syzbot


KMSAN: uninit-value in nf_nat_setup_info (2)

Status: auto-obsoleted due to no activity on 2022/09/28 07:28
Subsystems: netfilter
[Documentation on labels]
Reported-by: syzbot+cbcd154fce7c6d953d1c@syzkaller.appspotmail.com
First crash: 873d, last: 765d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] KMSAN: uninit-value in nf_nat_setup_info (2) 0 (2) 2022/02/18 21:34
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in nf_nat_setup_info netfilter 319 1879d 1987d 0/26 auto-closed as invalid on 2019/09/07 17:17
upstream KASAN: use-after-free Write in nf_nat_setup_info netfilter 1 456d 456d 0/26 auto-obsoleted due to no activity on 2023/05/10 12:28
linux-6.1 KASAN: use-after-free Write in nf_nat_setup_info 1 89d 89d 0/3 upstream: reported on 2024/02/02 18:38
upstream KMSAN: kernel-infoleak in copyout (2) net C 6723 329d 1497d 22/26 fixed on 2023/06/08 14:41
upstream KMSAN: kernel-infoleak in __skb_datagram_iter net 68 219d 324d 23/26 fixed on 2023/09/28 17:51
upstream KMSAN: uninit-value in eth_type_trans (2) net C 4522 40m 1561d 0/26 upstream: reported C repro on 2020/01/22 16:47
upstream KMSAN: kernel-infoleak in move_addr_to_user (6) tipc C 4 825d 863d 20/26 fixed on 2022/03/08 16:11
upstream KMSAN: uninit-value in sctp_inq_pop (2) sctp C 2893 10d 845d 0/26 upstream: reported C repro on 2022/01/08 08:00
upstream KMSAN: uninit-value in udf_evict_inode (2) udf 13 817d 870d 20/26 fixed on 2022/03/08 16:11
upstream KMSAN: uninit-value in ext4_inode_journal_mode (2) ext4 170 615d 845d 0/26 auto-obsoleted due to no activity on 2022/12/23 22:05
Last patch testing requests (2)
Created Duration User Patch Repo Result
2022/09/28 05:30 22m retest repro https://github.com/google/kmsan.git master OK log
2022/09/28 03:30 22m retest repro https://github.com/google/kmsan.git master OK log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in get_unique_tuple net/netfilter/nf_nat_core.c:548 [inline]
BUG: KMSAN: uninit-value in nf_nat_setup_info+0x628/0x4a40 net/netfilter/nf_nat_core.c:642
 get_unique_tuple net/netfilter/nf_nat_core.c:548 [inline]
 nf_nat_setup_info+0x628/0x4a40 net/netfilter/nf_nat_core.c:642
 nfnetlink_parse_nat_setup+0xb86/0xcf0
 ctnetlink_parse_nat_setup+0xde/0x390 net/netfilter/nf_conntrack_netlink.c:1845
 ctnetlink_setup_nat net/netfilter/nf_conntrack_netlink.c:1920 [inline]
 ctnetlink_create_conntrack net/netfilter/nf_conntrack_netlink.c:2325 [inline]
 ctnetlink_new_conntrack+0x1d5d/0x4240 net/netfilter/nf_conntrack_netlink.c:2452
 nfnetlink_rcv_msg+0xe0a/0xf80 net/netfilter/nfnetlink.c:296
 netlink_rcv_skb+0x40c/0x7e0 net/netlink/af_netlink.c:2494
 nfnetlink_rcv+0x667/0x4740 net/netfilter/nfnetlink.c:654
 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline]
 netlink_unicast+0x1093/0x1360 net/netlink/af_netlink.c:1343
 netlink_sendmsg+0x14d9/0x1720 net/netlink/af_netlink.c:1919
 sock_sendmsg_nosec net/socket.c:705 [inline]
 sock_sendmsg net/socket.c:725 [inline]
 ____sys_sendmsg+0xe11/0x12c0 net/socket.c:2413
 ___sys_sendmsg net/socket.c:2467 [inline]
 __sys_sendmsg+0x704/0x840 net/socket.c:2496
 __do_sys_sendmsg net/socket.c:2505 [inline]
 __se_sys_sendmsg net/socket.c:2503 [inline]
 __x64_sys_sendmsg+0xe2/0x120 net/socket.c:2503
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5429
 alloc_pages+0xa08/0xd50
 alloc_slab_page mm/slub.c:1816 [inline]
 allocate_slab+0x29e/0x1b00 mm/slub.c:1961
 new_slab mm/slub.c:2021 [inline]
 ___slab_alloc+0xb52/0x1da0 mm/slub.c:3035
 __slab_alloc mm/slub.c:3122 [inline]
 slab_alloc_node mm/slub.c:3213 [inline]
 slab_alloc mm/slub.c:3255 [inline]
 kmem_cache_alloc+0xbb3/0x11c0 mm/slub.c:3260
 __nf_conntrack_alloc+0x232/0x7f0 net/netfilter/nf_conntrack_core.c:1553
 init_conntrack+0x29b/0x24c0 net/netfilter/nf_conntrack_core.c:1634
 resolve_normal_ct net/netfilter/nf_conntrack_core.c:1745 [inline]
 nf_conntrack_in+0x1abc/0x3130 net/netfilter/nf_conntrack_core.c:1903
 ipv4_conntrack_in+0x68/0x80 net/netfilter/nf_conntrack_proto.c:191
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow net/netfilter/core.c:619 [inline]
 nf_hook_slow_list+0x358/0xb40 net/netfilter/core.c:657
 NF_HOOK_LIST include/linux/netfilter.h:343 [inline]
 ip_sublist_rcv+0x1411/0x14a0 net/ipv4/ip_input.c:607
 ip_list_rcv+0x930/0x970 net/ipv4/ip_input.c:644
 __netif_receive_skb_list_ptype net/core/dev.c:5394 [inline]
 __netif_receive_skb_list_core+0xdf9/0x11f0 net/core/dev.c:5442
 __netif_receive_skb_list+0x7e3/0x940 net/core/dev.c:5494
 netif_receive_skb_list_internal+0x848/0xdc0 net/core/dev.c:5585
 gro_normal_list include/net/gro.h:425 [inline]
 napi_complete_done+0x579/0xdc0 net/core/dev.c:5932
 virtqueue_napi_complete drivers/net/virtio_net.c:339 [inline]
 virtnet_poll+0x17a4/0x2340 drivers/net/virtio_net.c:1554
 __napi_poll+0x14c/0xc00 net/core/dev.c:6365
 napi_poll net/core/dev.c:6432 [inline]
 net_rx_action+0x7e2/0x1820 net/core/dev.c:6519
 __do_softirq+0x1ee/0x7c5 kernel/softirq.c:558

CPU: 1 PID: 3470 Comm: syz-executor406 Not tainted 5.17.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
=====================================================

Crashes (764):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/02/20 08:08 https://github.com/google/kmsan.git master 724946410067 3cd800e4 .config console log report syz C ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/02/18 21:33 https://github.com/google/kmsan.git master 724946410067 3cd800e4 .config console log report syz C ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 17:44 https://github.com/google/kmsan.git master 5d33b1968cb5 ee339263 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 09:04 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 06:04 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 01:34 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 22:25 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 21:19 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 19:30 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 18:23 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 15:56 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 14:31 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 13:28 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 11:12 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 08:27 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 06:52 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 02:38 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/27 02:06 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 23:54 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 21:32 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 14:48 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 10:50 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 09:50 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 06:16 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 03:32 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 00:51 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 22:22 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 20:57 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 19:51 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 19:16 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 17:59 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 16:50 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 13:48 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 10:16 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 09:06 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 06:18 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 05:08 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 04:06 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/25 02:04 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/24 21:44 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 14:47 https://github.com/google/kmsan.git master 5d33b1968cb5 ee339263 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 14:11 https://github.com/google/kmsan.git master 5d33b1968cb5 ee339263 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 12:00 https://github.com/google/kmsan.git master 5d33b1968cb5 ee339263 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 10:58 https://github.com/google/kmsan.git master 5d33b1968cb5 ee339263 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in nf_nat_setup_info
2022/03/28 00:32 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in nf_nat_setup_info
2022/03/26 04:52 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in nf_nat_setup_info
2021/12/21 03:00 https://github.com/google/kmsan.git master 81c325bbf94e 62bd192b .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in nf_nat_setup_info
2021/12/10 19:08 https://github.com/google/kmsan.git master 8b936c96768e 49ca1f59 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in nf_nat_setup_info
* Struck through repros no longer work on HEAD.