syzbot


kmsan boot error: kernel BUG in mm_init

Status: auto-closed as invalid on 2022/03/06 23:34
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 361d, last: 361d

Sample crash report:
PM: hibernation: Registered nosave memory: [mem 0x0009f000-0x0009ffff]
PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000effff]
PM: hibernation: Registered nosave memory: [mem 0x000f0000-0x000fffff]
PM: hibernation: Registered nosave memory: [mem 0xbfffd000-0xbfffffff]
PM: hibernation: Registered nosave memory: [mem 0xc0000000-0xfffbbfff]
PM: hibernation: Registered nosave memory: [mem 0xfffbc000-0xffffffff]
[mem 0xc0000000-0xfffbbfff] available for PCI devices
clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
setup_percpu: NR_CPUS:8 nr_cpumask_bits:8 nr_cpu_ids:2 nr_node_ids:2
percpu: Embedded 55 pages/cpu s186056 r8192 d31032 u1048576
Fallback order for Node 0: 0 1 
Fallback order for Node 1: 1 0 
Built 2 zonelists, mobility grouping on.  Total pages: 2055933
Policy zone: Normal
Kernel command line: earlyprintk=serial net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 ima_policy=tcb nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 binder.debug_mask=0 rcupdate.rcu_expedited=1 no_hash_pointers page_owner=on sysctl.vm.nr_hugepages=4 sysctl.vm.nr_overcommit_hugepages=4 secretmem.enable=1 root=/dev/sda console=ttyS0 vsyscall=native numa=fake=2 kvm-intel.nested=1 spec_store_bypass_disable=prctl nopcid vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 dummy_hcd.num=8 watchdog_thresh=55 workqueue.watchdog_thresh=140 sysctl.net.core.netdev_unregister_timeout_secs=140 kmsan.panic=1 BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1
Unknown kernel command line parameters "page_owner=on spec_store_bypass_disable=prctl watchdog_thresh=55 BOOT_IMAGE=/vmlinuz", will be passed to user space.
mem auto-init: stack:off, heap alloc:off, heap free:off
Memory: 2314728K/8388204K available (247841K kernel code, 9039K rwdata, 14076K rodata, 3516K init, 3388K bss, 1430244K reserved, 0K cma-reserved)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=2
vmalloc area at: ffffc90000000000
Starting KernelMemorySanitizer
------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at mm/kmsan/init.c:237 kmsan_init_runtime+0x2d9/0x306 mm/kmsan/init.c:236
Modules linked in:
CPU: 0 PID: 0 Comm: swapper Not tainted 5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:kmsan_init_runtime+0x2d9/0x306 mm/kmsan/init.c:237
Code: 00 00 00 00 c9 ff ff 48 c7 c7 e3 78 e2 90 31 c0 e8 40 e8 1c fe 48 c7 c7 fb 78 e2 90 31 c0 e8 32 e8 1c fe c6 05 b1 e0 e7 ff 01 <0f> 0b c6 05 a8 e0 e7 ff 00 83 3d a4 e0 e7 ff 00 75 19 48 83 c4 48
RSP: 0000:ffffffff91203e20 EFLAGS: 00010046
RAX: 000000000000001e RBX: ffffea0003abfd80 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffffff91203e88 R08: ffffffff81966aa7 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff91203e20 R15: ffffffffffffffff
FS:  0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88823ffff000 CR3: 0000000011229000 CR4: 00000000000406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 mm_init+0x53/0x56 init/main.c:853
 start_kernel+0x367/0xc56 init/main.c:985
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:530
 x86_64_start_kernel+0xd6/0xdb arch/x86/kernel/head64.c:511
 secondary_startup_64_no_verify+0xb1/0xbb
 </TASK>
random: get_random_bytes called from init_oops_id kernel/panic.c:544 [inline] with crng_init=0
random: get_random_bytes called from print_oops_end_marker kernel/panic.c:554 [inline] with crng_init=0
random: get_random_bytes called from __warn+0x4c1/0x710 kernel/panic.c:611 with crng_init=0
---[ end trace 1fcd015c04ecb3d7 ]---
------------[ cut here ]------------
kernel BUG at mm/kmsan/init.c:237!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 0 Comm: swapper Tainted: G        W         5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:kmsan_init_runtime+0x304/0x306 mm/kmsan/init.c:237
Code: 0b c6 05 a8 e0 e7 ff 00 83 3d a4 e0 e7 ff 00 75 19 48 83 c4 48 5b 41 5c 41 5e 41 5f 5d c3 0f 0b 0f 0b 0f 0b 0f 0b 0f 0b 0f 0b <0f> 0b 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 10 49 89 f4
RSP: 0000:ffffffff91203e20 EFLAGS: 00010002
RAX: 000000000000001e RBX: ffffea0003abfd80 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffffff91203e88 R08: ffffffff81966aa7 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff91203e20 R15: ffffffffffffffff
FS:  0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88823ffff000 CR3: 0000000011229000 CR4: 00000000000406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 mm_init+0x53/0x56 init/main.c:853
 start_kernel+0x367/0xc56 init/main.c:985
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:530
 x86_64_start_kernel+0xd6/0xdb arch/x86/kernel/head64.c:511
 secondary_startup_64_no_verify+0xb1/0xbb
 </TASK>
Modules linked in:
---[ end trace 1fcd015c04ecb3d8 ]---
RIP: 0010:kmsan_init_runtime+0x304/0x306 mm/kmsan/init.c:237
Code: 0b c6 05 a8 e0 e7 ff 00 83 3d a4 e0 e7 ff 00 75 19 48 83 c4 48 5b 41 5c 41 5e 41 5f 5d c3 0f 0b 0f 0b 0f 0b 0f 0b 0f 0b 0f 0b <0f> 0b 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 10 49 89 f4
RSP: 0000:ffffffff91203e20 EFLAGS: 00010002
RAX: 000000000000001e RBX: ffffea0003abfd80 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffffff91203e88 R08: ffffffff81966aa7 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff91203e20 R15: ffffffffffffffff
FS:  0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88823ffff000 CR3: 0000000011229000 CR4: 00000000000406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (6):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce 2021/12/06 23:08 https://github.com/google/kmsan.git master 03ee094a6f6d 0230ba3e .config log report kmsan boot error: kernel BUG in mm_init
ci-upstream-kmsan-gce 2021/12/06 23:08 https://github.com/google/kmsan.git master 03ee094a6f6d 0230ba3e .config log report kmsan boot error: kernel BUG in mm_init
ci-upstream-kmsan-gce 2021/12/06 23:08 https://github.com/google/kmsan.git master 03ee094a6f6d 0230ba3e .config log report kmsan boot error: kernel BUG in mm_init
ci-upstream-kmsan-gce-386 2021/12/06 23:26 https://github.com/google/kmsan.git master 03ee094a6f6d 0230ba3e .config log report kmsan boot error: kernel BUG in mm_init
ci-upstream-kmsan-gce-386 2021/12/06 23:26 https://github.com/google/kmsan.git master 03ee094a6f6d 0230ba3e .config log report kmsan boot error: kernel BUG in mm_init
ci-upstream-kmsan-gce-386 2021/12/06 23:26 https://github.com/google/kmsan.git master 03ee094a6f6d 0230ba3e .config log report kmsan boot error: kernel BUG in mm_init
* Struck through repros no longer work on HEAD.