syzbot


KMSAN: uninit-value in x25_bind

Status: fixed on 2021/03/10 01:48
Subsystems: x25
[Documentation on labels]
Fix commit: 6ee50c8e262a net/x25: prevent a couple of overflows
First crash: 1189d, last: 1167d

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in strlen+0x5e/0xa0 lib/string.c:576
CPU: 0 PID: 18934 Comm: syz-executor.2 Not tainted 5.10.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 strlen+0x5e/0xa0 lib/string.c:576
 x25_bind+0x1cc/0x830 net/x25/af_x25.c:692
 __sys_bind+0x6f8/0x8e0 net/socket.c:1656
 __do_sys_bind net/socket.c:1667 [inline]
 __se_sys_bind+0x8d/0xb0 net/socket.c:1665
 __ia32_sys_bind+0x4a/0x70 net/socket.c:1665
 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:139
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f41549
Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f553b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000169
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200008c0
RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Local variable ----address@__sys_bind created at:
 __sys_bind+0x8f/0x8e0 net/socket.c:1645
 __sys_bind+0x8f/0x8e0 net/socket.c:1645
=====================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/01/07 06:16 https://github.com/google/kmsan.git master 73d62e81b476 c104d4a3 .config console log report info ci-upstream-kmsan-gce-386
2020/12/15 23:24 https://github.com/google/kmsan.git master 73d62e81b476 97183ed7 .config console log report info ci-upstream-kmsan-gce-386
* Struck through repros no longer work on HEAD.