syzbot


KMSAN: uninit-value in crc_ccitt (2)

Status: closed as invalid on 2022/11/18 12:56
Subsystems: wpan
[Documentation on labels]
First crash: 854d, last: 547d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in crc_ccitt wpan 1 992d 988d 0/26 auto-closed as invalid on 2021/12/04 07:07

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in crc_ccitt_byte include/linux/crc-ccitt.h:15 [inline]
BUG: KMSAN: uninit-value in crc_ccitt+0x27f/0x2e0 lib/crc-ccitt.c:102
 crc_ccitt_byte include/linux/crc-ccitt.h:15 [inline]
 crc_ccitt+0x27f/0x2e0 lib/crc-ccitt.c:102
 ieee802154_tx+0x294/0x6c0 net/mac802154/tx.c:72
 ieee802154_subif_start_xmit+0xf6/0x1a0 net/mac802154/tx.c:132
 __netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 netdev_start_xmit include/linux/netdevice.h:4833 [inline]
 xmit_one+0x14e/0x5f0 net/core/dev.c:3590
 dev_hard_start_xmit+0xe5/0x370 net/core/dev.c:3606
 sch_direct_xmit+0x3f1/0xdb0 net/sched/sch_generic.c:342
 __dev_xmit_skb+0xc22/0x1a30 net/core/dev.c:3817
 __dev_queue_xmit+0x12cb/0x31f0 net/core/dev.c:4222
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 dgram_sendmsg+0xcba/0x1460 net/ieee802154/socket.c:681
 ieee802154_sock_sendmsg+0x8d/0xc0 net/ieee802154/socket.c:96
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0xabc/0xe90 net/socket.c:2482
 ___sys_sendmsg+0x2a1/0x3f0 net/socket.c:2536
 __sys_sendmsg+0x258/0x440 net/socket.c:2565
 __compat_sys_sendmsg net/compat.c:343 [inline]
 __do_compat_sys_sendmsg net/compat.c:350 [inline]
 __se_compat_sys_sendmsg net/compat.c:347 [inline]
 __ia32_compat_sys_sendmsg+0x99/0xe0 net/compat.c:347
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was stored to memory at:
 ieee802154_hdr_push+0x8f5/0x9f0 net/ieee802154/header_ops.c:117
 ieee802154_header_create+0xb37/0xdb0 net/mac802154/iface.c:403
 wpan_dev_hard_header include/net/cfg802154.h:385 [inline]
 dgram_sendmsg+0xaf3/0x1460 net/ieee802154/socket.c:669
 ieee802154_sock_sendmsg+0x8d/0xc0 net/ieee802154/socket.c:96
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0xabc/0xe90 net/socket.c:2482
 ___sys_sendmsg+0x2a1/0x3f0 net/socket.c:2536
 __sys_sendmsg+0x258/0x440 net/socket.c:2565
 __compat_sys_sendmsg net/compat.c:343 [inline]
 __do_compat_sys_sendmsg net/compat.c:350 [inline]
 __se_compat_sys_sendmsg net/compat.c:347 [inline]
 __ia32_compat_sys_sendmsg+0x99/0xe0 net/compat.c:347
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was stored to memory at:
 ieee802154_hdr_push+0x260/0x9f0 net/ieee802154/header_ops.c:89
 ieee802154_header_create+0xb37/0xdb0 net/mac802154/iface.c:403
 wpan_dev_hard_header include/net/cfg802154.h:385 [inline]
 dgram_sendmsg+0xaf3/0x1460 net/ieee802154/socket.c:669
 ieee802154_sock_sendmsg+0x8d/0xc0 net/ieee802154/socket.c:96
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0xabc/0xe90 net/socket.c:2482
 ___sys_sendmsg+0x2a1/0x3f0 net/socket.c:2536
 __sys_sendmsg+0x258/0x440 net/socket.c:2565
 __compat_sys_sendmsg net/compat.c:343 [inline]
 __do_compat_sys_sendmsg net/compat.c:350 [inline]
 __se_compat_sys_sendmsg net/compat.c:347 [inline]
 __ia32_compat_sys_sendmsg+0x99/0xe0 net/compat.c:347
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was stored to memory at:
 ieee802154_header_create+0xb1d/0xdb0 net/mac802154/iface.c:401
 wpan_dev_hard_header include/net/cfg802154.h:385 [inline]
 dgram_sendmsg+0xaf3/0x1460 net/ieee802154/socket.c:669
 ieee802154_sock_sendmsg+0x8d/0xc0 net/ieee802154/socket.c:96
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0xabc/0xe90 net/socket.c:2482
 ___sys_sendmsg+0x2a1/0x3f0 net/socket.c:2536
 __sys_sendmsg+0x258/0x440 net/socket.c:2565
 __compat_sys_sendmsg net/compat.c:343 [inline]
 __do_compat_sys_sendmsg net/compat.c:350 [inline]
 __se_compat_sys_sendmsg net/compat.c:347 [inline]
 __ia32_compat_sys_sendmsg+0x99/0xe0 net/compat.c:347
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Local variable dst_addr created at:
 dgram_sendmsg+0x50/0x1460 net/ieee802154/socket.c:606
 ieee802154_sock_sendmsg+0x8d/0xc0 net/ieee802154/socket.c:96

CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 6.0.0-rc5-syzkaller-48543-g968c2729e576 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
=====================================================

Crashes (60):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/24 15:31 https://github.com/google/kmsan.git master 968c2729e576 23bf86af .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/24 12:46 https://github.com/google/kmsan.git master 968c2729e576 23bf86af .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/23 02:35 https://github.com/google/kmsan.git master 968c2729e576 c0b80a55 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/22 18:16 https://github.com/google/kmsan.git master 968c2729e576 c0b80a55 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/22 13:01 https://github.com/google/kmsan.git master 968c2729e576 c0b80a55 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/21 20:16 https://github.com/google/kmsan.git master 968c2729e576 4bfd3c27 .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/17 13:38 https://github.com/google/kmsan.git master 968c2729e576 67cb024c .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/14 14:18 https://github.com/google/kmsan.git master 968c2729e576 4954e4b2 .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/13 23:20 https://github.com/google/kmsan.git master 968c2729e576 adf90437 .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/09 10:26 https://github.com/google/kmsan.git master 968c2729e576 aea5da89 .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/08 20:57 https://github.com/google/kmsan.git master 968c2729e576 aea5da89 .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/08 04:19 https://github.com/google/kmsan.git master 968c2729e576 0de35f24 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/08 00:48 https://github.com/google/kmsan.git master 968c2729e576 0de35f24 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/06 05:57 https://github.com/google/kmsan.git master 968c2729e576 2c6543ad .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/10/01 00:22 https://github.com/google/kmsan.git master 968c2729e576 feb56351 .config console log report info [disk image] [vmlinux] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/09/27 03:48 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/09/26 19:09 https://github.com/google/kmsan.git master 523d2ce66d07 d59ba983 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/09/24 13:05 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/09/23 06:45 https://github.com/google/kmsan.git master 523d2ce66d07 0042f2b4 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/09/18 21:35 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/09/18 03:22 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/09/08 16:55 https://github.com/google/kmsan.git master 4367d178d9eb f3027468 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/27 09:55 https://github.com/google/kmsan.git master ac3859c02d7f 07177916 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/23 19:21 https://github.com/google/kmsan.git master 1b070a5d1a2c cea8b0f7 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/19 04:38 https://github.com/google/kmsan.git master 1b070a5d1a2c 26a13b38 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/19 04:38 https://github.com/google/kmsan.git master 1b070a5d1a2c 26a13b38 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/15 10:53 https://github.com/google/kmsan.git master 1b070a5d1a2c 8dfcaa3d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/15 06:08 https://github.com/google/kmsan.git master 1b070a5d1a2c 8dfcaa3d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/12 11:15 https://github.com/google/kmsan.git master 1b070a5d1a2c 402cd70d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/09 13:28 https://github.com/google/kmsan.git master 1b070a5d1a2c da700653 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/08 15:22 https://github.com/google/kmsan.git master 168a92de0739 88e3a122 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/08 15:22 https://github.com/google/kmsan.git master 168a92de0739 88e3a122 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/08/06 04:18 https://github.com/google/kmsan.git master bba47a4b6421 e853abd9 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/07/31 02:31 https://github.com/google/kmsan.git master 3ea9edba19ef fef302b1 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/07/28 21:11 https://github.com/google/kmsan.git master 97117d69c353 fb95c74d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/07/19 23:02 https://github.com/google/kmsan.git master 97117d69c353 72a3cc0c .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/07/17 17:22 https://github.com/google/kmsan.git master 97117d69c353 95cb00d1 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/07/01 06:41 https://github.com/google/kmsan.git master ec1cbf8b060e 1434eec0 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/05/25 10:18 https://github.com/google/kmsan.git master c5c93da9af13 647c0e27 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/05/25 10:18 https://github.com/google/kmsan.git master c5c93da9af13 647c0e27 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/05/25 10:18 https://github.com/google/kmsan.git master c5c93da9af13 647c0e27 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/03/20 02:03 https://github.com/google/kmsan.git master 97c7732c2bb6 e2d91b1d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/03/19 06:26 https://github.com/google/kmsan.git master 97c7732c2bb6 e2d91b1d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/03/16 04:56 https://github.com/google/kmsan.git master 724946410067 9e8eaa75 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/03/01 12:09 https://github.com/google/kmsan.git master 724946410067 45a13a73 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/02/23 20:58 https://github.com/google/kmsan.git master 724946410067 6e821dbf .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/02/15 17:31 https://github.com/google/kmsan.git master 85cfd6e539bd 8b9ca619 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/02/05 06:00 https://github.com/google/kmsan.git master 85cfd6e539bd e13a05ed .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/01/22 15:55 https://github.com/google/kmsan.git master 85cfd6e539bd 214351e1 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/01/07 11:24 https://github.com/google/kmsan.git master 81c325bbf94e 6acc789a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/01/05 22:30 https://github.com/google/kmsan.git master 81c325bbf94e 6acc789a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2022/01/04 13:07 https://github.com/google/kmsan.git master 81c325bbf94e 7f723fbe .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2021/12/29 01:04 https://github.com/google/kmsan.git master 81c325bbf94e 76c8cf06 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2021/12/24 20:12 https://github.com/google/kmsan.git master 81c325bbf94e 6caa12e4 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2021/12/23 13:50 https://github.com/google/kmsan.git master 81c325bbf94e 6caa12e4 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2021/12/21 17:48 https://github.com/google/kmsan.git master 81c325bbf94e a938f0b8 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
2021/12/21 17:48 https://github.com/google/kmsan.git master 81c325bbf94e a938f0b8 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in crc_ccitt
* Struck through repros no longer work on HEAD.