syzbot


KMSAN: uninit-value in io_rw_fail

Status: fixed on 2024/02/02 04:06
Subsystems: io-uring
[Documentation on labels]
Reported-by: syzbot+8d9c06e026c513a69f2f@syzkaller.appspotmail.com
Fix commit: 0a535eddbe0d io_uring/rw: ensure io->bytes_done is always initialized
First crash: 238d, last: 88d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [io-uring?] KMSAN: uninit-value in io_rw_fail 1 (2) 2024/01/14 14:26
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in io_rw_fail (2) io-uring 1 81d 77d 26/26 fixed on 2024/02/14 16:17
Last patch testing requests (2)
Created Duration User Patch Repo Result
2023/12/30 14:28 22m retest repro upstream OK log
2023/11/05 22:25 22m retest repro upstream report log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in io_fixup_rw_res io_uring/rw.c:273 [inline]
BUG: KMSAN: uninit-value in io_rw_fail+0x1a7/0x1b0 io_uring/rw.c:996
 io_fixup_rw_res io_uring/rw.c:273 [inline]
 io_rw_fail+0x1a7/0x1b0 io_uring/rw.c:996
 io_req_defer_failed+0x217/0x3e0 io_uring/io_uring.c:1030
 io_queue_sqe_fallback+0x1f4/0x260 io_uring/io_uring.c:2063
 io_submit_state_end io_uring/io_uring.c:2308 [inline]
 io_submit_sqes+0x2b83/0x2ff0 io_uring/io_uring.c:2426
 __do_sys_io_uring_enter io_uring/io_uring.c:3620 [inline]
 __se_sys_io_uring_enter+0x491/0x43f0 io_uring/io_uring.c:3554
 __x64_sys_io_uring_enter+0x11b/0x1a0 io_uring/io_uring.c:3554
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Uninit was created at:
 slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767
 slab_alloc_node mm/slub.c:3478 [inline]
 __kmem_cache_alloc_node+0x536/0x8d0 mm/slub.c:3517
 __do_kmalloc_node mm/slab_common.c:1022 [inline]
 __kmalloc+0x121/0x3c0 mm/slab_common.c:1036
 kmalloc include/linux/slab.h:603 [inline]
 io_alloc_async_data io_uring/io_uring.c:1745 [inline]
 io_req_prep_async+0x384/0x5a0 io_uring/io_uring.c:1766
 io_queue_sqe_fallback+0x95/0x260 io_uring/io_uring.c:2060
 io_submit_state_end io_uring/io_uring.c:2308 [inline]
 io_submit_sqes+0x2b83/0x2ff0 io_uring/io_uring.c:2426
 __do_sys_io_uring_enter io_uring/io_uring.c:3620 [inline]
 __se_sys_io_uring_enter+0x491/0x43f0 io_uring/io_uring.c:3554
 __x64_sys_io_uring_enter+0x11b/0x1a0 io_uring/io_uring.c:3554
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

CPU: 0 PID: 4988 Comm: syz-executor352 Not tainted 6.5.0-syzkaller-09276-g99d99825fc07 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
=====================================================

Crashes (25):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/09/01 14:52 upstream 99d99825fc07 696ea0d2 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/11/24 08:09 upstream d3fa86b1a7b4 5b429f39 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2024/01/30 10:07 upstream 9f8413c4a66f 991a98f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in io_rw_fail
2024/01/26 09:43 upstream 9f8413c4a66f cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in io_rw_fail
2024/01/20 13:19 upstream 9f8413c4a66f 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in io_rw_fail
2024/01/07 18:13 upstream 52b1853b080a d0304e9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in io_rw_fail
2024/01/07 09:42 upstream 52b1853b080a d0304e9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in io_rw_fail
2024/01/07 09:34 upstream 52b1853b080a d0304e9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in io_rw_fail
2023/12/16 14:23 upstream 3bd7d7488169 3222d10c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/12/13 20:03 upstream 88035e5694a8 ebcad15c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/12/13 05:04 upstream eaadbbaaff74 ebcad15c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/12/06 06:35 upstream bee0e7762ad2 f819d6f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/12/04 14:01 upstream 33cc938e65a9 f819d6f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/12/02 23:27 upstream 815fb87b7530 f819d6f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/10/22 21:27 upstream fe3cfe869d5e 361b23dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/10/19 07:56 upstream dd72f9c7e512 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/10/09 08:55 upstream 94f6f0550c62 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/09/26 23:18 upstream 50768a425b46 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/09/25 04:58 upstream 6465e260f487 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/09/12 12:13 upstream 0bb80ecc33a8 59da8366 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/09/09 19:49 upstream 6099776f9f26 6654cf89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2023/09/01 12:35 upstream 99d99825fc07 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce KMSAN: uninit-value in io_rw_fail
2024/01/18 22:29 upstream 9f8413c4a66f 239abf84 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in io_rw_fail
2023/11/15 05:29 upstream 9bacdd8996c7 cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in io_rw_fail
2023/10/09 08:53 upstream 94f6f0550c62 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in io_rw_fail
* Struck through repros no longer work on HEAD.