syzbot


KMSAN: uninit-value in n_tty_receive_buf_closing (3)

Status: upstream: reported C repro on 2024/08/19 13:42
Subsystems: serial
[Documentation on labels]
Reported-by: syzbot+dd514b5f0cf048aec256@syzkaller.appspotmail.com
First crash: 274d, last: 12h01m
Discussions (9)
Title Replies (including bot) Last reply
[syzbot] Monthly serial report (Apr 2025) 0 (1) 2025/04/22 10:11
[syzbot] Monthly serial report (Mar 2025) 0 (1) 2025/03/21 00:44
[syzbot] Monthly serial report (Feb 2025) 0 (1) 2025/02/17 12:44
[syzbot] Monthly serial report (Jan 2025) 0 (1) 2025/01/17 10:36
[syzbot] [serial?] KMSAN: uninit-value in n_tty_receive_buf_closing (3) 0 (2) 2024/12/27 18:44
[syzbot] Monthly serial report (Dec 2024) 0 (1) 2024/12/17 09:47
[syzbot] Monthly serial report (Nov 2024) 0 (1) 2024/11/18 10:38
[syzbot] Monthly serial report (Oct 2024) 0 (1) 2024/10/15 08:33
[syzbot] Monthly serial report (Sep 2024) 0 (1) 2024/09/14 10:58
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in n_tty_receive_buf_closing serial 2 599d 611d 0/28 closed as invalid on 2023/12/22 15:49
upstream KMSAN: uninit-value in n_tty_receive_buf_closing (2) serial 1 499d 493d 0/28 auto-obsoleted due to no activity on 2024/04/13 06:47

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in n_tty_receive_char_closing drivers/tty/n_tty.c:1454 [inline]
BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x539/0xb40 drivers/tty/n_tty.c:1567
 n_tty_receive_char_closing drivers/tty/n_tty.c:1454 [inline]
 n_tty_receive_buf_closing+0x539/0xb40 drivers/tty/n_tty.c:1567
 __receive_buf drivers/tty/n_tty.c:1630 [inline]
 n_tty_receive_buf_common+0x196b/0x2490 drivers/tty/n_tty.c:1739
 n_tty_receive_buf2+0x4c/0x60 drivers/tty/n_tty.c:1785
 tty_ldisc_receive_buf+0xd0/0x290 drivers/tty/tty_buffer.c:387
 tty_port_default_receive_buf+0xdf/0x190 drivers/tty/tty_port.c:37
 receive_buf drivers/tty/tty_buffer.c:445 [inline]
 flush_to_ldisc+0x473/0xdb0 drivers/tty/tty_buffer.c:495
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xae0/0x1c40 kernel/workqueue.c:3310
 worker_thread+0xea7/0x14f0 kernel/workqueue.c:3391
 kthread+0x3e2/0x540 kernel/kthread.c:389
 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:4125 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 __do_kmalloc_node mm/slub.c:4297 [inline]
 __kmalloc_noprof+0x923/0x1230 mm/slub.c:4310
 kmalloc_noprof include/linux/slab.h:905 [inline]
 tty_buffer_alloc drivers/tty/tty_buffer.c:180 [inline]
 __tty_buffer_request_room+0x36e/0x6d0 drivers/tty/tty_buffer.c:273
 __tty_insert_flip_string_flags+0x140/0x570 drivers/tty/tty_buffer.c:309
 tty_insert_flip_char include/linux/tty_flip.h:77 [inline]
 uart_insert_char+0x39e/0xa10 drivers/tty/serial/serial_core.c:3550
 serial8250_read_char+0x1a7/0x5d0 drivers/tty/serial/8250/8250_port.c:1763
 serial8250_rx_chars drivers/tty/serial/8250/8250_port.c:1780 [inline]
 serial8250_handle_irq+0x970/0x1130 drivers/tty/serial/8250/8250_port.c:1944
 serial8250_default_handle_irq+0x120/0x2b0 drivers/tty/serial/8250/8250_port.c:1969
 serial8250_interrupt+0xc5/0x360 drivers/tty/serial/8250/8250_core.c:86
 __handle_irq_event_percpu+0x118/0xca0 kernel/irq/handle.c:158
 handle_irq_event_percpu kernel/irq/handle.c:193 [inline]
 handle_irq_event+0xef/0x2c0 kernel/irq/handle.c:210
 handle_edge_irq+0x340/0xfb0 kernel/irq/chip.c:831
 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline]
 handle_irq arch/x86/kernel/irq.c:247 [inline]
 call_irq_handler arch/x86/kernel/irq.c:259 [inline]
 __common_interrupt+0x97/0x1f0 arch/x86/kernel/irq.c:285
 common_interrupt+0x92/0xb0 arch/x86/kernel/irq.c:278
 asm_common_interrupt+0x2b/0x40 arch/x86/include/asm/idtentry.h:693

CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:3 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events_unbound flush_to_ldisc
=====================================================

Crashes (115):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/27 18:43 upstream d6ef8b40d075 d3ccff63 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/05/15 21:00 upstream f1f2797f8a24 d6b2ee52 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/05/14 11:23 upstream 02ddfb981de8 7344edeb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/05/09 07:07 upstream 02ddfb981de8 bb813bcc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/04/29 06:57 upstream 02ddfb981de8 aeb6ec69 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/04/20 19:37 upstream 6fea5fabd332 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/04/19 03:27 upstream 3088d26962e8 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/04/14 00:46 upstream 8ffd015db85f 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/04/13 11:05 upstream 7cdabafc0012 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/04/01 11:21 upstream 08733088b566 36d76a97 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/31 20:42 upstream 4e82c87058f4 36d76a97 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/29 02:02 upstream eff5f16bfd87 cf25e2c2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/28 12:27 upstream acb4f33713b9 49900278 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/27 21:15 upstream 1a9239bb4253 6c09fb82 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/27 13:04 upstream 1e1ba8d23dae 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/27 07:03 upstream 1e1ba8d23dae 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/25 22:33 upstream 2df0c02dab82 89d30d73 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/25 21:01 upstream 2df0c02dab82 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/25 09:32 upstream 327ecdbc0fda 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/20 20:57 upstream 5fc319360819 62330552 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/16 07:05 upstream 31d7109a19f6 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/11 17:06 upstream 4d872d51bc9d f2eee6b3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/09 14:53 upstream 1110ce6a1e34 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/02/23 02:21 upstream 5cf80612d3f7 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/02/20 00:45 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/01/25 21:37 upstream b46c89c08f41 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/01/21 15:42 upstream 95ec54a420b8 6e87cfa2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/01/17 07:24 upstream ce69b4019001 f9e07a6e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/01/14 23:03 upstream c3812b15000c 7315a7cf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/05/16 18:52 upstream fee3e843b309 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/05/15 17:13 upstream 02ddfb981de8 d6b2ee52 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/05/13 18:36 upstream 02ddfb981de8 7344edeb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/05/06 04:48 upstream 02ddfb981de8 ae98e6b9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/05/05 16:20 upstream 02ddfb981de8 6ca47dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/04/15 12:01 upstream 834a4a689699 23b969b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/04/10 05:09 upstream 3b07108ada81 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/10 07:25 upstream 80e54e84911a 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/09 17:22 upstream 1110ce6a1e34 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/03/07 02:54 upstream f315296c92fd 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/02/18 21:56 upstream 6537cfb395f3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/02/14 13:40 upstream 128c8f96eb86 d9a046cf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/02/11 16:29 upstream febbc555cf0f f2baddf5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/02/08 02:37 upstream 7ee983c850b4 a4f327c2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/02/05 08:55 upstream 5c8c229261f1 5896748e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/02/03 00:59 upstream d79bc8f79baa 568559e4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/01/27 07:09 upstream 9c5968db9e62 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2025/01/10 08:52 upstream 2144da25584e 67d7ec0a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
2024/08/15 13:36 upstream 1fb918967b56 e4bacdaf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in n_tty_receive_buf_closing
* Struck through repros no longer work on HEAD.