Reminder: 3 open syzbot bugs in "net/kcm" subsystem

From: Eric Biggers
Date: Tue Jul 23 2019 - 22:40:03 EST


[This email was generated by a script. Let me know if you have any suggestions
to make it better, or if you want it re-generated with the latest status.]

Of the currently open syzbot reports against the upstream kernel, I've manually
marked 3 of them as possibly being bugs in the "net/kcm" subsystem. I've listed
these reports below, sorted by an algorithm that tries to list first the reports
most likely to be still valid, important, and actionable.

Of these 3 bugs, 1 was seen in mainline in the last week.

If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status

If you believe I misattributed a bug to the "net/kcm" subsystem, please let me
know, and if possible forward the report to the correct people or mailing list.

Here are the bugs:

--------------------------------------------------------------------------------
Title: KMSAN: uninit-value in ip_tunnel_xmit (2)
Last occurred: 0 days ago
Reported: 347 days ago
Branches: Mainline (with KMSAN patches)
Dashboard link: https://syzkaller.appspot.com/bug?id=b0e069ac9b03eab43b106c22fcc8bd778a7ccfb5
Original thread: https://lkml.kernel.org/lkml/0000000000005012b605731594e3@xxxxxxxxxx/T/#u

This bug has a C reproducer.

The original thread for this bug received 1 reply, 347 days ago.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+4a2c52677a8a1aa283cb@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005012b605731594e3@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: general protection fault in skb_unlink
Last occurred: 182 days ago
Reported: 418 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=2d6d1853e26eb3b70cd558298ebf0c98157fcccf
Original thread: https://lkml.kernel.org/lkml/000000000000fdc15c056d7c13ae@xxxxxxxxxx/T/#u

This bug has a C reproducer.

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+278279efdd2730dd14bf@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000fdc15c056d7c13ae@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: general protection fault in requeue_rx_msgs
Last occurred: 419 days ago
Reported: 418 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=da9b672629747f28e76eca9949696c410cb75d7b
Original thread: https://lkml.kernel.org/lkml/0000000000000482ce056d7c1436@xxxxxxxxxx/T/#u

This bug has a syzkaller reproducer only.

syzbot has bisected this bug, but I think the bisection result is incorrect.

The original thread for this bug received 1 reply, 418 days ago.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+554266c04a41d1f9754d@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000000482ce056d7c1436@xxxxxxxxxx