syzbot

 sign-in | mailing list | source | docs
🐞 Open [994] ≡ Subsystems 🐞 Fixed [5242] 🐞 Invalid [12515] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in gue6_err (2)

Status: fixed on 2019/03/28 12:00
Subsystems: net
[Documentation on labels]
Fix commit: 5355ed6388e2 fou, fou6: avoid uninit-value in gue_err() and gue6_err()
First crash: 1878d, last: 1856d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in gue6_err net C 8359 1878d 1932d 11/26 fixed on 2019/03/06 07:43

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in gue6_err+0x646/0x1130 net/ipv6/fou6.c:102
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.0.0+ #16
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x173/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x131/0x2a0 mm/kmsan/kmsan.c:636
 __msan_warning+0x7a/0xf0 mm/kmsan/kmsan_instr.c:310
 gue6_err+0x646/0x1130 net/ipv6/fou6.c:102
 __udp6_lib_err_encap_no_sk net/ipv6/udp.c:436 [inline]
 __udp6_lib_err_encap net/ipv6/udp.c:493 [inline]
 __udp6_lib_err+0x18d0/0x2590 net/ipv6/udp.c:524
 udpv6_err+0x118/0x130 net/ipv6/udp.c:609
 icmpv6_notify+0x462/0x9f0 net/ipv6/icmp.c:788
 icmpv6_rcv+0x18ac/0x3fa0 net/ipv6/icmp.c:876
 ip6_protocol_deliver_rcu+0xb5a/0x23a0 net/ipv6/ip6_input.c:394
 ip6_input_finish net/ipv6/ip6_input.c:434 [inline]
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ip6_input+0x2b6/0x350 net/ipv6/ip6_input.c:443
 dst_input include/net/dst.h:450 [inline]
 ip6_rcv_finish+0x4de/0x6d0 net/ipv6/ip6_input.c:76
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ipv6_rcv+0x34b/0x3f0 net/ipv6/ip6_input.c:272
 __netif_receive_skb_one_core net/core/dev.c:4973 [inline]
 __netif_receive_skb net/core/dev.c:5083 [inline]
 process_backlog+0x756/0x10e0 net/core/dev.c:5923
 napi_poll net/core/dev.c:6346 [inline]
 net_rx_action+0x78b/0x1a60 net/core/dev.c:6412
 __do_softirq+0x53f/0x93a kernel/softirq.c:293
 run_ksoftirqd+0x26/0x50 kernel/softirq.c:658
 smpboot_thread_fn+0x4d0/0x9f0 kernel/smpboot.c:164
 kthread+0x4a1/0x4e0 kernel/kthread.c:247
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:205 [inline]
 kmsan_internal_poison_shadow+0x92/0x150 mm/kmsan/kmsan.c:159
 kmsan_kmalloc+0xa6/0x130 mm/kmsan/kmsan_hooks.c:173
 kmsan_slab_alloc+0xe/0x10 mm/kmsan/kmsan_hooks.c:182
 slab_post_alloc_hook mm/slab.h:445 [inline]
 slab_alloc_node mm/slub.c:2773 [inline]
 __kmalloc_node_track_caller+0xe9e/0xff0 mm/slub.c:4398
 __kmalloc_reserve net/core/skbuff.c:140 [inline]
 __alloc_skb+0x309/0xa20 net/core/skbuff.c:208
 alloc_skb include/linux/skbuff.h:1012 [inline]
 alloc_skb_with_frags+0x186/0xa60 net/core/skbuff.c:5287
 sock_alloc_send_pskb+0xafd/0x10a0 net/core/sock.c:2091
 sock_alloc_send_skb+0xca/0xe0 net/core/sock.c:2108
 __ip6_append_data+0x42ed/0x5dc0 net/ipv6/ip6_output.c:1443
 ip6_append_data+0x3c2/0x650 net/ipv6/ip6_output.c:1619
 icmp6_send+0x2dc7/0x3c30 net/ipv6/icmp.c:578
 icmpv6_send+0xe5/0x110 net/ipv6/ip6_icmp.c:43
 ip6_link_failure+0x5c/0x2c0 net/ipv6/route.c:2243
 dst_link_failure include/net/dst.h:427 [inline]
 ndisc_error_report+0x106/0x1a0 net/ipv6/ndisc.c:695
 neigh_invalidate+0x359/0x8e0 net/core/neighbour.c:992
 neigh_timer_handler+0xdf2/0x1280 net/core/neighbour.c:1078
 call_timer_fn+0x285/0x600 kernel/time/timer.c:1325
 expire_timers kernel/time/timer.c:1362 [inline]
 __run_timers+0xdb4/0x11d0 kernel/time/timer.c:1681
 run_timer_softirq+0x2e/0x50 kernel/time/timer.c:1694
 __do_softirq+0x53f/0x93a kernel/softirq.c:293
==================================================================

Crashes (2826):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/24 16:02 https://github.com/google/kmsan.git master c10a026b8dee acbc5b7d .config console log report syz C ci-upstream-kmsan-gce
2019/03/19 18:02 https://github.com/google/kmsan.git master 43cfd3b1484f e4549234 .config console log report syz C ci-upstream-kmsan-gce
2019/03/11 08:00 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report syz C ci-upstream-kmsan-gce
2019/03/08 20:25 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report syz C ci-upstream-kmsan-gce
2019/03/28 10:26 https://github.com/google/kmsan.git master 3c26d882e695 f94f56fe .config console log report ci-upstream-kmsan-gce
2019/03/28 09:59 https://github.com/google/kmsan.git master 3c26d882e695 f94f56fe .config console log report ci-upstream-kmsan-gce
2019/03/28 08:40 https://github.com/google/kmsan.git master 3c26d882e695 f94f56fe .config console log report ci-upstream-kmsan-gce
2019/03/28 07:38 https://github.com/google/kmsan.git master 3c26d882e695 f94f56fe .config console log report ci-upstream-kmsan-gce
2019/03/28 06:37 https://github.com/google/kmsan.git master 3c26d882e695 f94f56fe .config console log report ci-upstream-kmsan-gce
2019/03/28 06:27 https://github.com/google/kmsan.git master 3c26d882e695 f94f56fe .config console log report ci-upstream-kmsan-gce
2019/03/28 04:40 https://github.com/google/kmsan.git master 3c26d882e695 f94f56fe .config console log report ci-upstream-kmsan-gce
2019/03/28 03:29 https://github.com/google/kmsan.git master 3c26d882e695 f94f56fe .config console log report ci-upstream-kmsan-gce
2019/03/28 01:55 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/28 00:45 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 23:19 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 22:04 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 21:05 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 19:54 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 18:45 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 18:24 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 17:21 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 16:09 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 15:11 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 14:44 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 13:43 https://github.com/google/kmsan.git master 3c26d882e695 4e668495 .config console log report ci-upstream-kmsan-gce
2019/03/27 13:06 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 11:47 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 10:25 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 09:40 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 08:26 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 07:00 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 05:44 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 04:44 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 04:26 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 02:52 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 01:43 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/27 00:29 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 23:20 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 22:38 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 21:13 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 19:22 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 18:01 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 16:28 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 14:33 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/26 14:30 https://github.com/google/kmsan.git master 3c26d882e695 55684ce1 .config console log report ci-upstream-kmsan-gce
2019/03/06 08:57 https://github.com/google/kmsan.git master a695dc5e929e 05cf83bf .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.