syzbot


KMSAN: uninit-value in tcf_ct_flow_table_get

Status: fixed on 2024/08/23 02:59
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+1b5e4e187cc586d05ea0@syzkaller.appspotmail.com
Fix commit: 2191a54f6322 sched: act_ct: take care of padding in struct zones_ht_key
First crash: 50d, last: 37d
Discussions (2)
Title Replies (including bot) Last reply
[PATCH net] sched: act_ct: take care of padding in struct zones_ht_key 4 (4) 2024/07/26 10:30
[syzbot] [net?] KMSAN: uninit-value in tcf_ct_flow_table_get 0 (1) 2024/07/25 09:25
Last patch testing requests (1)
Created Duration User Patch Repo Result
2024/07/23 17:48 1h03m edumazet@google.com patch upstream OK log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in rht_ptr_rcu include/linux/rhashtable.h:376 [inline]
BUG: KMSAN: uninit-value in __rhashtable_lookup include/linux/rhashtable.h:607 [inline]
BUG: KMSAN: uninit-value in rhashtable_lookup include/linux/rhashtable.h:646 [inline]
BUG: KMSAN: uninit-value in rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline]
BUG: KMSAN: uninit-value in tcf_ct_flow_table_get+0x611/0x2260 net/sched/act_ct.c:329
 rht_ptr_rcu include/linux/rhashtable.h:376 [inline]
 __rhashtable_lookup include/linux/rhashtable.h:607 [inline]
 rhashtable_lookup include/linux/rhashtable.h:646 [inline]
 rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline]
 tcf_ct_flow_table_get+0x611/0x2260 net/sched/act_ct.c:329
 tcf_ct_init+0xa67/0x2890 net/sched/act_ct.c:1408
 tcf_action_init_1+0x6cc/0xb30 net/sched/act_api.c:1425
 tcf_action_init+0x458/0xf00 net/sched/act_api.c:1488
 tcf_action_add net/sched/act_api.c:2061 [inline]
 tc_ctl_action+0x4be/0x19d0 net/sched/act_api.c:2118
 rtnetlink_rcv_msg+0x12fc/0x1410 net/core/rtnetlink.c:6647
 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2550
 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6665
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0xf52/0x1260 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x10da/0x11e0 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0x30f/0x380 net/socket.c:745
 ____sys_sendmsg+0x877/0xb60 net/socket.c:2597
 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2651
 __sys_sendmsg net/socket.c:2680 [inline]
 __do_sys_sendmsg net/socket.c:2689 [inline]
 __se_sys_sendmsg net/socket.c:2687 [inline]
 __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2687
 x64_sys_call+0x2dd6/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable key created at:
 tcf_ct_flow_table_get+0x4a/0x2260 net/sched/act_ct.c:324
 tcf_ct_init+0xa67/0x2890 net/sched/act_ct.c:1408

CPU: 0 PID: 5048 Comm: syz-executor374 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
=====================================================

Crashes (603):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/22 00:59 upstream 2c9b3512402e b88348e9 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/21 22:53 upstream 2c9b3512402e b88348e9 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/21 20:40 upstream 2c9b3512402e b88348e9 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/21 16:36 upstream 2c9b3512402e b88348e9 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 15:53 upstream 21b136cc63d2 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 13:17 upstream 21b136cc63d2 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 05:30 upstream e4fc196f5ba3 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/31 23:08 upstream e4fc196f5ba3 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/31 12:38 upstream 22f546873149 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/31 07:42 upstream 22f546873149 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/30 14:43 upstream 94ede2a3e913 a4e01e1e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/30 14:03 upstream 94ede2a3e913 a4e01e1e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/30 12:55 upstream 94ede2a3e913 a4e01e1e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/30 06:39 upstream 94ede2a3e913 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/30 01:44 upstream dc1c8034e31b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/30 00:31 upstream dc1c8034e31b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/29 23:05 upstream dc1c8034e31b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/29 22:29 upstream dc1c8034e31b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/29 18:45 upstream dc1c8034e31b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/29 16:11 upstream dc1c8034e31b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/28 08:45 upstream 6342649c33d2 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/28 08:44 upstream 6342649c33d2 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/28 07:02 upstream 6342649c33d2 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/27 23:26 upstream 3a7e02c040b1 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/27 17:16 upstream 3a7e02c040b1 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/27 09:06 upstream 2f8c4f506285 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/27 05:35 upstream 2f8c4f506285 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/26 19:22 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/26 16:17 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/26 13:59 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/26 11:37 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/26 11:36 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 21:02 upstream 21b136cc63d2 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 21:01 upstream 21b136cc63d2 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 19:06 upstream 21b136cc63d2 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 07:13 upstream e4fc196f5ba3 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 07:12 upstream e4fc196f5ba3 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/08/01 03:56 upstream e4fc196f5ba3 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/30 20:10 upstream 94ede2a3e913 a4e01e1e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/28 17:38 upstream 6342649c33d2 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/28 14:47 upstream 6342649c33d2 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/28 13:11 upstream 6342649c33d2 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/28 00:47 upstream 3a7e02c040b1 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/27 10:49 upstream 2f8c4f506285 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/27 08:38 upstream 2f8c4f506285 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/27 07:06 upstream 2f8c4f506285 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
2024/07/26 18:09 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in tcf_ct_flow_table_get
* Struck through repros no longer work on HEAD.