Title | Replies (including bot) | Last reply |
---|---|---|
[PATCH net] net: bridge: xmit: make sure we have at least eth header len bytes | 2 (2) | 2024/05/15 10:50 |
[syzbot] [bridge?] KMSAN: uninit-value in br_dev_xmit (2) | 1 (3) | 2024/05/12 10:13 |
syzbot |
sign-in | mailing list | source | docs |
Title | Replies (including bot) | Last reply |
---|---|---|
[PATCH net] net: bridge: xmit: make sure we have at least eth header len bytes | 2 (2) | 2024/05/15 10:50 |
[syzbot] [bridge?] KMSAN: uninit-value in br_dev_xmit (2) | 1 (3) | 2024/05/12 10:13 |
Kernel | Title | Repro | Cause bisect | Fix bisect | Count | Last | Reported | Patched | Status |
---|---|---|---|---|---|---|---|---|---|
upstream | KMSAN: uninit-value in br_dev_xmit bridge | C | 537 | 603d | 1659d | 0/27 | auto-obsoleted due to no activity on 2023/05/15 13:28 | ||
linux-4.19 | KASAN: use-after-free Read in br_dev_xmit | C | error | 13 | 641d | 995d | 0/1 | upstream: reported C repro on 2021/12/19 03:10 |
Created | Duration | User | Patch | Repo | Result |
---|---|---|---|---|---|
2024/05/12 09:39 | 27m | eadavis@qq.com | patch | https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git dccb07f2914c | OK log |
===================================================== BUG: KMSAN: uninit-value in br_dev_xmit+0x61d/0x1cb0 net/bridge/br_device.c:65 br_dev_xmit+0x61d/0x1cb0 net/bridge/br_device.c:65 __netdev_start_xmit include/linux/netdevice.h:4903 [inline] netdev_start_xmit include/linux/netdevice.h:4917 [inline] xmit_one net/core/dev.c:3531 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3547 __dev_queue_xmit+0x34db/0x5350 net/core/dev.c:4341 dev_queue_xmit include/linux/netdevice.h:3091 [inline] __bpf_tx_skb net/core/filter.c:2136 [inline] __bpf_redirect_common net/core/filter.c:2180 [inline] __bpf_redirect+0x14a6/0x1620 net/core/filter.c:2187 ____bpf_clone_redirect net/core/filter.c:2460 [inline] bpf_clone_redirect+0x328/0x470 net/core/filter.c:2432 ___bpf_prog_run+0x13fe/0xe0f0 kernel/bpf/core.c:1997 __bpf_prog_run512+0xb5/0xe0 kernel/bpf/core.c:2238 bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline] __bpf_prog_run include/linux/filter.h:657 [inline] bpf_prog_run include/linux/filter.h:664 [inline] bpf_test_run+0x499/0xc30 net/bpf/test_run.c:425 bpf_prog_test_run_skb+0x14ea/0x1f20 net/bpf/test_run.c:1058 bpf_prog_test_run+0x6b7/0xad0 kernel/bpf/syscall.c:4269 __sys_bpf+0x6aa/0xd90 kernel/bpf/syscall.c:5678 __do_sys_bpf kernel/bpf/syscall.c:5767 [inline] __se_sys_bpf kernel/bpf/syscall.c:5765 [inline] __x64_sys_bpf+0xa0/0xe0 kernel/bpf/syscall.c:5765 x64_sys_call+0x96b/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:3810 [inline] slab_alloc_node mm/slub.c:3851 [inline] kmem_cache_alloc_node+0x622/0xc90 mm/slub.c:3894 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:577 pskb_expand_head+0x222/0x19d0 net/core/skbuff.c:2251 skb_ensure_writable+0x412/0x4a0 net/core/skbuff.c:6117 __bpf_try_make_writable net/core/filter.c:1665 [inline] bpf_try_make_writable net/core/filter.c:1671 [inline] bpf_try_make_head_writable net/core/filter.c:1679 [inline] ____bpf_clone_redirect net/core/filter.c:2454 [inline] bpf_clone_redirect+0x17f/0x470 net/core/filter.c:2432 ___bpf_prog_run+0x13fe/0xe0f0 kernel/bpf/core.c:1997 __bpf_prog_run512+0xb5/0xe0 kernel/bpf/core.c:2238 bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline] __bpf_prog_run include/linux/filter.h:657 [inline] bpf_prog_run include/linux/filter.h:664 [inline] bpf_test_run+0x499/0xc30 net/bpf/test_run.c:425 bpf_prog_test_run_skb+0x14ea/0x1f20 net/bpf/test_run.c:1058 bpf_prog_test_run+0x6b7/0xad0 kernel/bpf/syscall.c:4269 __sys_bpf+0x6aa/0xd90 kernel/bpf/syscall.c:5678 __do_sys_bpf kernel/bpf/syscall.c:5767 [inline] __se_sys_bpf kernel/bpf/syscall.c:5765 [inline] __x64_sys_bpf+0xa0/0xe0 kernel/bpf/syscall.c:5765 x64_sys_call+0x96b/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 PID: 5070 Comm: syz-executor183 Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 =====================================================
Time | Kernel | Commit | Syzkaller | Config | Log | Report | Syz repro | C repro | VM info | Assets (help?) | Manager | Title |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2024/05/08 09:40 | upstream | dccb07f2914c | 4cf3f9b3 | .config | strace log | report | syz | C | [disk image] [vmlinux] [kernel image] | ci-upstream-kmsan-gce-root | KMSAN: uninit-value in br_dev_xmit | |
2024/05/08 07:52 | upstream | dccb07f2914c | 4cf3f9b3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kmsan-gce-root | KMSAN: uninit-value in br_dev_xmit |