syzbot


KMSAN: uninit-value in __crc32c_le_base (3)

Status: upstream: reported on 2023/04/27 20:50
Labels: xfs (incorrect?)
Reported-by: syzbot+a6d6b8fffa294705dbd8@syzkaller.appspotmail.com
First crash: 36d, last: 15m
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly xfs report (May 2023) 1 (2) 2023/05/05 13:59
[syzbot] [crypto?] KMSAN: uninit-value in __crc32c_le_base (3) 0 (1) 2023/04/27 20:50
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in __crc32c_le_base (2) crypto C 6207 60d 1132d 0/24 closed as invalid on 2023/04/06 23:31
upstream KMSAN: uninit-value in __crc32c_le_base crypto syz 567 1241d 1286d 16/24 fixed on 2020/02/14 01:19

Sample crash report:
loop5: detected capacity change from 0 to 32768
XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
XFS (loop5): Ending clean mount
XFS (loop5): Quotacheck needed: Please wait.
=====================================================
BUG: KMSAN: uninit-value in crc32_body lib/crc32.c:112 [inline]
BUG: KMSAN: uninit-value in crc32_le_generic lib/crc32.c:179 [inline]
BUG: KMSAN: uninit-value in __crc32c_le_base+0x467/0xd80 lib/crc32.c:201
 crc32_body lib/crc32.c:112 [inline]
 crc32_le_generic lib/crc32.c:179 [inline]
 __crc32c_le_base+0x467/0xd80 lib/crc32.c:201
 chksum_update+0x5b/0xd0 crypto/crc32c_generic.c:88
 crypto_shash_update+0x27e/0x3c0 crypto/shash.c:134
 crc32c+0xba/0x170 lib/libcrc32c.c:47
 xlog_cksum fs/xfs/xfs_log.c:1867 [inline]
 xlog_sync+0xf66/0x11e0 fs/xfs/xfs_log.c:2111
 xlog_state_release_iclog+0x3d0/0x7e0 fs/xfs/xfs_log.c:619
 xlog_force_iclog fs/xfs/xfs_log.c:888 [inline]
 xlog_force_and_check_iclog fs/xfs/xfs_log.c:3172 [inline]
 xfs_log_force+0x9d3/0xf20 fs/xfs/xfs_log.c:3249
 xfs_qm_dqflush+0x118e/0x1790 fs/xfs/xfs_dquot.c:1292
 xfs_qm_flush_one+0x13b/0x590 fs/xfs/xfs_qm.c:1260
 xfs_qm_dquot_walk+0x2ad/0x790 fs/xfs/xfs_qm.c:87
 xfs_qm_quotacheck+0x6af/0xb00 fs/xfs/xfs_qm.c:1348
 xfs_qm_mount_quotas+0x3ef/0x890 fs/xfs/xfs_qm.c:1457
 xfs_mountfs+0x212c/0x23c0 fs/xfs/xfs_mount.c:959
 xfs_fs_fill_super+0x2062/0x2350 fs/xfs/xfs_super.c:1693
 get_tree_bdev+0x88a/0xd10 fs/super.c:1303
 xfs_fs_get_tree+0x34/0x40 fs/xfs/xfs_super.c:1740
 vfs_get_tree+0xa5/0x500 fs/super.c:1510
 do_new_mount+0x68d/0x1540 fs/namespace.c:3039
 path_mount+0x725/0x1ee0 fs/namespace.c:3369
 do_mount fs/namespace.c:3382 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x725/0x810 fs/namespace.c:3568
 __ia32_sys_mount+0xe3/0x150 fs/namespace.c:3568
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was stored to memory at:
 xlog_write_iovec fs/xfs/xfs_log.c:2259 [inline]
 xlog_write_full fs/xfs/xfs_log.c:2294 [inline]
 xlog_write+0x1bcf/0x2110 fs/xfs/xfs_log.c:2563
 xlog_cil_write_chain fs/xfs/xfs_log_cil.c:973 [inline]
 xlog_cil_push_work+0x2d7a/0x3f90 fs/xfs/xfs_log_cil.c:1318
 process_one_work+0xb0d/0x1410 kernel/workqueue.c:2405
 worker_thread+0x107e/0x1d60 kernel/workqueue.c:2552
 kthread+0x3e8/0x540 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

Uninit was created at:
 slab_post_alloc_hook+0x12d/0xb60 mm/slab.h:716
 slab_alloc_node mm/slub.c:3451 [inline]
 __kmem_cache_alloc_node+0x4ff/0x8b0 mm/slub.c:3490
 __do_kmalloc_node mm/slab_common.c:965 [inline]
 __kmalloc+0x121/0x3c0 mm/slab_common.c:979
 kmalloc include/linux/slab.h:563 [inline]
 xlog_kvmalloc fs/xfs/xfs_log_priv.h:700 [inline]
 xlog_cil_alloc_shadow_bufs fs/xfs/xfs_log_cil.c:338 [inline]
 xlog_cil_commit+0x47c/0x4770 fs/xfs/xfs_log_cil.c:1629
 __xfs_trans_commit+0x778/0x1390 fs/xfs/xfs_trans.c:1005
 xfs_trans_roll+0x10a/0x6e0 fs/xfs/xfs_trans.c:1153
 xfs_defer_trans_roll+0x102/0x570 fs/xfs/libxfs/xfs_defer.c:366
 xfs_defer_finish_noroll+0x4c1/0x2f30 fs/xfs/libxfs/xfs_defer.c:553
 __xfs_trans_commit+0x963/0x1390 fs/xfs/xfs_trans.c:970
 xfs_trans_commit+0x2f/0x40 fs/xfs/xfs_trans.c:1049
 xfs_dquot_disk_alloc+0xc96/0x10b0 fs/xfs/xfs_dquot.c:384
 xfs_qm_dqread+0x13c/0x930 fs/xfs/xfs_dquot.c:665
 xfs_qm_dqget+0x2d8/0xc80 fs/xfs/xfs_dquot.c:869
 xfs_qm_quotacheck_dqadjust+0xb7/0x840 fs/xfs/xfs_qm.c:1085
 xfs_qm_dqusage_adjust+0x86c/0x8f0 fs/xfs/xfs_qm.c:1204
 xfs_iwalk_ag_recs+0x5ca/0xa50 fs/xfs/xfs_iwalk.c:220
 xfs_iwalk_run_callbacks+0x27f/0x590 fs/xfs/xfs_iwalk.c:376
 xfs_iwalk_ag+0xeca/0x1040 fs/xfs/xfs_iwalk.c:482
 xfs_iwalk_ag_work+0x207/0x300 fs/xfs/xfs_iwalk.c:624
 xfs_pwork_work+0x97/0x2b0 fs/xfs/xfs_pwork.c:47
 process_one_work+0xb0d/0x1410 kernel/workqueue.c:2405
 worker_thread+0x107e/0x1d60 kernel/workqueue.c:2552
 kthread+0x3e8/0x540 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

CPU: 1 PID: 5252 Comm: syz-executor.5 Not tainted 6.4.0-rc4-syzkaller-g2741f1b02117 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
=====================================================

Crashes (1590):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2023/06/02 15:30 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 14:30 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 12:49 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 11:24 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 10:48 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 09:26 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 08:20 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 07:56 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 06:29 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 05:24 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 03:56 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 03:14 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 01:58 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/02 00:22 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/01 22:55 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/01 21:41 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/01 13:45 https://github.com/google/kmsan.git master 2741f1b02117 babc4389 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/01 12:06 https://github.com/google/kmsan.git master 2741f1b02117 babc4389 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/01 10:56 https://github.com/google/kmsan.git master 2741f1b02117 babc4389 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/01 09:35 https://github.com/google/kmsan.git master 2741f1b02117 babc4389 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/01 08:11 https://github.com/google/kmsan.git master 2741f1b02117 babc4389 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/06/01 00:53 https://github.com/google/kmsan.git master 2741f1b02117 e2a77acd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/31 23:16 https://github.com/google/kmsan.git master 2741f1b02117 e2a77acd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/31 22:38 https://github.com/google/kmsan.git master 2741f1b02117 e2a77acd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/31 21:32 https://github.com/google/kmsan.git master 2741f1b02117 e2a77acd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/31 11:51 https://github.com/google/kmsan.git master 2741f1b02117 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/31 10:18 https://github.com/google/kmsan.git master 2741f1b02117 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/31 08:45 https://github.com/google/kmsan.git master 2741f1b02117 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/31 06:10 https://github.com/google/kmsan.git master 2741f1b02117 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/30 07:17 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/30 05:44 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/30 04:42 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/30 04:38 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/30 03:19 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/30 01:59 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/30 00:07 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 22:11 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 20:36 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 20:16 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 19:03 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 17:20 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 16:13 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 13:26 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 12:21 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/05/29 11:09 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
2023/04/27 03:00 https://github.com/google/kmsan.git master 81af97bdef5e 19a3dabe .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in __crc32c_le_base
* Struck through repros no longer work on HEAD.