syzbot

 sign-in | mailing list | source | docs
🐞 Open [985] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12474] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in __dev_mc_add

Status: fixed on 2021/11/10 00:50
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+001516d86dbe88862cec@syzkaller.appspotmail.com
Fix commit: cca8ea3b05c9 net: tun: set tun->dev->addr_len during TUNSETLINK processing
First crash: 2032d, last: 1835d
▶ ▼ Discussions (17)
Title Replies (including bot) Last reply
[PATCH 4.14 00/68] 4.14.231-rc1 review 77 (77) 2021/07/28 12:56
[PATCH 5.4 000/111] 5.4.112-rc1 review 124 (124) 2021/05/19 00:04
[PATCH AUTOSEL 5.10 01/46] net: ieee802154: fix nl802154 del llsec key 47 (47) 2021/04/19 08:49
[PATCH 4.4 00/38] 4.4.267-rc1 review 42 (42) 2021/04/16 12:52
[PATCH 4.9 00/47] 4.9.267-rc1 review 51 (51) 2021/04/16 11:50
[PATCH 4.19 00/66] 4.19.187-rc1 review 75 (75) 2021/04/14 02:50
[PATCH 5.10 000/188] 5.10.30-rc1 review 199 (199) 2021/04/13 10:44
[PATCH 5.11 000/210] 5.11.14-rc1 review 214 (214) 2021/04/13 04:46
[PATCH AUTOSEL 5.11 01/51] net: ieee802154: fix nl802154 del llsec key 51 (51) 2021/04/12 16:22
[PATCH v3] net: tun: set tun->dev->addr_len during TUNSETLINK processing 3 (3) 2021/04/07 00:00
[PATCH] net: tun: set tun->dev->addr_len during TUNSETLINK processing 5 (5) 2021/04/06 17:38
[PATCH v2] net: tun: set tun->dev->addr_len during TUNSETLINK processing 1 (1) 2021/04/06 10:20
[PATCH] net: initialize local variables in net/ipv6/mcast.c and net/ipv4/igmp.c 6 (6) 2021/04/03 19:41
[PATCH 1/2] net: initialize local variables in net/ipv6/mcast.c and net/ipv4/igmp.c 1 (1) 2021/04/01 22:54
Reminder: 99 open syzbot bugs in net subsystem 14 (14) 2019/07/31 15:13
Reminder: 94 open syzbot bugs in net subsystem 1 (1) 2019/06/25 05:48
KMSAN: uninit-value in __dev_mc_add 3 (5) 2018/10/08 13:06
▶ ▼ Last patch testing requests (7)
Created Duration User Patch Repo Result
2021/04/05 00:22 17m phil@philpotter.co.uk patch https://github.com/google/kmsan.git master OK
2021/04/01 21:25 24m phil@philpotter.co.uk patch https://github.com/google/kmsan.git master OK
2021/04/01 20:37 26m phil@philpotter.co.uk patch https://github.com/google/kmsan.git master report log
2021/04/01 17:03 25m phil@philpotter.co.uk patch https://github.com/google/kmsan.git master report log
2020/09/12 20:51 10m anant.thazhemadam@gmail.com patch https://github.com/google/kmsan.git master report log
2020/09/12 20:28 10m anant.thazhemadam@gmail.com patch https://github.com/google/kmsan.git master report log
2020/09/12 13:40 11m anant.thazhemadam@gmail.com https://github.com/google/kmsan.git master report log

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
IPVS: ftp: loaded support on port[0] = 21
==================================================================
BUG: KMSAN: uninit-value in memcmp+0x117/0x180 lib/string.c:863
CPU: 1 PID: 18 Comm: kworker/1:0 Not tainted 4.19.0-rc4+ #64
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x306/0x460 lib/dump_stack.c:113
 kmsan_report+0x1a2/0x2e0 mm/kmsan/kmsan.c:917
 __msan_warning+0x7c/0xe0 mm/kmsan/kmsan_instr.c:500
 memcmp+0x117/0x180 lib/string.c:863
 __hw_addr_add_ex net/core/dev_addr_lists.c:61 [inline]
 __dev_mc_add+0x1f9/0x8b0 net/core/dev_addr_lists.c:670
 dev_mc_add+0x6d/0x80 net/core/dev_addr_lists.c:687
 igmp6_group_added+0x2d7/0xab0 net/ipv6/mcast.c:676
 __ipv6_dev_mc_inc+0xeff/0x10f0 net/ipv6/mcast.c:934
 ipv6_dev_mc_inc+0x70/0x80 net/ipv6/mcast.c:941
 addrconf_join_solict net/ipv6/addrconf.c:2098 [inline]
 addrconf_dad_begin net/ipv6/addrconf.c:3879 [inline]
 addrconf_dad_work+0x3e7/0x2690 net/ipv6/addrconf.c:4006
 process_one_work+0x19c4/0x24f0 kernel/workqueue.c:2153
 worker_thread+0x206d/0x2b30 kernel/workqueue.c:2296
 kthread+0x59c/0x5d0 kernel/kthread.c:247
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:416

Local variable description: ----buf@igmp6_group_added
Variable was created at:
 igmp6_group_added+0x57/0xab0 net/ipv6/mcast.c:664
 __ipv6_dev_mc_inc+0xeff/0x10f0 net/ipv6/mcast.c:934
==================================================================

Crashes (213):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/10/08 13:05 https://github.com/google/kmsan.git master 43c85fe5a0ee 8b311eaf .config console log report syz C ci-upstream-kmsan-gce
2019/04/10 21:36 https://github.com/google/kmsan.git master 199a02db1f61 e955ac50 .config console log report ci-upstream-kmsan-gce
2019/04/07 15:52 https://github.com/google/kmsan.git master 46200eb9666d c34fde03 .config console log report ci-upstream-kmsan-gce
2019/04/05 01:44 https://github.com/google/kmsan.git master 46200eb9666d e5d1b3ac .config console log report ci-upstream-kmsan-gce
2019/04/02 22:31 https://github.com/google/kmsan.git master 088c01ea0855 dfd3394d .config console log report ci-upstream-kmsan-gce
2019/03/27 11:16 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 09:18 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 06:58 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 13:50 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 02:53 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 01:11 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 00:57 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/25 17:41 https://github.com/google/kmsan.git master c10a026b8dee 2c86e0a5 .config console log report ci-upstream-kmsan-gce
2019/03/24 22:17 https://github.com/google/kmsan.git master c10a026b8dee acbc5b7d .config console log report ci-upstream-kmsan-gce
2019/03/24 02:33 https://github.com/google/kmsan.git master c10a026b8dee a2cef203 .config console log report ci-upstream-kmsan-gce
2019/03/24 00:25 https://github.com/google/kmsan.git master c10a026b8dee a2cef203 .config console log report ci-upstream-kmsan-gce
2019/03/23 04:10 https://github.com/google/kmsan.git master c10a026b8dee 3361bde5 .config console log report ci-upstream-kmsan-gce
2019/03/21 19:57 https://github.com/google/kmsan.git master c10a026b8dee dce6e62f .config console log report ci-upstream-kmsan-gce
2019/03/19 19:06 https://github.com/google/kmsan.git master 43cfd3b1484f e4549234 .config console log report ci-upstream-kmsan-gce
2019/03/18 16:56 https://github.com/google/kmsan.git master 43cfd3b1484f 4656beca .config console log report ci-upstream-kmsan-gce
2019/03/17 15:46 https://github.com/google/kmsan.git master 43cfd3b1484f ba18afea .config console log report ci-upstream-kmsan-gce
2019/03/17 06:41 https://github.com/google/kmsan.git master 43cfd3b1484f bab43553 .config console log report ci-upstream-kmsan-gce
2019/03/15 16:37 https://github.com/google/kmsan.git master 63fd07faa48c bab43553 .config console log report ci-upstream-kmsan-gce
2019/03/15 01:23 https://github.com/google/kmsan.git master 9536b452bf7b d72db19b .config console log report ci-upstream-kmsan-gce
2019/03/14 21:36 https://github.com/google/kmsan.git master 9536b452bf7b d72db19b .config console log report ci-upstream-kmsan-gce
2019/03/14 09:49 https://github.com/google/kmsan.git master c530a275757b d09a902e .config console log report ci-upstream-kmsan-gce
2019/03/12 23:25 https://github.com/google/kmsan.git master a695dc5e929e a71bfb62 .config console log report ci-upstream-kmsan-gce
2019/03/11 23:01 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/11 10:41 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/10 10:53 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/08 09:58 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/07 22:07 https://github.com/google/kmsan.git master a695dc5e929e 4b69c3cb .config console log report ci-upstream-kmsan-gce
2019/03/07 14:09 https://github.com/google/kmsan.git master a695dc5e929e 8c085c5e .config console log report ci-upstream-kmsan-gce
2019/03/04 22:39 https://github.com/google/kmsan.git master fa1981bee40f 7c693b52 .config console log report ci-upstream-kmsan-gce
2019/03/01 19:07 https://github.com/google/kmsan.git master fa1981bee40f 68d9e495 .config console log report ci-upstream-kmsan-gce
2019/03/01 14:47 https://github.com/google/kmsan.git master fa1981bee40f 8a4b3a6b .config console log report ci-upstream-kmsan-gce
2019/03/01 10:02 https://github.com/google/kmsan.git master fa1981bee40f 8a4b3a6b .config console log report ci-upstream-kmsan-gce
2019/02/28 14:47 https://github.com/google/kmsan.git master fa1981bee40f 09aeeba4 .config console log report ci-upstream-kmsan-gce
2019/02/27 07:02 https://github.com/google/kmsan.git master fa1981bee40f f2468c12 .config console log report ci-upstream-kmsan-gce
2019/02/22 08:04 https://github.com/google/kmsan.git master fa1981bee40f 7ff74a98 .config console log report ci-upstream-kmsan-gce
2019/02/21 11:53 https://github.com/google/kmsan.git master fa1981bee40f 3133098b .config console log report ci-upstream-kmsan-gce
2019/02/21 11:52 https://github.com/google/kmsan.git master fa1981bee40f 3133098b .config console log report ci-upstream-kmsan-gce
2019/02/21 06:54 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/19 11:15 https://github.com/google/kmsan.git master fa1981bee40f 59f36113 .config console log report ci-upstream-kmsan-gce
2019/02/16 20:47 https://github.com/google/kmsan.git master fa1981bee40f f42dee6d .config console log report ci-upstream-kmsan-gce
2019/02/16 14:01 https://github.com/google/kmsan.git master fa1981bee40f f42dee6d .config console log report ci-upstream-kmsan-gce
2019/02/15 23:48 https://github.com/google/kmsan.git master fa1981bee40f f42dee6d .config console log report ci-upstream-kmsan-gce
2019/02/15 20:34 https://github.com/google/kmsan.git master fa1981bee40f f6f233c0 .config console log report ci-upstream-kmsan-gce
2019/02/14 21:14 https://github.com/google/kmsan.git master fa1981bee40f 76dd003f .config console log report ci-upstream-kmsan-gce
2019/02/14 07:25 https://github.com/google/kmsan.git master fa1981bee40f 6a46f448 .config console log report ci-upstream-kmsan-gce
2019/02/13 17:58 https://github.com/google/kmsan.git master fa1981bee40f 0a49c954 .config console log report ci-upstream-kmsan-gce
2018/09/25 18:49 https://github.com/google/kmsan.git master eb2e67596de2 b7e11289 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.