syzbot


KMSAN: uninit-value in ieee802154_hdr_push (2)

Status: upstream: reported C repro on 2024/01/02 13:42
Subsystems: wpan
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+60a66d44892b66b56545@syzkaller.appspotmail.com
First crash: 903d, last: 1d18h
✨ AI Jobs (1)
ID Workflow Result Correct Ext Bug ID Bug Created Started Finished Revision Error
e4efe8fa-ccfb-4ec2-8160-bce999f524a4 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ KMSAN: uninit-value in ieee802154_hdr_push (2) 2026/05/23 16:09 2026/05/23 16:09 2026/05/23 16:48 c69befb30ac10e158cc9d1557b508ee3f0eca1de
Discussions (16)
Title Replies (including bot) Last reply
[syzbot] Monthly wpan report (Apr 2026) 0 (1) 2026/04/29 20:32
[syzbot] Monthly wpan report (Mar 2026) 0 (1) 2026/03/31 08:07
[syzbot] Monthly wpan report (Feb 2026) 0 (1) 2026/02/26 12:59
[syzbot] Monthly wpan report (Jan 2026) 0 (1) 2026/01/26 07:12
[PATCH] mac802154: fix uninitialized security header fields 2 (2) 2026/01/08 17:21
[syzbot] [wpan?] KMSAN: uninit-value in ieee802154_hdr_push (2) 0 (5) 2025/12/13 22:05
[syzbot] Monthly wpan report (Nov 2025) 0 (1) 2025/11/24 12:38
[syzbot] Monthly wpan report (Jul 2025) 0 (1) 2025/07/16 13:32
[syzbot] Monthly wpan report (May 2025) 0 (1) 2025/05/13 12:36
[syzbot] Monthly wpan report (Apr 2025) 0 (1) 2025/04/11 13:07
[syzbot] Monthly wpan report (Mar 2025) 0 (1) 2025/03/11 14:05
[syzbot] Monthly wpan report (Feb 2025) 0 (1) 2025/02/07 13:05
[syzbot] Monthly wpan report (Jan 2025) 0 (1) 2025/01/07 14:54
[syzbot] Monthly wpan report (Dec 2024) 0 (1) 2024/12/07 16:12
[PATCH wpan] mac802154: fix uninit-value issue in ieee802154_header_create() 2 (2) 2024/02/20 01:07
Re: [PATCH RESEND] mac802154: Fix uninit-value access in ieee802154_hdr_push_sechdr 2 (2) 2024/01/15 03:32
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in ieee802154_hdr_push wpan 7 281 1038d 1927d 0/29 auto-obsoleted due to no activity on 2023/10/17 04:17
Last patch testing requests (14)
Created Duration User Patch Repo Result
2026/04/25 15:08 35m retest repro upstream report log
2026/04/25 15:08 29m retest repro upstream report log
2026/04/25 15:08 2h26m retest repro upstream report log
2026/04/25 15:08 2h21m retest repro upstream report log
2026/04/25 15:08 30m retest repro upstream report log
2025/12/20 09:19 21m retest repro upstream report log
2025/12/20 09:19 30m retest repro upstream report log
2025/12/20 09:19 30m retest repro upstream report log
2025/12/20 09:19 36m retest repro upstream report log
2025/12/20 09:19 20m retest repro upstream report log
2025/12/13 22:05 32m katharasasikumar007@gmail.com patch upstream OK log
2025/12/13 20:43 26m katharasasikumar007@gmail.com patch upstream report log
2024/02/13 14:17 27m n.zhandarovich@fintech.ru patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master OK log
2024/02/13 14:13 23m n.zhandarovich@fintech.ru https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master report log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in ieee802154_hdr_push_sechdr net/ieee802154/header_ops.c:54 [inline]
BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30 net/ieee802154/header_ops.c:108
 ieee802154_hdr_push_sechdr net/ieee802154/header_ops.c:54 [inline]
 ieee802154_hdr_push+0x9ac/0xa30 net/ieee802154/header_ops.c:108
 ieee802154_header_create+0x854/0xb90 net/mac802154/iface.c:396
 wpan_dev_hard_header include/net/cfg802154.h:525 [inline]
 dgram_sendmsg+0xb40/0x16d0 net/ieee802154/socket.c:677
 ieee802154_sock_sendmsg+0x92/0xd0 net/ieee802154/socket.c:96
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x333/0x3d0 net/socket.c:742
 ____sys_sendmsg+0x7e0/0xd80 net/socket.c:2630
 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2684
 __sys_sendmsg net/socket.c:2716 [inline]
 __do_sys_sendmsg net/socket.c:2721 [inline]
 __se_sys_sendmsg net/socket.c:2719 [inline]
 __x64_sys_sendmsg+0x211/0x3e0 net/socket.c:2719
 x64_sys_call+0x1dfd/0x3e30 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 ieee802154_hdr_push_sechdr net/ieee802154/header_ops.c:54 [inline]
 ieee802154_hdr_push+0x9a5/0xa30 net/ieee802154/header_ops.c:108
 ieee802154_header_create+0x854/0xb90 net/mac802154/iface.c:396
 wpan_dev_hard_header include/net/cfg802154.h:525 [inline]
 dgram_sendmsg+0xb40/0x16d0 net/ieee802154/socket.c:677
 ieee802154_sock_sendmsg+0x92/0xd0 net/ieee802154/socket.c:96
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x333/0x3d0 net/socket.c:742
 ____sys_sendmsg+0x7e0/0xd80 net/socket.c:2630
 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2684
 __sys_sendmsg net/socket.c:2716 [inline]
 __do_sys_sendmsg net/socket.c:2721 [inline]
 __se_sys_sendmsg net/socket.c:2719 [inline]
 __x64_sys_sendmsg+0x211/0x3e0 net/socket.c:2719
 x64_sys_call+0x1dfd/0x3e30 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable hdr created at:
 ieee802154_header_create+0x4e/0xb90 net/mac802154/iface.c:360
 wpan_dev_hard_header include/net/cfg802154.h:525 [inline]
 dgram_sendmsg+0xb40/0x16d0 net/ieee802154/socket.c:677

CPU: 1 UID: 0 PID: 6052 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
=====================================================

Crashes (514):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/19 02:56 upstream f406055cb18c 1c8c8cd8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2025/10/19 02:47 upstream f406055cb18c 1c8c8cd8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2025/02/23 03:00 upstream 5cf80612d3f7 d34966d1 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2024/03/24 17:23 upstream 70293240c5ce 0ea90952 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2024/01/02 13:28 upstream 610a9b8f49fb fb427a07 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/28 21:26 upstream eb3f4b7426cf 9a5a7e5e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/21 22:12 upstream 8bc67e4db64a e195359d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/16 18:14 upstream 6916d5703ddf a15a64a6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/14 04:48 upstream e1914add2799 6ccb967e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/13 04:38 upstream c21b90f77687 a0949470 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/12 15:26 upstream 50897c955902 d5b1a17d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/11 14:46 upstream 5d6919055dec e6eb7c0b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/07 13:45 upstream 5862221fdded f250db59 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/04/11 03:20 upstream 7c6c4ed80b87 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/04/11 01:12 upstream 7c6c4ed80b87 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/04/10 12:04 upstream 9a9c8ce300cd 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/04/03 01:54 upstream 5619b098e2fb 8b15d4ae .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/26 07:07 upstream d2a43e7f89da c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/17 20:37 upstream 2d1373e4246d c01bca74 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/17 15:36 upstream 2d1373e4246d c01bca74 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/17 01:53 upstream 2d1373e4246d 0737c18f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/17 01:48 upstream 2d1373e4246d 0737c18f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/12 14:32 upstream 80234b5ab240 4efadf07 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/12 01:59 upstream b29fb8829bff 2d88ab01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2023/12/21 00:08 upstream 55cb5f43689d 3ad490ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ieee802154_hdr_push
2026/06/10 01:40 upstream 2d3090a8aeb5 34dab4be .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/06/04 23:06 upstream 9154c4af7829 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/06/02 13:16 upstream 6f3ed7fec72f 62fe1528 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/28 22:27 upstream eb3f4b7426cf 9a5a7e5e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/22 00:30 upstream 8bc67e4db64a e195359d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/17 22:37 upstream e5d505e3664b de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/17 22:37 upstream e5d505e3664b de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/16 20:11 upstream 6916d5703ddf a15a64a6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/14 21:21 upstream 66182ca873a4 6ccb967e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/14 07:30 upstream e1914add2799 6ccb967e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/14 06:19 upstream e1914add2799 6ccb967e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/12 18:08 upstream 50897c955902 d5b1a17d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/11 18:32 upstream 5d6919055dec e6eb7c0b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/10 17:13 upstream 1bfaee9d3351 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/08 08:59 upstream 917719c412c4 5633175a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/07 08:15 upstream 5862221fdded f250db59 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/05/03 21:55 upstream f377d0025eb0 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/04/10 17:15 upstream 9a9c8ce300cd 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/04/03 15:39 upstream 5619b098e2fb 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/31 15:22 upstream d0c3bcd5b897 aeea1c72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/27 05:24 upstream 46b513250491 50cdcaa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/26 10:21 upstream d2a43e7f89da c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/19 06:52 upstream 8a30aeb0d1b4 0199f9a1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/17 03:52 upstream 2d1373e4246d 0737c18f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/14 22:14 upstream 69237f8c1f69 ee8d34d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/14 15:14 upstream 1c9982b49613 ee8d34d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/13 06:13 upstream 0257f64bdac7 2f7f359d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/12 20:29 upstream 80234b5ab240 4efadf07 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/03/12 04:45 upstream b29fb8829bff 2d88ab01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/02/27 00:45 upstream f4d0ec0aa20d ffa54287 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
2026/02/23 20:43 upstream 6de23f81a5e0 305c0ec5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ieee802154_hdr_push
* Struck through repros no longer work on HEAD.