syzbot


KMSAN: uninit-value in ppp_async_push (2)

Status: fixed on 2022/03/08 16:11
Subsystems: ppp
[Documentation on labels]
Fix commit: 44073187990d ppp: ensure minimum packet size in ppp_write()
First crash: 869d, last: 798d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in ppp_async_push ppp C 3187 1014d 1304d 0/26 closed as invalid on 2021/10/06 02:59
upstream KMSAN: uninit-value in slhc_compress (2) net C 22 797d 1419d 0/26 auto-obsoleted due to no activity on 2022/09/27 10:07
upstream KMSAN: uninit-value in ppp_send_frame ppp C 5 822d 842d 20/26 fixed on 2022/03/08 16:11

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in ppp_async_encode drivers/net/ppp/ppp_async.c:550 [inline]
BUG: KMSAN: uninit-value in ppp_async_push+0xd6d/0x2260 drivers/net/ppp/ppp_async.c:680
 ppp_async_encode drivers/net/ppp/ppp_async.c:550 [inline]
 ppp_async_push+0xd6d/0x2260 drivers/net/ppp/ppp_async.c:680
 ppp_async_send+0x144/0x1e0 drivers/net/ppp/ppp_async.c:639
 __ppp_channel_push+0x1ab/0x3a0 drivers/net/ppp/ppp_generic.c:2142
 ppp_channel_push+0x263/0x320 drivers/net/ppp/ppp_generic.c:2169
 ppp_write+0x572/0x5e0 drivers/net/ppp/ppp_generic.c:517
 vfs_write+0x8ce/0x2030 fs/read_write.c:588
 ksys_write+0x28c/0x520 fs/read_write.c:643
 __do_sys_write fs/read_write.c:655 [inline]
 __se_sys_write fs/read_write.c:652 [inline]
 __x64_sys_write+0xdb/0x120 fs/read_write.c:652
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Uninit was created at:
 slab_post_alloc_hook mm/slab.h:524 [inline]
 slab_alloc_node mm/slub.c:3251 [inline]
 __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4974
 kmalloc_reserve net/core/skbuff.c:354 [inline]
 __alloc_skb+0x545/0xf90 net/core/skbuff.c:426
 alloc_skb include/linux/skbuff.h:1126 [inline]
 ppp_write+0x11d/0x5e0 drivers/net/ppp/ppp_generic.c:501
 vfs_write+0x8ce/0x2030 fs/read_write.c:588
 ksys_write+0x28c/0x520 fs/read_write.c:643
 __do_sys_write fs/read_write.c:655 [inline]
 __se_sys_write fs/read_write.c:652 [inline]
 __x64_sys_write+0xdb/0x120 fs/read_write.c:652
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x44/0xae

CPU: 0 PID: 6368 Comm: syz-executor544 Not tainted 5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
=====================================================

Crashes (323):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/12/07 22:29 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report syz C ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/16 16:26 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/16 02:20 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/16 00:37 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/14 21:04 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/13 14:33 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/12 16:39 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/12 13:22 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/10 20:34 https://github.com/google/kmsan.git master 85cfd6e539bd 0b33604d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/10 02:25 https://github.com/google/kmsan.git master 85cfd6e539bd 0b33604d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/09 23:59 https://github.com/google/kmsan.git master 85cfd6e539bd 0b33604d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/09 22:55 https://github.com/google/kmsan.git master 85cfd6e539bd 0b33604d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/08 16:01 https://github.com/google/kmsan.git master 85cfd6e539bd 0b33604d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/08 08:30 https://github.com/google/kmsan.git master 85cfd6e539bd a7dab638 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/05 23:50 https://github.com/google/kmsan.git master 85cfd6e539bd a7dab638 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/05 22:15 https://github.com/google/kmsan.git master 85cfd6e539bd a7dab638 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/04 22:37 https://github.com/google/kmsan.git master 85cfd6e539bd e13a05ed .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/04 13:55 https://github.com/google/kmsan.git master 85cfd6e539bd a3e470b2 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/04 02:22 https://github.com/google/kmsan.git master 85cfd6e539bd 30646bfe .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/03 23:29 https://github.com/google/kmsan.git master 85cfd6e539bd 30646bfe .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/03 19:35 https://github.com/google/kmsan.git master 85cfd6e539bd 4ebb2798 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/03 17:07 https://github.com/google/kmsan.git master 85cfd6e539bd 4ebb2798 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/03 12:44 https://github.com/google/kmsan.git master 85cfd6e539bd 4ebb2798 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/03 03:22 https://github.com/google/kmsan.git master 85cfd6e539bd 4ebb2798 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/03 00:14 https://github.com/google/kmsan.git master 85cfd6e539bd 4ebb2798 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/02 23:10 https://github.com/google/kmsan.git master 85cfd6e539bd 4ebb2798 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/02 11:55 https://github.com/google/kmsan.git master 85cfd6e539bd 4ebb2798 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/01 17:19 https://github.com/google/kmsan.git master 85cfd6e539bd c1c1631d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/01 13:30 https://github.com/google/kmsan.git master 85cfd6e539bd c1c1631d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/01 11:49 https://github.com/google/kmsan.git master 85cfd6e539bd c1c1631d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/01 10:50 https://github.com/google/kmsan.git master 85cfd6e539bd c1c1631d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/01/31 23:12 https://github.com/google/kmsan.git master 85cfd6e539bd 6b7c57fe .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/01/31 18:45 https://github.com/google/kmsan.git master 85cfd6e539bd 6b7c57fe .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2021/12/07 14:17 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2021/12/07 14:14 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ppp_async_push
2022/02/17 04:33 https://github.com/google/kmsan.git master 85cfd6e539bd 2bea8a27 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/08 21:03 https://github.com/google/kmsan.git master 85cfd6e539bd 0b33604d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/07 22:37 https://github.com/google/kmsan.git master 85cfd6e539bd a7dab638 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/07 11:14 https://github.com/google/kmsan.git master 85cfd6e539bd a7dab638 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/05 05:13 https://github.com/google/kmsan.git master 85cfd6e539bd e13a05ed .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/05 03:13 https://github.com/google/kmsan.git master 85cfd6e539bd e13a05ed .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/05 01:02 https://github.com/google/kmsan.git master 85cfd6e539bd e13a05ed .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/04 08:30 https://github.com/google/kmsan.git master 85cfd6e539bd 30646bfe .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/04 05:41 https://github.com/google/kmsan.git master 85cfd6e539bd 30646bfe .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/02/02 09:02 https://github.com/google/kmsan.git master 85cfd6e539bd 4ebb2798 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/01/31 20:50 https://github.com/google/kmsan.git master 85cfd6e539bd 6b7c57fe .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
2022/01/31 17:31 https://github.com/google/kmsan.git master 85cfd6e539bd 6b7c57fe .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in ppp_async_push
* Struck through repros no longer work on HEAD.