syzbot


KMSAN: uninit-value in vmap_page_range_noflush

Status: closed as invalid on 2018/10/10 13:14
Subsystems: lsm keyrings
[Documentation on labels]
First crash: 2025d, last: 2025d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in vmap_page_range_noflush (2) block trace 41 2024d 2024d 0/26 auto-closed as invalid on 2019/04/09 14:33

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in vmap_pte_range mm/vmalloc.c:153 [inline]
BUG: KMSAN: uninit-value in vmap_pmd_range mm/vmalloc.c:172 [inline]
BUG: KMSAN: uninit-value in vmap_pud_range mm/vmalloc.c:189 [inline]
BUG: KMSAN: uninit-value in vmap_p4d_range mm/vmalloc.c:206 [inline]
BUG: KMSAN: uninit-value in vmap_page_range_noflush+0x975/0xed0 mm/vmalloc.c:231
CPU: 1 PID: 14418 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x306/0x460 lib/dump_stack.c:113
 kmsan_report+0x1a2/0x2e0 mm/kmsan/kmsan.c:917
 __msan_warning+0x7c/0xe0 mm/kmsan/kmsan_instr.c:500
 vmap_pte_range mm/vmalloc.c:153 [inline]
 vmap_pmd_range mm/vmalloc.c:172 [inline]
 vmap_pud_range mm/vmalloc.c:189 [inline]
 vmap_p4d_range mm/vmalloc.c:206 [inline]
 vmap_page_range_noflush+0x975/0xed0 mm/vmalloc.c:231
 vmap_page_range mm/vmalloc.c:244 [inline]
 map_vm_area+0x17d/0x1f0 mm/vmalloc.c:1344
 kmsan_vmap+0xf2/0x180 mm/kmsan/kmsan_hooks.c:250
 vmap+0x3a1/0x510 mm/vmalloc.c:1648
 big_key_alloc_buffer+0x6b6/0xa10 security/keys/big_key.c:190
 big_key_preparse+0x219/0xec0 security/keys/big_key.c:230
 key_create_or_update+0x802/0x1b80 security/keys/key.c:849
 __do_sys_add_key security/keys/keyctl.c:122 [inline]
 __se_sys_add_key+0x730/0x980 security/keys/keyctl.c:62
 __x64_sys_add_key+0x62/0x80 security/keys/keyctl.c:62
 do_syscall_64+0xbe/0x100 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x457579
Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f4300ed1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457579
RDX: 0000000020000480 RSI: 00000000200002c0 RDI: 0000000020000280
RBP: 000000000072bf00 R08: 00000000361ad2d1 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 00007f4300ed26d4
R13: 00000000004bd66f R14: 00000000004cbe60 R15: 00000000ffffffff

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:255 [inline]
 kmsan_internal_poison_shadow+0xc8/0x1d0 mm/kmsan/kmsan.c:180
 kmsan_kmalloc+0xa4/0x120 mm/kmsan/kmsan_hooks.c:104
 __kmalloc+0x14b/0x440 mm/slub.c:3789
 kmalloc include/linux/slab.h:518 [inline]
 kmsan_vmap+0x9b/0x180 mm/kmsan/kmsan_hooks.c:239
 vmap+0x3a1/0x510 mm/vmalloc.c:1648
 big_key_alloc_buffer+0x6b6/0xa10 security/keys/big_key.c:190
 big_key_preparse+0x219/0xec0 security/keys/big_key.c:230
 key_create_or_update+0x802/0x1b80 security/keys/key.c:849
 __do_sys_add_key security/keys/keyctl.c:122 [inline]
 __se_sys_add_key+0x730/0x980 security/keys/keyctl.c:62
 __x64_sys_add_key+0x62/0x80 security/keys/keyctl.c:62
 do_syscall_64+0xbe/0x100 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
==================================================================

Crashes (93):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/10/10 11:05 https://github.com/google/kmsan.git master c525ca11ede3 5b11ac2c .config console log report ci-upstream-kmsan-gce
2018/10/10 10:35 https://github.com/google/kmsan.git master c525ca11ede3 5b11ac2c .config console log report ci-upstream-kmsan-gce
2018/10/10 10:33 https://github.com/google/kmsan.git master c525ca11ede3 5b11ac2c .config console log report ci-upstream-kmsan-gce
2018/10/10 09:32 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:32 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:30 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:30 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:28 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:27 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:27 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:25 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:24 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:24 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:20 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:20 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:19 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:18 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:17 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:13 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:13 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:10 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:10 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:08 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:08 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:06 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:05 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:03 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 09:02 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:59 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:52 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:52 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:51 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:48 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:47 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:45 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:44 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:44 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:41 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:37 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:37 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
2018/10/10 08:36 https://github.com/google/kmsan.git master c525ca11ede3 8b311eaf .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.