linux-kernel - Reminder: 5 open syzbot bugs in "net/hsr" subsystem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20190702062636.GC3054@sol.localdomain>
Date:   Mon, 1 Jul 2019 23:26:36 -0700
From:   Eric Biggers <ebiggers@...nel.org>
To:     netdev@...r.kernel.org, Arvid Brodin <arvid.brodin@...en.se>,
        "David S. Miller" <davem@...emloft.net>
Cc:     linux-kernel@...r.kernel.org, syzkaller-bugs@...glegroups.com
Subject: Reminder: 5 open syzbot bugs in "net/hsr" subsystem

[This email was generated by a script.  Let me know if you have any suggestions
to make it better, or if you want it re-generated with the latest status.]

Of the currently open syzbot reports against the upstream kernel, I've manually
marked 5 of them as possibly being bugs in the "net/hsr" subsystem.  I've listed
these reports below, sorted by an algorithm that tries to list first the reports
most likely to be still valid, important, and actionable.

Of these 5 bugs, 4 were seen in mainline in the last week.

If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status

If you believe I misattributed a bug to the "net/hsr" subsystem, please let me
know, and if possible forward the report to the correct people or mailing list.

Here are the bugs:

--------------------------------------------------------------------------------
Title:              KMSAN: uninit-value in hsr_register_frame_in
Last occurred:      1 day ago
Reported:           140 days ago
Branches:           Mainline (with KMSAN patches)
Dashboard link:     https://syzkaller.appspot.com/bug?id=2ad30d6cef7180728e401174df99d001bae578fe
Original thread:    https://lkml.kernel.org/lkml/0000000000003bb1540581a55575@google.com/T/#u

This bug has a C reproducer.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+b8152ab439b9c5174ffd@...kaller.appspotmail.com

If you send any email or patch for this bug, please consider replying to the
original thread.  For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000003bb1540581a55575@google.com

--------------------------------------------------------------------------------
Title:              WARNING in hsr_addr_subst_dest
Last occurred:      0 days ago
Reported:           180 days ago
Branches:           Mainline and others
Dashboard link:     https://syzkaller.appspot.com/bug?id=924b5574f42ebeddc94fad06f2fa329b199d58d3
Original thread:    https://lkml.kernel.org/lkml/0000000000001b1a1d057e776c92@google.com/T/#u

This bug has a C reproducer.

syzbot has bisected this bug, but I think the bisection result is incorrect.

The original thread for this bug received 2 replies; the last was 111 days ago.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+b92e4f1472a54e1c7dec@...kaller.appspotmail.com

If you send any email or patch for this bug, please consider replying to the
original thread.  For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000001b1a1d057e776c92@google.com

--------------------------------------------------------------------------------
Title:              WARNING in hsr_forward_skb
Last occurred:      0 days ago
Reported:           180 days ago
Branches:           Mainline and others
Dashboard link:     https://syzkaller.appspot.com/bug?id=13de4605e86ebcf39093017dc255aa0fd6c2f12d
Original thread:    https://lkml.kernel.org/lkml/0000000000009f94c1057e772431@google.com/T/#u

This bug has a C reproducer.

syzbot has bisected this bug, but I think the bisection result is incorrect.

The original thread for this bug received 4 replies; the last was 110 days ago.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+fdce8f2a8903f3ba0e6b@...kaller.appspotmail.com

If you send any email or patch for this bug, please consider replying to the
original thread.  For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000009f94c1057e772431@google.com

--------------------------------------------------------------------------------
Title:              memory leak in hsr_create_self_node
Last occurred:      4 days ago
Reported:           35 days ago
Branches:           Mainline
Dashboard link:     https://syzkaller.appspot.com/bug?id=291f241bec2fdf1bc2418cca91cc1d4e7f36027b
Original thread:    https://lkml.kernel.org/lkml/000000000000ea09dd0589e3af1a@google.com/T/#u

This bug has a C reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+c6167ec3de7def23d1e8@...kaller.appspotmail.com

If you send any email or patch for this bug, please consider replying to the
original thread.  For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ea09dd0589e3af1a@google.com

--------------------------------------------------------------------------------
Title:              BUG: corrupted list in hsr_prune_nodes
Last occurred:      78 days ago
Reported:           78 days ago
Branches:           bpf-next
Dashboard link:     https://syzkaller.appspot.com/bug?id=583fd57905151af7bc057ec47208d4873e953db7
Original thread:    https://lkml.kernel.org/lkml/000000000000ca5ede0586804c42@google.com/T/#u

Unfortunately, this bug does not have a reproducer.

No one has replied to the original thread for this bug yet.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+99ad9e40137a83c70ee3@...kaller.appspotmail.com

If you send any email or patch for this bug, please consider replying to the
original thread.  For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ca5ede0586804c42@google.com