syzbot


KMSAN: uninit-value in tipc_nl_compat_name_table_dump

Status: fixed on 2019/03/06 07:43
Reported-by: syzbot+06e771a754829716a327@syzkaller.appspotmail.com
Fix commit: 974cb0e3e7c9 tipc: fix uninit-value in tipc_nl_compat_name_table_dump
First crash: 1508d, last: 1461d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in tipc_nl_compat_name_table_dump (2) C 6 1367d 1352d 13/24 fixed on 2019/04/12 08:05
upstream KMSAN: uninit-value in tipc_nl_compat_name_table_dump (3) C 65 20d 36d 23/24 upstream: reported C repro on 2022/11/03 16:22

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in __arch_swab32 arch/x86/include/uapi/asm/swab.h:10 [inline]
BUG: KMSAN: uninit-value in __fswab32 include/uapi/linux/swab.h:59 [inline]
BUG: KMSAN: uninit-value in tipc_nl_compat_name_table_dump+0x4a8/0xba0 net/tipc/netlink_compat.c:826
CPU: 0 PID: 6290 Comm: syz-executor848 Not tainted 4.19.0-rc8+ #70
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x306/0x460 lib/dump_stack.c:113
 kmsan_report+0x1a2/0x2e0 mm/kmsan/kmsan.c:917
 __msan_warning+0x7c/0xe0 mm/kmsan/kmsan_instr.c:500
 __arch_swab32 arch/x86/include/uapi/asm/swab.h:10 [inline]
 __fswab32 include/uapi/linux/swab.h:59 [inline]
 tipc_nl_compat_name_table_dump+0x4a8/0xba0 net/tipc/netlink_compat.c:826
 __tipc_nl_compat_dumpit+0x59e/0xdb0 net/tipc/netlink_compat.c:205
 tipc_nl_compat_dumpit+0x63a/0x820 net/tipc/netlink_compat.c:270
 tipc_nl_compat_handle net/tipc/netlink_compat.c:1151 [inline]
 tipc_nl_compat_recv+0x1402/0x2760 net/tipc/netlink_compat.c:1210
 genl_family_rcv_msg net/netlink/genetlink.c:601 [inline]
 genl_rcv_msg+0x185c/0x1a20 net/netlink/genetlink.c:626
 netlink_rcv_skb+0x394/0x640 net/netlink/af_netlink.c:2454
 genl_rcv+0x63/0x80 net/netlink/genetlink.c:637
 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline]
 netlink_unicast+0x166d/0x1720 net/netlink/af_netlink.c:1343
 netlink_sendmsg+0x1391/0x1420 net/netlink/af_netlink.c:1908
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg net/socket.c:631 [inline]
 ___sys_sendmsg+0xe47/0x1200 net/socket.c:2116
 __sys_sendmsg net/socket.c:2154 [inline]
 __do_sys_sendmsg net/socket.c:2163 [inline]
 __se_sys_sendmsg+0x307/0x460 net/socket.c:2161
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2161
 do_syscall_64+0xbe/0x100 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x440179
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffecec49318 EFLAGS: 00000213 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440179
RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000401a00
R13: 0000000000401a90 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:255 [inline]
 kmsan_internal_poison_shadow+0xc8/0x1d0 mm/kmsan/kmsan.c:180
 kmsan_kmalloc+0xa4/0x120 mm/kmsan/kmsan_hooks.c:104
 kmsan_slab_alloc+0x10/0x20 mm/kmsan/kmsan_hooks.c:113
 slab_post_alloc_hook mm/slab.h:446 [inline]
 slab_alloc_node mm/slub.c:2727 [inline]
 __kmalloc_node_track_caller+0xb43/0x1400 mm/slub.c:4360
 __kmalloc_reserve net/core/skbuff.c:138 [inline]
 __alloc_skb+0x422/0xe90 net/core/skbuff.c:206
 alloc_skb include/linux/skbuff.h:996 [inline]
 netlink_alloc_large_skb net/netlink/af_netlink.c:1189 [inline]
 netlink_sendmsg+0xcaf/0x1420 net/netlink/af_netlink.c:1883
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg net/socket.c:631 [inline]
 ___sys_sendmsg+0xe47/0x1200 net/socket.c:2116
 __sys_sendmsg net/socket.c:2154 [inline]
 __do_sys_sendmsg net/socket.c:2163 [inline]
 __se_sys_sendmsg+0x307/0x460 net/socket.c:2161
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2161
 do_syscall_64+0xbe/0x100 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
==================================================================

Crashes (51):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce 2018/10/23 20:29 https://github.com/google/kmsan.git master 4bb25354f0b0 24fa2ad8 .config log report syz C
ci-upstream-kmsan-gce 2018/12/10 09:29 https://github.com/google/kmsan.git master 3f06bda61398 96cc4c50 .config log report
ci-upstream-kmsan-gce 2018/12/10 00:41 https://github.com/google/kmsan.git master 3f06bda61398 96cc4c50 .config log report
ci-upstream-kmsan-gce 2018/12/09 19:57 https://github.com/google/kmsan.git master 3f06bda61398 979179d6 .config log report
ci-upstream-kmsan-gce 2018/12/08 04:52 https://github.com/google/kmsan.git master 3f06bda61398 65ed2472 .config log report
ci-upstream-kmsan-gce 2018/12/06 22:23 https://github.com/google/kmsan.git master 995200d3e0e0 3ab38479 .config log report
ci-upstream-kmsan-gce 2018/12/06 09:17 https://github.com/google/kmsan.git master 6f0597832d81 764b42c4 .config log report
ci-upstream-kmsan-gce 2018/12/04 13:13 https://github.com/google/kmsan.git master 00f99f811392 6ad0ae61 .config log report
ci-upstream-kmsan-gce 2018/12/04 02:09 https://github.com/google/kmsan.git master 8f22beb7da7d 03f94a45 .config log report
ci-upstream-kmsan-gce 2018/12/03 21:37 https://github.com/google/kmsan.git master 1d3abf0f2b29 819002b0 .config log report
ci-upstream-kmsan-gce 2018/12/03 06:50 https://github.com/google/kmsan.git master 9fbf73b8d4af 7dcaeaf3 .config log report
ci-upstream-kmsan-gce 2018/11/30 23:57 https://github.com/google/kmsan.git master 3a68698849b6 ade12e91 .config log report
ci-upstream-kmsan-gce 2018/11/30 20:13 https://github.com/google/kmsan.git master 3a68698849b6 ade12e91 .config log report
ci-upstream-kmsan-gce 2018/11/30 00:52 https://github.com/google/kmsan.git master c1c8fce47960 66071e27 .config log report
ci-upstream-kmsan-gce 2018/11/28 18:47 https://github.com/google/kmsan.git master fffec98ae2a6 4b6d14f2 .config log report
ci-upstream-kmsan-gce 2018/11/27 17:40 https://github.com/google/kmsan.git master fffec98ae2a6 4b6d14f2 .config log report
ci-upstream-kmsan-gce 2018/11/27 17:36 https://github.com/google/kmsan.git master fffec98ae2a6 4b6d14f2 .config log report
ci-upstream-kmsan-gce 2018/11/25 12:09 https://github.com/google/kmsan.git master fffec98ae2a6 3d3ec907 .config log report
ci-upstream-kmsan-gce 2018/11/24 18:25 https://github.com/google/kmsan.git master fffec98ae2a6 ecc7c870 .config log report
ci-upstream-kmsan-gce 2018/11/22 14:48 https://github.com/google/kmsan.git master 3ededcaa1606 2ee77802 .config log report
ci-upstream-kmsan-gce 2018/11/22 13:17 https://github.com/google/kmsan.git master 3ededcaa1606 2ee77802 .config log report
ci-upstream-kmsan-gce 2018/11/20 23:21 https://github.com/google/kmsan.git master 0891758b8cda 9aca6b52 .config log report
ci-upstream-kmsan-gce 2018/11/20 10:54 https://github.com/google/kmsan.git master 2808e543aacb 9bc2a903 .config log report
ci-upstream-kmsan-gce 2018/11/20 10:54 https://github.com/google/kmsan.git master 2808e543aacb 9bc2a903 .config log report
ci-upstream-kmsan-gce 2018/11/18 15:38 https://github.com/google/kmsan.git master cddc52641fd2 adf636a8 .config log report
ci-upstream-kmsan-gce 2018/11/16 12:01 https://github.com/google/kmsan.git master cddc52641fd2 f5e275d1 .config log report
ci-upstream-kmsan-gce 2018/11/16 02:45 https://github.com/google/kmsan.git master 7fd538851cec 3a41052e .config log report
ci-upstream-kmsan-gce 2018/11/16 01:48 https://github.com/google/kmsan.git master 7fd538851cec 3a41052e .config log report
ci-upstream-kmsan-gce 2018/11/12 23:35 https://github.com/google/kmsan.git master 644011fe6d60 74dbb806 .config log report
ci-upstream-kmsan-gce 2018/11/11 11:24 https://github.com/google/kmsan.git master 746f11553795 f3c4e618 .config log report
ci-upstream-kmsan-gce 2018/11/10 23:40 https://github.com/google/kmsan.git master 746f11553795 f3c4e618 .config log report
ci-upstream-kmsan-gce 2018/11/04 15:16 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config log report
ci-upstream-kmsan-gce 2018/11/03 04:24 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config log report
ci-upstream-kmsan-gce 2018/11/02 10:10 https://github.com/google/kmsan.git master 88b95ef4c780 1f38e9ae .config log report
ci-upstream-kmsan-gce 2018/11/02 01:40 https://github.com/google/kmsan.git master 88b95ef4c780 1f38e9ae .config log report
ci-upstream-kmsan-gce 2018/10/30 11:45 https://github.com/google/kmsan.git master 7e5816e23e06 2f1090da .config log report
ci-upstream-kmsan-gce 2018/10/29 02:44 https://github.com/google/kmsan.git master 4bb25354f0b0 9ca2afa1 .config log report
ci-upstream-kmsan-gce 2018/10/29 02:36 https://github.com/google/kmsan.git master 4bb25354f0b0 9ca2afa1 .config log report
ci-upstream-kmsan-gce 2018/10/29 00:30 https://github.com/google/kmsan.git master 4bb25354f0b0 9ca2afa1 .config log report
ci-upstream-kmsan-gce 2018/10/28 00:28 https://github.com/google/kmsan.git master 4bb25354f0b0 8efba39a .config log report
ci-upstream-kmsan-gce 2018/10/27 18:43 https://github.com/google/kmsan.git master 4bb25354f0b0 8efba39a .config log report
ci-upstream-kmsan-gce 2018/10/26 10:34 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config log report
ci-upstream-kmsan-gce 2018/10/26 07:29 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config log report
ci-upstream-kmsan-gce 2018/10/26 07:23 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config log report
ci-upstream-kmsan-gce 2018/10/24 18:23 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config log report
ci-upstream-kmsan-gce 2018/10/24 03:57 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config log report
ci-upstream-kmsan-gce 2018/10/24 03:50 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config log report
ci-upstream-kmsan-gce 2018/10/23 14:04 https://github.com/google/kmsan.git master 4bb25354f0b0 24fa2ad8 .config log report
ci-upstream-kmsan-gce 2018/10/23 13:58 https://github.com/google/kmsan.git master 4bb25354f0b0 24fa2ad8 .config log report
* Struck through repros no longer work on HEAD.