syzbot


KMSAN: uninit-value in __x64_sys_sendmmsg

Status: closed as invalid on 2018/08/31 15:50
Subsystems: net
[Documentation on labels]
First crash: 2456d, last: 2456d

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
==================================================================
BUG: KMSAN: uninit-value in __x64_sys_sendmmsg+0x143/0x170 net/socket.c:2238
CPU: 0 PID: 4517 Comm: syz-executor152 Not tainted 4.17.0-rc3+ #88
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 __x64_sys_sendmmsg+0x143/0x170 net/socket.c:2238
 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4402e9
RSP: 002b:00007ffdad65f3e8 EFLAGS: 00000293 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402e9
RDX: 0000000000000001 RSI: 0000000020005e00 RDI: 00000000ffffffff
RBP: 00000000006ca018 R08: 0000000000000010 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000401c10
R13: 0000000000401ca0 R14: 0000000000000000 R15: 0000000000000000

Local variable description: ----msg_sys@__sys_sendmmsg
Variable was created at:
 __sys_sendmmsg+0x9c/0x850 net/socket.c:2173
 __do_sys_sendmmsg net/socket.c:2241 [inline]
 __se_sys_sendmmsg net/socket.c:2238 [inline]
 __x64_sys_sendmmsg+0x11c/0x170 net/socket.c:2238
==================================================================
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 4517 Comm: syz-executor152 Tainted: G    B             4.17.0-rc3+ #88
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 panic+0x39d/0x940 kernel/panic.c:184
 kmsan_report+0x238/0x240 mm/kmsan/kmsan.c:1083
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 __x64_sys_sendmmsg+0x143/0x170 net/socket.c:2238
 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4402e9
RSP: 002b:00007ffdad65f3e8 EFLAGS: 00000293 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402e9
RDX: 0000000000000001 RSI: 0000000020005e00 RDI: 00000000ffffffff
RBP: 00000000006ca018 R08: 0000000000000010 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000401c10
R13: 0000000000401ca0 R14: 0000000000000000 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/09 02:40 https://github.com/google/kmsan.git master 74ee2200b89f b88872ba .config console log report syz C ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.