syzbot


KMSAN: uninit-value in validate_nla

Status: closed as invalid on 2019/04/12 16:05
Subsystems: tipc
[Documentation on labels]
First crash: 1939d, last: 1872d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in validate_nla+0x179d/0x2690 lib/nlattr.c:228
CPU: 1 PID: 10734 Comm: syz-executor826 Not tainted 5.0.0-rc1+ #7
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x173/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x12e/0x2a0 mm/kmsan/kmsan.c:600
 __msan_warning+0x82/0xf0 mm/kmsan/kmsan_instr.c:313
 validate_nla+0x179d/0x2690 lib/nlattr.c:228
 __nla_parse+0x38a/0x7e0 lib/nlattr.c:415
 nla_parse+0x119/0x130 lib/nlattr.c:439
 nla_parse_nested include/net/netlink.h:908 [inline]
 __tipc_nl_bearer_enable+0x24e/0x1d50 net/tipc/bearer.c:873
 __tipc_nl_compat_doit net/tipc/netlink_compat.c:323 [inline]
 tipc_nl_compat_doit+0x756/0xaf0 net/tipc/netlink_compat.c:344
 tipc_nl_compat_handle net/tipc/netlink_compat.c:1112 [inline]
 tipc_nl_compat_recv+0x14d1/0x2750 net/tipc/netlink_compat.c:1215
 genl_family_rcv_msg net/netlink/genetlink.c:601 [inline]
 genl_rcv_msg+0x185f/0x1a60 net/netlink/genetlink.c:626
 netlink_rcv_skb+0x431/0x620 net/netlink/af_netlink.c:2477
 genl_rcv+0x63/0x80 net/netlink/genetlink.c:637
 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline]
 netlink_unicast+0xf3e/0x1020 net/netlink/af_netlink.c:1336
 netlink_sendmsg+0x127f/0x1300 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg net/socket.c:631 [inline]
 ___sys_sendmsg+0xdb9/0x11b0 net/socket.c:2116
 __sys_sendmsg net/socket.c:2154 [inline]
 __do_sys_sendmsg net/socket.c:2163 [inline]
 __se_sys_sendmsg+0x305/0x460 net/socket.c:2161
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2161
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x4400b9
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffe38ae3fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400b9
RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401940
R13: 00000000004019d0 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
No stack
==================================================================

Crashes (64):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/26 21:03 https://github.com/google/kmsan.git master 02f2d5aea531 c73f090a .config console log report syz C ci-upstream-kmsan-gce
2019/03/12 01:33 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/11 10:32 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/10 19:00 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/10 06:20 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/06 22:00 https://github.com/google/kmsan.git master a695dc5e929e 18215b8d .config console log report ci-upstream-kmsan-gce
2019/03/06 11:01 https://github.com/google/kmsan.git master a695dc5e929e 05cf83bf .config console log report ci-upstream-kmsan-gce
2019/03/05 19:45 https://github.com/google/kmsan.git master 6c55aa96dcda 16559f86 .config console log report ci-upstream-kmsan-gce
2019/03/05 08:43 https://github.com/google/kmsan.git master fa1981bee40f bb91cf81 .config console log report ci-upstream-kmsan-gce
2019/03/03 11:11 https://github.com/google/kmsan.git master fa1981bee40f 1c0e457a .config console log report ci-upstream-kmsan-gce
2019/03/03 10:10 https://github.com/google/kmsan.git master fa1981bee40f 1c0e457a .config console log report ci-upstream-kmsan-gce
2019/03/02 20:57 https://github.com/google/kmsan.git master fa1981bee40f 1c0e457a .config console log report ci-upstream-kmsan-gce
2019/02/28 00:23 https://github.com/google/kmsan.git master fa1981bee40f 34ec456b .config console log report ci-upstream-kmsan-gce
2019/02/27 11:46 https://github.com/google/kmsan.git master fa1981bee40f 083cfd0e .config console log report ci-upstream-kmsan-gce
2019/02/22 13:15 https://github.com/google/kmsan.git master fa1981bee40f 6a5fcca4 .config console log report ci-upstream-kmsan-gce
2019/02/21 12:55 https://github.com/google/kmsan.git master fa1981bee40f 3133098b .config console log report ci-upstream-kmsan-gce
2019/02/21 10:56 https://github.com/google/kmsan.git master fa1981bee40f 3133098b .config console log report ci-upstream-kmsan-gce
2019/02/21 04:18 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/20 13:09 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/19 17:07 https://github.com/google/kmsan.git master fa1981bee40f 4df543c9 .config console log report ci-upstream-kmsan-gce
2019/02/19 00:51 https://github.com/google/kmsan.git master fa1981bee40f 59f36113 .config console log report ci-upstream-kmsan-gce
2019/02/18 11:06 https://github.com/google/kmsan.git master fa1981bee40f 59f36113 .config console log report ci-upstream-kmsan-gce
2019/02/17 11:03 https://github.com/google/kmsan.git master fa1981bee40f f42dee6d .config console log report ci-upstream-kmsan-gce
2019/02/12 15:52 https://github.com/google/kmsan.git master fa1981bee40f 6ecc6d0f .config console log report ci-upstream-kmsan-gce
2019/02/11 14:11 https://github.com/google/kmsan.git master fa1981bee40f 73f5f452 .config console log report ci-upstream-kmsan-gce
2019/02/11 12:57 https://github.com/google/kmsan.git master fa1981bee40f 73f5f452 .config console log report ci-upstream-kmsan-gce
2019/02/11 05:32 https://github.com/google/kmsan.git master fa1981bee40f b4f792e4 .config console log report ci-upstream-kmsan-gce
2019/02/10 07:08 https://github.com/google/kmsan.git master fa1981bee40f b4f792e4 .config console log report ci-upstream-kmsan-gce
2019/02/10 07:04 https://github.com/google/kmsan.git master fa1981bee40f b4f792e4 .config console log report ci-upstream-kmsan-gce
2019/02/07 07:30 https://github.com/google/kmsan.git master fa1981bee40f d25487bc .config console log report ci-upstream-kmsan-gce
2019/02/07 03:43 https://github.com/google/kmsan.git master fa1981bee40f d25487bc .config console log report ci-upstream-kmsan-gce
2019/02/05 20:30 https://github.com/google/kmsan.git master fa1981bee40f d672172c .config console log report ci-upstream-kmsan-gce
2019/02/03 08:36 https://github.com/google/kmsan.git master fa1981bee40f c198d5dd .config console log report ci-upstream-kmsan-gce
2019/02/03 07:46 https://github.com/google/kmsan.git master fa1981bee40f c198d5dd .config console log report ci-upstream-kmsan-gce
2019/02/02 23:39 https://github.com/google/kmsan.git master fa1981bee40f c198d5dd .config console log report ci-upstream-kmsan-gce
2019/02/02 07:42 https://github.com/google/kmsan.git master fa1981bee40f 564f9a4f .config console log report ci-upstream-kmsan-gce
2019/01/31 16:56 https://github.com/google/kmsan.git master fa1981bee40f 0e8ea0a3 .config console log report ci-upstream-kmsan-gce
2019/01/29 19:26 https://github.com/google/kmsan.git master fa1981bee40f aa432daf .config console log report ci-upstream-kmsan-gce
2019/01/29 15:24 https://github.com/google/kmsan.git master fa1981bee40f aa432daf .config console log report ci-upstream-kmsan-gce
2019/01/28 11:11 https://github.com/google/kmsan.git master 02f2d5aea531 629c2a27 .config console log report ci-upstream-kmsan-gce
2019/01/28 08:38 https://github.com/google/kmsan.git master 02f2d5aea531 c73f090a .config console log report ci-upstream-kmsan-gce
2019/01/26 17:17 https://github.com/google/kmsan.git master 02f2d5aea531 c73f090a .config console log report ci-upstream-kmsan-gce
2019/01/26 12:18 https://github.com/google/kmsan.git master 02f2d5aea531 c73f090a .config console log report ci-upstream-kmsan-gce
2019/01/26 12:14 https://github.com/google/kmsan.git master 02f2d5aea531 c73f090a .config console log report ci-upstream-kmsan-gce
2019/01/25 13:02 https://github.com/google/kmsan.git master 02f2d5aea531 b5d78bce .config console log report ci-upstream-kmsan-gce
2019/01/22 23:09 https://github.com/google/kmsan.git master 02f2d5aea531 b1ff06b2 .config console log report ci-upstream-kmsan-gce
2019/01/19 15:08 https://github.com/google/kmsan.git master 02f2d5aea531 8aa587b0 .config console log report ci-upstream-kmsan-gce
2019/01/18 17:49 https://github.com/google/kmsan.git master 02f2d5aea531 2103a236 .config console log report ci-upstream-kmsan-gce
2019/01/18 17:27 https://github.com/google/kmsan.git master 02f2d5aea531 2103a236 .config console log report ci-upstream-kmsan-gce
2019/01/18 05:29 https://github.com/google/kmsan.git master 02f2d5aea531 5bf17c30 .config console log report ci-upstream-kmsan-gce
2019/01/17 09:40 https://github.com/google/kmsan.git master 02f2d5aea531 c2faf9b2 .config console log report ci-upstream-kmsan-gce
2019/01/15 22:40 https://github.com/google/kmsan.git master 02f2d5aea531 79cb1a7c .config console log report ci-upstream-kmsan-gce
2019/01/15 11:37 https://github.com/google/kmsan.git master 02f2d5aea531 ebacf5cb .config console log report ci-upstream-kmsan-gce
2019/01/15 03:34 https://github.com/google/kmsan.git master 02f2d5aea531 ebacf5cb .config console log report ci-upstream-kmsan-gce
2019/01/14 15:47 https://github.com/google/kmsan.git master 02f2d5aea531 95485883 .config console log report ci-upstream-kmsan-gce
2019/01/12 23:49 https://github.com/google/kmsan.git master 02f2d5aea531 c3f3344c .config console log report ci-upstream-kmsan-gce
2019/01/04 04:11 https://github.com/google/kmsan.git master 68006459ade0 7da23925 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.