syzbot


KMSAN: uninit-value in snd_rawmidi_ioctl

Status: fixed on 2022/03/08 16:11
Subsystems: sound
[Documentation on labels]
Reported-by: syzbot+88412ee8811832b00dbe@syzkaller.appspotmail.com
Fix commit: 39a8fc4971a0 ALSA: rawmidi - fix the uninitalized user_pversion
First crash: 891d, last: 798d
Discussions (2)
Title Replies (including bot) Last reply
[PATCH 5.15 000/128] 5.15.12-rc1 review 138 (138) 2021/12/28 21:26
[syzbot] KMSAN: uninit-value in snd_rawmidi_ioctl 1 (2) 2021/12/18 12:29

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in snd_rawmidi_ioctl+0xf1e/0x1330 sound/core/rawmidi.c:887
 snd_rawmidi_ioctl+0xf1e/0x1330 sound/core/rawmidi.c:887
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0x2df/0x4a0 fs/ioctl.c:860
 __x64_sys_ioctl+0xd8/0x110 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Uninit was created at:
 slab_post_alloc_hook mm/slab.h:524 [inline]
 slab_alloc_node mm/slub.c:3251 [inline]
 slab_alloc mm/slub.c:3259 [inline]
 kmem_cache_alloc_trace+0xaca/0x1140 mm/slub.c:3276
 kmalloc include/linux/slab.h:590 [inline]
 snd_rawmidi_open+0x70d/0x1390 sound/core/rawmidi.c:445
 snd_open+0x702/0x890 sound/core/sound.c:169
 chrdev_open+0xbc9/0xd80 fs/char_dev.c:414
 do_dentry_open+0x1128/0x1bf0 fs/open.c:822
 vfs_open+0xaf/0xe0 fs/open.c:957
 do_open fs/namei.c:3426 [inline]
 path_openat+0x52f1/0x5dd0 fs/namei.c:3559
 do_filp_open+0x306/0x760 fs/namei.c:3586
 do_sys_openat2+0x263/0x8f0 fs/open.c:1212
 do_sys_open fs/open.c:1228 [inline]
 __do_sys_openat fs/open.c:1244 [inline]
 __se_sys_openat fs/open.c:1239 [inline]
 __x64_sys_openat+0x35f/0x3c0 fs/open.c:1239
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x44/0xae

CPU: 1 PID: 6368 Comm: syz-executor467 Not tainted 5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
=====================================================

Crashes (1506):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/12/07 23:10 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report syz C ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/18 17:16 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/18 15:37 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/18 15:00 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/18 13:46 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/18 13:42 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/18 09:32 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/18 05:34 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 23:59 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 21:24 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 15:51 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 11:31 https://github.com/google/kmsan.git master 85cfd6e539bd 2bea8a27 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 10:25 https://github.com/google/kmsan.git master 85cfd6e539bd 2bea8a27 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 07:08 https://github.com/google/kmsan.git master 85cfd6e539bd 2bea8a27 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 05:21 https://github.com/google/kmsan.git master 85cfd6e539bd 2bea8a27 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 04:12 https://github.com/google/kmsan.git master 85cfd6e539bd 2bea8a27 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/17 01:55 https://github.com/google/kmsan.git master 85cfd6e539bd 2bea8a27 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/16 13:28 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/16 10:25 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/16 06:37 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/16 04:12 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/16 03:05 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/16 00:25 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 21:39 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 20:54 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 14:46 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 13:43 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 11:23 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 09:35 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 06:07 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 05:01 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/15 00:27 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 20:50 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 18:59 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 16:13 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 16:04 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 14:31 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 10:56 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 08:50 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 06:05 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 04:03 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/14 02:08 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/13 21:37 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2022/02/13 19:42 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
2021/11/17 05:02 https://github.com/google/kmsan.git master beecc58f3c53 cafff8b6 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in snd_rawmidi_ioctl
* Struck through repros no longer work on HEAD.