syzbot


KMSAN: uninit-value in ppp_async_push

Status: closed as invalid on 2021/10/06 02:59
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 790d, last: 500d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in ppp_async_push (2) C 323 284d 356d 22/24 fixed on 2022/03/08 16:11

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in ppp_async_encode drivers/net/ppp/ppp_async.c:551 [inline]
BUG: KMSAN: uninit-value in ppp_async_push+0xd0b/0x21a0 drivers/net/ppp/ppp_async.c:681
CPU: 0 PID: 8230 Comm: syz-executor476 Not tainted 5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ppp_async_encode drivers/net/ppp/ppp_async.c:551 [inline]
 ppp_async_push+0xd0b/0x21a0 drivers/net/ppp/ppp_async.c:681
 ppp_async_send+0x144/0x1e0 drivers/net/ppp/ppp_async.c:640
 __ppp_channel_push+0x1a7/0x3b0 drivers/net/ppp/ppp_generic.c:2109
 ppp_channel_push drivers/net/ppp/ppp_generic.c:2136 [inline]
 ppp_write+0x785/0x810 drivers/net/ppp/ppp_generic.c:517
 vfs_write+0x6cc/0x1b00 fs/read_write.c:603
 ksys_write+0x275/0x500 fs/read_write.c:658
 __do_sys_write fs/read_write.c:670 [inline]
 __se_sys_write+0x92/0xb0 fs/read_write.c:667
 __x64_sys_write+0x4a/0x70 fs/read_write.c:667
 do_syscall_64+0x9f/0x140 arch/x86/entry/common.c:48
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x43fd49
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcdfdf22c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043fd49
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000000 R08: 00007ffcdfdf2468 R09: 00007ffcdfdf2468
R10: 00007ffcdfdf2468 R11: 0000000000000246 R12: 00000000004035d0
R13: 431bde82d7b634db R14: 00000000004ae018 R15: 0000000000400488

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 alloc_skb include/linux/skbuff.h:1103 [inline]
 ppp_write+0x11f/0x810 drivers/net/ppp/ppp_generic.c:501
 vfs_write+0x6cc/0x1b00 fs/read_write.c:603
 ksys_write+0x275/0x500 fs/read_write.c:658
 __do_sys_write fs/read_write.c:670 [inline]
 __se_sys_write+0x92/0xb0 fs/read_write.c:667
 __x64_sys_write+0x4a/0x70 fs/read_write.c:667
 do_syscall_64+0x9f/0x140 arch/x86/entry/common.c:48
 entry_SYSCALL_64_after_hwframe+0x44/0xae
=====================================================

Crashes (3187):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce 2021/05/04 04:16 https://github.com/google/kmsan.git master 4ebaab5fb428 ad61f371 .config log report syz C KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2020/09/29 08:52 https://github.com/google/kmsan.git master 5edb1df295b9 1b88c6d5 .config log report syz C
ci-upstream-kmsan-gce 2021/07/15 21:49 https://github.com/google/kmsan.git master 57b5797c8013 b9a2f64e .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/15 15:51 https://github.com/google/kmsan.git master 57b5797c8013 b9a2f64e .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/14 14:34 https://github.com/google/kmsan.git master 57b5797c8013 484502bd .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/14 07:34 https://github.com/google/kmsan.git master 57b5797c8013 484502bd .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/14 02:55 https://github.com/google/kmsan.git master 57b5797c8013 fa0594c3 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/14 01:19 https://github.com/google/kmsan.git master 57b5797c8013 fa0594c3 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/13 14:40 https://github.com/google/kmsan.git master 57b5797c8013 f415556d .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/13 04:06 https://github.com/google/kmsan.git master 57b5797c8013 f415556d .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/13 02:57 https://github.com/google/kmsan.git master 57b5797c8013 f415556d .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/12 20:20 https://github.com/google/kmsan.git master 57b5797c8013 f415556d .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/12 14:28 https://github.com/google/kmsan.git master 57b5797c8013 a4869c92 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/12 09:22 https://github.com/google/kmsan.git master 57b5797c8013 a4869c92 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/12 02:59 https://github.com/google/kmsan.git master 57b5797c8013 8f5a7b8c .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/12 00:05 https://github.com/google/kmsan.git master 57b5797c8013 8f5a7b8c .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/11 10:05 https://github.com/google/kmsan.git master 57b5797c8013 8f5a7b8c .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/10 23:24 https://github.com/google/kmsan.git master 57b5797c8013 8f5a7b8c .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/10 05:18 https://github.com/google/kmsan.git master 57b5797c8013 8f5a7b8c .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/09 22:31 https://github.com/google/kmsan.git master 57b5797c8013 281e815f .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/09 19:15 https://github.com/google/kmsan.git master 57b5797c8013 281e815f .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/09 12:28 https://github.com/google/kmsan.git master 57b5797c8013 281e815f .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/09 03:22 https://github.com/google/kmsan.git master 57b5797c8013 1b20171a .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/08 19:34 https://github.com/google/kmsan.git master 57b5797c8013 1b20171a .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/08 19:34 https://github.com/google/kmsan.git master 57b5797c8013 1b20171a .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/08 08:24 https://github.com/google/kmsan.git master 57b5797c8013 95793bce .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/08 05:53 https://github.com/google/kmsan.git master 57b5797c8013 95793bce .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/07 21:09 https://github.com/google/kmsan.git master 57b5797c8013 4846d5c1 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/07 14:50 https://github.com/google/kmsan.git master 57b5797c8013 4846d5c1 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/03 07:11 https://github.com/google/kmsan.git master 57b5797c8013 55aa55c2 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/02 11:36 https://github.com/google/kmsan.git master 57b5797c8013 658ebc66 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/01 20:39 https://github.com/google/kmsan.git master 57b5797c8013 658ebc66 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/01 12:23 https://github.com/google/kmsan.git master 57b5797c8013 658ebc66 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/07/01 11:17 https://github.com/google/kmsan.git master 57b5797c8013 658ebc66 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/06/30 23:50 https://github.com/google/kmsan.git master 57b5797c8013 38a885d1 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2021/06/30 11:15 https://github.com/google/kmsan.git master 57b5797c8013 84fd4c77 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/13 13:15 https://github.com/google/kmsan.git master 57b5797c8013 f415556d .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/12 00:51 https://github.com/google/kmsan.git master 57b5797c8013 8f5a7b8c .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/11 22:56 https://github.com/google/kmsan.git master 57b5797c8013 8f5a7b8c .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/10 22:17 https://github.com/google/kmsan.git master 57b5797c8013 8f5a7b8c .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/09 21:29 https://github.com/google/kmsan.git master 57b5797c8013 281e815f .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/08 07:12 https://github.com/google/kmsan.git master 57b5797c8013 95793bce .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/08 02:32 https://github.com/google/kmsan.git master 57b5797c8013 95793bce .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/06 15:35 https://github.com/google/kmsan.git master 57b5797c8013 6c4484eb .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/02 17:06 https://github.com/google/kmsan.git master 57b5797c8013 55aa55c2 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/02 14:31 https://github.com/google/kmsan.git master 57b5797c8013 658ebc66 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce-386 2021/07/01 20:16 https://github.com/google/kmsan.git master 57b5797c8013 658ebc66 .config log report info KMSAN: uninit-value in ppp_async_push
ci-upstream-kmsan-gce 2020/09/29 07:35 https://github.com/google/kmsan.git master 5edb1df295b9 1b88c6d5 .config log report info
ci-upstream-kmsan-gce-386 2021/01/17 13:42 https://github.com/google/kmsan.git master 73d62e81b476 813be542 .config log report info
* Struck through repros no longer work on HEAD.