syzbot


KMSAN: uninit-value in netlink_sendmsg

Status: fixed on 2018/05/08 18:30
Subsystems: net
[Documentation on labels]
Fix commit: 6091f09c2f79 netlink: fix uninit-value in netlink_sendmsg
First crash: 2225d, last: 2193d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in ffs arch/x86/include/asm/bitops.h:432 [inline]
BUG: KMSAN: uninit-value in netlink_sendmsg+0xb26/0x1310 net/netlink/af_netlink.c:1851
CPU: 0 PID: 3571 Comm: syzkaller466280 Not tainted 4.16.0+ #82
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 ffs arch/x86/include/asm/bitops.h:432 [inline]
 netlink_sendmsg+0xb26/0x1310 net/netlink/af_netlink.c:1851
 sock_sendmsg_nosec net/socket.c:630 [inline]
 sock_sendmsg net/socket.c:640 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2046
 __sys_sendmsg net/socket.c:2080 [inline]
 SYSC_sendmsg+0x2a3/0x3d0 net/socket.c:2091
 SyS_sendmsg+0x54/0x80 net/socket.c:2087
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x43fd89
RSP: 002b:00007fffb9cfa7d8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd89
RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004016b0
R13: 0000000000401740 R14: 0000000000000000 R15: 0000000000000000

Local variable description: ----address@___sys_sendmsg
Variable was created at:
 ___sys_sendmsg+0xd3/0x1310 net/socket.c:1974
 __sys_sendmsg net/socket.c:2080 [inline]
 SYSC_sendmsg+0x2a3/0x3d0 net/socket.c:2091
==================================================================
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 3571 Comm: syzkaller466280 Tainted: G    B            4.16.0+ #82
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 kmsan_report+0x238/0x240 mm/kmsan/kmsan.c:1083
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 ffs arch/x86/include/asm/bitops.h:432 [inline]
 netlink_sendmsg+0xb26/0x1310 net/netlink/af_netlink.c:1851
 sock_sendmsg_nosec net/socket.c:630 [inline]
 sock_sendmsg net/socket.c:640 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2046
 __sys_sendmsg net/socket.c:2080 [inline]
 SYSC_sendmsg+0x2a3/0x3d0 net/socket.c:2091
 SyS_sendmsg+0x54/0x80 net/socket.c:2087
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x43fd89
RSP: 002b:00007fffb9cfa7d8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd89
RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004016b0
R13: 0000000000401740 R14: 0000000000000000 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (2493):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/07 21:32 https://github.com/google/kmsan.git master e2ab7e8abba4 66f22a7f .config console log report syz C ci-upstream-kmsan-gce
2018/04/07 21:13 https://github.com/google/kmsan.git master e2ab7e8abba4 66f22a7f .config console log report syz ci-upstream-kmsan-gce
2018/04/07 17:39 https://github.com/google/kmsan.git master e2ab7e8abba4 66f22a7f .config console log report syz ci-upstream-kmsan-gce
2018/05/08 17:35 https://github.com/google/kmsan.git master d2d741e5d189 b88872ba .config console log report ci-upstream-kmsan-gce
2018/05/08 05:51 https://github.com/google/kmsan.git master d2d741e5d189 045bbd4a .config console log report ci-upstream-kmsan-gce
2018/05/07 19:27 https://github.com/google/kmsan.git master d2d741e5d189 9e0846e8 .config console log report ci-upstream-kmsan-gce
2018/05/07 02:18 https://github.com/google/kmsan.git master d2d741e5d189 a211da1a .config console log report ci-upstream-kmsan-gce
2018/05/06 23:59 https://github.com/google/kmsan.git master d2d741e5d189 a211da1a .config console log report ci-upstream-kmsan-gce
2018/05/06 12:38 https://github.com/google/kmsan.git master d2d741e5d189 6c18ddb0 .config console log report ci-upstream-kmsan-gce
2018/05/06 11:25 https://github.com/google/kmsan.git master d2d741e5d189 6c18ddb0 .config console log report ci-upstream-kmsan-gce
2018/05/06 01:13 https://github.com/google/kmsan.git master d2d741e5d189 78b251cb .config console log report ci-upstream-kmsan-gce
2018/05/05 23:15 https://github.com/google/kmsan.git master d2d741e5d189 78b251cb .config console log report ci-upstream-kmsan-gce
2018/05/05 17:52 https://github.com/google/kmsan.git master d2d741e5d189 6a0382b5 .config console log report ci-upstream-kmsan-gce
2018/05/05 16:34 https://github.com/google/kmsan.git master d2d741e5d189 6a0382b5 .config console log report ci-upstream-kmsan-gce
2018/05/05 11:23 https://github.com/google/kmsan.git master d2d741e5d189 6a0382b5 .config console log report ci-upstream-kmsan-gce
2018/05/04 23:43 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
2018/05/04 21:36 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
2018/05/04 09:38 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
2018/05/04 06:31 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
2018/05/04 02:30 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
2018/05/03 20:53 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
2018/05/03 07:09 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
2018/05/02 17:02 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report ci-upstream-kmsan-gce
2018/05/02 04:12 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report ci-upstream-kmsan-gce
2018/05/01 00:45 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report ci-upstream-kmsan-gce
2018/04/30 23:29 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report ci-upstream-kmsan-gce
2018/04/30 20:33 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report ci-upstream-kmsan-gce
2018/04/30 12:01 https://github.com/google/kmsan.git master d2d741e5d189 06db3cec .config console log report ci-upstream-kmsan-gce
2018/04/30 09:38 https://github.com/google/kmsan.git master d2d741e5d189 06db3cec .config console log report ci-upstream-kmsan-gce
2018/04/30 05:05 https://github.com/google/kmsan.git master d2d741e5d189 bb79c6ab .config console log report ci-upstream-kmsan-gce
2018/04/29 18:24 https://github.com/google/kmsan.git master d2d741e5d189 bb79c6ab .config console log report ci-upstream-kmsan-gce
2018/04/29 15:18 https://github.com/google/kmsan.git master d2d741e5d189 d5a5d045 .config console log report ci-upstream-kmsan-gce
2018/04/28 03:58 https://github.com/google/kmsan.git master d2d741e5d189 d5a5d045 .config console log report ci-upstream-kmsan-gce
2018/04/28 01:41 https://github.com/google/kmsan.git master d2d741e5d189 7785e404 .config console log report ci-upstream-kmsan-gce
2018/04/27 23:54 https://github.com/google/kmsan.git master d2d741e5d189 7785e404 .config console log report ci-upstream-kmsan-gce
2018/04/27 20:42 https://github.com/google/kmsan.git master d2d741e5d189 7785e404 .config console log report ci-upstream-kmsan-gce
2018/04/27 16:36 https://github.com/google/kmsan.git master d2d741e5d189 7785e404 .config console log report ci-upstream-kmsan-gce
2018/04/26 19:47 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report ci-upstream-kmsan-gce
2018/04/26 10:35 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report ci-upstream-kmsan-gce
2018/04/25 21:00 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report ci-upstream-kmsan-gce
2018/04/25 17:29 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report ci-upstream-kmsan-gce
2018/04/25 14:58 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report ci-upstream-kmsan-gce
2018/04/25 12:32 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report ci-upstream-kmsan-gce
2018/04/25 09:27 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report ci-upstream-kmsan-gce
2018/04/24 18:46 https://github.com/google/kmsan.git master d2d741e5d189 37e76fe2 .config console log report ci-upstream-kmsan-gce
2018/04/24 17:11 https://github.com/google/kmsan.git master d2d741e5d189 2bf86f40 .config console log report ci-upstream-kmsan-gce
2018/04/24 14:08 https://github.com/google/kmsan.git master d2d741e5d189 2bf86f40 .config console log report ci-upstream-kmsan-gce
2018/04/24 10:09 https://github.com/google/kmsan.git master d2d741e5d189 e7e85d36 .config console log report ci-upstream-kmsan-gce
2018/04/24 07:21 https://github.com/google/kmsan.git master d2d741e5d189 e7e85d36 .config console log report ci-upstream-kmsan-gce
2018/04/24 05:56 https://github.com/google/kmsan.git master d2d741e5d189 e7e85d36 .config console log report ci-upstream-kmsan-gce
2018/04/24 01:50 https://github.com/google/kmsan.git master d2d741e5d189 0d8e591c .config console log report ci-upstream-kmsan-gce
2018/04/24 00:36 https://github.com/google/kmsan.git master d2d741e5d189 0d8e591c .config console log report ci-upstream-kmsan-gce
2018/04/23 21:09 https://github.com/google/kmsan.git master d2d741e5d189 0d8e591c .config console log report ci-upstream-kmsan-gce
2018/04/23 17:24 https://github.com/google/kmsan.git master d2d741e5d189 0d8e591c .config console log report ci-upstream-kmsan-gce
2018/04/23 11:09 https://github.com/google/kmsan.git master d2d741e5d189 20941ab3 .config console log report ci-upstream-kmsan-gce
2018/04/23 04:05 https://github.com/google/kmsan.git master d2d741e5d189 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/23 02:44 https://github.com/google/kmsan.git master d2d741e5d189 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 21:57 https://github.com/google/kmsan.git master d2d741e5d189 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 16:31 https://github.com/google/kmsan.git master d2d741e5d189 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 11:35 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 07:35 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 05:33 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 01:23 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 22:49 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 20:09 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 18:01 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 15:48 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 05:08 https://github.com/google/kmsan.git master 48c6a2b0ab1b ca03d688 .config console log report ci-upstream-kmsan-gce
2018/04/21 03:13 https://github.com/google/kmsan.git master 48c6a2b0ab1b ca03d688 .config console log report ci-upstream-kmsan-gce
2018/04/21 01:43 https://github.com/google/kmsan.git master 48c6a2b0ab1b ca03d688 .config console log report ci-upstream-kmsan-gce
2018/04/20 21:43 https://github.com/google/kmsan.git master 48c6a2b0ab1b cc402841 .config console log report ci-upstream-kmsan-gce
2018/04/20 16:30 https://github.com/google/kmsan.git master 48c6a2b0ab1b cc402841 .config console log report ci-upstream-kmsan-gce
2018/04/20 11:25 https://github.com/google/kmsan.git master 48c6a2b0ab1b eae05cb0 .config console log report ci-upstream-kmsan-gce
2018/04/20 08:25 https://github.com/google/kmsan.git master 48c6a2b0ab1b eae05cb0 .config console log report ci-upstream-kmsan-gce
2018/04/20 05:24 https://github.com/google/kmsan.git master 48c6a2b0ab1b eae05cb0 .config console log report ci-upstream-kmsan-gce
2018/04/20 03:47 https://github.com/google/kmsan.git master 48c6a2b0ab1b eae05cb0 .config console log report ci-upstream-kmsan-gce
2018/04/20 01:15 https://github.com/google/kmsan.git master 48c6a2b0ab1b eae05cb0 .config console log report ci-upstream-kmsan-gce
2018/04/19 21:25 https://github.com/google/kmsan.git master 48c6a2b0ab1b 3642839c .config console log report ci-upstream-kmsan-gce
2018/04/19 16:00 https://github.com/google/kmsan.git master 48c6a2b0ab1b 3642839c .config console log report ci-upstream-kmsan-gce
2018/04/19 13:38 https://github.com/google/kmsan.git master 48c6a2b0ab1b 3642839c .config console log report ci-upstream-kmsan-gce
2018/04/19 09:02 https://github.com/google/kmsan.git master 48c6a2b0ab1b d1b2ef69 .config console log report ci-upstream-kmsan-gce
2018/04/19 02:31 https://github.com/google/kmsan.git master 48c6a2b0ab1b 829f0234 .config console log report ci-upstream-kmsan-gce
2018/04/18 20:45 https://github.com/google/kmsan.git master 48c6a2b0ab1b 829f0234 .config console log report ci-upstream-kmsan-gce
2018/04/18 18:39 https://github.com/google/kmsan.git master 48c6a2b0ab1b 52643b44 .config console log report ci-upstream-kmsan-gce
2018/04/18 15:36 https://github.com/google/kmsan.git master 48c6a2b0ab1b 52643b44 .config console log report ci-upstream-kmsan-gce
2018/04/18 09:48 https://github.com/google/kmsan.git master 48c6a2b0ab1b 52643b44 .config console log report ci-upstream-kmsan-gce
2018/04/18 01:58 https://github.com/google/kmsan.git master 48c6a2b0ab1b b80fd3b5 .config console log report ci-upstream-kmsan-gce
2018/04/17 19:23 https://github.com/google/kmsan.git master 48c6a2b0ab1b b80fd3b5 .config console log report ci-upstream-kmsan-gce
2018/04/17 14:15 https://github.com/google/kmsan.git master 48c6a2b0ab1b b80fd3b5 .config console log report ci-upstream-kmsan-gce
2018/04/17 08:23 https://github.com/google/kmsan.git master 48c6a2b0ab1b b80fd3b5 .config console log report ci-upstream-kmsan-gce
2018/04/17 01:32 https://github.com/google/kmsan.git master 48c6a2b0ab1b b80fd3b5 .config console log report ci-upstream-kmsan-gce
2018/04/16 15:07 https://github.com/google/kmsan.git master 48c6a2b0ab1b 802ac912 .config console log report ci-upstream-kmsan-gce
2018/04/16 12:51 https://github.com/google/kmsan.git master 48c6a2b0ab1b 802ac912 .config console log report ci-upstream-kmsan-gce
2018/04/16 10:53 https://github.com/google/kmsan.git master 48c6a2b0ab1b 802ac912 .config console log report ci-upstream-kmsan-gce
2018/04/06 22:42 https://github.com/google/kmsan.git master e2ab7e8abba4 d613535f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.