syzbot


upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo

Status: upstream: reported on 2025/05/01 11:15
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+1065a199625a388fce60@syzkaller.appspotmail.com
First crash: 6d07h, last: 2h53m
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [net?] upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo 0 (1) 2025/05/01 11:15

Sample crash report:
=====================================================
BUG: KMSAN: use-after-free in mctp_dump_addrinfo+0x208/0xac0 net/mctp/device.c:128
 mctp_dump_addrinfo+0x208/0xac0 net/mctp/device.c:128
 rtnl_dump_all+0x3ec/0x5b0 net/core/rtnetlink.c:4380
 rtnl_dumpit+0xd5/0x2f0 net/core/rtnetlink.c:6824
 netlink_dump+0x97b/0x1690 net/netlink/af_netlink.c:2309
 __netlink_dump_start+0x716/0xd60 net/netlink/af_netlink.c:2424
 netlink_dump_start include/linux/netlink.h:340 [inline]
 rtnetlink_dump_start net/core/rtnetlink.c:6853 [inline]
 rtnetlink_rcv_msg+0x1262/0x14b0 net/core/rtnetlink.c:6920
 netlink_rcv_skb+0x54a/0x680 net/netlink/af_netlink.c:2534
 rtnetlink_rcv+0x35/0x40 net/core/rtnetlink.c:6982
 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline]
 netlink_unicast+0xed5/0x1290 net/netlink/af_netlink.c:1339
 netlink_sendmsg+0x10b3/0x1250 net/netlink/af_netlink.c:1883
 sock_sendmsg_nosec net/socket.c:712 [inline]
 __sock_sendmsg+0x330/0x3d0 net/socket.c:727
 __sys_sendto+0x590/0x710 net/socket.c:2180
 __do_sys_sendto net/socket.c:2187 [inline]
 __se_sys_sendto net/socket.c:2183 [inline]
 __x64_sys_sendto+0x130/0x200 net/socket.c:2183
 x64_sys_call+0x3c0b/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0x1b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 slab_free_hook mm/slub.c:2324 [inline]
 slab_free mm/slub.c:4656 [inline]
 kmem_cache_free+0x286/0xf00 mm/slub.c:4758
 skb_kfree_head net/core/skbuff.c:1056 [inline]
 skb_free_head net/core/skbuff.c:1070 [inline]
 skb_release_data+0xe56/0x1110 net/core/skbuff.c:1097
 skb_release_all net/core/skbuff.c:1162 [inline]
 __kfree_skb+0x6b/0x260 net/core/skbuff.c:1176
 consume_skb+0x83/0x230 net/core/skbuff.c:1408
 unix_stream_connect+0x10ec/0x1c90 net/unix/af_unix.c:1694
 __sys_connect_file net/socket.c:2038 [inline]
 __sys_connect+0x523/0x680 net/socket.c:2057
 __do_sys_connect net/socket.c:2063 [inline]
 __se_sys_connect net/socket.c:2060 [inline]
 __x64_sys_connect+0x95/0x100 net/socket.c:2060
 x64_sys_call+0x23bb/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:43
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0x1b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

CPU: 0 UID: 0 PID: 5441 Comm: dhcpcd Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(undef) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
=====================================================

Crashes (36):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/01 21:41 upstream ebd297a2affa 51b137cd .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/05/01 14:12 upstream 4f79eaa2ceac 51b137cd .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/05/01 03:59 upstream 4f79eaa2ceac ce7952f4 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 20:46 upstream 7a13c14ee59d ce7952f4 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 16:03 upstream b6ea1680d0ac ce7952f4 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 06:38 upstream b6ea1680d0ac 85a5a23f .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 03:38 upstream 8bac8898fe39 85a5a23f .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 00:28 upstream 8bac8898fe39 aeb6ec69 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/29 05:39 upstream ca91b9500108 aeb6ec69 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/29 01:42 upstream ca91b9500108 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/28 20:53 upstream 78109c591b80 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/28 18:16 upstream f15d97df5afa c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/26 22:13 upstream 5bc1018675ec c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/26 20:36 upstream d22aad29de2a c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/26 18:40 upstream 06b31bdbf849 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/26 02:10 upstream f1a3944c860b c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/25 22:08 upstream c3137514f1f1 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/25 20:39 upstream 6e3597f12dce c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/25 17:22 upstream 02ddfb981de8 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/05/01 20:54 upstream ebd297a2affa 51b137cd .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/05/01 14:54 upstream 4f79eaa2ceac 51b137cd .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/05/01 03:12 upstream 4f79eaa2ceac ce7952f4 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 20:04 upstream 7a13c14ee59d ce7952f4 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 15:26 upstream b6ea1680d0ac ce7952f4 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 05:56 upstream b6ea1680d0ac 85a5a23f .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 02:57 upstream 8bac8898fe39 85a5a23f .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/30 01:52 upstream 8bac8898fe39 aeb6ec69 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/29 00:49 upstream ca91b9500108 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/28 21:43 upstream 78109c591b80 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/28 19:42 upstream f15d97df5afa c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/27 23:19 upstream b4432656b36e c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/26 21:32 upstream 5bc1018675ec c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/26 19:21 upstream d22aad29de2a c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/26 18:00 upstream 06b31bdbf849 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/26 03:16 upstream f1a3944c860b c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
2025/04/25 23:05 upstream c3137514f1f1 c6b4fb39 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
* Struck through repros no longer work on HEAD.