syzbot


KMSAN: uninit-value in sha_transform (2)

Status: closed as invalid on 2018/06/27 15:18
Subsystems: crypto
[Documentation on labels]
First crash: 2675d, last: 2668d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in sha_transform crypto 7 C 15 2687d 2701d 0/29 closed as invalid on 2018/04/22 15:44

Sample crash report:
kernel msg: ebtables bug: please report to author: Entries_size never zero
kernel msg: ebtables bug: please report to author: Entries_size never zero
==================================================================
BUG: KMSAN: uninit-value in __arch_swab32 arch/x86/include/uapi/asm/swab.h:10 [inline]
BUG: KMSAN: uninit-value in __fswab32 include/uapi/linux/swab.h:59 [inline]
BUG: KMSAN: uninit-value in __swab32p include/uapi/linux/swab.h:179 [inline]
BUG: KMSAN: uninit-value in __be32_to_cpup include/uapi/linux/byteorder/little_endian.h:82 [inline]
BUG: KMSAN: uninit-value in get_unaligned_be32 include/linux/unaligned/access_ok.h:30 [inline]
BUG: KMSAN: uninit-value in sha_transform+0x58ec/0x6320 lib/sha1.c:93
CPU: 1 PID: 7244 Comm: syz-executor7 Not tainted 4.17.0-rc3+ #88
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 __arch_swab32 arch/x86/include/uapi/asm/swab.h:10 [inline]
 __fswab32 include/uapi/linux/swab.h:59 [inline]
 __swab32p include/uapi/linux/swab.h:179 [inline]
 __be32_to_cpup include/uapi/linux/byteorder/little_endian.h:82 [inline]
 get_unaligned_be32 include/linux/unaligned/access_ok.h:30 [inline]
 sha_transform+0x58ec/0x6320 lib/sha1.c:93
 sha1_generic_block_fn crypto/sha1_generic.c:42 [inline]
 sha1_base_do_update include/crypto/sha1_base.h:61 [inline]
 crypto_sha1_update+0x4cb/0x5b0 crypto/sha1_generic.c:51
 crypto_shash_update crypto/shash.c:117 [inline]
 shash_ahash_update crypto/shash.c:239 [inline]
 shash_async_update+0x290/0x360 crypto/shash.c:247
 crypto_ahash_update include/crypto/hash.h:525 [inline]
 hash_sendmsg+0x41b/0x1110 crypto/algif_hash.c:107
 sock_sendmsg_nosec net/socket.c:629 [inline]
 sock_sendmsg net/socket.c:639 [inline]
 __sys_sendto+0x6c0/0x7e0 net/socket.c:1789
 __do_sys_sendto net/socket.c:1801 [inline]
 __se_sys_sendto net/socket.c:1797 [inline]
 __x64_sys_sendto+0x1a1/0x210 net/socket.c:1797
 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x455979
RSP: 002b:00007f52a49acc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f52a49ad6d4 RCX: 0000000000455979
RDX: ffffffffffffff05 RSI: 00000000208ac000 RDI: 0000000000000017
RBP: 000000000072bea0 R08: 0000000020ec3000 R09: 0000000000000080
R10: 0000000000008000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000544 R14: 00000000006fbf00 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:814
 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:868
 __alloc_pages_nodemask+0xf8e/0x5dd0 mm/page_alloc.c:4402
 __alloc_pages include/linux/gfp.h:458 [inline]
 __alloc_pages_node include/linux/gfp.h:471 [inline]
 alloc_pages_vma+0x1565/0x1800 mm/mempolicy.c:2049
 do_huge_pmd_anonymous_page+0xbdb/0x2550 mm/huge_memory.c:722
 create_huge_pmd mm/memory.c:3854 [inline]
 __handle_mm_fault mm/memory.c:4058 [inline]
 handle_mm_fault+0x428f/0x7e50 mm/memory.c:4124
 __do_page_fault+0xec4/0x1a10 arch/x86/mm/fault.c:1400
 do_page_fault+0xd3/0x260 arch/x86/mm/fault.c:1477
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/09 22:52 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/07 14:05 https://github.com/google/kmsan.git master d2d741e5d189 a211da1a .config console log report ci-upstream-kmsan-gce
2018/05/03 19:43 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.