Reminder: 4 open syzbot bugs in "net/rds" subsystem

From: Eric Biggers
Date: Tue Jul 23 2019 - 22:34:58 EST


[This email was generated by a script. Let me know if you have any suggestions
to make it better, or if you want it re-generated with the latest status.]

Of the currently open syzbot reports against the upstream kernel, I've manually
marked 4 of them as possibly being bugs in the "net/rds" subsystem. I've listed
these reports below, sorted by an algorithm that tries to list first the reports
most likely to be still valid, important, and actionable.

Of these 4 bugs, 1 was seen in mainline in the last week.

Of these 4 bugs, 1 was bisected to a commit from the following person:

Dennis Dalessandro <dennis.dalessandro@xxxxxxxxx>

If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status

If you believe I misattributed a bug to the "net/rds" subsystem, please let me
know, and if possible forward the report to the correct people or mailing list.

Here are the bugs:

--------------------------------------------------------------------------------
Title: general protection fault in rds_recv_rcvbuf_delta
Last occurred: 26 days ago
Reported: 253 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=e1d2492507fca6102dbce03c16b40a21130c8dbf
Original thread: https://lkml.kernel.org/lkml/000000000000445dd9057a7149f1@xxxxxxxxxx/T/#u

This bug has a C reproducer.

This bug was bisected to:

commit b534875d5ab348fb9193692589e2ee82ae768e3a
Author: Dennis Dalessandro <dennis.dalessandro@xxxxxxxxx>
Date: Wed Jan 6 18:02:59 2016 +0000

  IB/rdmavt: Add device specific info prints

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+4b4f8163c2e246df3c4c@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000445dd9057a7149f1@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: memory leak in rds_send_probe
Last occurred: 0 days ago
Reported: 0 days ago
Branches: Mainline
Dashboard link: https://syzkaller.appspot.com/bug?id=39b72114839a6dbd66c1d2104522698a813f9ae2
Original thread: https://lkml.kernel.org/lkml/000000000000ad1dfe058e5b89ab@xxxxxxxxxx/T/#u

This bug has a C reproducer.

syzbot has bisected this bug, but I think the bisection result is incorrect.

The original thread for this bug has received 4 replies; the last was 3 hours
ago.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+5134cdf021c4ed5aaa5f@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please reply to the original
thread, which had activity only 3 hours ago. For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/000000000000ad1dfe058e5b89ab@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: use-after-free Read in rds_cong_queue_updates (2)
Last occurred: 112 days ago
Reported: 365 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=6f435350bd496374955b3aeba9e313d16db4b30b
Original thread: https://lkml.kernel.org/lkml/000000000000cdb5450571adfe40@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

The original thread for this bug received 1 reply, 365 days ago.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+470ae97a39f16146af45@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000cdb5450571adfe40@xxxxxxxxxx

--------------------------------------------------------------------------------
Title: KASAN: slab-out-of-bounds Read in rds_cong_queue_updates (2)
Last occurred: 110 days ago
Reported: 377 days ago
Branches: Mainline and others
Dashboard link: https://syzkaller.appspot.com/bug?id=58c0193d54290dfe8266db64b482b0e796f0d611
Original thread: https://lkml.kernel.org/lkml/0000000000005274c40570be9f48@xxxxxxxxxx/T/#u

Unfortunately, this bug does not have a reproducer.

The original thread for this bug received 1 reply, 377 days ago.

If you fix this bug, please add the following tag to the commit:
Reported-by: syzbot+0570fef57a5e020bdc87@xxxxxxxxxxxxxxxxxxxxxxxxx

If you send any email or patch for this bug, please consider replying to the
original thread. For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005274c40570be9f48@xxxxxxxxxx