syzbot

 sign-in | mailing list | source | docs
🐞 Open [977] ≡ Subsystems 🐞 Fixed [5235] 🐞 Invalid [12490] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in aa_fqlookupn_profile

Status: fixed on 2019/06/11 10:01
Subsystems: apparmor
[Documentation on labels]
Reported-by: syzbot+3a0d172d51be1b3de837@syzkaller.appspotmail.com
Fix commit: 250f2da49cb8 apparmor: Fix uninitialized value in aa_split_fqname
First crash: 2038d, last: 1988d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
KMSAN: uninit-value in aa_fqlookupn_profile 0 (1) 2018/09/28 09:34

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in aa_fqlookupn_profile+0x32d/0x720 security/apparmor/policy.c:467
CPU: 1 PID: 6256 Comm: syz-executor667 Not tainted 4.19.0-rc7+ #69
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x306/0x460 lib/dump_stack.c:113
 kmsan_report+0x1a2/0x2e0 mm/kmsan/kmsan.c:917
 __msan_warning+0x7c/0xe0 mm/kmsan/kmsan_instr.c:500
 aa_fqlookupn_profile+0x32d/0x720 security/apparmor/policy.c:467
 aa_label_strn_parse+0x171e/0x1e30 security/apparmor/label.c:1841
 aa_label_parse+0x11f/0x130 security/apparmor/label.c:1943
 aa_change_profile+0x827/0x3cc0 security/apparmor/domain.c:1362
 apparmor_setprocattr+0xbc3/0x12f0 security/apparmor/lsm.c:651
 security_setprocattr+0x139/0x210 security/security.c:1298
 proc_pid_attr_write+0x3f9/0x4e0 fs/proc/base.c:2569
 __vfs_write+0x1f4/0xb70 fs/read_write.c:485
 vfs_write+0x495/0x8e0 fs/read_write.c:549
 ksys_write fs/read_write.c:598 [inline]
 __do_sys_write fs/read_write.c:610 [inline]
 __se_sys_write+0x183/0x370 fs/read_write.c:607
 __x64_sys_write+0x4a/0x70 fs/read_write.c:607
 do_syscall_64+0xbe/0x100 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x440059
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffc860feb18 EFLAGS: 00000213 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440059
RDX: 0000000000000009 RSI: 0000000020000280 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004018e0
R13: 0000000000401970 R14: 0000000000000000 R15: 0000000000000000

Local variable description: ----ns_name@aa_fqlookupn_profile
Variable was created at:
 aa_fqlookupn_profile+0x79/0x720 security/apparmor/policy.c:460
 aa_label_strn_parse+0x171e/0x1e30 security/apparmor/label.c:1841
==================================================================

Crashes (39):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/10/14 02:57 https://github.com/google/kmsan.git master 22ec98c3e38f caf12900 .config console log report syz C ci-upstream-kmsan-gce
2018/10/10 01:02 https://github.com/google/kmsan.git master c2d21df4c5af 8b311eaf .config console log report syz C ci-upstream-kmsan-gce
2018/10/10 00:19 https://github.com/google/kmsan.git master c2d21df4c5af 8b311eaf .config console log report syz C ci-upstream-kmsan-gce
2018/10/08 16:22 https://github.com/google/kmsan.git master 43c85fe5a0ee 8b311eaf .config console log report syz C ci-upstream-kmsan-gce
2018/09/28 02:52 https://github.com/google/kmsan.git master a5bff9bd1b2a 0c2fa87b .config console log report syz C ci-upstream-kmsan-gce
2018/09/26 12:28 https://github.com/google/kmsan.git master eb2e67596de2 455b6354 .config console log report syz C ci-upstream-kmsan-gce
2018/09/25 06:42 https://github.com/google/kmsan.git master f94b97e38776 0e7547d7 .config console log report syz C ci-upstream-kmsan-gce
2018/09/25 06:11 https://github.com/google/kmsan.git master f94b97e38776 0e7547d7 .config console log report syz C ci-upstream-kmsan-gce
2018/09/24 20:19 https://github.com/google/kmsan.git master f94b97e38776 2f485cdf .config console log report syz C ci-upstream-kmsan-gce
2018/09/24 18:58 https://github.com/google/kmsan.git master f94b97e38776 2f485cdf .config console log report syz C ci-upstream-kmsan-gce
2018/09/24 18:25 https://github.com/google/kmsan.git master f94b97e38776 2f485cdf .config console log report syz C ci-upstream-kmsan-gce
2018/09/24 02:14 https://github.com/google/kmsan.git master 7ace43031cfc 28d9ac76 .config console log report syz C ci-upstream-kmsan-gce
2018/09/24 00:24 https://github.com/google/kmsan.git master 7ace43031cfc 28d9ac76 .config console log report syz C ci-upstream-kmsan-gce
2018/09/23 23:51 https://github.com/google/kmsan.git master 7ace43031cfc 28d9ac76 .config console log report syz C ci-upstream-kmsan-gce
2018/11/12 08:14 https://github.com/google/kmsan.git master 746f11553795 7b5f8621 .config console log report ci-upstream-kmsan-gce
2018/11/10 07:14 https://github.com/google/kmsan.git master 746f11553795 f9815aaf .config console log report ci-upstream-kmsan-gce
2018/11/10 07:13 https://github.com/google/kmsan.git master 746f11553795 f9815aaf .config console log report ci-upstream-kmsan-gce
2018/11/09 14:42 https://github.com/google/kmsan.git master c9658ff8d68d 8fd01d3a .config console log report ci-upstream-kmsan-gce
2018/11/09 14:39 https://github.com/google/kmsan.git master c9658ff8d68d 8fd01d3a .config console log report ci-upstream-kmsan-gce
2018/11/08 20:03 https://github.com/google/kmsan.git master 6fbdd09ed73e e85d2a61 .config console log report ci-upstream-kmsan-gce
2018/11/08 20:02 https://github.com/google/kmsan.git master 6fbdd09ed73e e85d2a61 .config console log report ci-upstream-kmsan-gce
2018/11/08 20:01 https://github.com/google/kmsan.git master 6fbdd09ed73e e85d2a61 .config console log report ci-upstream-kmsan-gce
2018/11/08 00:22 https://github.com/google/kmsan.git master 7438a3b20295 e85d2a61 .config console log report ci-upstream-kmsan-gce
2018/11/06 19:30 https://github.com/google/kmsan.git master 7438a3b20295 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/05 01:41 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/03 12:45 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/03 09:50 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/03 06:07 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/10/16 22:14 https://github.com/google/kmsan.git master 22ec98c3e38f 1ba7fd7e .config console log report ci-upstream-kmsan-gce
2018/10/11 22:00 https://github.com/google/kmsan.git master 0c0a1fff3508 ba6ddb43 .config console log report ci-upstream-kmsan-gce
2018/10/11 16:28 https://github.com/google/kmsan.git master 0c0a1fff3508 5f818b4b .config console log report ci-upstream-kmsan-gce
2018/10/06 20:25 https://github.com/google/kmsan.git master b2efdb2ef006 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/05 13:34 https://github.com/google/kmsan.git master b2efdb2ef006 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/01 16:09 https://github.com/google/kmsan.git master 2b752aff835d 48a50c6b .config console log report ci-upstream-kmsan-gce
2018/09/30 16:09 https://github.com/google/kmsan.git master 2b752aff835d 41e4b329 .config console log report ci-upstream-kmsan-gce
2018/09/30 16:08 https://github.com/google/kmsan.git master 2b752aff835d 41e4b329 .config console log report ci-upstream-kmsan-gce
2018/09/30 10:52 https://github.com/google/kmsan.git master 2b752aff835d 41e4b329 .config console log report ci-upstream-kmsan-gce
2018/09/28 00:39 https://github.com/google/kmsan.git master a5bff9bd1b2a 0c2fa87b .config console log report ci-upstream-kmsan-gce
2018/09/25 05:30 https://github.com/google/kmsan.git master f94b97e38776 0e7547d7 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.