syzbot


KMSAN: uninit-value in strstr

Status: upstream: reported C repro on 2020/07/25 18:13
Reported-by: syzbot+a73d24a22eeeebe5f244@syzkaller.appspotmail.com
First crash: 868d, last: 53d
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in fib_get_nhs C 14 294d 365d 22/24 fixed on 2022/03/08 16:11
upstream KMSAN: kernel-infoleak in _copy_to_iter (7) C 77595 now 275d 23/24 internal: reported C repro on 2022/03/09 07:32
upstream KMSAN: uninit-value in __tipc_nl_bearer_enable C 1257 17d 1452d 23/24 upstream: reported C repro on 2018/12/18 13:01
upstream KMSAN: uninit-value in tipc_nl_compat_name_table_dump (3) C 65 20d 36d 23/24 upstream: reported C repro on 2022/11/03 16:22
Patch testing requests:
Created Duration User Patch Repo Result
2021/05/08 22:57 20m phil@philpotter.co.uk patch https://github.com/google/kmsan.git master OK
2021/05/04 23:48 25m phil@philpotter.co.uk https://github.com/google/kmsan.git master report log
2021/04/15 09:21 14m phil@philpotter.co.uk https://github.com/google/kmsan.git master report log
2020/10/31 23:48 15m anant.thazhemadam@gmail.com https://github.com/google/kmsan.git master report log
2020/09/04 01:06 12m dragonjetli@gmail.com patch https://github.com/google/kmsan.git master report log
2020/09/02 23:45 12m dragonjetli@gmail.com https://github.com/google/kmsan.git master report log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in strlen lib/string.c:495 [inline]
BUG: KMSAN: uninit-value in strstr+0xb4/0x2e0 lib/string.c:840
 strlen lib/string.c:495 [inline]
 strstr+0xb4/0x2e0 lib/string.c:840
 tipc_nl_node_reset_link_stats+0x41e/0xba0 net/tipc/node.c:2585
 genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
 genl_rcv_msg+0x103f/0x1260 net/netlink/genetlink.c:792
 netlink_rcv_skb+0x3a5/0x6c0 net/netlink/af_netlink.c:2501
 genl_rcv+0x3c/0x50 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0xf3b/0x1270 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x1288/0x1440 net/netlink/af_netlink.c:1921
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0xabc/0xe90 net/socket.c:2482
 ___sys_sendmsg+0x2a1/0x3f0 net/socket.c:2536
 __sys_sendmsg net/socket.c:2565 [inline]
 __do_sys_sendmsg net/socket.c:2574 [inline]
 __se_sys_sendmsg net/socket.c:2572 [inline]
 __x64_sys_sendmsg+0x367/0x540 net/socket.c:2572
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Uninit was created at:
 slab_post_alloc_hook mm/slab.h:732 [inline]
 slab_alloc_node mm/slub.c:3258 [inline]
 __kmalloc_node_track_caller+0x814/0x1250 mm/slub.c:4970
 kmalloc_reserve net/core/skbuff.c:362 [inline]
 __alloc_skb+0x346/0xcf0 net/core/skbuff.c:434
 alloc_skb include/linux/skbuff.h:1257 [inline]
 netlink_alloc_large_skb net/netlink/af_netlink.c:1191 [inline]
 netlink_sendmsg+0xb71/0x1440 net/netlink/af_netlink.c:1896
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0xabc/0xe90 net/socket.c:2482
 ___sys_sendmsg+0x2a1/0x3f0 net/socket.c:2536
 __sys_sendmsg net/socket.c:2565 [inline]
 __do_sys_sendmsg net/socket.c:2574 [inline]
 __se_sys_sendmsg net/socket.c:2572 [inline]
 __x64_sys_sendmsg+0x367/0x540 net/socket.c:2572
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

CPU: 0 PID: 3491 Comm: syz-executor116 Not tainted 6.0.0-rc5-syzkaller-48543-g968c2729e576 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
=====================================================

Crashes (77):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce 2022/10/15 10:20 https://github.com/google/kmsan.git master 968c2729e576 67cb024c .config log report syz C KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/06/26 19:57 https://github.com/google/kmsan.git master 4b28366af7d9 a371c43c .config log report syz C KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2020/07/26 21:42 https://github.com/google/kmsan.git master 93f54a72361a 51265195 .config log report syz C
ci-upstream-kmsan-gce 2022/10/17 12:14 https://github.com/google/kmsan.git master 968c2729e576 67cb024c .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/10/15 09:34 https://github.com/google/kmsan.git master 968c2729e576 67cb024c .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/10/03 15:16 https://github.com/google/kmsan.git master 968c2729e576 feb56351 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/10/01 05:14 https://github.com/google/kmsan.git master 968c2729e576 feb56351 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/09/19 23:22 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/09/14 09:06 https://github.com/google/kmsan.git master faf04f9bcf05 b884348d .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/08/22 12:59 https://github.com/google/kmsan.git master 1b070a5d1a2c 26a13b38 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/08/22 07:03 https://github.com/google/kmsan.git master 1b070a5d1a2c 26a13b38 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/08/21 23:55 https://github.com/google/kmsan.git master 1b070a5d1a2c 26a13b38 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/08/14 01:11 https://github.com/google/kmsan.git master 1b070a5d1a2c 8dfcaa3d .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/08/11 05:05 https://github.com/google/kmsan.git master 1b070a5d1a2c a6201f11 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/08/07 06:25 https://github.com/google/kmsan.git master bba47a4b6421 88e3a122 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/07/12 09:08 https://github.com/google/kmsan.git master 97117d69c353 da3d6955 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/06/26 18:50 https://github.com/google/kmsan.git master 4b28366af7d9 a371c43c .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/05/22 13:38 https://github.com/google/kmsan.git master c5c93da9af13 7268fa62 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/04/27 08:11 https://github.com/google/kmsan.git master d6e2c8c7eb40 1fa34c1b .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/04/20 08:18 https://github.com/google/kmsan.git master 33d9269ef6e0 7d7bc738 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/04/11 05:20 https://github.com/google/kmsan.git master 33d9269ef6e0 e22c3da3 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/04/06 05:02 https://github.com/google/kmsan.git master 33d9269ef6e0 0127c10f .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/03/30 17:03 https://github.com/google/kmsan.git master 1978a14f70af 42718dd6 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/03/28 08:32 https://github.com/google/kmsan.git master 5d33b1968cb5 89bc8608 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/03/25 13:05 https://github.com/google/kmsan.git master 97c7732c2bb6 89bc8608 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/03/22 07:13 https://github.com/google/kmsan.git master 97c7732c2bb6 e2d91b1d .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/03/20 23:13 https://github.com/google/kmsan.git master 97c7732c2bb6 e2d91b1d .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/03/18 23:00 https://github.com/google/kmsan.git master 97c7732c2bb6 e2d91b1d .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/03/15 11:20 https://github.com/google/kmsan.git master 724946410067 9e8eaa75 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/03/06 17:30 https://github.com/google/kmsan.git master 724946410067 7bdd8b2c .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/02/24 02:16 https://github.com/google/kmsan.git master 724946410067 6e821dbf .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/02/23 09:31 https://github.com/google/kmsan.git master 724946410067 6e821dbf .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/02/20 08:30 https://github.com/google/kmsan.git master 724946410067 3cd800e4 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/02/18 16:18 https://github.com/google/kmsan.git master 85cfd6e539bd 3cd800e4 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/01/28 19:12 https://github.com/google/kmsan.git master 85cfd6e539bd 495e00c5 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/01/18 20:10 https://github.com/google/kmsan.git master fa3879a274df 731a2d23 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/01/14 18:14 https://github.com/google/kmsan.git master fa3879a274df 53e00b45 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2022/01/07 06:21 https://github.com/google/kmsan.git master 81c325bbf94e 6acc789a .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/12/29 06:43 https://github.com/google/kmsan.git master 81c325bbf94e 76c8cf06 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/12/27 12:38 https://github.com/google/kmsan.git master 81c325bbf94e e4f103c4 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/12/26 04:45 https://github.com/google/kmsan.git master 81c325bbf94e 6caa12e4 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/12/25 04:34 https://github.com/google/kmsan.git master 81c325bbf94e 6caa12e4 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/12/25 04:34 https://github.com/google/kmsan.git master 81c325bbf94e 6caa12e4 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/12/05 03:58 https://github.com/google/kmsan.git master b0f85c4ccdd4 a617004c .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/30 05:08 https://github.com/google/kmsan.git master a535b0caaa2f d0830353 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/30 05:00 https://github.com/google/kmsan.git master a535b0caaa2f d0830353 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/28 12:38 https://github.com/google/kmsan.git master a535b0caaa2f 63eeac02 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/28 12:10 https://github.com/google/kmsan.git master a535b0caaa2f 63eeac02 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/28 06:50 https://github.com/google/kmsan.git master a535b0caaa2f 63eeac02 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/27 20:14 https://github.com/google/kmsan.git master a535b0caaa2f 63eeac02 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/25 03:40 https://github.com/google/kmsan.git master b05f62d953b9 545ab074 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/24 08:46 https://github.com/google/kmsan.git master 7ca3114e5a48 545ab074 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/21 23:40 https://github.com/google/kmsan.git master 425295055ce6 4eb20a4e .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/21 15:58 https://github.com/google/kmsan.git master 425295055ce6 4eb20a4e .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/20 22:39 https://github.com/google/kmsan.git master 425295055ce6 4eb20a4e .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/11/20 16:09 https://github.com/google/kmsan.git master 425295055ce6 4eb20a4e .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/06/09 21:18 https://github.com/google/kmsan.git master 6099c9da2f7d 84fe5d96 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/05/28 17:02 https://github.com/google/kmsan.git master 6099c9da2f7d 858ea628 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/05/27 19:35 https://github.com/google/kmsan.git master 6099c9da2f7d 858ea628 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2021/02/05 08:42 https://github.com/google/kmsan.git master 73d62e81b476 23a562df .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce-386 2021/05/29 12:26 https://github.com/google/kmsan.git master 6099c9da2f7d 858ea628 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce-386 2021/05/28 10:20 https://github.com/google/kmsan.git master 6099c9da2f7d 858ea628 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce-386 2021/04/10 19:45 https://github.com/google/kmsan.git master 4ebaab5fb428 bfeda1b1 .config log report info KMSAN: uninit-value in strstr
ci-upstream-kmsan-gce 2020/12/27 00:13 https://github.com/google/kmsan.git master 73d62e81b476 821e0b09 .config log report info
ci-upstream-kmsan-gce 2020/12/15 07:33 https://github.com/google/kmsan.git master 73d62e81b476 97183ed7 .config log report info
ci-upstream-kmsan-gce 2020/09/25 09:14 https://github.com/google/kmsan.git master c5a13b33ec11 54289b08 .config log report info
ci-upstream-kmsan-gce 2020/09/07 07:00 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config log report
ci-upstream-kmsan-gce 2020/07/28 20:15 https://github.com/google/kmsan.git master 93f54a72361a cb93dc6a .config log report
ci-upstream-kmsan-gce 2020/07/26 20:42 https://github.com/google/kmsan.git master 93f54a72361a 51265195 .config log report
ci-upstream-kmsan-gce 2020/07/24 18:02 https://github.com/google/kmsan.git master 93f54a72361a 554af388 .config log report
ci-upstream-kmsan-gce-386 2021/01/04 15:52 https://github.com/google/kmsan.git master 73d62e81b476 79264ae3 .config log report info
ci-upstream-kmsan-gce-386 2021/01/04 04:05 https://github.com/google/kmsan.git master 73d62e81b476 79264ae3 .config log report info
ci-upstream-kmsan-gce-386 2020/12/03 19:11 https://github.com/google/kmsan.git master 73d62e81b476 e6b0d314 .config log report info
ci-upstream-kmsan-gce-386 2020/11/27 02:44 https://github.com/google/kmsan.git master 73d62e81b476 1d2b823e .config log report info
ci-upstream-kmsan-gce-386 2020/11/23 15:59 https://github.com/google/kmsan.git master 73d62e81b476 878fb17a .config log report info
ci-upstream-kmsan-gce-386 2020/11/21 16:13 https://github.com/google/kmsan.git master 73d62e81b476 68068804 .config log report info
* Struck through repros no longer work on HEAD.