syzbot


KMSAN: uninit-value in sg_init_one

Status: closed as invalid on 2018/09/05 16:40
Subsystems: net virt
[Documentation on labels]
First crash: 2116d, last: 2114d

Sample crash report:
random: crng init done
==================================================================
BUG: KMSAN: uninit-value in sg_mark_end include/linux/scatterlist.h:205 [inline]
BUG: KMSAN: uninit-value in sg_init_marker include/linux/scatterlist.h:269 [inline]
BUG: KMSAN: uninit-value in sg_init_table lib/scatterlist.c:135 [inline]
BUG: KMSAN: uninit-value in sg_init_one+0x1f7/0x290 lib/scatterlist.c:148
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.17.0+ #17
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1368
 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:634
 sg_mark_end include/linux/scatterlist.h:205 [inline]
 sg_init_marker include/linux/scatterlist.h:269 [inline]
 sg_init_table lib/scatterlist.c:135 [inline]
 sg_init_one+0x1f7/0x290 lib/scatterlist.c:148
 add_recvbuf_mergeable drivers/net/virtio_net.c:1084 [inline]
 try_fill_recv+0x6ed/0x2580 drivers/net/virtio_net.c:1108
 virtnet_receive drivers/net/virtio_net.c:1212 [inline]
 virtnet_poll+0xfe3/0x1420 drivers/net/virtio_net.c:1282
 napi_poll net/core/dev.c:5735 [inline]
 net_rx_action+0x766/0x1a80 net/core/dev.c:5801
 __do_softirq+0x592/0x979 kernel/softirq.c:285
 invoke_softirq kernel/softirq.c:366 [inline]
 irq_exit+0x207/0x240 kernel/softirq.c:407
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525
 do_IRQ+0x17d/0x1c0 arch/x86/kernel/irq.c:264
 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:646
 </IRQ>
RIP: 0010:native_safe_halt arch/x86/include/asm/irqflags.h:55 [inline]
RIP: 0010:arch_safe_halt arch/x86/include/asm/irqflags.h:97 [inline]
RIP: 0010:default_idle+0x20b/0x3e0 arch/x86/kernel/process.c:500
RSP: 0018:ffffffff8ac0fd90 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9
RAX: ffff8801fd432f18 RBX: 0000000000000000 RCX: ffff8801fd032f18
RDX: ffff8801fd032f18 RSI: aaaaaaaaaaaab000 RDI: ffffea00004212c0
RBP: ffffffff8ac0fdc8 R08: 0000000001080020 R09: 0000000000000002
R10: 00000019df44a400 R11: ffffffff89ff18c0 R12: ffffffff8ac0fe2f
R13: ffffffff8ac372c0 R14: ffffffff8ac0fe2c R15: ffffffff8ac37b98
 arch_cpu_idle+0x26/0x30 arch/x86/kernel/process.c:491
 default_idle_call kernel/sched/idle.c:93 [inline]
 cpuidle_idle_call kernel/sched/idle.c:153 [inline]
 do_idle+0x36d/0x830 kernel/sched/idle.c:262
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:368
 rest_init+0x1c1/0x1f0 init/main.c:443
 start_kernel+0x1110/0x1120 init/main.c:740
 x86_64_start_reservations arch/x86/kernel/head64.c:453 [inline]
 x86_64_start_kernel+0xf0/0x100 arch/x86/kernel/head64.c:434
 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:242

Local variable description: ----list@net_rx_action
Variable was created at:
 net_rx_action+0x6e/0x1a80 net/core/dev.c:5779
 __do_softirq+0x592/0x979 kernel/softirq.c:285
==================================================================

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/04 11:27 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 10:46 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 08:18 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 15:29 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 10:31 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 00:36 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report ci-upstream-kmsan-gce
2018/07/02 17:20 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report ci-upstream-kmsan-gce
2018/07/02 16:23 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report ci-upstream-kmsan-gce
2018/07/02 15:55 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report ci-upstream-kmsan-gce
2018/07/02 15:45 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report ci-upstream-kmsan-gce
2018/07/02 14:14 https://github.com/google/kmsan.git master 6c3632ffef26 dba0b50e .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.