syzbot


KMSAN: uninit-value in caif_seqpkt_sendmsg

Status: fixed on 2021/11/10 00:50
Reported-by: syzbot+09a5d591c1f98cf5efcb@syzkaller.appspotmail.com
Fix commit: 991e634360f2 net: fix uninit-value in caif_seqpkt_sendmsg
First crash: 906d, last: 328d
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/12 20:12 13m anant.thazhemadam@gmail.com https://github.com/google/kmsan.git master report log
2020/09/12 12:56 19m anant.thazhemadam@gmail.com patch https://github.com/google/kmsan.git master OK

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in caif_seqpkt_sendmsg+0x693/0xf60 net/caif/caif_socket.c:542
CPU: 1 PID: 11244 Comm: syz-executor620 Not tainted 5.6.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x220 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215
 caif_seqpkt_sendmsg+0x693/0xf60 net/caif/caif_socket.c:542
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0x12b6/0x1350 net/socket.c:2343
 ___sys_sendmsg net/socket.c:2397 [inline]
 __sys_sendmmsg+0x808/0xc90 net/socket.c:2480
 __compat_sys_sendmmsg net/compat.c:656 [inline]
 __do_compat_sys_sendmmsg net/compat.c:663 [inline]
 __se_compat_sys_sendmmsg net/compat.c:660 [inline]
 __ia32_compat_sys_sendmmsg+0x127/0x180 net/compat.c:660
 do_syscall_32_irqs_on arch/x86/entry/common.c:339 [inline]
 do_fast_syscall_32+0x3c7/0x6e0 arch/x86/entry/common.c:410
 entry_SYSENTER_compat+0x68/0x77 arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7f79d99
Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000ffbf4d6c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007600
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00000000080bb508
RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Local variable ----iovstack.i@__sys_sendmmsg created at:
 ___sys_sendmsg net/socket.c:2388 [inline]
 __sys_sendmmsg+0x6db/0xc90 net/socket.c:2480
 ___sys_sendmsg net/socket.c:2388 [inline]
 __sys_sendmmsg+0x6db/0xc90 net/socket.c:2480
=====================================================

Crashes (2365):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2020/02/24 08:49 https://github.com/google/kmsan.git master 8bbbc5cf3dca d801cb02 .config log report syz C
ci-upstream-kmsan-gce-386 2021/09/24 08:41 https://github.com/google/kmsan.git master 5e561f94df41 8cac236e .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/24 06:09 https://github.com/google/kmsan.git master 5e561f94df41 8cac236e .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/24 02:44 https://github.com/google/kmsan.git master 5e561f94df41 8cac236e .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/24 00:23 https://github.com/google/kmsan.git master 5e561f94df41 8cac236e .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/23 21:12 https://github.com/google/kmsan.git master 5e561f94df41 8cac236e .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/23 09:58 https://github.com/google/kmsan.git master c9006efa1749 8cac236e .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/23 08:38 https://github.com/google/kmsan.git master c9006efa1749 8cac236e .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/23 04:06 https://github.com/google/kmsan.git master c9006efa1749 8cac236e .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/22 15:31 https://github.com/google/kmsan.git master f881dcecdc7a 169724fe .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/22 00:14 https://github.com/google/kmsan.git master 1e72fa33ea66 169724fe .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/21 21:46 https://github.com/google/kmsan.git master 1e72fa33ea66 169724fe .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/21 09:04 https://github.com/google/kmsan.git master be0f0dd6a24b af796c18 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/21 04:41 https://github.com/google/kmsan.git master be0f0dd6a24b af796c18 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/21 02:25 https://github.com/google/kmsan.git master be0f0dd6a24b af796c18 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/18 15:25 https://github.com/google/kmsan.git master 80de0ac1c3d2 70b76c1d .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/18 03:02 https://github.com/google/kmsan.git master 43575797a31c 70b76c1d .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/18 01:24 https://github.com/google/kmsan.git master 43575797a31c 70b76c1d .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/15 12:09 https://github.com/google/kmsan.git master 43b4682e8b8e 07e953c1 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/15 01:52 https://github.com/google/kmsan.git master 43b4682e8b8e 07e953c1 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/14 12:38 https://github.com/google/kmsan.git master 43b4682e8b8e 58d09404 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/14 09:38 https://github.com/google/kmsan.git master 43b4682e8b8e 58d09404 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/14 07:25 https://github.com/google/kmsan.git master 43b4682e8b8e 58d09404 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/13 21:34 https://github.com/google/kmsan.git master 43b4682e8b8e 3ce60af8 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/13 00:18 https://github.com/google/kmsan.git master 43b4682e8b8e 5ae8508a .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/11 14:58 https://github.com/google/kmsan.git master 43b4682e8b8e 5ae8508a .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/11 12:35 https://github.com/google/kmsan.git master 43b4682e8b8e 5ae8508a .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/11 11:31 https://github.com/google/kmsan.git master 43b4682e8b8e 5ae8508a .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/11 05:53 https://github.com/google/kmsan.git master 43b4682e8b8e 5ae8508a .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/11 02:05 https://github.com/google/kmsan.git master 43b4682e8b8e 5ae8508a .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/10 23:31 https://github.com/google/kmsan.git master 43b4682e8b8e 5ae8508a .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/10 21:08 https://github.com/google/kmsan.git master 43b4682e8b8e 5ae8508a .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/09 13:15 https://github.com/google/kmsan.git master 43b4682e8b8e e2776ee4 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/09 10:15 https://github.com/google/kmsan.git master 43b4682e8b8e e2776ee4 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/09 05:31 https://github.com/google/kmsan.git master 43b4682e8b8e e2776ee4 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/09 00:06 https://github.com/google/kmsan.git master 43b4682e8b8e e2776ee4 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/08 20:26 https://github.com/google/kmsan.git master 43b4682e8b8e e2776ee4 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/08 16:32 https://github.com/google/kmsan.git master 43b4682e8b8e e2776ee4 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/07 21:05 https://github.com/google/kmsan.git master 43b4682e8b8e 6ca60148 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/07 15:05 https://github.com/google/kmsan.git master 43b4682e8b8e 6ca60148 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/07 08:44 https://github.com/google/kmsan.git master 43b4682e8b8e 6ca60148 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/07 05:14 https://github.com/google/kmsan.git master 43b4682e8b8e 6ca60148 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/07 02:47 https://github.com/google/kmsan.git master 43b4682e8b8e 6ca60148 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/06 08:51 https://github.com/google/kmsan.git master 43b4682e8b8e d236a457 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/06 02:13 https://github.com/google/kmsan.git master 43b4682e8b8e d236a457 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/05 18:47 https://github.com/google/kmsan.git master 43b4682e8b8e d236a457 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/09/04 16:37 https://github.com/google/kmsan.git master 43b4682e8b8e d236a457 .config log report info KMSAN: uninit-value in caif_seqpkt_sendmsg
ci-upstream-kmsan-gce-386 2021/01/17 09:32 https://github.com/google/kmsan.git master 73d62e81b476 65a7a854 .config log report info
ci-upstream-kmsan-gce-386 2020/02/24 06:12 https://github.com/google/kmsan.git master 8bbbc5cf3dca d801cb02 .config log report