syzbot


KMSAN: uninit-value in btrfs_clean_tree_block (2)

Status: upstream: reported on 2021/11/20 10:47
Reported-by: syzbot+fba8e2116a12609b6c59@syzkaller.appspotmail.com
First crash: 316d, last: 1h29m
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in btrfs_clean_tree_block 18531 418d 739d 0/24 auto-closed as invalid on 2021/11/04 13:33
upstream KMSAN: uninit-value in post_read_mst_fixup 199 240d 680d 0/24 auto-closed as invalid on 2022/05/31 07:12

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in btrfs_clean_tree_block+0x245/0x2d0 fs/btrfs/disk-io.c:959
 btrfs_clean_tree_block+0x245/0x2d0 fs/btrfs/disk-io.c:959
 btrfs_init_new_buffer fs/btrfs/extent-tree.c:4899 [inline]
 btrfs_alloc_tree_block+0x800/0x1ea0 fs/btrfs/extent-tree.c:4976
 __btrfs_cow_block+0x580/0x1cd0 fs/btrfs/ctree.c:417
 btrfs_cow_block+0x7ca/0x9d0 fs/btrfs/ctree.c:572
 commit_cowonly_roots+0x1b2/0x1110 fs/btrfs/transaction.c:1285
 btrfs_commit_transaction+0x2241/0x5980 fs/btrfs/transaction.c:2366
 btrfs_commit_super+0x138/0x180 fs/btrfs/disk-io.c:4426
 close_ctree+0x377/0x9f1 fs/btrfs/disk-io.c:4550
 btrfs_put_super+0x38/0x50 fs/btrfs/super.c:392
 generic_shutdown_super+0x184/0x570 fs/super.c:491
 kill_anon_super+0x39/0x70 fs/super.c:1085
 btrfs_kill_super+0x39/0x60 fs/btrfs/super.c:2440
 deactivate_locked_super+0xb1/0x120 fs/super.c:332
 deactivate_super+0x13a/0x150 fs/super.c:363
 cleanup_mnt+0x703/0x780 fs/namespace.c:1186
 __cleanup_mnt+0x1e/0x30 fs/namespace.c:1193
 task_work_run+0x13c/0x280 kernel/task_work.c:177
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0x2a9/0x320 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0x16e/0x220 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x23/0x40 kernel/entry/common.c:296
 __do_fast_syscall_32+0xb1/0x100 arch/x86/entry/common.c:181
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:
 __alloc_pages+0x9f1/0xe80 mm/page_alloc.c:5556
 alloc_pages+0xaae/0xd80 mm/mempolicy.c:2270
 folio_alloc+0x3e/0x120 mm/mempolicy.c:2280
 filemap_alloc_folio mm/filemap.c:970 [inline]
 __filemap_get_folio+0xe59/0x1b00 mm/filemap.c:1970
 pagecache_get_page+0x4a/0x4d0 mm/folio-compat.c:104
 find_or_create_page include/linux/pagemap.h:613 [inline]
 alloc_extent_buffer+0x731/0x2770 fs/btrfs/extent_io.c:6207
 btrfs_find_create_tree_block+0x42/0x50 fs/btrfs/disk-io.c:920
 btrfs_init_new_buffer fs/btrfs/extent-tree.c:4860 [inline]
 btrfs_alloc_tree_block+0x36d/0x1ea0 fs/btrfs/extent-tree.c:4976
 __btrfs_cow_block+0x580/0x1cd0 fs/btrfs/ctree.c:417
 btrfs_cow_block+0x7ca/0x9d0 fs/btrfs/ctree.c:572
 commit_cowonly_roots+0x1b2/0x1110 fs/btrfs/transaction.c:1285
 btrfs_commit_transaction+0x2241/0x5980 fs/btrfs/transaction.c:2366
 btrfs_commit_super+0x138/0x180 fs/btrfs/disk-io.c:4426
 close_ctree+0x377/0x9f1 fs/btrfs/disk-io.c:4550
 btrfs_put_super+0x38/0x50 fs/btrfs/super.c:392
 generic_shutdown_super+0x184/0x570 fs/super.c:491
 kill_anon_super+0x39/0x70 fs/super.c:1085
 btrfs_kill_super+0x39/0x60 fs/btrfs/super.c:2440
 deactivate_locked_super+0xb1/0x120 fs/super.c:332
 deactivate_super+0x13a/0x150 fs/super.c:363
 cleanup_mnt+0x703/0x780 fs/namespace.c:1186
 __cleanup_mnt+0x1e/0x30 fs/namespace.c:1193
 task_work_run+0x13c/0x280 kernel/task_work.c:177
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0x2a9/0x320 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0x16e/0x220 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x23/0x40 kernel/entry/common.c:296
 __do_fast_syscall_32+0xb1/0x100 arch/x86/entry/common.c:181
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 1 PID: 3516 Comm: syz-executor.4 Not tainted 6.0.0-rc5-syzkaller-48541-g879600fbb6d3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
=====================================================

Crashes (10751):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2022/09/28 22:44 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 19:21 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 18:08 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 16:51 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 16:29 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 15:25 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 15:09 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 14:03 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 12:55 https://github.com/google/kmsan.git master 466a27efa4f0 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 12:14 https://github.com/google/kmsan.git master 466a27efa4f0 e2556bc3 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 11:09 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 09:09 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 07:26 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 05:48 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 04:35 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 03:31 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 02:09 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 01:13 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 00:11 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 23:25 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 22:25 https://github.com/google/kmsan.git master 466a27efa4f0 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 20:54 https://github.com/google/kmsan.git master 466a27efa4f0 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 20:43 https://github.com/google/kmsan.git master 466a27efa4f0 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 19:43 https://github.com/google/kmsan.git master 466a27efa4f0 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 18:20 https://github.com/google/kmsan.git master 466a27efa4f0 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 17:58 https://github.com/google/kmsan.git master 466a27efa4f0 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 16:51 https://github.com/google/kmsan.git master 523d2ce66d07 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 14:21 https://github.com/google/kmsan.git master 523d2ce66d07 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 13:11 https://github.com/google/kmsan.git master 523d2ce66d07 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 12:11 https://github.com/google/kmsan.git master 523d2ce66d07 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 10:58 https://github.com/google/kmsan.git master 523d2ce66d07 87840e00 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 08:54 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 07:28 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 06:21 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 06:11 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 04:18 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 02:57 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 01:31 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/27 00:23 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/26 23:06 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/26 23:00 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/26 21:54 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2021/11/20 06:45 https://github.com/google/kmsan.git master 412af9cd936d 3a9d0024 .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2021/11/16 10:38 https://github.com/google/kmsan.git master 386004877847 600426bd .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2021/11/16 10:28 https://github.com/google/kmsan.git master 386004877847 600426bd .config log report info KMSAN: uninit-value in btrfs_clean_tree_block
ci-upstream-kmsan-gce-386 2022/09/28 19:48 https://github.com/google/kmsan.git master 879600fbb6d3 e2556bc3 .config log report info KMSAN: uninit-value in nilfs_add_checksums_on_logs
ci-upstream-kmsan-gce-386 2022/09/28 07:27 https://github.com/google/kmsan.git master 466a27efa4f0 75c78242 .config log report info KMSAN: uninit-value in post_read_mst_fixup
ci-upstream-kmsan-gce-386 2022/09/27 04:54 https://github.com/google/kmsan.git master 523d2ce66d07 10323ddf .config log report info KMSAN: uninit-value in nilfs_add_checksums_on_logs
ci-upstream-kmsan-gce-386 2022/09/20 07:54 https://github.com/google/kmsan.git master 8f4ae27df775 7c41a9ba .config log report info KMSAN: uninit-value in ima_add_template_entry
* Struck through repros no longer work on HEAD.