| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20190724014647.GI643@sol.localdomain>
Date: Tue, 23 Jul 2019 18:46:47 -0700
From: Eric Biggers <ebiggers@...nel.org>
To: netdev@...r.kernel.org, tipc-discussion@...ts.sourceforge.net,
Jon Maloy <jon.maloy@...csson.com>,
Ying Xue <ying.xue@...driver.com>,
"David S. Miller" <davem@...emloft.net>,
Junwei Hu <hujunwei4@...wei.com>
Cc: linux-kernel@...r.kernel.org, syzkaller-bugs@...glegroups.com
Subject: Reminder: 14 open syzbot bugs in "net/tipc" subsystem
[This email was generated by a script. Let me know if you have any suggestions
to make it better, or if you want it re-generated with the latest status.]
Of the currently open syzbot reports against the upstream kernel, I've manually
marked 14 of them as possibly being bugs in the "net/tipc" subsystem. I've
listed these reports below, sorted by an algorithm that tries to list first the
reports most likely to be still valid, important, and actionable.
Of these 14 bugs, 2 were seen in mainline in the last week.
Of these 14 bugs, 8 were bisected to commits from the following people:
Jon Maloy <jon.maloy@...csson.com>
Junwei Hu <hujunwei4@...wei.com>
If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status
If you believe I misattributed a bug to the "net/tipc" subsystem, please let me
know, and if possible forward the report to the correct people or mailing list.
Here are the bugs:
--------------------------------------------------------------------------------
Title: INFO: task hung in genl_rcv_msg
Last occurred: 2 days ago
Reported: 281 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=c63df3ff405c4b7463fecacfb4157f11efa50c95
Original thread: https://lkml.kernel.org/lkml/0000000000007f82d805783fe8ce@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit 928df1880e24bcd47d6359ff86df24db3dfba3c3
Author: Jon Maloy <jon.maloy@...csson.com>
Date: Thu Mar 15 15:48:51 2018 +0000
tipc: obsolete TIPC_ZONE_SCOPE
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c3b90a95b2d6bd4f29b1@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000007f82d805783fe8ce@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in netdev_run_todo
Last occurred: 0 days ago
Reported: 526 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=2503c576cabb08d41812e732b390141f01a59545
Original thread: https://groups.google.com/d/msgid/syzkaller-bugs/089e0826d4d4bdb7c5056500fb67%40google.com
This bug has a C reproducer.
For some reason the original report email for this bug is missing from the LKML
archive at lore.kernel.org, so my script couldn't check whether anyone has
replied to it or not. The Google Groups link above should still work, though.
Also try searching for the bug title.
--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in __tipc_nl_bearer_enable
Last occurred: 2 days ago
Reported: 217 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=bf95da1c68b889380395af19f1953e91b772d3ea
Original thread: https://lkml.kernel.org/lkml/00000000000062b6fd057d4b7dc2@google.com/T/#u
This bug has a syzkaller reproducer only.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+e820fdc8ce362f2dea51@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000062b6fd057d4b7dc2@google.com
--------------------------------------------------------------------------------
Title: BUG: using smp_processor_id() in preemptible [ADDR] code: syz-executor
Last occurred: 0 days ago
Reported: 24 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=dc6352b92862eb79373fe03fdf9af5928753e057
Original thread: https://lkml.kernel.org/lkml/000000000000a40746058c784ef3@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81
Author: Jon Maloy <jon.maloy@...csson.com>
Date: Thu Mar 22 19:42:52 2018 +0000
tipc: obtain node identity from interface by default
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+1a68504d96cd17b33a05@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000a40746058c784ef3@google.com
--------------------------------------------------------------------------------
Title: WARNING: locking bug in __queue_work
Last occurred: 52 days ago
Reported: 223 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=31b84e77557158a1031ca8c9476230bb186fb88c
Original thread: https://lkml.kernel.org/lkml/0000000000000655c0057cd141f1@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81
Author: Jon Maloy <jon.maloy@...csson.com>
Date: Thu Mar 22 19:42:52 2018 +0000
tipc: obtain node identity from interface by default
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6174a6c5eba4b3cdd606@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000655c0057cd141f1@google.com
--------------------------------------------------------------------------------
Title: BUG: unable to handle kernel paging request in free_block (5)
Last occurred: 96 days ago
Reported: 96 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=df52ab115e885a8e9b7b6a1359133890cd206e8b
Original thread: https://lkml.kernel.org/lkml/000000000000c770710586c6fc92@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81
Author: Jon Maloy <jon.maloy@...csson.com>
Date: Thu Mar 22 19:42:52 2018 +0000
tipc: obtain node identity from interface by default
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+438a5abd4f53adb1c073@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000c770710586c6fc92@google.com
--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in ip_append_data
Last occurred: 76 days ago
Reported: 75 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=9babddf656b2f42a6902e1074f1c7b52934e3996
Original thread: https://lkml.kernel.org/lkml/0000000000004fd863058877c251@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81
Author: Jon Maloy <jon.maloy@...csson.com>
Date: Thu Mar 22 19:42:52 2018 +0000
tipc: obtain node identity from interface by default
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+b8031b06e100c1c5292c@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000004fd863058877c251@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in ctrl_getfamily
Last occurred: 43 days ago
Reported: 224 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=8c04c0b0e814e1a2c5ae60f8b6ece3701bf561da
Original thread: https://lkml.kernel.org/lkml/000000000000eb3fa9057cbc2f06@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit 928df1880e24bcd47d6359ff86df24db3dfba3c3
Author: Jon Maloy <jon.maloy@...csson.com>
Date: Thu Mar 15 15:48:51 2018 +0000
tipc: obsolete TIPC_ZONE_SCOPE
The original thread for this bug received 1 reply, 224 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+36edb5cac286af8e3385@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000eb3fa9057cbc2f06@google.com
--------------------------------------------------------------------------------
Title: WARNING: locking bug in rhashtable_walk_enter
Last occurred: 62 days ago
Reported: 66 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=4565b3753fc286b7f5b61f21735bd4690d43288e
Original thread: https://lkml.kernel.org/lkml/000000000000ac9447058924709c@google.com/T/#u
This bug has a C reproducer.
This bug was bisected to:
commit 7e27e8d6130c5e88fac9ddec4249f7f2337fe7f8
Author: Junwei Hu <hujunwei4@...wei.com>
Date: Thu May 16 02:51:15 2019 +0000
tipc: switch order of device registration to fix a crash
The original thread for this bug has received 1 reply, 62 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+6440134c13554d3abfb0@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000ac9447058924709c@google.com
--------------------------------------------------------------------------------
Title: inconsistent lock state in icmp_send
Last occurred: 223 days ago
Reported: 223 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=24b68e26f36aefc69e86e97dc731558c6965115a
Original thread: https://lkml.kernel.org/lkml/0000000000000a9cca057cd141bd@google.com/T/#u
This bug has a syzkaller reproducer only.
This bug was bisected to:
commit 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81
Author: Jon Maloy <jon.maloy@...csson.com>
Date: Thu Mar 22 19:42:52 2018 +0000
tipc: obtain node identity from interface by default
The original thread for this bug received 1 reply, 120 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+251ec6887ada6eac4921@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000a9cca057cd141bd@google.com
--------------------------------------------------------------------------------
Title: general protection fault in __bfs (2)
Last occurred: 133 days ago
Reported: 182 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=b962be759f1c186a76fe71ba99eda6e23708dcd9
Original thread: https://lkml.kernel.org/lkml/00000000000086d87305801011c4@google.com/T/#u
This bug has a C reproducer.
syzbot has bisected this bug, but I think the bisection result is incorrect.
The original thread for this bug received 2 replies; the last was 117 days ago.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+c58fa3b1231d2ea0c4d3@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/00000000000086d87305801011c4@google.com
--------------------------------------------------------------------------------
Title: BUG: unable to handle kernel paging request in iptunnel_xmit
Last occurred: 43 days ago
Reported: 214 days ago
Branches: net and net-next
Dashboard link: https://syzkaller.appspot.com/bug?id=113e10a43ca787acf7e08ba103a2ea66b25e6942
Original thread: https://lkml.kernel.org/lkml/0000000000005afe60057d842aa4@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+61816a2458fec4918227@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005afe60057d842aa4@google.com
--------------------------------------------------------------------------------
Title: general protection fault in rhashtable_walk_enter
Last occurred: 65 days ago
Reported: 65 days ago
Branches: linux-next
Dashboard link: https://syzkaller.appspot.com/bug?id=985a51f1f2468ff0c313dd41765f55d6b885b8d7
Original thread: https://lkml.kernel.org/lkml/0000000000000d60e405893a38f0@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one has replied to the original thread for this bug yet.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+153641db1759e576ec8e@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000d60e405893a38f0@google.com
--------------------------------------------------------------------------------
Title: INFO: task hung in tipc_bcast_stop
Last occurred: 167 days ago
Reported: 167 days ago
Branches: net
Dashboard link: https://syzkaller.appspot.com/bug?id=1c273aa0d7bf70e88a6db38595bd6e8eef35de69
Original thread: https://lkml.kernel.org/lkml/000000000000c24a5e05813c798b@google.com/T/#u
Unfortunately, this bug does not have a reproducer.
No one replied to the original thread for this bug.
If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+8118fd903ae608d128e1@...kaller.appspotmail.com
If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000c24a5e05813c798b@google.com
Powered by blists - more mailing lists