syzbot


KMSAN: uninit-value in tcp_recvmsg (2)

Status: closed as invalid on 2023/12/22 15:49
Subsystems: net
[Documentation on labels]
First crash: 222d, last: 209d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in tcp_recvmsg net C 25918 561d 686d 22/26 fixed on 2023/02/24 13:50
upstream KMSAN: uninit-value in tcp_recvmsg (3) net 1 130d 117d 26/26 fixed on 2024/02/09 18:39

Sample crash report:
block nbd2: Receive control failed (result -107)
=====================================================
BUG: KMSAN: uninit-value in tcp_recvmsg+0x686/0xac0 net/ipv4/tcp.c:2563
 tcp_recvmsg+0x686/0xac0 net/ipv4/tcp.c:2563
 inet6_recvmsg+0x131/0x580 net/ipv6/af_inet6.c:674
 sock_recvmsg_nosec net/socket.c:1044 [inline]
 sock_recvmsg+0x12b/0x1e0 net/socket.c:1066
 sock_xmit+0x2ec/0x6e0 drivers/block/nbd.c:528
 nbd_read_reply drivers/block/nbd.c:709 [inline]
 recv_work+0x224/0x3000 drivers/block/nbd.c:840
 process_one_work kernel/workqueue.c:2630 [inline]
 process_scheduled_works+0x104e/0x1e70 kernel/workqueue.c:2703
 worker_thread+0xf45/0x1490 kernel/workqueue.c:2784
 kthread+0x3e8/0x540 kernel/kthread.c:388
 ret_from_fork+0x66/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304

Local variable msg created at:
 sock_xmit+0xb5/0x6e0 drivers/block/nbd.c:503
 nbd_read_reply drivers/block/nbd.c:709 [inline]
 recv_work+0x224/0x3000 drivers/block/nbd.c:840

CPU: 1 PID: 4383 Comm: kworker/u5:1 Not tainted 6.6.0-rc5-syzkaller-00072-g401644852d0b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
Workqueue: nbd1-recv recv_work
=====================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/10/12 14:46 upstream 401644852d0b 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tcp_recvmsg
2023/10/10 16:01 upstream 94f6f0550c62 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tcp_recvmsg
2023/10/10 10:59 upstream 94f6f0550c62 c9be5398 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tcp_recvmsg
2023/09/30 15:37 upstream 9f3ebbef746f 8e26a358 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tcp_recvmsg
2023/09/30 01:32 upstream 71e58659bfc0 8e26a358 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tcp_recvmsg
* Struck through repros no longer work on HEAD.