c6f9ce@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in IP6_ECN_decapsulate
Last occurred: 372 days ago
Reported: 277 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=ca4ff394c64aec3684d0034896290c72a83b7077
Original thread: https://lkml.kernel.org/lkml/000000000000336563057653b9aa@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+bf7e6250c7ce248f3ec9@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000336563057653b9aa@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in tick_sched_handle (3)
Last occurred: 162 days ago
Reported: 217 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=fce6ae4655ae3133b8b7410c3370bb2167c6324d
Original thread: https://lkml.kernel.org/lkml/0000000000007829c8057b0b58ed@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug received 2 replies; the last was 216 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+999bca54de2ee169c021@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000007829c8057b0b58ed@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in strlcpy (2)
Last occurred: 292 days ago
Reported: 283 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=ab0817a1599dd2fbbda6af5d5645ef92596fcb8e
Original thread: https://lkml.kernel.org/lkml/00000000000012463d0575d8eace@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c86cf7903306a6c201ba@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000012463d0575d8eace@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in ila_nf_input
Last occurred: 17 days ago
Reported: 160 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=6911f9daa3f3c89b595884f30b212e60e889d384
Original thread: https://lkml.kernel.org/lkml/0000000000003036f4057f81e98e@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+03a25358f4cba0bc4cb6@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003036f4057f81e98e@google.com
--------------------------------------------------------------------------------
Title: general protection fault in __sock_release (2)
Last occurred: 7 days ago
Reported: 145 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=6997b9812b85ed88863bddecad772e8d3659e358
Original thread: https://lkml.kernel.org/lkml/000000000000559d460580ad5eeb@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+38b29941610a1cc735dc@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000559d460580ad5eeb@google.com
--------------------------------------------------------------------------------
Title: WARNING: locking bug in udpv6_pre_connect
Last occurred: 4 days ago
Reported: 39 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=360cc28d22ff388dcda1dd642c5c77aa4b8b3e2d
Original thread: https://lkml.kernel.org/lkml/0000000000003028060588fac869@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+65f10c5aadc049eb5ef5@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003028060588fac869@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in ax88178_bind
Last occurred: 19 days ago
Reported: 17 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=d601416c178e3d67888024bdf7774477a034840b
Original thread: https://lkml.kernel.org/lkml/000000000000cba2b6058ac09eeb@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+abd25d675d47f23f188c@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000cba2b6058ac09eeb@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in vhci_hub_control
Last occurred: 249 days ago
Reported: 294 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=00aa2c9aba775f0761d3dabd7fb176964685051a
Original thread: https://lkml.kernel.org/lkml/00000000000075c8d70574f40fbc@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+600b03e0cf1b73bb23c4@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000075c8d70574f40fbc@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in ip6_hold_safe
Last occurred: 8 days ago
Reported: 123 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=16a5da76273f5052f30015161c9bd05153bc1172
Original thread: https://lkml.kernel.org/lkml/0000000000003209980582688c5b@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+ec03ae3a032901d10434@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003209980582688c5b@google.com
--------------------------------------------------------------------------------
Title: WARNING: refcount bug in igmp_start_timer
Last occurred: 71 days ago
Reported: 310 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=667f1bd0ab632a49ca3daaa6967cc023b1c5b0c6
Original thread: https://lkml.kernel.org/lkml/0000000000002b42040573b8495a@google.com/T/#u
This bug has a syzkaller reproducer only.
syzbot has bisected this bug, but I think the bisection result is incorrect.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e28037ac1c96d2a86e89@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000002b42040573b8495a@google.com
--------------------------------------------------------------------------------
Title: KASAN: user-memory-access Write in dst_release
Last occurred: 11 days ago
Reported: 168 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=c6269996e9feee38b279462027a03d4e49df1162
Original thread: https://lkml.kernel.org/lkml/000000000000a06f21057edc53c0@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+29ffc731816e0995ad54@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000a06f21057edc53c0@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in sit_tunnel_xmit
Last occurred: 201 days ago
Reported: 332 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=66bbedf52134d2359166806349088d36a6b6a254
Original thread: https://lkml.kernel.org/lkml/00000000000082e3a90571fadb4c@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+782ee96f9147673d8822@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000082e3a90571fadb4c@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in device_del
Last occurred: 22 days ago
Reported: 21 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=2aa2f730c9d353ad29bb92acf8fd0b426ce1b393
Original thread: https://lkml.kernel.org/lkml/000000000000fa11f3058a69d67b@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug has received 2 replies; the last was 18 days
ago.
This looks like a bug in a net USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+93f2f45b19519b289613@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000fa11f3058a69d67b@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in gre_rcv (2)
Last occurred: 111 days ago
Reported: 271 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=cf4a7c5922ce5ad229f97ed1eac213a12d427d1d
Original thread: https://lkml.kernel.org/lkml/0000000000007ce3ae0576c788e5@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+841c053d026900055032@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000007ce3ae0576c788e5@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in do_ip_vs_set_ctl (2)
Last occurred: 428 days ago
Reported: 443 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=26aa22915f5e3b7ca2cfca76a939f12c25d624db
Original thread: https://lkml.kernel.org/lkml/94eb2c059ce0bca273056940d77d@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+7810ed2e0cb359580c17@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/94eb2c059ce0bca273056940d77d@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in icmpv6_xrlim_allow
Last occurred: 9 days ago
Reported: 20 days ago
Branches: bpf-next
Dashboard link: https://syzkaller.appspot.com/bug?id=d22f32efcb9496c8fa450f963bcce4d3e4cdf09d
Original thread: https://lkml.kernel.org/lkml/000000000000ae08b2058a785a4c@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+14536436e78408172703@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ae08b2058a785a4c@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in rtnetlink_rcv_msg
Last occurred: 127 days ago
Reported: 122 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=788ed2c7e973b69fd551ba6b5e21848dba2c1670
Original thread: https://lkml.kernel.org/lkml/000000000000c07a5805827e85d5@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug received 7 replies; the last was 119 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+8218a8a0ff60c19b8eae@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000c07a5805827e85d5@google.com
--------------------------------------------------------------------------------
Title: WARNING: bad unlock balance detected! (3)
Last occurred: 90 days ago
Reported: 120 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=342beb2b368a43cbb6533c00d758759b10fbc8d8
Original thread: https://lkml.kernel.org/lkml/000000000000685dc805829e835c@google.com/T/#u
This bug has a syzkaller reproducer only.
syzbot has bisected this bug, but I think the bisection result is incorrect.
The original thread for this bug received 2 replies; the last was 90 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f3e3434787332dfc1c47@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000685dc805829e835c@google.com
--------------------------------------------------------------------------------
Title: WARNING in tcp_enter_loss (2)
Last occurred: 419 days ago
Reported: 469 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=b0bacf5645b1e60bbb14015bc0e23b9019621fc4
Original thread: https://groups.google.com/d/msgid/syzkaller-bugs/001a113f39820d16d50567379661%40google.com
This bug has a C reproducer.
For some reason the original report email for this bug is missing from the LKML
archive at lore.kernel.org, so my script couldn't check whether anyone has
replied to it or not. The Google Groups link above should still work, though.
Also try searching for the bug title.
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in ip6_tnl_parse_tlv_enc_lim
Last occurred: 211 days ago
Reported: 280 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=b321cffb2022132bac9c54cbe0adcab20cfdd911
Original thread: https://lkml.kernel.org/lkml/0000000000005175bf057617c71d@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+68dce7caebd8543121de@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005175bf057617c71d@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in tcp_sk_exit
Last occurred: 24 days ago
Reported: 109 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=3901fe419ff5f17d6a1607b7d6d79c629a571946
Original thread: https://lkml.kernel.org/lkml/000000000000071b3c05838536b8@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+dfc9db054bca3a83f4a0@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000071b3c05838536b8@google.com
--------------------------------------------------------------------------------
Title: general protection fault in fib6_purge_rt (2)
Last occurred: 14 days ago
Reported: 62 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=e017f309864dbdc2a6926d235e0ce85b6272dcfd
Original thread: https://lkml.kernel.org/lkml/000000000000caeb1c058734c654@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+d53d5d9b6793dc70eb9d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000caeb1c058734c654@google.com
--------------------------------------------------------------------------------
Title: KASAN: user-memory-access Write in fib6_purge_rt (2)
Last occurred: 13 days ago
Reported: 20 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=29ea3db1b7655bdcf69bc0e3d8e5901623444640
Original thread: https://lkml.kernel.org/lkml/0000000000003f73d9058a785eec@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+420d3f70afb5d69d5a96@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003f73d9058a785eec@google.com
--------------------------------------------------------------------------------
Title: INFO: trying to register non-static key in icmp_send
Last occurred: 125 days ago
Reported: 146 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=ea46a31df5253b18deb1e18c429c1483b111cbce
Original thread: https://lkml.kernel.org/lkml/0000000000007cd20e05809c2f96@google.com/T/#u
This bug has a syzkaller reproducer only.
syzbot has bisected this bug, but I think the bisection result is incorrect.
The original thread for this bug received 1 reply, 92 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e1628a5e87492e6f1b76@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000007cd20e05809c2f96@google.com
--------------------------------------------------------------------------------
Title: possible deadlock in bond_get_stats (2)
Last occurred: 35 days ago
Reported: 203 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=ea28d585e25ade2dde266036c70df752bb3a0fcb
Original thread: https://lkml.kernel.org/lkml/000000000000dd0b51057c263f7f@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+de40a1dd58ea38aa9317@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000dd0b51057c263f7f@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in page_get_anon_vma
Last occurred: 46 days ago
Reported: 48 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=c275ff8b0b025c8a9baf06c3799d5c2efb919b56
Original thread: https://lkml.kernel.org/lkml/0000000000008aa0e4058849190e@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+ed3e5c9a6a1e30a1bd2a@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000008aa0e4058849190e@google.com
--------------------------------------------------------------------------------
Title: WARNING in csum_and_copy_to_iter
Last occurred: 214 days ago
Reported: 212 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=602b1f5d93c8e231d50a1424c2fbc3318bcc6833
Original thread: https://lkml.kernel.org/lkml/0000000000001ecaa1057b6e4489@google.com/T/#u
This bug has a syzkaller reproducer only.
The original thread for this bug received 5 replies; the last was 210 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+ce18da013d76d837144d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000001ecaa1057b6e4489@google.com
--------------------------------------------------------------------------------
Title: possible deadlock in sch_direct_xmit
Last occurred: 447 days ago
Reported: 524 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=3b9ee8a71fc404315ece5d56076775a2ed19ce1d
Original thread: https://lkml.kernel.org/lkml/089e0825d4a4d2cb2a0562e878f1@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+29cc278357da941e304e@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/089e0825d4a4d2cb2a0562e878f1@google.com
--------------------------------------------------------------------------------
Title: inconsistent lock state in ila_xlat_nl_cmd_del_mapping
Last occurred: 309 days ago
Reported: 314 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=be943a4399dcf3ed43bac2694a3b8957c6980409
Original thread: https://lkml.kernel.org/lkml/000000000000ae453e05735dcdb8@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+3db64bd48b29a825d2db@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ae453e05735dcdb8@google.com
--------------------------------------------------------------------------------
Title: kernel BUG at net/ipv4/ip_output.c:LINE!
Last occurred: 155 days ago
Reported: 346 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=d582be84c0efa34f4936e12227905b2c18989a25
Original thread: https://lkml.kernel.org/lkml/000000000000f68d660570dcddd8@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+90d5ec0c05e708f3b66d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f68d660570dcddd8@google.com
--------------------------------------------------------------------------------
Title: possible deadlock in sk_diag_fill
Last occurred: 36 days ago
Reported: 415 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=3968882ac771e7458b15f8086477f42d7ca6dec0
Original thread: https://lkml.kernel.org/lkml/000000000000169606056b793179@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug received 6 replies; the last was 405 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c1872be62e587eae9669@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000169606056b793179@google.com
--------------------------------------------------------------------------------
Title: WARNING: locking bug in icmp6_send (2)
Last occurred: 15 days ago
Reported: 13 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=2ccdf5f785fdb1087d9dc106dd8bc71ea9a1fb58
Original thread: https://lkml.kernel.org/lkml/000000000000e64753058b06f83f@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0ee50f3d30ce6a28b3cd@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e64753058b06f83f@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in fib6_purge_rt (2)
Last occurred: 21 days ago
Reported: 20 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=4174cd9494cb4571668f34ab96fcb2382554e6fb
Original thread: https://lkml.kernel.org/lkml/000000000000b6a7d2058a78736d@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f4812f31edd866494c9f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000b6a7d2058a78736d@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in fib6_rule_lookup (2)
Last occurred: 23 days ago
Reported: 87 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=148148cb145574b07580d9e34877b4eef587ed31
Original thread: https://lkml.kernel.org/lkml/00000000000021ef3505853f988e@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+49f38f33f3c5d76cb19b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000021ef3505853f988e@google.com
--------------------------------------------------------------------------------
Title: WARNING in __static_key_slow_dec_cpuslocked
Last occurred: 51 days ago
Reported: 48 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=753aa2e459553231bb71e1602b2cd27171a06d32
Original thread: https://lkml.kernel.org/lkml/000000000000759a89058848e747@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a65e6ce239e4afe6c5e7@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000759a89058848e747@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in icmp_sk_exit
Last occurred: 111 days ago
Reported: 124 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=0cbaf5f5094157a8d563c6c1cbe5ee20028a8902
Original thread: https://lkml.kernel.org/lkml/000000000000b436ad058255c528@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+3d7fa0f0de0f86d0eb4f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000b436ad058255c528@google.com
--------------------------------------------------------------------------------
Title: BUG: spinlock bad magic in __queue_work
Last occurred: 90 days ago
Reported: 138 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=27ee7c254659d57dd99215715f3db0ed20339941
Original thread: https://lkml.kernel.org/lkml/000000000000e063bb0581329cc0@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+636bcaf4b481f6b7343c@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e063bb0581329cc0@google.com
--------------------------------------------------------------------------------
Title: inconsistent lock state in ila_xlat_nl_cmd_add_mapping
Last occurred: 309 days ago
Reported: 314 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=481b4913494f0dcabc2e06e3158a3d042abdf985
Original thread: https://lkml.kernel.org/lkml/000000000000b14d8c05735dcdf8@google.com/T/#u
This bug has a syzkaller reproducer only.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+eaaf6c4a6a8cb1869d86@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000b14d8c05735dcdf8@google.com
--------------------------------------------------------------------------------
Title: KASAN: wild-memory-access Write in fib6_purge_rt
Last occurred: 57 days ago
Reported: 136 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=e3ed1520f5d50c003569cc69066d780ef2ee9f18
Original thread: https://lkml.kernel.org/lkml/000000000000ca08dd0581649889@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+3dbea54db3674c0d57d6@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ca08dd0581649889@google.com
--------------------------------------------------------------------------------
Title: general protection fault in __queue_work
Last occurred: 110 days ago
Reported: 109 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=1401c87c1eac8167422bcdb28cf81647d894e8d2
Original thread: https://lkml.kernel.org/lkml/000000000000aec29a0583853924@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+b26e643d0aa2822e9c87@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000aec29a0583853924@google.com
--------------------------------------------------------------------------------
Title: WARNING in remove_proc_entry (2)
Last occurred: 61 days ago
Reported: 215 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=fab7eb1ff4259eb5e6cb9067cba63ec7b1568b4d
Original thread: https://lkml.kernel.org/lkml/00000000000061c4cf057b306863@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+46d1fec9e51890edb1a6@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000061c4cf057b306863@google.com
--------------------------------------------------------------------------------
Title: possible deadlock in skb_queue_tail
Last occurred: 96 days ago
Reported: 448 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=ab5525a0b79efd6a5dbb4deb3ccd3e93d9c03321
Original thread: https://lkml.kernel.org/lkml/0000000000003584570568da18dd@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug received 5 replies; the last was 446 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6b495100f17ca8554ab9@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003584570568da18dd@google.com
--------------------------------------------------------------------------------
Title: general protection fault in ipv6_rcv
Last occurred: 44 days ago
Reported: 107 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=6a14da2954543d26e61aeaefa0098d445854c5c1
Original thread: https://lkml.kernel.org/lkml/0000000000001b05b40583a46fd7@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6c54e67cc0b0c896aa4b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000001b05b40583a46fd7@google.com
--------------------------------------------------------------------------------
Title: BUG: corrupted list in proto_register
Last occurred: 37 days ago
Reported: 37 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=a56a4bec03bf7561b1ec51fe929cba4018081b92
Original thread: https://lkml.kernel.org/lkml/000000000000e76a90058923eff3@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+7bc2817ec0ed18de9079@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e76a90058923eff3@google.com
--------------------------------------------------------------------------------
Title: possible deadlock in genl_rcv (2)
Last occurred: 105 days ago
Reported: 164 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=f8a6b7d881874def4c37657fac2453f7551a7664
Original thread: https://lkml.kernel.org/lkml/000000000000827dbb057f2b85bb@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+cf29f8ae16ca7ceb483d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000827dbb057f2b85bb@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in ip_tunnel_lookup
Last occurred: 85 days ago
Reported: 161 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=0a2ec3432ccfbd144e44c746f5b7b04f7e12c989
Original thread: https://lkml.kernel.org/lkml/00000000000075901d057f6e5a97@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+4a0034797afb7e908ab4@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000075901d057f6e5a97@google.com
--------------------------------------------------------------------------------
Title: WARNING: locking bug in try_to_grab_pending
Last occurred: 132 days ago
Reported: 131 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=86c7f0dd3bfa4cd651bb37a04da2cfcabd860225
Original thread: https://lkml.kernel.org/lkml/0000000000006dc0290581ca413e@google.com/T/#u
This bug has a syzkaller reproducer only.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+2b713236b28823cd4dff@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000006dc0290581ca413e@google.com
--------------------------------------------------------------------------------
Title: possible deadlock in neigh_change_state
Last occurred: 182 days ago
Reported: 194 days ago
Branches: bpf-next, linux-next, and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=9a91353fc2af7d4f3085766dadc9105304c7e7c4
Original thread: https://lkml.kernel.org/lkml/000000000000029056057cd141cb@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6a3c02010a025ac7b7cf@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000029056057cd141cb@google.com
--------------------------------------------------------------------------------
Title: possible deadlock in __dev_queue_xmit (2)
Last occurred: 88 days ago
Reported: 88 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=f9e1abb5bf1d75834c1906398efab4601265cad5
Original thread: https://lkml.kernel.org/lkml/000000000000ee01ef058529d74c@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f8c40b4da41f3e8049c4@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ee01ef058529d74c@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in do_raw_spin_trylock
Last occurred: 154 days ago
Reported: 153 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=4041c245d773cebc8572b2c5cf01495d8f24f1cc
Original thread: https://lkml.kernel.org/lkml/0000000000000a300f058011d4da@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+fa0f7116270c30316624@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000a300f058011d4da@google.com
--------------------------------------------------------------------------------
Title: INFO: rcu detected stall in gc_worker
Last occurred: 68 days ago
Reported: 153 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=298ba9ab760957e0ead590f868a922d7d74bf59a
Original thread: https://lkml.kernel.org/lkml/000000000000ada99c058010d943@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+655174276c47216abab5@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ada99c058010d943@google.com
--------------------------------------------------------------------------------
Title: general protection fault in ip6_dst_hoplimit
Last occurred: 102 days ago
Reported: 97 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=e310a1a3031be03dae5de35cc6dd9782232fdfea
Original thread: https://lkml.kernel.org/lkml/000000000000df93f705846f0963@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug received 1 reply, 56 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+4c869fc20129562c53fa@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000df93f705846f0963@google.com
--------------------------------------------------------------------------------
Title: WARNING in fib6_add (2)
Last occurred: 65 days ago
Reported: 206 days ago
Branches: bpf and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=757f2e8c1748d9d3b453b0ae3c33b1fbfe222d48
Original thread: https://lkml.kernel.org/lkml/0000000000000874de057be144e8@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+60cc5bc1296c8afcf739@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000874de057be144e8@google.com
--------------------------------------------------------------------------------
Title: possible deadlock in dev_uc_sync_multiple
Last occurred: 101 days ago
Reported: 101 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=43071175d7c477c40dd1044a2ce30779a40ca4c0
Original thread: https://lkml.kernel.org/lkml/00000000000019ca8105842a9660@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+829513abde137358d25d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000019ca8105842a9660@google.com
^ permalink raw reply
* Reminder: 14 open syzbot bugs in "net/sctp" subsystem
From: Eric Biggers @ 2019-06-25 5:49 UTC (permalink / raw)
To: linux-sctp, netdev, Vlad Yasevich, Neil Horman,
Marcelo Ricardo Leitner, David S. Miller, Xin Long
Cc: linux-kernel, syzkaller-bugs
[This email was generated by a script. Let me know if you have any suggestions
to make it better.]
Of the currently open syzbot reports against the upstream kernel, I've manually
marked 14 of them as possibly being bugs in the "net/sctp" subsystem. I've
listed these reports below, sorted by an algorithm that tries to list first the
reports most likely to be still valid, important, and actionable.
Of these 14 bugs, 4 were seen in mainline in the last week.
Of these 14 bugs, 2 were bisected to commits from the following person:
Xin Long <lucien.xin@gmail.com>
If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status
If you believe I misattributed a bug to the "net/sctp" subsystem, please let me
know, and if possible forward the report to the correct people or mailing list.
Here are the bugs:
--------------------------------------------------------------------------------
Title: general protection fault in sctp_sched_prio_sched
Last occurred: 9 days ago
Reported: 9 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=c9eebb3d2277a526840c1049ae16762b9b11e50e
Original thread: https://lkml.kernel.org/lkml/00000000000017a264058b653a58@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit 4ff40b86262b73553ee47cc3784ce8ba0f220bd8
Author: Xin Long <lucien.xin@gmail.com>
Date: Mon Jan 21 18:42:09 2019 +0000
sctp: set chunk transport correctly when it's a new asoc
The original thread for this bug has received 4 replies; the last was 6 days
ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c1a380d42b190ad1e559@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 6 days ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/00000000000017a264058b653a58@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in __lock_sock
Last occurred: 9 days ago
Reported: 219 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=27934d200d11e2fbae5c715bfefad252f41785fb
Original thread: https://lkml.kernel.org/lkml/000000000000b98a67057ad7158a@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit 8f840e47f190cbe61a96945c13e9551048d42cef
Author: Xin Long <lucien.xin@gmail.com>
Date: Thu Apr 14 07:35:33 2016 +0000
sctp: add the sctp_diag.c file
The original thread for this bug received 6 replies; the last was 200 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+9276d76e83e3bcde6c99@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000b98a67057ad7158a@google.com
--------------------------------------------------------------------------------
Title: memory leak in sctp_stream_init_ext
Last occurred: 0 days ago
Reported: 24 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=bbfa653205516be2a33b51c381ef827c534ba596
Original thread: https://lkml.kernel.org/lkml/000000000000f122ab058a303d94@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 2 replies; the last was 20 days
ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+7f3b6b106be8dcdcdeec@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f122ab058a303d94@google.com
--------------------------------------------------------------------------------
Title: memory leak in sctp_get_port_local
Last occurred: 3 days ago
Reported: 27 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=ff1010c7eb802434fa13f8a03fdf6752d043c77c
Original thread: https://lkml.kernel.org/lkml/00000000000069c3140589f6d3b7@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+079bf326b38072f849d9@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000069c3140589f6d3b7@google.com
--------------------------------------------------------------------------------
Title: memory leak in sctp_v4_create_accept_sk
Last occurred: 2 days ago
Reported: 0 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=6707a16a015da72a5d22a843e2ce411fd207b55f
Original thread: https://lkml.kernel.org/lkml/00000000000064c849058c0cbdc9@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 1 reply, 9 hours ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+afabda3890cc2f765041@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 9 hours ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/00000000000064c849058c0cbdc9@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in ip6_hold_safe (3)
Last occurred: 1 day ago
Reported: 48 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=b30a8ecdfbefe331ff4d3a0a601ae28d91a430e3
Original thread: https://lkml.kernel.org/lkml/000000000000eba333058848fcc1@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+1de7f57dd018a516ae89@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000eba333058848fcc1@google.com
--------------------------------------------------------------------------------
Title: memory leak in sctp_send_reset_streams
Last occurred: 24 days ago
Reported: 24 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=ecedaad28cb6bb86a08d6dcabd93ef76f875bfaf
Original thread: https://lkml.kernel.org/lkml/000000000000f7a443058a358cb4@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 2 replies; the last was 23 days
ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6ad9c3bd0a218a2ab41d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f7a443058a358cb4@google.com
--------------------------------------------------------------------------------
Title: memory leak in sctp_v6_create_accept_sk
Last occurred: 22 days ago
Reported: 22 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=6dbf93a38d9b3ad51c95a4b5f4dfe8f0cf03a74b
Original thread: https://lkml.kernel.org/lkml/0000000000004c134d058a5d0096@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+276ca1c77a19977c0130@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000004c134d058a5d0096@google.com
--------------------------------------------------------------------------------
Title: KASAN: user-memory-access Read in ip6_hold_safe (3)
Last occurred: 4 days ago
Reported: 23 days ago
Branches: bpf-next, linux-next, and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=1707ac302b38aaceb5b3df470b198244fe0205d0
Original thread: https://lkml.kernel.org/lkml/000000000000a7776f058a3ce9db@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
The original thread for this bug has received 3 replies; the last was 18 hours
ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a5b6e01ec8116d046842@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 18 hours ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/000000000000a7776f058a3ce9db@google.com
--------------------------------------------------------------------------------
Title: BUG: unable to handle kernel paging request in sctp_v6_get_dst
Last occurred: 8 days ago
Reported: 176 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=b44ed5bb06a257ee2649272a08d7b68c184a7bfe
Original thread: https://lkml.kernel.org/lkml/000000000000aa968f057e372583@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+ae70faffd84f05295f27@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000aa968f057e372583@google.com
--------------------------------------------------------------------------------
Title: BUG: unable to handle kernel paging request in dst_release (2)
Last occurred: 12 days ago
Reported: 90 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=1457062b2884c65d9c089e0abee144e7a6de1006
Original thread: https://lkml.kernel.org/lkml/0000000000008cc65f0584fba1c4@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f7b46bf869b6ace2ea45@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000008cc65f0584fba1c4@google.com
--------------------------------------------------------------------------------
Title: general protection fault in sctp_v6_get_dst (2)
Last occurred: 17 days ago
Reported: 97 days ago
Branches: bpf-next, net, and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=f30835c913a031ac302f0124763139ec0eb4b5d3
Original thread: https://lkml.kernel.org/lkml/000000000000e8335605846f099f@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5aab5972d41ebaa03f25@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e8335605846f099f@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in fib6_rule_action
Last occurred: 70 days ago
Reported: 62 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=9b73c38d6e1905753dad5374ca51271b6787a124
Original thread: https://lkml.kernel.org/lkml/0000000000001645670587350783@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+3edc8b0bf48d614ae4ef@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000001645670587350783@google.com
--------------------------------------------------------------------------------
Title: general protection fault in reuseport_add_sock
Last occurred: 129 days ago
Reported: 128 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=aae414b4366f2bb8cb759da428861e6e81942046
Original thread: https://lkml.kernel.org/lkml/0000000000009e38f10581fd7499@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+675ee297acac988852c1@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009e38f10581fd7499@google.com
^ permalink raw reply
* Reminder: 17 open syzbot bugs in "net/tls" subsystem
From: Eric Biggers @ 2019-06-25 5:50 UTC (permalink / raw)
To: netdev, Boris Pismenny, Aviad Yehezkel, Dave Watson,
John Fastabend, Daniel Borkmann, David S. Miller, Vakul Garg
Cc: linux-kernel, syzkaller-bugs
[This email was generated by a script. Let me know if you have any suggestions
to make it better.]
Of the currently open syzbot reports against the upstream kernel, I've manually
marked 17 of them as possibly being bugs in the "net/tls" subsystem. I've
listed these reports below, sorted by an algorithm that tries to list first the
reports most likely to be still valid, important, and actionable.
Of these 17 bugs, 7 were seen in mainline in the last week.
Of these 17 bugs, 6 were bisected to commits from the following people:
Dave Watson <davejwatson@fb.com>
Vakul Garg <vakul.garg@nxp.com>
Boris Pismenny <borisp@mellanox.com>
Daniel Borkmann <daniel@iogearbox.net>
If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status
If you believe I misattributed a bug to the "net/tls" subsystem, please let me
know, and if possible forward the report to the correct people or mailing list.
Here are the bugs:
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in tls_write_space
Last occurred: 0 days ago
Reported: 353 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=3ff26cb6000860a73428556d7df314541369c939
Original thread: https://lkml.kernel.org/lkml/0000000000003dab1605704fb71d@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+2134b6b74dec9f8c760f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003dab1605704fb71d@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in gf128mul_4k_lle (3)
Last occurred: 0 days ago
Reported: 213 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=a01db4c67933e9e4be8e721a8ee15a9530f1ac04
Original thread: https://lkml.kernel.org/lkml/000000000000bf2457057b5ccda3@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug received 2 replies; the last was 208 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f8495bff23a879a6d0bd@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000bf2457057b5ccda3@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in tls_sw_free_resources_tx
Last occurred: 6 days ago
Reported: 202 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=44ae4b4fa7e6c6e92aa921d2ec20ce9fbee97939
Original thread: https://lkml.kernel.org/lkml/000000000000cab053057c2e5202@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit 3c4d7559159bfe1e3b94df3a657b2cda3a34e218
Author: Dave Watson <davejwatson@fb.com>
Date: Wed Jun 14 18:37:39 2017 +0000
tls: kernel TLS support
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+503339bf3c9053b8a7fc@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000cab053057c2e5202@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in __flush_work
Last occurred: 0 days ago
Reported: 128 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=9613d8dffb5c6cc39da8ec290cb8f3eb62bdf21f
Original thread: https://lkml.kernel.org/lkml/0000000000008f9c780581fd7417@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+aa0b64a57e300a1c6bcc@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000008f9c780581fd7417@google.com
--------------------------------------------------------------------------------
Title: kernel BUG at include/linux/scatterlist.h:LINE!
Last occurred: 1 day ago
Reported: 33 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=effb623cefb879664122cc47df3af728957eb279
Original thread: https://lkml.kernel.org/lkml/000000000000f41cd905897c075e@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit f295b3ae9f5927e084bd5decdff82390e3471801
Author: Vakul Garg <vakul.garg@nxp.com>
Date: Wed Mar 20 02:03:36 2019 +0000
net/tls: Add support of AES128-CCM based ciphers
The original thread for this bug has received 1 reply, 14 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+df0d4ec12332661dd1f9@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 14 days ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/000000000000f41cd905897c075e@google.com
--------------------------------------------------------------------------------
Title: kernel BUG at ./include/linux/scatterlist.h:LINE!
Last occurred: 5 days ago
Reported: 4 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=3008161aab5958fe4125a4cae3e4b7ad3ea50a26
Original thread: https://lkml.kernel.org/lkml/000000000000417551058bc0bef9@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit f295b3ae9f5927e084bd5decdff82390e3471801
Author: Vakul Garg <vakul.garg@nxp.com>
Date: Wed Mar 20 02:03:36 2019 +0000
net/tls: Add support of AES128-CCM based ciphers
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+ef0daa6ce95facb233c1@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread. For the git send-email command to use, or tips on how to reply if the
thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000417551058bc0bef9@google.com
--------------------------------------------------------------------------------
Title: kernel BUG at include/linux/mm.h:LINE! (5)
Last occurred: 42 days ago
Reported: 112 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=c14d620a28ea77843c2632f5b05b315c44a2dd06
Original thread: https://lkml.kernel.org/lkml/00000000000054cc6d05834c33d7@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit 94850257cf0f88b20db7644f28bfedc7d284de15
Author: Boris Pismenny <borisp@mellanox.com>
Date: Wed Feb 27 15:38:03 2019 +0000
tls: Fix tls_device handling of partial records
The original thread for this bug received 1 reply, 111 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5013d47539cdd43e7098@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000054cc6d05834c33d7@google.com
--------------------------------------------------------------------------------
Title: WARNING: ODEBUG bug in tls_sw_free_resources_tx
Last occurred: 7 days ago
Reported: 230 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=f4b5189b77d5defcd01b7177411ebb8717b7ca45
Original thread: https://lkml.kernel.org/lkml/00000000000062c5c3057a095d25@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+70ab6a1f8151888c4ea0@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000062c5c3057a095d25@google.com
--------------------------------------------------------------------------------
Title: memory leak in create_ctx
Last occurred: 16 days ago
Reported: 16 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=3497d93558e378dec6f6583bedd163778c79d0dd
Original thread: https://lkml.kernel.org/lkml/000000000000a420af058ad4bca2@google.com/T/#u
This bug has a syzkaller reproducer only.
The original thread for this bug has received 5 replies; the last was 10 days
ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+06537213db7ba2745c4a@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 10 days ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/000000000000a420af058ad4bca2@google.com
--------------------------------------------------------------------------------
Title: WARNING in sk_stream_kill_queues (3)
Last occurred: 16 days ago
Reported: 375 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=1557fb40b5ed0a1ed2ba18268e04da194674d770
Original thread: https://lkml.kernel.org/lkml/000000000000013b0d056e997fec@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+13e1ee9caeab5a9abc62@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000013b0d056e997fec@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in generic_gcmaes_encrypt
Last occurred: 145 days ago
Reported: 271 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=27ba7fbc34f9b61adecf2615022db00a6fb61211
Original thread: https://lkml.kernel.org/lkml/000000000000d014010576cc00f4@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit a42055e8d2c30d4decfc13ce943d09c7b9dad221
Author: Vakul Garg <vakul.garg@nxp.com>
Date: Fri Sep 21 04:16:13 2018 +0000
net/tls: Add support for async encryption of records for performance
The original thread for this bug received 2 replies; the last was 270 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6d3612ba5e254e387153@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000d014010576cc00f4@google.com
--------------------------------------------------------------------------------
Title: general protection fault in tcp_cleanup_ulp
Last occurred: 276 days ago
Reported: 291 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=24f95d3de36dd102ee36510385eec785fe08ad0d
Original thread: https://lkml.kernel.org/lkml/00000000000006602605752ffa1a@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit 90545cdc3f2b2ea700e24335610cd181e73756da
Author: Daniel Borkmann <daniel@iogearbox.net>
Date: Thu Aug 16 19:49:07 2018 +0000
tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0b3ccd4f62dac2cf3a7d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000006602605752ffa1a@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in tls_sw_sendmsg
Last occurred: 5 days ago
Reported: 105 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=706f5d1339aa1c10348c96d852da1c1e34e5b7bd
Original thread: https://lkml.kernel.org/lkml/0000000000006a71990583cd3d9c@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+8a6df99c3b1812093b70@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000006a71990583cd3d9c@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in crypto_gcm_init_common
Last occurred: 165 days ago
Reported: 230 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=979d00397272e11bc334ec842074d314bde41b90
Original thread: https://lkml.kernel.org/lkml/00000000000060e0ae057a092be8@google.com/T/#u
This bug has a C reproducer.
syzbot has bisected this bug, but I think the bisection result is incorrect.
The original thread for this bug received 2 replies; the last was 62 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e736399a2c4054612307@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000060e0ae057a092be8@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in timer_is_static_object (2)
Last occurred: 14 days ago
Reported: 40 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=aa9951fb518f1e883b28a0675789ff2fc82c8bf5
Original thread: https://lkml.kernel.org/lkml/000000000000f29ffd0588e669d4@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+81215bf96c82318c7e74@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f29ffd0588e669d4@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in tls_push_sg
Last occurred: 38 days ago
Reported: 38 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=244990e1ccfdb940c14114668b0a967198582f04
Original thread: https://lkml.kernel.org/lkml/0000000000000d1491058919b662@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+66fbe4719f6ef22754ee@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000d1491058919b662@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in tls_write_space
Last occurred: 272 days ago
Reported: 272 days ago
Branches: linux-next and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=748ab8de777f23e8265027741072c68feb62a527
Original thread: https://lkml.kernel.org/lkml/0000000000000a5b840576bad225@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+12638b747fd208f6cff0@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000a5b840576bad225@google.com
^ permalink raw reply
* Reminder: 27 open syzbot bugs in "net/xfrm" subsystem
From: Eric Biggers @ 2019-06-25 5:51 UTC (permalink / raw)
To: netdev, Steffen Klassert, Herbert Xu, David S. Miller, Su Yanjun
Cc: linux-kernel, syzkaller-bugs
[This email was generated by a script. Let me know if you have any suggestions
to make it better.]
Of the currently open syzbot reports against the upstream kernel, I've manually
marked 27 of them as possibly being bugs in the "net/xfrm" subsystem. I've
listed these reports below, sorted by an algorithm that tries to list first the
reports most likely to be still valid, important, and actionable.
Of these 27 bugs, 4 were bisected to commits from the following person:
Su Yanjun <suyj.fnst@cn.fujitsu.com>
If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status
If you believe I misattributed a bug to the "net/xfrm" subsystem, please let me
know, and if possible forward the report to the correct people or mailing list.
Here are the bugs:
--------------------------------------------------------------------------------
Title: general protection fault in get_work_pool
Last occurred: 75 days ago
Reported: 478 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=849bd5710811bd19cad5b2f32ae863cfd6fe1c58
Original thread: https://lkml.kernel.org/lkml/001a1149c7ba03500d05667a1d4f@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+880087058dbc131a2703@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/001a1149c7ba03500d05667a1d4f@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in _decode_session4
Last occurred: 451 days ago
Reported: 451 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=341e1a2a55b389e54cc07624ed40eb3ecca577db
Original thread: https://lkml.kernel.org/lkml/001a113fe6d081698f0568a5dcac@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a7db9083ed4017ba4423@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/001a113fe6d081698f0568a5dcac@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in _decode_session6
Last occurred: 223 days ago
Reported: 291 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=ecf3e152769bdad66c297986d83561adea6ae155
Original thread: https://lkml.kernel.org/lkml/0000000000008d5a360575368e31@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e8c1d30881266e47eb33@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000008d5a360575368e31@google.com
--------------------------------------------------------------------------------
Title: WARNING in xfrm_policy_fini
Last occurred: 52 days ago
Reported: 308 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=c92d61bdd289b3550d8dbd6a970c2f34995a22b4
Original thread: https://lkml.kernel.org/lkml/000000000000c5745b0573d62311@google.com/T/#u
This bug has a syzkaller reproducer only.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+9bce6db6c82f06b85d8b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000c5745b0573d62311@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in xfrm_state_find
Last occurred: 169 days ago
Reported: 374 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=4d9dc4ec10e0d7b004645eadc3e99bbc2af67a74
Original thread: https://lkml.kernel.org/lkml/0000000000001f31eb056ea92fcb@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug received 1 reply, 374 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+131cd4c6d21724b99a26@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000001f31eb056ea92fcb@google.com
--------------------------------------------------------------------------------
Title: INFO: rcu detected stall in pppol2tp_sendmsg
Last occurred: 8 days ago
Reported: 286 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=a7452f862c05dd695baf590d4f164bd089e636d8
Original thread: https://lkml.kernel.org/lkml/000000000000b8e87005759244ec@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0925ea3f5745e9005733@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000b8e87005759244ec@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in _decode_session6
Last occurred: 238 days ago
Reported: 442 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=7202296b7d7edf5d61e8c1f2c113d36ecd493a6a
Original thread: https://lkml.kernel.org/lkml/000000000000311cdd0569510cc7@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+2974b85346f85b586f4d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000311cdd0569510cc7@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in _decode_session6 (2)
Last occurred: 216 days ago
Reported: 237 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=afc5098c1a0cb7cda8aa7fdb402153ff24fcf31c
Original thread: https://lkml.kernel.org/lkml/000000000000c4ba820579737025@google.com/T/#u
This bug has a C reproducer.
syzbot has bisected this bug, but I think the bisection result is incorrect.
The original thread for this bug received 1 reply, 94 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+240f9766d6be3d69431e@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000c4ba820579737025@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in _decode_session4
Last occurred: 165 days ago
Reported: 421 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=31621ad0bdf6fd9c055769fb33f56423d7c6545b
Original thread: https://lkml.kernel.org/lkml/000000000000e4758d056aff4604@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e7fec512bc2eb4ae0781@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000e4758d056aff4604@google.com
--------------------------------------------------------------------------------
Title: WARNING: suspicious RCU usage in xfrm_get_sadinfo
Last occurred: 96 days ago
Reported: 97 days ago
Branches: linux-next
Dashboard link: https://syzkaller.appspot.com/bug?id=106319f5d94ac049166744eee79e455ce4d0435c
Original thread: https://lkml.kernel.org/lkml/0000000000009c1aca058474a076@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit f10e0010fae8174dc20bdc872bcaa85baa925cb7
Author: Su Yanjun <suyj.fnst@cn.fujitsu.com>
Date: Thu Mar 7 01:54:08 2019 +0000
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+2792672c6a63f1dc867c@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009c1aca058474a076@google.com
--------------------------------------------------------------------------------
Title: WARNING: suspicious RCU usage in xfrm_get_spdinfo
Last occurred: 96 days ago
Reported: 97 days ago
Branches: linux-next
Dashboard link: https://syzkaller.appspot.com/bug?id=4db14afc80049c484903a7cf4d36d9cb1618469f
Original thread: https://lkml.kernel.org/lkml/0000000000008a14a5058474a025@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit f10e0010fae8174dc20bdc872bcaa85baa925cb7
Author: Su Yanjun <suyj.fnst@cn.fujitsu.com>
Date: Thu Mar 7 01:54:08 2019 +0000
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+bfb3cbc2e9467b566c8b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000008a14a5058474a025@google.com
--------------------------------------------------------------------------------
Title: WARNING in xfrm_policy_insert
Last occurred: 210 days ago
Reported: 495 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=17486feafe3890260729f5fe75a25f8d865bdd5d
Original thread: https://lkml.kernel.org/lkml/001a11405628bb07410565279f4a@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5cfc132a76d844973259@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/001a11405628bb07410565279f4a@google.com
--------------------------------------------------------------------------------
Title: WARNING: suspicious RCU usage in xfrm_alloc_userspi
Last occurred: 96 days ago
Reported: 97 days ago
Branches: linux-next
Dashboard link: https://syzkaller.appspot.com/bug?id=cf86490d75109a7648fc749a4c9a8d59fabe398d
Original thread: https://lkml.kernel.org/lkml/0000000000007783a2058474a0b9@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit f10e0010fae8174dc20bdc872bcaa85baa925cb7
Author: Su Yanjun <suyj.fnst@cn.fujitsu.com>
Date: Thu Mar 7 01:54:08 2019 +0000
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
The original thread for this bug received 2 replies; the last was 96 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+59752237f7ab21c3f3c3@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000007783a2058474a0b9@google.com
--------------------------------------------------------------------------------
Title: KASAN: stack-out-of-bounds Read in xfrm_state_find (5)
Last occurred: 146 days ago
Reported: 448 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=44fa54548362cb84e26da7c1bbd356c86c54f36d
Original thread: https://lkml.kernel.org/lkml/000000000000a5390a0568d7508a@google.com/T/#u
This bug has a C reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+d90468452f685a0b28eb@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000a5390a0568d7508a@google.com
--------------------------------------------------------------------------------
Title: INFO: rcu detected stall in igmp_ifc_timer_expire
Last occurred: 31 days ago
Reported: 176 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=330ce4f7626354cc6444c457c9a5e82d8a8c5055
Original thread: https://lkml.kernel.org/lkml/000000000000a26437057e4915ff@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+041483004a7f45f1f20a@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000a26437057e4915ff@google.com
--------------------------------------------------------------------------------
Title: WARNING: suspicious RCU usage in xfrm_get_policy
Last occurred: 97 days ago
Reported: 97 days ago
Branches: linux-next
Dashboard link: https://syzkaller.appspot.com/bug?id=02bde0600a225e8efa31bdce2e7f1b822542fef1
Original thread: https://lkml.kernel.org/lkml/0000000000009ed0ce058474a0c1@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit f10e0010fae8174dc20bdc872bcaa85baa925cb7
Author: Su Yanjun <suyj.fnst@cn.fujitsu.com>
Date: Thu Mar 7 01:54:08 2019 +0000
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+670c11fba80a72c50a6a@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009ed0ce058474a0c1@google.com
--------------------------------------------------------------------------------
Title: WARNING in __vunmap
Last occurred: 24 days ago
Reported: 128 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=8c0c68130548c7ec737d9ccc018a7589a768c0a9
Original thread: https://lkml.kernel.org/lkml/00000000000092839d0581fd74ad@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5ec9bb042ddfe9644773@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000092839d0581fd74ad@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Write in __xfrm_policy_unlink (2)
Last occurred: 43 days ago
Reported: 39 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=ceba0c97b0c5a5803c8fa3a7c100edbca4faa06f
Original thread: https://lkml.kernel.org/lkml/000000000000cd5fdf0588fed11c@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0025447b4cb6f208558f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000cd5fdf0588fed11c@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Write in xfrm_hash_rebuild
Last occurred: 45 days ago
Reported: 39 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=8670f2d214d37784bc4dc56676bec785421c0a15
Original thread: https://lkml.kernel.org/lkml/000000000000d028b30588fed102@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0165480d4ef07360eeda@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000d028b30588fed102@google.com
--------------------------------------------------------------------------------
Title: general protection fault in __vunmap
Last occurred: 129 days ago
Reported: 128 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=7151fc2080bde02d5f074c3e7fde2684cd514d11
Original thread: https://lkml.kernel.org/lkml/0000000000009a0bd40581fd747b@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+39d3a56f2f717d237007@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009a0bd40581fd747b@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in xfrm_sk_policy_lookup (2)
Last occurred: 69 days ago
Reported: 62 days ago
Branches: linux-next
Dashboard link: https://syzkaller.appspot.com/bug?id=23b4b8906a588cf0a27f879e53827067bfc5f197
Original thread: https://lkml.kernel.org/lkml/000000000000282a870587350077@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+edb62c973ff9f07e408d@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000282a870587350077@google.com
--------------------------------------------------------------------------------
Title: general protection fault in xfrm_init_replay
Last occurred: 466 days ago
Reported: 465 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=63c86d9f895ad63bb85474b7d0cb04940da24395
Original thread: https://lkml.kernel.org/lkml/001a113ea6d880f10e05679064d3@google.com/T/#u
This bug has a syzkaller reproducer only.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+f14c1ee2dbd16782dcc2@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/001a113ea6d880f10e05679064d3@google.com
--------------------------------------------------------------------------------
Title: general protection fault in xfrm_lookup_with_ifid
Last occurred: 71 days ago
Reported: 105 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=c6085af89fc64682ed88b083355c296e2f530a90
Original thread: https://lkml.kernel.org/lkml/000000000000973c550583cb8562@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+2a7531cd068ddc9932f9@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000973c550583cb8562@google.com
--------------------------------------------------------------------------------
Title: general protection fault in __xfrm_policy_check
Last occurred: 118 days ago
Reported: 118 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=7ebcd3969f71317db080af582c18c5456c674662
Original thread: https://lkml.kernel.org/lkml/000000000000f41ad40582cc632d@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+4ea28a8b817ee28bf324@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f41ad40582cc632d@google.com
--------------------------------------------------------------------------------
Title: general protection fault in ipcomp_init_state
Last occurred: 168 days ago
Reported: 167 days ago
Branches: net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=04230e91fa39b0e09f3d67a1d9e7cde9a2ed9abb
Original thread: https://lkml.kernel.org/lkml/000000000000194b2a057eeca129@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0864346ae616fffdd602@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000194b2a057eeca129@google.com
--------------------------------------------------------------------------------
Title: general protection fault in xfrmi_rcv_cb
Last occurred: 116 days ago
Reported: 284 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=970bf3d270407aea29acd9fe1676d99371f07e5a
Original thread: https://lkml.kernel.org/lkml/000000000000defd200575c0b7dd@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+af91688fec2b033aa620@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000defd200575c0b7dd@google.com
--------------------------------------------------------------------------------
Title: INFO: rcu detected stall in inet_dgram_connect
Last occurred: 146 days ago
Reported: 176 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=efb40f930f737583bc3d4c047300e52d2dbac017
Original thread: https://lkml.kernel.org/lkml/0000000000009f9349057e4915b4@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+94683b47a87718b5dff7@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009f9349057e4915b4@google.com
^ permalink raw reply
* Reminder: 12 open syzbot bugs in "net/wireless" subsystem
From: Eric Biggers @ 2019-06-25 5:51 UTC (permalink / raw)
To: linux-wireless, netdev, Johannes Berg, David S. Miller
Cc: linux-kernel, syzkaller-bugs
[This email was generated by a script. Let me know if you have any suggestions
to make it better.]
Of the currently open syzbot reports against the upstream kernel, I've manually
marked 12 of them as possibly being bugs in the "net/wireless" subsystem. I've
listed these reports below, sorted by an algorithm that tries to list first the
reports most likely to be still valid, important, and actionable.
Of these 12 bugs, 10 were seen in mainline in the last week.
If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status
If you believe I misattributed a bug to the "net/wireless" subsystem, please let
me know, and if possible forward the report to the correct people or mailing
list.
Here are the bugs:
--------------------------------------------------------------------------------
Title: general protection fault in ath6kl_usb_alloc_urb_from_pipe
Last occurred: 0 days ago
Reported: 73 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=cd8b9cfe50a0bf36ee19eda2d7e2e06843dfbeaf
Original thread: https://lkml.kernel.org/lkml/0000000000008e825105865615e3@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+ead4037ec793e025e66f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000008e825105865615e3@google.com
--------------------------------------------------------------------------------
Title: INFO: trying to register non-static key in rtl_c2hcmd_launcher
Last occurred: 0 days ago
Reported: 73 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=9c910719e185e47dad63741d473518b365286eb7
Original thread: https://lkml.kernel.org/lkml/000000000000727264058653d9a7@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 1 reply, 27 days ago.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+1fcc5ef45175fc774231@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000727264058653d9a7@google.com
--------------------------------------------------------------------------------
Title: WARNING: ODEBUG bug in rsi_probe
Last occurred: 0 days ago
Reported: 71 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=3b35267abf182bd98ba95c0943bc0f957e021101
Original thread: https://lkml.kernel.org/lkml/00000000000024bbd7058682eda1@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+1d1597a5aa3679c65b9f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000024bbd7058682eda1@google.com
--------------------------------------------------------------------------------
Title: INFO: trying to register non-static key in del_timer_sync (2)
Last occurred: 0 days ago
Reported: 73 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=26525f643f454dd7be0078423e3cdb0d57744959
Original thread: https://lkml.kernel.org/lkml/000000000000927a7b0586561537@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 5 replies; the last was 12 days
ago.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+dc4127f950da51639216@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 12 days ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/000000000000927a7b0586561537@google.com
--------------------------------------------------------------------------------
Title: WARNING in zd_mac_clear
Last occurred: 0 days ago
Reported: 73 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=46e5ae5074764b5f0eed428a8c4989d9efbe9146
Original thread: https://lkml.kernel.org/lkml/00000000000075a7a6058653d977@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+74c65761783d66a9c97c@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000075a7a6058653d977@google.com
--------------------------------------------------------------------------------
Title: WARNING: ath10k USB support is incomplete, don't expect anything to work!
Last occurred: 0 days ago
Reported: 46 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=8b74d6028d19ea25be1d3ee73502dc90833859d8
Original thread: https://lkml.kernel.org/lkml/000000000000a3ca70058872de7c@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 1 reply, 46 days ago.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c1b25598aa60dcd47e78@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000a3ca70058872de7c@google.com
--------------------------------------------------------------------------------
Title: KASAN: invalid-free in rsi_91x_deinit
Last occurred: 5 days ago
Reported: 62 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=426fbebc1eac728afa08e52b1bcf8171c9413e29
Original thread: https://lkml.kernel.org/lkml/0000000000005ae4cd058731d407@google.com/T/#u
This bug has a C reproducer.
No one has replied to the original thread for this bug yet.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+7c72edfb407b2bd866ce@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005ae4cd058731d407@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in p54u_load_firmware_cb
Last occurred: 5 days ago
Reported: 49 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=a7d7aec13ac4d6981c15814acb900348d340dd70
Original thread: https://lkml.kernel.org/lkml/00000000000001de810588363aaf@google.com/T/#u
This bug has a syzkaller reproducer only.
The original thread for this bug has received 4 replies; the last was 9 hours
ago.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6d237e74cdc13f036473@syzkaller.appspotmail.com
If you send any email or patch for this bug, please reply to the original
thread, which had activity only 9 hours ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/00000000000001de810588363aaf@google.com
--------------------------------------------------------------------------------
Title: WARNING in submit_rx_urb/usb_submit_urb
Last occurred: 1 day ago
Reported: 26 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=97fff2c33c48264fba4d185f5f0f0961bdcd2ae2
Original thread: https://lkml.kernel.org/lkml/0000000000004da71e058a06318b@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 1 reply, 26 days ago.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c2a1fa67c02faa0de723@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000004da71e058a06318b@google.com
--------------------------------------------------------------------------------
Title: WARNING in ar5523_submit_rx_cmd/usb_submit_urb
Last occurred: 2 days ago
Reported: 21 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=d4cdc65d1db112b294b568e0cff47bca7cd3edbd
Original thread: https://lkml.kernel.org/lkml/000000000000f4900f058a69d6c5@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 1 reply, 21 days ago.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6101b0c732dea13ea55b@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000f4900f058a69d6c5@google.com
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in rt2500usb_bbp_read
Last occurred: 13 days ago
Reported: 18 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=f35d123de7d393019c1ed4d4e60dc66596ed62cd
Original thread: https://lkml.kernel.org/lkml/000000000000cf6a70058aa48695@google.com/T/#u
This bug has a C reproducer.
The original thread for this bug has received 1 reply, 18 days ago.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+a106a5b084a6890d2607@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000cf6a70058aa48695@google.com
--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in p54u_load_firmware_cb
Last occurred: 11 days ago
Reported: 49 days ago
Branches: Mainline (with usb-fuzzer patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=082c09653e43e33a6a56f8c57cf051eeacae9d5f
Original thread: https://lkml.kernel.org/lkml/000000000000050c5f0588363ad6@google.com/T/#u
This bug has a syzkaller reproducer only.
The original thread for this bug has received 13 replies; the last was 27 days
ago.
This looks like a bug in a net/wireless USB driver.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+200d4bb11b23d929335f@syzkaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000050c5f0588363ad6@google.com
^ permalink raw reply
* Re: hard-coded limit on unresolved multicast route cache in ipv4/ipmr.c causes slow, unreliable creation of multicast routes on busy networks
From: Hangbin Liu @ 2019-06-25 6:15 UTC (permalink / raw)
To: David Miller; +Cc: sukumarg1973, karn, kuznet, yoshfuji, netdev, linux-kernel
In-Reply-To: <20181218.215545.1657190540227341803.davem@davemloft.net>
On Tue, Dec 18, 2018 at 09:55:45PM -0800, David Miller wrote:
> From: Sukumar Gopalakrishnan <sukumarg1973@gmail.com>
> Date: Wed, 19 Dec 2018 10:57:02 +0530
>
> > Hi David,
> >
> > There are two patch for this issue:
> > 1) Your changes which removes cache_resolve_queue_len
> > 2) Hangbin's changes which make cache_resolve_queue_len configurable.
> >
> > Which one will be chosen for this issue ?
>
> I do plan to look into this, sorry for taking so long.
>
> Right now I am overwhelmed preparing for the next merge window and
> synchronizing with other developers for that.
>
> Please be patient.
Hi David,
Any progress for this issue?
Thanks
Hangbin
^ permalink raw reply
* Re: Removing skb_orphan() from ip_rcv_core()
From: Eric Dumazet @ 2019-06-25 6:37 UTC (permalink / raw)
To: Joe Stringer, Florian Westphal
Cc: netdev, john fastabend, Daniel Borkmann, Lorenz Bauer,
Jakub Sitnicki, Paolo Abeni
In-Reply-To: <CAOftzPi5SO_tZeoEs1Apd5np=Sd2fFUPm1oome_31=rMqSD-=g@mail.gmail.com>
On 6/24/19 8:17 PM, Joe Stringer wrote:
> On Fri, Jun 21, 2019 at 1:59 PM Florian Westphal <fw@strlen.de> wrote:
>>
>> Joe Stringer <joe@wand.net.nz> wrote:
>>> As discussed during LSFMM, I've been looking at adding something like
>>> an `skb_sk_assign()` helper to BPF so that logic similar to TPROXY can
>>> be implemented with integration into other BPF logic, however
>>> currently any attempts to do so are blocked by the skb_orphan() call
>>> in ip_rcv_core() (which will effectively ignore any socket assign
>>> decision made by the TC BPF program).
>>>
>>> Recently I was attempting to remove the skb_orphan() call, and I've
>>> been trying different things but there seems to be some context I'm
>>> missing. Here's the core of the patch:
>>>
>>> diff --git a/net/ipv4/ip_input.c b/net/ipv4/ip_input.c
>>> index ed97724c5e33..16aea980318a 100644
>>> --- a/net/ipv4/ip_input.c
>>> +++ b/net/ipv4/ip_input.c
>>> @@ -500,8 +500,6 @@ static struct sk_buff *ip_rcv_core(struct sk_buff
>>> *skb, struct net *net)
>>> memset(IPCB(skb), 0, sizeof(struct inet_skb_parm));
>>> IPCB(skb)->iif = skb->skb_iif;
>>>
>>> - /* Must drop socket now because of tproxy. */
>>> - skb_orphan(skb);
>>>
>>> return skb;
>>>
>>> The statement that the socket must be dropped because of tproxy
>>> doesn't make sense to me, because the PRE_ROUTING hook is hit after
>>> this, which will call into the tproxy logic and eventually
>>> nf_tproxy_assign_sock() which already does the skb_orphan() itself.
>>
>> in comment: s/tproxy/skb_steal_sock/
>
> For reference, I was following the path like this:
>
> ip_rcv()
> ( -> ip_rcv_core() for skb_orphan)
> -> NF_INET_PRE_ROUTING hook
> (... invoke iptables hooks)
> -> iptable_mangle_hook()
> -> ipt_do_table()
> ... -> tproxy_tg4()
> ... -> nf_tproxy_assign_sock()
> -> skb_orphan()
> (... finish iptables processing)
> ( -> ip_rcv_finish())
> ( ... -> ip_rcv_finish_core() for early demux / route lookup )
> (... -> dst_input())
> (... -> tcp_v4_rcv())
> ( -> __inet_lookup_skb())
> ( -> skb_steal_sock() )
>
>> at least thats what I concluded a few years ago when I looked into
>> the skb_oprhan() need.
>>
>> IIRC some device drivers use skb->sk for backpressure, so without this
>> non-tcp socket would be stolen by skb_steal_sock.
>
> Do you happen to recall which device drivers? Or have some idea of a
> list I could try to go through? Are you referring to virtual drivers
> like veth or something else?
>
>> We also recently removed skb orphan when crossing netns:
>>
>> commit 9c4c325252c54b34d53b3d0ffd535182b744e03d
>> Author: Flavio Leitner <fbl@redhat.com>
>> skbuff: preserve sock reference when scrubbing the skb.
>>
>> So thats another case where this orphan is needed.
>
> Presumably the orphan is only needed in this case if the packet
> crosses a namespace and then is subsequently passed back into the
> stack?
Yes, I understand we do not want the skb_orphan() when 'srubing' the skb.
But we want the skb_orphan() right before the packet is reinjected in ingress path.
>
>> What could be done is adding some way to delay/defer the orphaning
>> further, but we would need at the very least some annotation for
>> skb_steal_sock to know when the skb->sk is really from TPROXY or
>> if it has to orphan.
>
> Eric mentions in another response to this thread that skb_orphan()
> should be called from any ndo_start_xmit() which sends traffic back
> into the stack. With that, presumably we would be pushing the
> orphaning earlier such that the only way that the skb->sk ref can be
> non-NULL around this point in receive would be because it was
> specifically set by some kind of tproxy logic?
>
>> Same for the safety check in the forwarding path.
>> Netfilter modules need o be audited as well, they might make assumptions
>> wrt. skb->sk being inet sockets (set by local stack or early demux).
>>
>>> However, if I drop these lines then I end up causing sockets to
>>> release references too many times. Seems like if we don't orphan the
>>> skb here, then later logic assumes that we have one more reference
>>> than we actually have, and decrements the count when it shouldn't
>>> (perhaps the skb_steal_sock() call in __inet_lookup_skb() which seems
>>> to assume we always have a reference to the socket?)
>>
>> We might be calling the wrong destructor (i.e., the one set by tcp
>> receive instead of the one set at tx time)?
>
> Hmm, interesting thought. Sure enough, with a bit of bpftrace
> debugging we find it's tcp_wfree():
>
> $ cat ip_rcv.bt
> #include <linux/skbuff.h>
>
> kprobe:ip_rcv {
> $sk = ((struct sk_buff *)arg0)->sk;
> $des = ((struct sk_buff *)arg0)->destructor;
> if ($sk) {
> if ($des) {
> printf("received %s on %s with sk destructor %s
> set\n", str(arg0), str(arg1), ksym($des));
> @ip4_stacks[kstack] = count();
> }
> }
> }
> $ sudo bpftrace ip_rcv.bt
> Attaching 1 probe...
> received on eth0 with sk destructor tcp_wfree set
> ^C
>
> @ip4_stacks[
> ip_rcv+1
> __netif_receive_skb+24
> process_backlog+179
> net_rx_action+304
> __do_softirq+220
> do_softirq_own_stack+42
> do_softirq.part.17+70
> __local_bh_enable_ip+101
> ip_finish_output2+421
> __ip_finish_output+187
> ip_finish_output+44
> ip_output+109
> ip_local_out+59
> __ip_queue_xmit+368
> ip_queue_xmit+16
> __tcp_transmit_skb+1303
> tcp_connect+2758
> tcp_v4_connect+1135
> __inet_stream_connect+214
> inet_stream_connect+59
> __sys_connect+237
> __x64_sys_connect+26
> do_syscall_64+90
> entry_SYSCALL_64_after_hwframe+68
> ]: 1
>
> Is there a solution here where we call the destructor if it's not
> sock_efree()? When the socket is later stolen, it will only return the
> reference via a call to sock_put(), so presumably at that point in the
> stack we already assume that the skb->destructor is not one of these
> other destructors (otherwise we wouldn't release the resources
> correctly).
>
What was the driver here ? In any case, the following patch should help.
diff --git a/include/linux/netdevice.h b/include/linux/netdevice.h
index eeacebd7debbe6a55daedb92f00afd48051ebaf8..5075b4b267af7057f69fcb935226fce097a920e2 100644
--- a/include/linux/netdevice.h
+++ b/include/linux/netdevice.h
@@ -3699,6 +3699,7 @@ static __always_inline int ____dev_forward_skb(struct net_device *dev,
return NET_RX_DROP;
}
+ skb_orphan(skb);
skb_scrub_packet(skb, true);
skb->priority = 0;
return 0;
^ permalink raw reply related
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox