syzbot

 sign-in | mailing list | source | docs
🐞 Open [991] ≡ Subsystems 🐞 Fixed [5238] 🐞 Invalid [12509] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in inet_frag_find

Status: auto-closed as invalid on 2019/09/09 04:47
Subsystems: netfilter
[Documentation on labels]
First crash: 1968d, last: 1871d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in inet_frag_find (2) net 2 835d 843d 0/26 auto-closed as invalid on 2022/04/11 17:13

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in arch_atomic_try_cmpxchg arch/x86/include/asm/atomic.h:200 [inline]
BUG: KMSAN: uninit-value in atomic_try_cmpxchg include/asm-generic/atomic-instrumented.h:73 [inline]
BUG: KMSAN: uninit-value in queued_spin_lock include/asm-generic/qspinlock.h:87 [inline]
BUG: KMSAN: uninit-value in do_raw_spin_lock include/linux/spinlock.h:180 [inline]
BUG: KMSAN: uninit-value in __raw_spin_lock_bh include/linux/spinlock_api_smp.h:136 [inline]
BUG: KMSAN: uninit-value in _raw_spin_lock_bh+0xea/0x130 kernel/locking/spinlock.c:168
CPU: 1 PID: 17102 Comm: syz-executor.3 Not tainted 5.0.0+ #11
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x173/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x12e/0x2a0 mm/kmsan/kmsan.c:600
 __msan_warning+0x82/0xf0 mm/kmsan/kmsan_instr.c:313
 arch_atomic_try_cmpxchg arch/x86/include/asm/atomic.h:200 [inline]
 atomic_try_cmpxchg include/asm-generic/atomic-instrumented.h:73 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:87 [inline]
 do_raw_spin_lock include/linux/spinlock.h:180 [inline]
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:136 [inline]
 _raw_spin_lock_bh+0xea/0x130 kernel/locking/spinlock.c:168
 spin_lock_bh include/linux/spinlock.h:334 [inline]
 __rhashtable_insert_fast include/linux/rhashtable.h:614 [inline]
 rhashtable_lookup_get_insert_key include/linux/rhashtable.h:885 [inline]
 inet_frag_create net/ipv4/inet_fragment.c:194 [inline]
 inet_frag_find+0x1223/0x24a0 net/ipv4/inet_fragment.c:217
 ip_find net/ipv4/ip_fragment.c:283 [inline]
 ip_defrag+0x47c/0x6310 net/ipv4/ip_fragment.c:695
 nf_ct_ipv4_gather_frags net/ipv4/netfilter/nf_defrag_ipv4.c:34 [inline]
 ipv4_conntrack_defrag+0x673/0x7d0 net/ipv4/netfilter/nf_defrag_ipv4.c:89
 nf_hook_entry_hookfn include/linux/netfilter.h:119 [inline]
 nf_hook_slow+0x176/0x3d0 net/netfilter/core.c:511
 nf_hook include/linux/netfilter.h:244 [inline]
 __ip_local_out+0x6dc/0x800 net/ipv4/ip_output.c:113
 ip_local_out+0xa4/0x1d0 net/ipv4/ip_output.c:122
 iptunnel_xmit+0x8a7/0xde0 net/ipv4/ip_tunnel_core.c:91
 ip_tunnel_xmit+0x357d/0x3ca0 net/ipv4/ip_tunnel.c:784
 __gre_xmit net/ipv4/ip_gre.c:444 [inline]
 ipgre_xmit+0x1098/0x11c0 net/ipv4/ip_gre.c:702
 __netdev_start_xmit include/linux/netdevice.h:4385 [inline]
 netdev_start_xmit include/linux/netdevice.h:4394 [inline]
 xmit_one net/core/dev.c:3278 [inline]
 dev_hard_start_xmit+0x604/0xc40 net/core/dev.c:3294
 __dev_queue_xmit+0x2e48/0x3b80 net/core/dev.c:3864
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:3897
 packet_snd net/packet/af_packet.c:2933 [inline]
 packet_sendmsg+0x7d3a/0x8d30 net/packet/af_packet.c:2958
 sock_sendmsg_nosec net/socket.c:622 [inline]
 sock_sendmsg net/socket.c:632 [inline]
 ___sys_sendmsg+0xdb9/0x11b0 net/socket.c:2115
 __sys_sendmsg net/socket.c:2153 [inline]
 __do_sys_sendmsg net/socket.c:2162 [inline]
 __se_sys_sendmsg+0x305/0x460 net/socket.c:2160
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2160
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x457f29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f0e731aac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29
RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e731ab6d4
R13: 00000000004c5561 R14: 00000000004d9408 R15: 00000000ffffffff

Uninit was created at:
No stack
==================================================================

Crashes (141):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/12 22:38 https://github.com/google/kmsan.git master a695dc5e929e a71bfb62 .config console log report ci-upstream-kmsan-gce
2019/03/12 16:10 https://github.com/google/kmsan.git master a695dc5e929e a71bfb62 .config console log report ci-upstream-kmsan-gce
2019/03/11 13:30 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/10 23:57 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/10 21:37 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/08 12:49 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/08 07:11 https://github.com/google/kmsan.git master a695dc5e929e 4b69c3cb .config console log report ci-upstream-kmsan-gce
2019/03/06 09:51 https://github.com/google/kmsan.git master a695dc5e929e 05cf83bf .config console log report ci-upstream-kmsan-gce
2019/03/05 10:18 https://github.com/google/kmsan.git master fa1981bee40f bb91cf81 .config console log report ci-upstream-kmsan-gce
2019/03/05 09:04 https://github.com/google/kmsan.git master fa1981bee40f bb91cf81 .config console log report ci-upstream-kmsan-gce
2019/03/05 00:10 https://github.com/google/kmsan.git master fa1981bee40f 7c693b52 .config console log report ci-upstream-kmsan-gce
2019/03/04 11:34 https://github.com/google/kmsan.git master fa1981bee40f 7c693b52 .config console log report ci-upstream-kmsan-gce
2019/03/04 09:11 https://github.com/google/kmsan.git master fa1981bee40f 7c693b52 .config console log report ci-upstream-kmsan-gce
2019/03/04 06:12 https://github.com/google/kmsan.git master fa1981bee40f 1c0e457a .config console log report ci-upstream-kmsan-gce
2019/03/04 03:55 https://github.com/google/kmsan.git master fa1981bee40f 1c0e457a .config console log report ci-upstream-kmsan-gce
2019/03/02 21:34 https://github.com/google/kmsan.git master fa1981bee40f 1c0e457a .config console log report ci-upstream-kmsan-gce
2019/03/02 08:56 https://github.com/google/kmsan.git master fa1981bee40f 1c0e457a .config console log report ci-upstream-kmsan-gce
2019/03/02 01:57 https://github.com/google/kmsan.git master fa1981bee40f 68d9e495 .config console log report ci-upstream-kmsan-gce
2019/03/01 08:17 https://github.com/google/kmsan.git master fa1981bee40f 8a4b3a6b .config console log report ci-upstream-kmsan-gce
2019/03/01 00:40 https://github.com/google/kmsan.git master fa1981bee40f 09aeeba4 .config console log report ci-upstream-kmsan-gce
2019/02/28 14:00 https://github.com/google/kmsan.git master fa1981bee40f 09aeeba4 .config console log report ci-upstream-kmsan-gce
2019/02/27 07:54 https://github.com/google/kmsan.git master fa1981bee40f f2468c12 .config console log report ci-upstream-kmsan-gce
2019/02/27 06:16 https://github.com/google/kmsan.git master fa1981bee40f f2468c12 .config console log report ci-upstream-kmsan-gce
2019/02/22 17:23 https://github.com/google/kmsan.git master fa1981bee40f 6a5fcca4 .config console log report ci-upstream-kmsan-gce
2019/02/21 18:28 https://github.com/google/kmsan.git master fa1981bee40f 3133098b .config console log report ci-upstream-kmsan-gce
2019/02/21 15:18 https://github.com/google/kmsan.git master fa1981bee40f 3133098b .config console log report ci-upstream-kmsan-gce
2019/02/21 02:32 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/20 13:41 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/20 12:29 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/17 16:54 https://github.com/google/kmsan.git master fa1981bee40f 3e98cc30 .config console log report ci-upstream-kmsan-gce
2019/02/17 10:29 https://github.com/google/kmsan.git master fa1981bee40f f42dee6d .config console log report ci-upstream-kmsan-gce
2019/02/17 08:38 https://github.com/google/kmsan.git master fa1981bee40f f42dee6d .config console log report ci-upstream-kmsan-gce
2019/02/17 06:38 https://github.com/google/kmsan.git master fa1981bee40f f42dee6d .config console log report ci-upstream-kmsan-gce
2019/02/17 00:24 https://github.com/google/kmsan.git master fa1981bee40f f42dee6d .config console log report ci-upstream-kmsan-gce
2019/02/15 13:22 https://github.com/google/kmsan.git master fa1981bee40f f6f233c0 .config console log report ci-upstream-kmsan-gce
2019/02/15 12:38 https://github.com/google/kmsan.git master fa1981bee40f f6f233c0 .config console log report ci-upstream-kmsan-gce
2019/02/15 10:07 https://github.com/google/kmsan.git master fa1981bee40f 76dd003f .config console log report ci-upstream-kmsan-gce
2019/02/15 07:18 https://github.com/google/kmsan.git master fa1981bee40f 76dd003f .config console log report ci-upstream-kmsan-gce
2019/02/14 19:59 https://github.com/google/kmsan.git master fa1981bee40f 76dd003f .config console log report ci-upstream-kmsan-gce
2019/02/14 16:56 https://github.com/google/kmsan.git master fa1981bee40f 76dd003f .config console log report ci-upstream-kmsan-gce
2019/02/14 05:26 https://github.com/google/kmsan.git master fa1981bee40f 6a46f448 .config console log report ci-upstream-kmsan-gce
2018/12/05 11:58 https://github.com/google/kmsan.git master 61312858e7d8 ac6c0578 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.