syzbot


KMSAN: uninit-value in batadv_netlink_dump_hardif

Status: fixed on 2019/09/06 20:45
Subsystems: batman
[Documentation on labels]
Fix commit: 3ee1bb7aae97 batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
First crash: 1773d, last: 1691d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in batadv_netlink_dump_hardif+0x70d/0x880 net/batman-adv/netlink.c:967
CPU: 1 PID: 13340 Comm: syz-executor443 Not tainted 5.2.0-rc4+ #7
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x162/0x2d0 mm/kmsan/kmsan.c:611
 __msan_warning+0x75/0xe0 mm/kmsan/kmsan_instr.c:304
 batadv_netlink_dump_hardif+0x70d/0x880 net/batman-adv/netlink.c:967
 genl_lock_dumpit+0xc6/0x130 net/netlink/genetlink.c:482
 netlink_dump+0xa84/0x1ab0 net/netlink/af_netlink.c:2249
 __netlink_dump_start+0xa3a/0xb30 net/netlink/af_netlink.c:2357
 genl_family_rcv_msg net/netlink/genetlink.c:572 [inline]
 genl_rcv_msg+0x1d9e/0x1f20 net/netlink/genetlink.c:654
 netlink_rcv_skb+0x431/0x620 net/netlink/af_netlink.c:2482
 genl_rcv+0x63/0x80 net/netlink/genetlink.c:665
 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline]
 netlink_unicast+0xf3e/0x1020 net/netlink/af_netlink.c:1333
 netlink_sendmsg+0x127e/0x12f0 net/netlink/af_netlink.c:1922
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg net/socket.c:665 [inline]
 ___sys_sendmsg+0x12ff/0x13c0 net/socket.c:2286
 __sys_sendmsg net/socket.c:2324 [inline]
 __do_sys_sendmsg net/socket.c:2333 [inline]
 __se_sys_sendmsg+0x305/0x460 net/socket.c:2331
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2331
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:302
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x440209
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffe66ad3408 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440209
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000401b20 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a90
R13: 0000000000401b20 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:201 [inline]
 kmsan_internal_poison_shadow+0x53/0xa0 mm/kmsan/kmsan.c:160
 kmsan_kmalloc+0xa4/0x130 mm/kmsan/kmsan_hooks.c:178
 kmsan_slab_alloc+0xe/0x10 mm/kmsan/kmsan_hooks.c:187
 slab_post_alloc_hook mm/slab.h:442 [inline]
 slab_alloc_node mm/slub.c:2763 [inline]
 __kmalloc_node_track_caller+0xcba/0xf30 mm/slub.c:4390
 __kmalloc_reserve net/core/skbuff.c:138 [inline]
 __alloc_skb+0x306/0xa10 net/core/skbuff.c:206
 alloc_skb include/linux/skbuff.h:1055 [inline]
 netlink_alloc_large_skb net/netlink/af_netlink.c:1179 [inline]
 netlink_sendmsg+0xb81/0x12f0 net/netlink/af_netlink.c:1897
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg net/socket.c:665 [inline]
 ___sys_sendmsg+0x12ff/0x13c0 net/socket.c:2286
 __sys_sendmsg net/socket.c:2324 [inline]
 __do_sys_sendmsg net/socket.c:2333 [inline]
 __se_sys_sendmsg+0x305/0x460 net/socket.c:2331
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2331
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:302
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
==================================================================

Crashes (58):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/30 12:20 https://github.com/google/kmsan.git master 41550654dedf 7509bf36 .config console log report syz C ci-upstream-kmsan-gce
2019/06/05 07:47 https://github.com/google/kmsan.git master f75e4cfea97f bfb4a51e .config console log report syz C ci-upstream-kmsan-gce
2019/08/27 01:16 https://github.com/google/kmsan.git master 61ccdad1fcdf d21c5d9d .config console log report ci-upstream-kmsan-gce
2019/08/26 21:24 https://github.com/google/kmsan.git master 61ccdad1fcdf d21c5d9d .config console log report ci-upstream-kmsan-gce
2019/08/24 22:42 https://github.com/google/kmsan.git master 61ccdad1fcdf d21c5d9d .config console log report ci-upstream-kmsan-gce
2019/08/24 17:10 https://github.com/google/kmsan.git master 61ccdad1fcdf 78ded196 .config console log report ci-upstream-kmsan-gce
2019/08/23 19:28 https://github.com/google/kmsan.git master 61ccdad1fcdf 78ded196 .config console log report ci-upstream-kmsan-gce
2019/08/22 11:02 https://github.com/google/kmsan.git master 61ccdad1fcdf 984250d5 .config console log report ci-upstream-kmsan-gce
2019/08/22 05:13 https://github.com/google/kmsan.git master 61ccdad1fcdf 984250d5 .config console log report ci-upstream-kmsan-gce
2019/08/21 12:49 https://github.com/google/kmsan.git master 61ccdad1fcdf 4ea67ff8 .config console log report ci-upstream-kmsan-gce
2019/08/20 09:42 https://github.com/google/kmsan.git master 61ccdad1fcdf ee12860b .config console log report ci-upstream-kmsan-gce
2019/08/19 20:53 https://github.com/google/kmsan.git master 61ccdad1fcdf ee12860b .config console log report ci-upstream-kmsan-gce
2019/08/19 15:44 https://github.com/google/kmsan.git master 61ccdad1fcdf b8ceabfc .config console log report ci-upstream-kmsan-gce
2019/08/19 01:25 https://github.com/google/kmsan.git master 61ccdad1fcdf 55bf8926 .config console log report ci-upstream-kmsan-gce
2019/08/18 09:48 https://github.com/google/kmsan.git master 61ccdad1fcdf 55bf8926 .config console log report ci-upstream-kmsan-gce
2019/08/18 02:30 https://github.com/google/kmsan.git master 61ccdad1fcdf 55bf8926 .config console log report ci-upstream-kmsan-gce
2019/08/17 23:54 https://github.com/google/kmsan.git master 61ccdad1fcdf 55bf8926 .config console log report ci-upstream-kmsan-gce
2019/08/17 20:23 https://github.com/google/kmsan.git master 61ccdad1fcdf 55bf8926 .config console log report ci-upstream-kmsan-gce
2019/08/16 15:09 https://github.com/google/kmsan.git master 61ccdad1fcdf 8fd428a1 .config console log report ci-upstream-kmsan-gce
2019/08/16 06:22 https://github.com/google/kmsan.git master 61ccdad1fcdf 8fd428a1 .config console log report ci-upstream-kmsan-gce
2019/08/15 23:59 https://github.com/google/kmsan.git master 61ccdad1fcdf 0d298d6b .config console log report ci-upstream-kmsan-gce
2019/08/14 06:30 https://github.com/google/kmsan.git master 61ccdad1fcdf ef801a3e .config console log report ci-upstream-kmsan-gce
2019/08/13 10:24 https://github.com/google/kmsan.git master 61ccdad1fcdf 8620c2c2 .config console log report ci-upstream-kmsan-gce
2019/08/13 04:48 https://github.com/google/kmsan.git master 61ccdad1fcdf 8620c2c2 .config console log report ci-upstream-kmsan-gce
2019/08/11 17:03 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/11 15:05 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/11 14:46 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/09 08:52 https://github.com/google/kmsan.git master 61ccdad1fcdf ede31a9b .config console log report ci-upstream-kmsan-gce
2019/08/09 08:41 https://github.com/google/kmsan.git master 61ccdad1fcdf ede31a9b .config console log report ci-upstream-kmsan-gce
2019/08/08 06:06 https://github.com/google/kmsan.git master 61ccdad1fcdf e6ebef88 .config console log report ci-upstream-kmsan-gce
2019/08/07 22:14 https://github.com/google/kmsan.git master 61ccdad1fcdf e6ebef88 .config console log report ci-upstream-kmsan-gce
2019/08/07 22:14 https://github.com/google/kmsan.git master 61ccdad1fcdf e6ebef88 .config console log report ci-upstream-kmsan-gce
2019/08/06 22:22 https://github.com/google/kmsan.git master ae0c578a3cdf c6f01e54 .config console log report ci-upstream-kmsan-gce
2019/08/05 02:11 https://github.com/google/kmsan.git master beaab8a31e0d 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/04 11:33 https://github.com/google/kmsan.git master beaab8a31e0d 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/02 20:46 https://github.com/google/kmsan.git master beaab8a31e0d 835dffe7 .config console log report ci-upstream-kmsan-gce
2019/08/01 03:58 https://github.com/google/kmsan.git master beaab8a31e0d c692b5bd .config console log report ci-upstream-kmsan-gce
2019/07/31 11:05 https://github.com/google/kmsan.git master beaab8a31e0d 7c7ded69 .config console log report ci-upstream-kmsan-gce
2019/07/30 10:20 https://github.com/google/kmsan.git master beaab8a31e0d f28bf2a5 .config console log report ci-upstream-kmsan-gce
2019/07/30 06:38 https://github.com/google/kmsan.git master beaab8a31e0d f67095ee .config console log report ci-upstream-kmsan-gce
2019/07/29 12:03 https://github.com/google/kmsan.git master beaab8a31e0d c85e1c5b .config console log report ci-upstream-kmsan-gce
2019/07/29 04:53 https://github.com/google/kmsan.git master beaab8a31e0d c85e1c5b .config console log report ci-upstream-kmsan-gce
2019/07/28 05:05 https://github.com/google/kmsan.git master beaab8a31e0d c85e1c5b .config console log report ci-upstream-kmsan-gce
2019/07/27 12:38 https://github.com/google/kmsan.git master beaab8a31e0d c85e1c5b .config console log report ci-upstream-kmsan-gce
2019/07/27 12:34 https://github.com/google/kmsan.git master beaab8a31e0d c85e1c5b .config console log report ci-upstream-kmsan-gce
2019/07/26 22:13 https://github.com/google/kmsan.git master beaab8a31e0d 3e5d1beb .config console log report ci-upstream-kmsan-gce
2019/07/24 08:12 https://github.com/google/kmsan.git master beaab8a31e0d de453f34 .config console log report ci-upstream-kmsan-gce
2019/07/23 21:48 https://github.com/google/kmsan.git master beaab8a31e0d de453f34 .config console log report ci-upstream-kmsan-gce
2019/07/22 11:40 https://github.com/google/kmsan.git master beaab8a31e0d b3c615f5 .config console log report ci-upstream-kmsan-gce
2019/07/22 11:31 https://github.com/google/kmsan.git master beaab8a31e0d b3c615f5 .config console log report ci-upstream-kmsan-gce
2019/07/22 04:21 https://github.com/google/kmsan.git master beaab8a31e0d 1656845f .config console log report ci-upstream-kmsan-gce
2019/07/20 14:39 https://github.com/google/kmsan.git master beaab8a31e0d 1656845f .config console log report ci-upstream-kmsan-gce
2019/07/20 14:37 https://github.com/google/kmsan.git master beaab8a31e0d 1656845f .config console log report ci-upstream-kmsan-gce
2019/07/18 11:39 https://github.com/google/kmsan.git master beaab8a31e0d 7bb222f7 .config console log report ci-upstream-kmsan-gce
2019/06/30 12:10 https://github.com/google/kmsan.git master 41550654dedf 7509bf36 .config console log report ci-upstream-kmsan-gce
2019/06/05 06:33 https://github.com/google/kmsan.git master f75e4cfea97f bfb4a51e .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.