syzbot

 sign-in | mailing list | source | docs
🐞 Open [984] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12474] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in qtree_entry_unused

Status: fixed on 2020/11/16 12:12
Subsystems: fs
[Documentation on labels]
Fix commit: 3d3dc274ce73 quota: clear padding in v2r1_mem2diskdqb()
First crash: 1306d, last: 1254d

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in qtree_entry_unused+0x137/0x1b0 fs/quota/quota_tree.c:218
CPU: 0 PID: 18442 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:122
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:201
 qtree_entry_unused+0x137/0x1b0 fs/quota/quota_tree.c:218
 v2r1_mem2diskdqb+0x43d/0x710 fs/quota/quota_v2.c:285
 qtree_write_dquot+0x226/0x870 fs/quota/quota_tree.c:394
 v2_write_dquot+0x1ad/0x280 fs/quota/quota_v2.c:333
 dquot_commit+0x4a6/0x5f0 fs/quota/dquot.c:482
 ext4_write_dquot fs/ext4/super.c:5934 [inline]
 ext4_mark_dquot_dirty+0x4d8/0x6a0 fs/ext4/super.c:5985
 mark_dquot_dirty fs/quota/dquot.c:347 [inline]
 mark_all_dquot_dirty fs/quota/dquot.c:385 [inline]
 dquot_alloc_inode+0xc05/0x12b0 fs/quota/dquot.c:1755
 __ext4_new_inode+0x7e8d/0x9b40 fs/ext4/ialloc.c:1155
 ext4_mkdir+0x603/0x29a0 fs/ext4/namei.c:2800
 vfs_mkdir+0x7da/0xa50 fs/namei.c:3649
 do_mkdirat+0x3e2/0x700 fs/namei.c:3672
 __do_sys_mkdir fs/namei.c:3688 [inline]
 __se_sys_mkdir+0x76/0x90 fs/namei.c:3686
 __ia32_sys_mkdir+0x3e/0x60 fs/namei.c:3686
 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline]
 __do_fast_syscall_32+0x129/0x180 arch/x86/entry/common.c:139
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f55a70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000027
RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:129 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:112
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:80
 slab_alloc_node mm/slub.c:2903 [inline]
 slab_alloc mm/slub.c:2912 [inline]
 __kmalloc+0x282/0x490 mm/slub.c:3978
 kmalloc include/linux/slab.h:559 [inline]
 getdqbuf+0x4e/0xe0 fs/quota/quota_tree.c:52
 qtree_write_dquot+0xf2/0x870 fs/quota/quota_tree.c:378
 v2_write_dquot+0x1ad/0x280 fs/quota/quota_v2.c:333
 dquot_commit+0x4a6/0x5f0 fs/quota/dquot.c:482
 ext4_write_dquot fs/ext4/super.c:5934 [inline]
 ext4_mark_dquot_dirty+0x4d8/0x6a0 fs/ext4/super.c:5985
 mark_dquot_dirty fs/quota/dquot.c:347 [inline]
 mark_all_dquot_dirty fs/quota/dquot.c:385 [inline]
 dquot_alloc_inode+0xc05/0x12b0 fs/quota/dquot.c:1755
 __ext4_new_inode+0x7e8d/0x9b40 fs/ext4/ialloc.c:1155
 ext4_mkdir+0x603/0x29a0 fs/ext4/namei.c:2800
 vfs_mkdir+0x7da/0xa50 fs/namei.c:3649
 do_mkdirat+0x3e2/0x700 fs/namei.c:3672
 __do_sys_mkdir fs/namei.c:3688 [inline]
 __se_sys_mkdir+0x76/0x90 fs/namei.c:3686
 __ia32_sys_mkdir+0x3e/0x60 fs/namei.c:3686
 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline]
 __do_fast_syscall_32+0x129/0x180 arch/x86/entry/common.c:139
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================

Crashes (396):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/11 22:29 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/11 21:18 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/11 14:16 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/11 06:44 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/11 00:46 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/11 00:46 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/09 17:56 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/09 10:22 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/08 22:35 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/08 15:57 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/08 14:24 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/08 11:54 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/08 05:51 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/08 02:19 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/07 16:19 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/07 15:39 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/07 13:04 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/07 10:39 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/07 05:54 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/07 02:22 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 17:27 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 15:34 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 13:14 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 07:26 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 05:37 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/04 20:55 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/04 12:52 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/04 12:24 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/04 00:07 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/03 22:49 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/03 16:00 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/02 19:36 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/02 14:09 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/02 05:27 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/02 03:11 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/01 12:15 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/01 05:55 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/01 05:10 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/01 04:07 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/01 02:21 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/01 00:16 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 10:07 https://github.com/google/kmsan.git master e16174226146 18e33098 .config console log report info ci-upstream-kmsan-gce-386
2020/10/30 19:25 https://github.com/google/kmsan.git master e16174226146 a6e3ac3b .config console log report info ci-upstream-kmsan-gce-386
2020/10/30 05:54 https://github.com/google/kmsan.git master e16174226146 a0c7169a .config console log report info ci-upstream-kmsan-gce-386
2020/10/30 05:41 https://github.com/google/kmsan.git master e16174226146 a0c7169a .config console log report info ci-upstream-kmsan-gce-386
2020/09/21 09:09 https://github.com/google/kmsan.git master c5a13b33ec11 9564d2e9 .config console log report info ci-upstream-kmsan-gce-386
* Struck through repros no longer work on HEAD.