syzbot


KMSAN: uninit-value in get_l4proto (2)

Status: auto-closed as invalid on 2022/02/23 14:02
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 377d, last: 377d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in get_l4proto 1 1482d 1482d 0/24 auto-closed as invalid on 2019/05/15 23:27

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in ipv4_get_l4proto net/netfilter/nf_conntrack_core.c:358 [inline]
BUG: KMSAN: uninit-value in get_l4proto+0x787/0x810 net/netfilter/nf_conntrack_core.c:403
 ipv4_get_l4proto net/netfilter/nf_conntrack_core.c:358 [inline]
 get_l4proto+0x787/0x810 net/netfilter/nf_conntrack_core.c:403
 nf_conntrack_in+0x44a/0x2ef0 net/netfilter/nf_conntrack_core.c:1881
 ipv4_conntrack_local+0x27b/0x3e0 net/netfilter/nf_conntrack_proto.c:200
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0x18c/0x490 net/netfilter/core.c:589
 nf_hook include/linux/netfilter.h:262 [inline]
 __ip_local_out+0x774/0x830 net/ipv4/ip_output.c:115
 ip_local_out net/ipv4/ip_output.c:124 [inline]
 __ip_queue_xmit+0x1dc2/0x2540 net/ipv4/ip_output.c:525
 ip_queue_xmit+0xcc/0xf0 net/ipv4/ip_output.c:539
 __tcp_transmit_skb+0x4c11/0x5e20 net/ipv4/tcp_output.c:1405
 tcp_transmit_skb net/ipv4/tcp_output.c:1423 [inline]
 tcp_write_xmit+0x49b6/0xae30 net/ipv4/tcp_output.c:2690
 tcp_tsq_write+0x7df/0x990 net/ipv4/tcp_output.c:1022
 tcp_tsq_handler net/ipv4/tcp_output.c:1031 [inline]
 tcp_tasklet_func+0x6a6/0xa00 net/ipv4/tcp_output.c:1063
 tasklet_action_common+0x5dd/0x810 kernel/softirq.c:783
 tasklet_action+0x30/0x40 kernel/softirq.c:804
 __do_softirq+0x1c9/0x6ec kernel/softirq.c:558
 run_ksoftirqd+0x20/0x40 kernel/softirq.c:920
 smpboot_thread_fn+0x4c7/0x980 kernel/smpboot.c:164
 kthread+0x66b/0x780 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

Local variable regs created at:
 __bpf_prog_run32+0x84/0x180 kernel/bpf/core.c:1787
 bpf_dispatcher_nop_func include/linux/bpf.h:718 [inline]
 __bpf_prog_run include/linux/filter.h:617 [inline]
 bpf_prog_run include/linux/filter.h:631 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1871 [inline]
 bpf_trace_run1+0x1b5/0x2f0 kernel/trace/bpf_trace.c:1907
=====================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2021/11/25 13:53 https://github.com/google/kmsan.git master a535b0caaa2f 545ab074 .config log report info KMSAN: uninit-value in get_l4proto
* Struck through repros no longer work on HEAD.