syzbot


KMSAN: uninit-value in ghdr

Status: auto-closed as invalid on 2022/07/18 12:41
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 223d, last: 223d

Sample crash report:
rn kernel: [ 287[ 2910.722039][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state
3.266465][ T8525]  ? should_fail+0x75/0x9c0 lib/fault-inject.c:119
May[ 2910.733155][ T8576] device bridge_slave_1 entered promiscuous mode
 18 04:07:49 syMay 18 04:07:49 syzkaller user.warn kernel: [ 2873.266577][ T852May 18 04:07:49 May 18 04:07:49 syzkaller user.wMay 18 04:07:49 syzkaller user.warn kernel: [ 2873.266783][ T8525]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 mm/kmsan/shadow.c:140
May 18 04:07:49 syzkaller user.warn kernel: [ 2873.266852][ T8525]  __msan_chain_origin+0xbf/0x140 mm/kmsan/instrumentation.c:189May 18 04:07:49 sMay 18 04:07:49 syzkaller user.warn kernel: [ 287[ 2910.774282][ T2821] =====================================================
3.266997][ T8525[ 2910.782178][ T2821] BUG: KMSAN: uninit-value in ext4_inode_journal_mode+0x29f/0x510 fs/ext4/ext4_jbd2.c:16
]  get_compat_ms[ 2910.791243][ T2821]  ext4_inode_journal_mode+0x29f/0x510 fs/ext4/ext4_jbd2.c:16
ghdr+0x108/0x2c0[ 2910.798069][ T2821]  ext4_should_journal_data fs/ext4/ext4_jbd2.h:465 [inline]
ghdr+0x108/0x2c0[ 2910.798069][ T2821]  ext4_evict_inode+0x1b5/0x2d20 fs/ext4/inode.c:203

May 18 04:07:4[ 2910.804372][ T2821]  evict+0x4f4/0xdd0 fs/inode.c:664
9 syzkaller useM[ 2910.809650][ T2821]  iput_final fs/inode.c:1744 [inline]
9 syzkaller useM[ 2910.809650][ T2821]  iput+0xc53/0x1100 fs/inode.c:1770
ay 18 04:07:49 M[ 2910.814911][ T2821]  iget_failed+0x2d4/0x390 fs/bad_inode.c:250
ay 18 04:07:49 s[ 2910.820701][ T2821]  __ext4_iget+0xf91/0x64f0 fs/ext4/inode.c:4984
yzkaller user.wa[ 2910.826570][ T2821]  ext4_lookup+0xbe5/0x1400 fs/ext4/namei.c:1785
rn kernel: [ 287[ 2910.832441][ T2821]  __lookup_slow+0x60e/0x800 fs/namei.c:1707
3.267187][ T8525[ 2910.838395][ T2821]  lookup_slow+0xdd/0x140 fs/namei.c:1724
]  ? kmsan_inter[ 2910.844089][ T2821]  walk_component fs/namei.c:2020 [inline]
]  ? kmsan_inter[ 2910.844089][ T2821]  link_path_walk+0x1223/0x1ac0 fs/namei.c:2347
nal_unpoison_mem[ 2910.850305][ T2821]  path_openat+0x389/0x5be0 fs/namei.c:3605
ory+0x10/0x20
M[ 2910.856186][ T2821]  do_filp_open+0x306/0x760 fs/namei.c:3636
ay 18 04:07:49 s[ 2910.862062][ T2821]  do_sys_openat2+0x263/0x8f0 fs/open.c:1214
yzkaller user.wa[ 2910.868103][ T2821]  do_sys_open fs/open.c:1230 [inline]
yzkaller user.wa[ 2910.868103][ T2821]  __do_sys_openat fs/open.c:1246 [inline]
yzkaller user.wa[ 2910.868103][ T2821]  __se_sys_openat fs/open.c:1241 [inline]
yzkaller user.wa[ 2910.868103][ T2821]  __x64_sys_openat+0x35f/0x3c0 fs/open.c:1241
rn kernel: [ 287[ 2910.874322][ T2821]  do_syscall_x64 arch/x86/entry/common.c:51 [inline]
rn kernel: [ 287[ 2910.874322][ T2821]  do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:81
3.267268][ T8525[ 2910.880105][ T2821]  entry_SYSCALL_64_after_hwframe+0x44/0xae
]  ? 0xffffffff8[ 2910.887363][ T2821] 
1000000
May 18 [ 2910.891065][ T2821] Uninit was created at:
04:07:49 syzkall[ 2910.896738][ T2821]  __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5429
er user.warn ker[ 2910.902720][ T2821]  alloc_pages+0xa08/0xd50
nel: [ 2873.2673[ 2910.908502][ T2821]  alloc_slab_page mm/slub.c:1813 [inline]
nel: [ 2873.2673[ 2910.908502][ T2821]  allocate_slab+0x29e/0x1b00 mm/slub.c:1958
09][ T8525]  ? _[ 2910.914548][ T2821]  new_slab mm/slub.c:2018 [inline]
09][ T8525]  ? _[ 2910.914548][ T2821]  ___slab_alloc+0xb3a/0x1d70 mm/slub.c:3032
_stack_depot_sav[ 2910.920595][ T2821]  __slab_alloc mm/slub.c:3119 [inline]
_stack_depot_sav[ 2910.920595][ T2821]  slab_alloc_node mm/slub.c:3210 [inline]
_stack_depot_sav[ 2910.920595][ T2821]  slab_alloc mm/slub.c:3252 [inline]
_stack_depot_sav[ 2910.920595][ T2821]  kmem_cache_alloc+0xb8a/0x11a0 mm/slub.c:3257
e+0x21/0x4d0
Ma[ 2910.926902][ T2821]  ext4_alloc_inode+0x5e/0x870 fs/ext4/super.c:1319
y 18 04:07:49 sy[ 2910.933061][ T2821]  alloc_inode fs/inode.c:260 [inline]
y 18 04:07:49 sy[ 2910.933061][ T2821]  iget_locked+0x3ac/0x1430 fs/inode.c:1283
zkaller user.war[ 2910.938937][ T2821]  __ext4_iget+0x4ec/0x64f0 fs/ext4/inode.c:4702
n kernel: [ 2873[ 2910.944811][ T2821]  ext4_lookup+0xbe5/0x1400 fs/ext4/namei.c:1785
.267373][ T8525][ 2910.950711][ T2821]  __lookup_slow+0x60e/0x800 fs/namei.c:1707
  ? kmsan_get_me[ 2910.956682][ T2821]  lookup_slow+0xdd/0x140 fs/namei.c:1724
tadata+0x33/0x22[ 2910.962380][ T2821]  walk_component fs/namei.c:2020 [inline]
tadata+0x33/0x22[ 2910.962380][ T2821]  link_path_walk+0x1223/0x1ac0 fs/namei.c:2347
0
May 18 04:07:[ 2910.968601][ T2821]  path_openat+0x389/0x5be0 fs/namei.c:3605
49 syzkaller use[ 2910.974472][ T2821]  do_filp_open+0x306/0x760 fs/namei.c:3636
r.warn kernel: [[ 2910.980342][ T2821]  do_sys_openat2+0x263/0x8f0 fs/open.c:1214
 2873.267438][ T[ 2910.986387][ T2821]  do_sys_open fs/open.c:1230 [inline]
 2873.267438][ T[ 2910.986387][ T2821]  __do_sys_openat fs/open.c:1246 [inline]
 2873.267438][ T[ 2910.986387][ T2821]  __se_sys_openat fs/open.c:1241 [inline]
 2873.267438][ T[ 2910.986387][ T2821]  __x64_sys_openat+0x35f/0x3c0 fs/open.c:1241
8525]  ? kmsan_i[ 2910.992609][ T2821]  do_syscall_x64 arch/x86/entry/common.c:51 [inline]
8525]  ? kmsan_i[ 2910.992609][ T2821]  do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:81
nternal_set_shad[ 2910.998393][ T2821]  entry_SYSCALL_64_after_hwframe+0x44/0xae
ow_origin+0x5e/0[ 2911.005656][ T2821] 
xc0
May 18 04:0[ 2911.009357][ T2821] CPU: 0 PID: 2821 Comm: syslogd Not tainted 5.17.0-syzkaller #0
7:49 syzkaller u[ 2911.018440][ T2821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
ser.warn kernel:[ 2911.029867][ T2821] =====================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2022/04/19 12:31 https://github.com/google/kmsan.git master 33d9269ef6e0 c334415e .config log report info KMSAN: uninit-value in ghdr
* Struck through repros no longer work on HEAD.