syzbot


KMSAN: uninit-value in batadv_mcast_mla_update

Status: upstream: reported on 2025/06/30 17:07
Subsystems: batman
[Documentation on labels]
Reported-by: syzbot+1daa6a8aecb922ad3c30@syzkaller.appspotmail.com
First crash: 25d, last: 25d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [batman?] KMSAN: uninit-value in batadv_mcast_mla_update 0 (1) 2025/06/30 17:07

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in batadv_mcast_mla_is_duplicate net/batman-adv/multicast.c:347 [inline]
BUG: KMSAN: uninit-value in batadv_mcast_mla_tt_retract net/batman-adv/multicast.c:692 [inline]
BUG: KMSAN: uninit-value in __batadv_mcast_mla_update net/batman-adv/multicast.c:920 [inline]
BUG: KMSAN: uninit-value in batadv_mcast_mla_update+0x35f4/0x4f80 net/batman-adv/multicast.c:948
 batadv_mcast_mla_is_duplicate net/batman-adv/multicast.c:347 [inline]
 batadv_mcast_mla_tt_retract net/batman-adv/multicast.c:692 [inline]
 __batadv_mcast_mla_update net/batman-adv/multicast.c:920 [inline]
 batadv_mcast_mla_update+0x35f4/0x4f80 net/batman-adv/multicast.c:948
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xb91/0x1d80 kernel/workqueue.c:3321
 worker_thread+0xedf/0x1590 kernel/workqueue.c:3402
 kthread+0xd5c/0xf00 kernel/kthread.c:464
 ret_from_fork+0x1e3/0x310 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:4154 [inline]
 slab_alloc_node mm/slub.c:4197 [inline]
 __kmalloc_cache_noprof+0x7f7/0xed0 mm/slub.c:4354
 kmalloc_noprof include/linux/slab.h:905 [inline]
 batadv_mcast_mla_meshif_get_ipv6 net/batman-adv/multicast.c:477 [inline]
 batadv_mcast_mla_meshif_get net/batman-adv/multicast.c:535 [inline]
 __batadv_mcast_mla_update net/batman-adv/multicast.c:911 [inline]
 batadv_mcast_mla_update+0x1c17/0x4f80 net/batman-adv/multicast.c:948
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xb91/0x1d80 kernel/workqueue.c:3321
 worker_thread+0xedf/0x1590 kernel/workqueue.c:3402
 kthread+0xd5c/0xf00 kernel/kthread.c:464
 ret_from_fork+0x1e3/0x310 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G        W           6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(undef) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: bat_events batadv_mcast_mla_update
=====================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/26 17:02 upstream ee88bddf7f2f 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in batadv_mcast_mla_update
* Struck through repros no longer work on HEAD.