syzbot


KMSAN: uninit-value in ax88772_bind

Status: fixed on 2019/08/05 13:45
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+8a3fc6674bbc3978ed4e@syzkaller.appspotmail.com
Fix commit: 78226f6eaac8 net: usb: asix: init MAC address buffers
First crash: 1787d, last: 1726d
Discussions (14)
Title Replies (including bot) Last reply
[PATCH 4.9 000/223] 4.9.187-stable review 231 (231) 2019/08/28 03:02
[PATCH 5.2 000/413] 5.2.3-stable review 444 (444) 2019/08/05 12:40
[PATCH 4.14 000/293] 4.14.135-stable review 302 (302) 2019/07/31 09:35
[PATCH 4.19 000/271] 4.19.61-stable review 284 (284) 2019/07/27 10:51
[PATCH AUTOSEL 4.19 001/158] wil6210: fix potential out-of-bounds read 161 (161) 2019/07/26 18:07
[PATCH 5.1 000/371] 5.1.20-stable review 384 (384) 2019/07/26 12:24
[PATCH AUTOSEL 5.2 001/249] ath10k: Check tx_stats before use it 267 (267) 2019/07/24 03:35
[PATCH AUTOSEL 4.14 001/105] wil6210: fix potential out-of-bounds read 107 (107) 2019/07/22 00:40
[PATCH AUTOSEL 4.9 01/73] ath10k: Do not send probe response template for mesh 73 (73) 2019/07/15 14:36
[PATCH AUTOSEL 5.1 001/219] ath10k: Check tx_stats before use it 219 (219) 2019/07/15 14:03
[PATCH] net: usb: asix: init MAC address buffers 5 (5) 2019/07/02 22:25
Reminder: 94 open syzbot bugs in net subsystem 1 (1) 2019/06/25 05:48
Reminder: 42 open syzbot bugs in usb subsystem 1 (1) 2019/06/25 03:44
KMSAN: uninit-value in ax88772_bind 0 (1) 2019/06/03 17:21
Last patch testing requests (3)
Created Duration User Patch Repo Result
2019/07/01 22:31 23m tranmanphong@gmail.com patch https://github.com/google/kmsan.git master OK
2019/06/30 18:16 21m tranmanphong@gmail.com patch https://github.com/google/kmsan.git master OK
2019/06/30 16:58 22m tranmanphong@gmail.com patch https://github.com/google/kmsan.git master OK

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in is_valid_ether_addr include/linux/etherdevice.h:200 [inline]
BUG: KMSAN: uninit-value in asix_set_netdev_dev_addr drivers/net/usb/asix_devices.c:73 [inline]
BUG: KMSAN: uninit-value in ax88772_bind+0x93d/0x11e0 drivers/net/usb/asix_devices.c:724
CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.1.0+ #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x130/0x2a0 mm/kmsan/kmsan.c:622
 __msan_warning+0x75/0xe0 mm/kmsan/kmsan_instr.c:310
 is_valid_ether_addr include/linux/etherdevice.h:200 [inline]
 asix_set_netdev_dev_addr drivers/net/usb/asix_devices.c:73 [inline]
 ax88772_bind+0x93d/0x11e0 drivers/net/usb/asix_devices.c:724
 usbnet_probe+0x10f5/0x3940 drivers/net/usb/usbnet.c:1728
 usb_probe_interface+0xd66/0x1320 drivers/usb/core/driver.c:361
 really_probe+0xdae/0x1d80 drivers/base/dd.c:513
 driver_probe_device+0x1b3/0x4f0 drivers/base/dd.c:671
 __device_attach_driver+0x5b8/0x790 drivers/base/dd.c:778
 bus_for_each_drv+0x28e/0x3b0 drivers/base/bus.c:454
 __device_attach+0x454/0x730 drivers/base/dd.c:844
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:891
 bus_probe_device+0x137/0x390 drivers/base/bus.c:514
 device_add+0x288d/0x30e0 drivers/base/core.c:2106
 usb_set_configuration+0x30dc/0x3750 drivers/usb/core/message.c:2027
 generic_probe+0xe7/0x280 drivers/usb/core/generic.c:210
 usb_probe_device+0x14c/0x200 drivers/usb/core/driver.c:266
 really_probe+0xdae/0x1d80 drivers/base/dd.c:513
 driver_probe_device+0x1b3/0x4f0 drivers/base/dd.c:671
 __device_attach_driver+0x5b8/0x790 drivers/base/dd.c:778
 bus_for_each_drv+0x28e/0x3b0 drivers/base/bus.c:454
 __device_attach+0x454/0x730 drivers/base/dd.c:844
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:891
 bus_probe_device+0x137/0x390 drivers/base/bus.c:514
 device_add+0x288d/0x30e0 drivers/base/core.c:2106
 usb_new_device+0x23e5/0x2ff0 drivers/usb/core/hub.c:2534
 hub_port_connect drivers/usb/core/hub.c:5089 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5204 [inline]
 port_event drivers/usb/core/hub.c:5350 [inline]
 hub_event+0x48d1/0x7290 drivers/usb/core/hub.c:5432
 process_one_work+0x1572/0x1f00 kernel/workqueue.c:2269
 worker_thread+0x111b/0x2460 kernel/workqueue.c:2415
 kthread+0x4b5/0x4f0 kernel/kthread.c:254
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Local variable description: ----buf@ax88772_bind
Variable was created at:
 ax88772_bind+0x5f/0x11e0 drivers/net/usb/asix_devices.c:692
 usbnet_probe+0x10f5/0x3940 drivers/net/usb/usbnet.c:1728
==================================================================

Crashes (80):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/03 16:05 https://github.com/google/kmsan.git master f75e4cfea97f 63bf051f .config console log report syz C ci-upstream-kmsan-gce
2019/06/03 14:43 https://github.com/google/kmsan.git master f75e4cfea97f 63bf051f .config console log report syz C ci-upstream-kmsan-gce
2019/08/03 12:53 https://github.com/google/kmsan.git master beaab8a31e0d 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/03 07:01 https://github.com/google/kmsan.git master beaab8a31e0d 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/02 03:27 https://github.com/google/kmsan.git master beaab8a31e0d 835dffe7 .config console log report ci-upstream-kmsan-gce
2019/08/02 02:17 https://github.com/google/kmsan.git master beaab8a31e0d 835dffe7 .config console log report ci-upstream-kmsan-gce
2019/08/01 22:11 https://github.com/google/kmsan.git master beaab8a31e0d 835dffe7 .config console log report ci-upstream-kmsan-gce
2019/08/01 02:48 https://github.com/google/kmsan.git master beaab8a31e0d c692b5bd .config console log report ci-upstream-kmsan-gce
2019/07/30 13:03 https://github.com/google/kmsan.git master beaab8a31e0d f28bf2a5 .config console log report ci-upstream-kmsan-gce
2019/07/30 02:51 https://github.com/google/kmsan.git master beaab8a31e0d f67095ee .config console log report ci-upstream-kmsan-gce
2019/07/29 23:27 https://github.com/google/kmsan.git master beaab8a31e0d f67095ee .config console log report ci-upstream-kmsan-gce
2019/07/27 03:24 https://github.com/google/kmsan.git master beaab8a31e0d c85e1c5b .config console log report ci-upstream-kmsan-gce
2019/07/26 02:39 https://github.com/google/kmsan.git master beaab8a31e0d 732bc5a0 .config console log report ci-upstream-kmsan-gce
2019/07/24 14:21 https://github.com/google/kmsan.git master beaab8a31e0d 32329ceb .config console log report ci-upstream-kmsan-gce
2019/07/22 22:33 https://github.com/google/kmsan.git master beaab8a31e0d 55e0c077 .config console log report ci-upstream-kmsan-gce
2019/07/22 10:39 https://github.com/google/kmsan.git master beaab8a31e0d b3c615f5 .config console log report ci-upstream-kmsan-gce
2019/07/19 23:20 https://github.com/google/kmsan.git master beaab8a31e0d 1656845f .config console log report ci-upstream-kmsan-gce
2019/07/19 19:50 https://github.com/google/kmsan.git master beaab8a31e0d 1656845f .config console log report ci-upstream-kmsan-gce
2019/07/19 17:36 https://github.com/google/kmsan.git master beaab8a31e0d 1656845f .config console log report ci-upstream-kmsan-gce
2019/07/19 10:47 https://github.com/google/kmsan.git master beaab8a31e0d 7bb222f7 .config console log report ci-upstream-kmsan-gce
2019/07/18 23:27 https://github.com/google/kmsan.git master beaab8a31e0d 7bb222f7 .config console log report ci-upstream-kmsan-gce
2019/07/18 17:16 https://github.com/google/kmsan.git master beaab8a31e0d 7bb222f7 .config console log report ci-upstream-kmsan-gce
2019/07/17 20:42 https://github.com/google/kmsan.git master beaab8a31e0d f613a7c4 .config console log report ci-upstream-kmsan-gce
2019/07/17 18:24 https://github.com/google/kmsan.git master beaab8a31e0d f613a7c4 .config console log report ci-upstream-kmsan-gce
2019/07/17 17:15 https://github.com/google/kmsan.git master beaab8a31e0d f613a7c4 .config console log report ci-upstream-kmsan-gce
2019/07/16 15:19 https://github.com/google/kmsan.git master 7280182c67ba db842eb6 .config console log report ci-upstream-kmsan-gce
2019/07/12 00:19 https://github.com/google/kmsan.git master 7280182c67ba 186a30b9 .config console log report ci-upstream-kmsan-gce
2019/07/11 21:54 https://github.com/google/kmsan.git master 7280182c67ba 186a30b9 .config console log report ci-upstream-kmsan-gce
2019/06/28 14:12 https://github.com/google/kmsan.git master 41550654dedf 7509bf36 .config console log report ci-upstream-kmsan-gce
2019/06/28 01:09 https://github.com/google/kmsan.git master 41550654dedf 7509bf36 .config console log report ci-upstream-kmsan-gce
2019/06/27 16:13 https://github.com/google/kmsan.git master 41550654dedf 7509bf36 .config console log report ci-upstream-kmsan-gce
2019/06/25 12:20 https://github.com/google/kmsan.git master 6e0b7ebbe9bc 82c13b6b .config console log report ci-upstream-kmsan-gce
2019/06/24 08:31 https://github.com/google/kmsan.git master 3351e2b9635b 472f0082 .config console log report ci-upstream-kmsan-gce
2019/06/24 08:30 https://github.com/google/kmsan.git master 3351e2b9635b 472f0082 .config console log report ci-upstream-kmsan-gce
2019/06/24 02:28 https://github.com/google/kmsan.git master 3351e2b9635b 472f0082 .config console log report ci-upstream-kmsan-gce
2019/06/24 00:38 https://github.com/google/kmsan.git master 3351e2b9635b 472f0082 .config console log report ci-upstream-kmsan-gce
2019/06/23 23:47 https://github.com/google/kmsan.git master 3351e2b9635b 472f0082 .config console log report ci-upstream-kmsan-gce
2019/06/18 22:54 https://github.com/google/kmsan.git master aad0f0dd72ab e3f76baa .config console log report ci-upstream-kmsan-gce
2019/06/18 20:35 https://github.com/google/kmsan.git master aad0f0dd72ab e3f76baa .config console log report ci-upstream-kmsan-gce
2019/06/14 17:10 https://github.com/google/kmsan.git master 62c1edc4b8ee 998ccc76 .config console log report ci-upstream-kmsan-gce
2019/06/13 21:31 https://github.com/google/kmsan.git master 62c1edc4b8ee a139f92f .config console log report ci-upstream-kmsan-gce
2019/06/13 20:18 https://github.com/google/kmsan.git master 62c1edc4b8ee a139f92f .config console log report ci-upstream-kmsan-gce
2019/06/13 18:49 https://github.com/google/kmsan.git master 62c1edc4b8ee a139f92f .config console log report ci-upstream-kmsan-gce
2019/06/13 18:38 https://github.com/google/kmsan.git master 62c1edc4b8ee a139f92f .config console log report ci-upstream-kmsan-gce
2019/06/13 18:18 https://github.com/google/kmsan.git master 62c1edc4b8ee a139f92f .config console log report ci-upstream-kmsan-gce
2019/06/13 11:27 https://github.com/google/kmsan.git master 62c1edc4b8ee 3f4e812b .config console log report ci-upstream-kmsan-gce
2019/06/13 09:12 https://github.com/google/kmsan.git master 62c1edc4b8ee 3f4e812b .config console log report ci-upstream-kmsan-gce
2019/06/13 09:04 https://github.com/google/kmsan.git master 62c1edc4b8ee 3f4e812b .config console log report ci-upstream-kmsan-gce
2019/06/12 12:49 https://github.com/google/kmsan.git master 62c1edc4b8ee 794a1ad7 .config console log report ci-upstream-kmsan-gce
2019/06/12 12:46 https://github.com/google/kmsan.git master 62c1edc4b8ee 794a1ad7 .config console log report ci-upstream-kmsan-gce
2019/06/12 12:40 https://github.com/google/kmsan.git master 62c1edc4b8ee 794a1ad7 .config console log report ci-upstream-kmsan-gce
2019/06/12 11:42 https://github.com/google/kmsan.git master 62c1edc4b8ee 794a1ad7 .config console log report ci-upstream-kmsan-gce
2019/06/12 09:36 https://github.com/google/kmsan.git master 62c1edc4b8ee ea2f4006 .config console log report ci-upstream-kmsan-gce
2019/06/11 18:39 https://github.com/google/kmsan.git master 62c1edc4b8ee 5b5826d0 .config console log report ci-upstream-kmsan-gce
2019/06/11 12:50 https://github.com/google/kmsan.git master 62c1edc4b8ee 5b5826d0 .config console log report ci-upstream-kmsan-gce
2019/06/10 06:51 https://github.com/google/kmsan.git master 62c1edc4b8ee 0159583c .config console log report ci-upstream-kmsan-gce
2019/06/09 23:13 https://github.com/google/kmsan.git master 62c1edc4b8ee 0159583c .config console log report ci-upstream-kmsan-gce
2019/06/08 11:20 https://github.com/google/kmsan.git master 62c1edc4b8ee cf9c3a50 .config console log report ci-upstream-kmsan-gce
2019/06/08 09:09 https://github.com/google/kmsan.git master 62c1edc4b8ee cf9c3a50 .config console log report ci-upstream-kmsan-gce
2019/06/08 04:22 https://github.com/google/kmsan.git master 62c1edc4b8ee cf9c3a50 .config console log report ci-upstream-kmsan-gce
2019/06/06 14:52 https://github.com/google/kmsan.git master f75e4cfea97f a547defc .config console log report ci-upstream-kmsan-gce
2019/06/06 03:12 https://github.com/google/kmsan.git master f75e4cfea97f a547defc .config console log report ci-upstream-kmsan-gce
2019/06/04 16:14 https://github.com/google/kmsan.git master f75e4cfea97f e41a20c5 .config console log report ci-upstream-kmsan-gce
2019/06/04 12:18 https://github.com/google/kmsan.git master f75e4cfea97f e41a20c5 .config console log report ci-upstream-kmsan-gce
2019/06/03 17:25 https://github.com/google/kmsan.git master f75e4cfea97f 63bf051f .config console log report ci-upstream-kmsan-gce
2019/06/03 14:29 https://github.com/google/kmsan.git master f75e4cfea97f 63bf051f .config console log report ci-upstream-kmsan-gce
2019/06/03 13:02 https://github.com/google/kmsan.git master f75e4cfea97f 63bf051f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.