[syzbot] KMSAN: uninit-value in sctp_inq_pop

15 views
Skip to first unread message

David Kahurani

unread,
May 4, 2022, 2:47:54 AM5/4/22
to syzbot+70a42f...@syzkaller.appspotmail.com, syzkall...@googlegroups.com
On Saturday, January 8, 2022 at 11:00:26 AM UTC+3 syzbot wrote:
>
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit: 81c325bbf94e kmsan: hooks: do not check memory in kmsan_in..
> git tree: https://github.com/google/kmsan.git master
> console output: https://syzkaller.appspot.com/x/log.txt?x=15dad2c3b00000
> kernel config: https://syzkaller.appspot.com/x/.config?x=2d8b9a11641dc9aa
> dashboard link: https://syzkaller.appspot.com/bug?extid=70a42f45e76bede082be
> compiler: clang version 14.0.0 (/usr/local/google/src/llvm-git-monorepo 2b554920f11c8b763cd9ed9003f4e19b919b8e1f), GNU ld (GNU Binutils for Debian) 2.35.2
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=173a7b0db00000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14de2ffdb00000
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+70a42f...@syzkaller.appspotmail.com
>
> netlink: 244 bytes leftover after parsing attributes in process `syz-executor678'.
> =====================================================
> BUG: KMSAN: uninit-value in sctp_inq_pop+0x15c8/0x18f0 net/sctp/inqueue.c:205

Check whether the issue still exists.

Dmitry Vyukov

unread,
May 4, 2022, 3:01:30 AM5/4/22
to David Kahurani, syzbot+70a42f...@syzkaller.appspotmail.com, syzkall...@googlegroups.com
FWIW this info is available on the dashboard:
https://syzkaller.appspot.com/bug?extid=70a42f45e76bede082be
Last instance happened just few hours ago.

David Kahurani

unread,
May 8, 2022, 10:03:56 AM5/8/22
to syzbot+70a42f...@syzkaller.appspotmail.com, syzkall...@googlegroups.com
#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
master
0001-zero-initialize-skb.patch

syzbot

unread,
May 8, 2022, 10:03:58 AM5/8/22
to David Kahurani, k.kah...@gmail.com, syzkall...@googlegroups.com
> #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

KMSAN bugs can only be tested on https://github.com/google/kmsan.git tree
because KMSAN tool is not upstreamed yet.
See https://goo.gl/tpsmEJ#kmsan-bugs for details.

David Kahurani

unread,
May 8, 2022, 10:05:14 AM5/8/22
to syzbot, syzkall...@googlegroups.com
#syz test: https://github.com/google/kmsan.git
0001-zero-initialize-skb.patch

David Kahurani

unread,
May 10, 2022, 10:41:10 PM5/10/22
to syzbot, syzkall...@googlegroups.com
commit: d6e2c8c7 x86: kmsan: enable KMSAN builds for x86
git tree: https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=17a88dbcf00000
kernel config: https://syzkaller.appspot.com/x/.config?x=ea04fb6c8132388e
dashboard link: https://syzkaller.appspot.com/bug?extid=70a42f45e76bede082be
compiler: clang version 14.0.0
(/usr/local/google/src/llvm-git-monorepo
2b554920f11c8b763cd9ed9003f4e19b919b8e1f), GNU ld (GNU Binutils for
Debian) 2.35.2

#syz test: https://github.com/google/kmsan.git master
0001-rely-on-struct-sctp_chunkhdr-size-for-length.patch

syzbot

unread,
May 10, 2022, 11:03:15 PM5/10/22
to gli...@google.com, k.kah...@gmail.com, syzkall...@googlegroups.com
Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+70a42f...@syzkaller.appspotmail.com

Tested on:

commit: d6e2c8c7 x86: kmsan: enable KMSAN builds for x86
git tree: https://github.com/google/kmsan.git master
kernel config: https://syzkaller.appspot.com/x/.config?x=ea04fb6c8132388e
dashboard link: https://syzkaller.appspot.com/bug?extid=70a42f45e76bede082be
compiler: clang version 14.0.0 (/usr/local/google/src/llvm-git-monorepo 2b554920f11c8b763cd9ed9003f4e19b919b8e1f), GNU ld (GNU Binutils for Debian) 2.35.2
patch: https://syzkaller.appspot.com/x/patch.diff?x=14c45bfaf00000

Note: testing is done by a robot and is best-effort only.
Reply all
Reply to author
Forward
0 new messages