syzbot


KMSAN: uninit-value in tgr192_pass (2)

Status: closed as invalid on 2018/09/19 13:43
Subsystems: crypto
[Documentation on labels]
First crash: 2178d, last: 2178d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in tgr192_pass (3) crypto C 24 1367d 1371d 0/26 closed as invalid on 2020/07/22 14:12
upstream KMSAN: uninit-value in tgr192_pass crypto C 4 2193d 2203d 0/26 closed as invalid on 2018/04/22 15:44

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in tgr192_round crypto/tgr192.c:408 [inline]
BUG: KMSAN: uninit-value in tgr192_pass+0x1a98/0x1f70 crypto/tgr192.c:426
CPU: 1 PID: 10300 Comm: syz-executor2 Not tainted 4.16.0+ #87
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 tgr192_round crypto/tgr192.c:408 [inline]
 tgr192_pass+0x1a98/0x1f70 crypto/tgr192.c:426
 tgr192_transform+0x23d/0x1090 crypto/tgr192.c:481
 tgr192_update+0x75e/0xc50 crypto/tgr192.c:539
 crypto_shash_update crypto/shash.c:117 [inline]
 shash_ahash_update crypto/shash.c:239 [inline]
 shash_async_update+0x290/0x360 crypto/shash.c:247
 crypto_ahash_update include/crypto/hash.h:522 [inline]
 hash_sendmsg+0x41b/0x1110 crypto/algif_hash.c:107
 sock_sendmsg_nosec net/socket.c:630 [inline]
 sock_sendmsg net/socket.c:640 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2046
 __sys_sendmsg net/socket.c:2080 [inline]
 SYSC_sendmsg+0x2a3/0x3d0 net/socket.c:2091
 SyS_sendmsg+0x54/0x80 net/socket.c:2087
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455979
RSP: 002b:00007f44b706dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f44b706e6d4 RCX: 0000000000455979
RDX: 0000000000000000 RSI: 0000000020002300 RDI: 0000000000000014
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000533 R14: 00000000006fbd68 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684
 kmsan_memcpy_origins+0x11d/0x170 mm/kmsan/kmsan.c:526
 __msan_memcpy+0x109/0x160 mm/kmsan/kmsan_instr.c:477
 tgr192_transform+0xc1/0x1090 crypto/tgr192.c:474
 tgr192_update+0x75e/0xc50 crypto/tgr192.c:539
 crypto_shash_update crypto/shash.c:117 [inline]
 shash_ahash_update crypto/shash.c:239 [inline]
 shash_async_update+0x290/0x360 crypto/shash.c:247
 crypto_ahash_update include/crypto/hash.h:522 [inline]
 hash_sendmsg+0x41b/0x1110 crypto/algif_hash.c:107
 sock_sendmsg_nosec net/socket.c:630 [inline]
 sock_sendmsg net/socket.c:640 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2046
 __sys_sendmsg net/socket.c:2080 [inline]
 SYSC_sendmsg+0x2a3/0x3d0 net/socket.c:2091
 SyS_sendmsg+0x54/0x80 net/socket.c:2087
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:814
 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:868
 __alloc_pages_nodemask+0xf5b/0x5dc0 mm/page_alloc.c:4283
 __alloc_pages include/linux/gfp.h:458 [inline]
 __alloc_pages_node include/linux/gfp.h:471 [inline]
 alloc_pages_vma+0x1565/0x1800 mm/mempolicy.c:2011
 do_huge_pmd_anonymous_page+0xf80/0x2520 mm/huge_memory.c:723
 create_huge_pmd mm/memory.c:3870 [inline]
 __handle_mm_fault mm/memory.c:4074 [inline]
 handle_mm_fault+0x428f/0x7e50 mm/memory.c:4140
 __do_page_fault+0xec4/0x1a10 arch/x86/mm/fault.c:1423
 do_page_fault+0xd3/0x260 arch/x86/mm/fault.c:1500
 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1151
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/03 05:58 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.