syzbot


KMSAN: uninit-value in __ipv6_dev_mc_inc (2)

Status: upstream: reported on 2025/05/09 20:00
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+3735d5f00e991698985a@syzkaller.appspotmail.com
First crash: 2d01h, last: 5h49m
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [net?] KMSAN: uninit-value in __ipv6_dev_mc_inc (2) 0 (1) 2025/05/09 20:00
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in __ipv6_dev_mc_inc net 14 1178d 1246d 0/28 auto-closed as invalid on 2022/05/17 06:51

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in __ipv6_dev_mc_inc+0x4f0/0x1640 net/ipv6/mcast.c:966
 __ipv6_dev_mc_inc+0x4f0/0x1640 net/ipv6/mcast.c:966
 ipv6_dev_mc_inc+0x38/0x50 net/ipv6/mcast.c:997
 addrconf_join_solict net/ipv6/addrconf.c:2242 [inline]
 addrconf_dad_begin net/ipv6/addrconf.c:4100 [inline]
 addrconf_dad_work+0x401/0x1d10 net/ipv6/addrconf.c:4228
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xb97/0x1d90 kernel/workqueue.c:3319
 worker_thread+0xedf/0x1590 kernel/workqueue.c:3400
 kthread+0xd59/0xf00 kernel/kthread.c:464
 ret_from_fork+0x6e/0x90 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Local variable maddr.i.i created at:
 addrconf_join_solict net/ipv6/addrconf.c:2236 [inline]
 addrconf_dad_begin net/ipv6/addrconf.c:4100 [inline]
 addrconf_dad_work+0x244/0x1d10 net/ipv6/addrconf.c:4228
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xb97/0x1d90 kernel/workqueue.c:3319

CPU: 1 UID: 0 PID: 3845 Comm: kworker/u8:19 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
Workqueue: ipv6_addrconf addrconf_dad_work
=====================================================

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/09 16:18 upstream 02ddfb981de8 bb813bcc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in __ipv6_dev_mc_inc
2025/05/08 14:05 upstream 02ddfb981de8 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in __ipv6_dev_mc_inc
2025/05/08 03:59 upstream 02ddfb981de8 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in __ipv6_dev_mc_inc
2025/05/09 23:26 upstream 02ddfb981de8 bb813bcc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in __ipv6_dev_mc_inc
2025/05/08 14:50 upstream 02ddfb981de8 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in __ipv6_dev_mc_inc
2025/05/08 14:50 upstream 02ddfb981de8 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in __ipv6_dev_mc_inc
2025/05/08 14:26 upstream 02ddfb981de8 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in __ipv6_dev_mc_inc
2025/05/08 14:25 upstream 02ddfb981de8 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in __ipv6_dev_mc_inc
2025/05/08 08:13 upstream 02ddfb981de8 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in __ipv6_dev_mc_inc
* Struck through repros no longer work on HEAD.