syzbot


KMSAN: uninit-value in vidtv_ts_null_write_into

Status: upstream: reported C repro on 2026/02/15 10:49
Subsystems: media
[Documentation on labels]
Reported-by: syzbot+96f901260a0b2d29cd1a@syzkaller.appspotmail.com
First crash: 10d, last: 12h46m
Discussions (5)
Title Replies (including bot) Last reply
[PATCH v2] media: vidtv: fix pass-by-value structs causing MSAN warnings 2 (2) 2026/02/21 21:51
Re: [PATCH] media: vidtv: fix uninitialized args.buf_sz passed by value 6 (6) 2026/02/21 10:31
Re: [syzbot] [media?] KMSAN: uninit-value in vidtv_ts_null_write_into 1 (2) 2026/02/21 02:21
[PATCH] media: vidtv: fix uninitialized args.buf_sz passed by value 3 (3) 2026/02/19 10:17
[syzbot] [media?] KMSAN: uninit-value in vidtv_ts_null_write_into 0 (1) 2026/02/15 10:49
Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/02/20 22:10 54m abd.masalkhi@gmail.com patch upstream OK log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x43e/0x5c0 drivers/media/test-drivers/vidtv/vidtv_ts.c:62
 vidtv_ts_null_write_into+0x43e/0x5c0 drivers/media/test-drivers/vidtv/vidtv_ts.c:62
 vidtv_mux_pad_with_nulls drivers/media/test-drivers/vidtv/vidtv_mux.c:366 [inline]
 vidtv_mux_tick+0x34b7/0x3e40 drivers/media/test-drivers/vidtv/vidtv_mux.c:411
 process_one_work kernel/workqueue.c:3275 [inline]
 process_scheduled_works+0xae7/0x1d60 kernel/workqueue.c:3358
 worker_thread+0xede/0x1580 kernel/workqueue.c:3439
 kthread+0x53f/0x600 kernel/kthread.c:467
 ret_from_fork+0x20f/0x910 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Uninit was stored to memory at:
 vidtv_ts_null_write_into+0x437/0x5c0 drivers/media/test-drivers/vidtv/vidtv_ts.c:64
 vidtv_mux_pad_with_nulls drivers/media/test-drivers/vidtv/vidtv_mux.c:366 [inline]
 vidtv_mux_tick+0x34b7/0x3e40 drivers/media/test-drivers/vidtv/vidtv_mux.c:411
 process_one_work kernel/workqueue.c:3275 [inline]
 process_scheduled_works+0xae7/0x1d60 kernel/workqueue.c:3358
 worker_thread+0xede/0x1580 kernel/workqueue.c:3439
 kthread+0x53f/0x600 kernel/kthread.c:467
 ret_from_fork+0x20f/0x910 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Local variable args.i134 created at:
 vidtv_mux_pad_with_nulls drivers/media/test-drivers/vidtv/vidtv_mux.c:351 [inline]
 vidtv_mux_tick+0x3150/0x3e40 drivers/media/test-drivers/vidtv/vidtv_mux.c:411
 process_one_work kernel/workqueue.c:3275 [inline]
 process_scheduled_works+0xae7/0x1d60 kernel/workqueue.c:3358

CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Workqueue: events vidtv_mux_tick
=====================================================

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/14 08:54 upstream cd7a5651db26 1e62d198 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/21 19:37 upstream d79526b89571 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/20 23:33 upstream a95f71ad3e2e 741f5161 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/20 01:49 upstream 2b7a25df823d 73a252ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/17 15:00 upstream 970296997869 e439b951 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/16 04:47 upstream bb7a3fc2c976 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/12 14:50 upstream c22e26bd0906 76a109e2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/12 08:12 upstream c22e26bd0906 76a109e2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/11 10:43 upstream dc855b77719f 441e25b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/14 00:08 upstream cd7a5651db26 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/13 10:52 upstream cee73b1e840c 6a673c50 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in vidtv_ts_null_write_into
2026/02/12 05:21 upstream c22e26bd0906 76a109e2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in vidtv_ts_null_write_into
* Struck through repros no longer work on HEAD.