syzbot

 sign-in | mailing list | source | docs
🐞 Open [976] ≡ Subsystems 🐞 Fixed [5208] 🐞 Invalid [12459] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in kmem_cache_alloc_node

Status: closed as invalid on 2019/10/08 12:18
Subsystems: block
[Documentation on labels]
First crash: 1715d, last: 1654d

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in __alloc_skb+0x215/0xa10 net/core/skbuff.c:197
CPU: 0 PID: 12551 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x13a/0x2b0 mm/kmsan/kmsan_report.c:108
 __msan_warning+0x73/0xe0 mm/kmsan/kmsan_instr.c:250
 slab_alloc_node mm/slub.c:2749 [inline]
 kmem_cache_alloc_node+0x5d0/0xe70 mm/slub.c:2828
 __alloc_skb+0x215/0xa10 net/core/skbuff.c:197
 alloc_skb include/linux/skbuff.h:1056 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x205/0xa80 drivers/block/aoe/aoecmd.c:1372
 discover_timer+0x86/0xa0 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x232/0x530 kernel/time/timer.c:1322
 expire_timers kernel/time/timer.c:1366 [inline]
 __run_timers+0xcdc/0x11a0 kernel/time/timer.c:1685
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1698
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:537
 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:837
 </IRQ>
RIP: 0010:kmsan_alloc_page+0x30e/0x360 mm/kmsan/kmsan_shadow.c:401
Code: c3 50 48 39 c1 7c e5 65 ff 0d 02 ef fe 7d 65 8b 05 fb ee fe 7d 85 c0 75 39 e8 4e 20 38 ff 48 8b 45 b0 48 89 45 a8 ff 75 a8 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 12 44 89 f8 48 83 c4 30
RSP: 0018:ffff888190e4f858 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000246 RBX: ffffea0007cdb748 RCX: 0000000000000010
RDX: ffffea0007d5feb0 RSI: 0000000000000004 RDI: ffffea0007d5fa00
RBP: ffff888190e4f8b0 R08: 0000000000000000 R09: ffff88812fc41410
R10: ffffffff8ea3a170 R11: ffffffff8182a660 R12: ffffea0007b6d300
R13: 0000000000000001 R14: ffffea0007d5ff00 R15: 0000000000000000
 __alloc_pages_nodemask+0x142d/0x5fa0 mm/page_alloc.c:4757
 __alloc_pages include/linux/gfp.h:475 [inline]
 __alloc_pages_node include/linux/gfp.h:488 [inline]
 alloc_pages_node include/linux/gfp.h:502 [inline]
 alloc_thread_stack_node kernel/fork.c:249 [inline]
 dup_task_struct kernel/fork.c:856 [inline]
 copy_process+0xa9f/0x8e30 kernel/fork.c:1858
 _do_fork+0x25c/0xeb0 kernel/fork.c:2371
 __do_sys_clone kernel/fork.c:2526 [inline]
 __se_sys_clone+0x32a/0x370 kernel/fork.c:2507
 __x64_sys_clone+0x62/0x80 kernel/fork.c:2507
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x45c429
Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
RSP: 002b:0000000000a6fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6ab766a700 RCX: 000000000045c429
RDX: 00007f6ab766a9d0 RSI: 00007f6ab7669db0 RDI: 00000000003d0f00
RBP: 0000000000a6fce0 R08: 00007f6ab766a700 R09: 00007f6ab766a700
R10: 00007f6ab766a9d0 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000a6fb7f R14: 00007f6ab766a9c0 R15: 000000000075bf2c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:150 [inline]
 kmsan_internal_chain_origin+0xd2/0x170 mm/kmsan/kmsan.c:314
 __msan_chain_origin+0x6b/0xe0 mm/kmsan/kmsan_instr.c:184
 ___slab_alloc+0x1dbc/0x1fb0 mm/slub.c:2634
 __slab_alloc mm/slub.c:2687 [inline]
 slab_alloc_node mm/slub.c:2750 [inline]
 kmem_cache_alloc_node+0x769/0xe70 mm/slub.c:2828
 __alloc_skb+0x215/0xa10 net/core/skbuff.c:197
 alloc_skb include/linux/skbuff.h:1056 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x205/0xa80 drivers/block/aoe/aoecmd.c:1372
 discover_timer+0x86/0xa0 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x232/0x530 kernel/time/timer.c:1322
 expire_timers kernel/time/timer.c:1366 [inline]
 __run_timers+0xcdc/0x11a0 kernel/time/timer.c:1685
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1698
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:537
 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:837
 native_restore_fl arch/x86/include/asm/irqflags.h:41 [inline]
 arch_local_irq_restore arch/x86/include/asm/irqflags.h:84 [inline]
 kmsan_alloc_page+0x30e/0x360 mm/kmsan/kmsan_shadow.c:401
 __alloc_pages_nodemask+0x142d/0x5fa0 mm/page_alloc.c:4757
 __alloc_pages include/linux/gfp.h:475 [inline]
 __alloc_pages_node include/linux/gfp.h:488 [inline]
 alloc_pages_node include/linux/gfp.h:502 [inline]
 alloc_thread_stack_node kernel/fork.c:249 [inline]
 dup_task_struct kernel/fork.c:856 [inline]
 copy_process+0xa9f/0x8e30 kernel/fork.c:1858
 _do_fork+0x25c/0xeb0 kernel/fork.c:2371
 __do_sys_clone kernel/fork.c:2526 [inline]
 __se_sys_clone+0x32a/0x370 kernel/fork.c:2507
 __x64_sys_clone+0x62/0x80 kernel/fork.c:2507
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x63/0xe7

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:150 [inline]
 kmsan_internal_poison_shadow+0x53/0x100 mm/kmsan/kmsan.c:134
 kmsan_slab_free+0x8d/0x100 mm/kmsan/kmsan_hooks.c:123
 slab_free_freelist_hook mm/slub.c:1472 [inline]
 slab_free mm/slub.c:3038 [inline]
 kmem_cache_free_bulk+0x3ad9/0x3f50 mm/slub.c:3163
 __kfree_skb_flush+0xb0/0x100 net/core/skbuff.c:862
 net_rx_action+0x1908/0x1950 net/core/dev.c:6441
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 run_ksoftirqd+0x25/0x40 kernel/softirq.c:607
 smpboot_thread_fn+0x4a3/0x990 kernel/smpboot.c:165
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355
=====================================================

Crashes (74):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/05 15:13 https://github.com/google/kmsan.git master 1e76a3e537c3 f3f7d9c8 .config console log report ci-upstream-kmsan-gce
2019/10/04 04:25 https://github.com/google/kmsan.git master 1e76a3e537c3 fc17ba49 .config console log report ci-upstream-kmsan-gce
2019/10/01 19:43 https://github.com/google/kmsan.git master f5f9d3ce4686 b7a87a83 .config console log report ci-upstream-kmsan-gce
2019/10/01 09:13 https://github.com/google/kmsan.git master f5f9d3ce4686 c7a4fb99 .config console log report ci-upstream-kmsan-gce
2019/09/28 14:42 https://github.com/google/kmsan.git master 124037e07586 eb6b9855 .config console log report ci-upstream-kmsan-gce
2019/09/27 14:41 https://github.com/google/kmsan.git master 9baf75aa4188 d8074e0b .config console log report ci-upstream-kmsan-gce
2019/09/26 23:07 https://github.com/google/kmsan.git master 2eb4eee5708b 2f1548bc .config console log report ci-upstream-kmsan-gce
2019/09/25 13:45 https://github.com/google/kmsan.git master cebbfdbcf2b7 e38a6630 .config console log report ci-upstream-kmsan-gce
2019/09/24 16:26 https://github.com/google/kmsan.git master cebbfdbcf2b7 0942eab8 .config console log report ci-upstream-kmsan-gce
2019/09/24 15:00 https://github.com/google/kmsan.git master cebbfdbcf2b7 0942eab8 .config console log report ci-upstream-kmsan-gce
2019/09/24 06:13 https://github.com/google/kmsan.git master cebbfdbcf2b7 c68252d2 .config console log report ci-upstream-kmsan-gce
2019/09/22 05:19 https://github.com/google/kmsan.git master cebbfdbcf2b7 d96e88f3 .config console log report ci-upstream-kmsan-gce
2019/09/20 11:42 https://github.com/google/kmsan.git master cebbfdbcf2b7 d96e88f3 .config console log report ci-upstream-kmsan-gce
2019/09/20 02:34 https://github.com/google/kmsan.git master cebbfdbcf2b7 4d3ae0b7 .config console log report ci-upstream-kmsan-gce
2019/09/16 14:36 https://github.com/google/kmsan.git master cebbfdbcf2b7 cb936299 .config console log report ci-upstream-kmsan-gce
2019/09/16 10:11 https://github.com/google/kmsan.git master cebbfdbcf2b7 cb936299 .config console log report ci-upstream-kmsan-gce
2019/09/15 20:49 https://github.com/google/kmsan.git master cebbfdbcf2b7 32d59357 .config console log report ci-upstream-kmsan-gce
2019/09/13 21:30 https://github.com/google/kmsan.git master cebbfdbcf2b7 32d59357 .config console log report ci-upstream-kmsan-gce
2019/09/13 10:50 https://github.com/google/kmsan.git master 523af7446149 40fa42bc .config console log report ci-upstream-kmsan-gce
2019/09/12 20:38 https://github.com/google/kmsan.git master a8390a90e991 0b7672ee .config console log report ci-upstream-kmsan-gce
2019/09/12 03:39 https://github.com/google/kmsan.git master 014077b5cd62 f4e53c10 .config console log report ci-upstream-kmsan-gce
2019/09/11 23:48 https://github.com/google/kmsan.git master 014077b5cd62 f4e53c10 .config console log report ci-upstream-kmsan-gce
2019/09/10 09:20 https://github.com/google/kmsan.git master 014077b5cd62 a60cb4cd .config console log report ci-upstream-kmsan-gce
2019/09/09 06:49 https://github.com/google/kmsan.git master 014077b5cd62 a60cb4cd .config console log report ci-upstream-kmsan-gce
2019/09/05 22:28 https://github.com/google/kmsan.git master 040b8306f758 040fda58 .config console log report ci-upstream-kmsan-gce
2019/09/05 20:38 https://github.com/google/kmsan.git master 040b8306f758 040fda58 .config console log report ci-upstream-kmsan-gce
2019/09/03 05:34 https://github.com/google/kmsan.git master 3c46b346d0eb 14544a56 .config console log report ci-upstream-kmsan-gce
2019/09/02 09:09 https://github.com/google/kmsan.git master e88bfb817dca db7c31ca .config console log report ci-upstream-kmsan-gce
2019/08/31 07:02 https://github.com/google/kmsan.git master 77d232b6aa76 fd37b39e .config console log report ci-upstream-kmsan-gce
2019/08/29 22:10 https://github.com/google/kmsan.git master 77d232b6aa76 fd37b39e .config console log report ci-upstream-kmsan-gce
2019/08/27 11:24 https://github.com/google/kmsan.git master 61ccdad1fcdf d21c5d9d .config console log report ci-upstream-kmsan-gce
2019/08/17 04:56 https://github.com/google/kmsan.git master 61ccdad1fcdf 8fd428a1 .config console log report ci-upstream-kmsan-gce
2019/08/15 13:55 https://github.com/google/kmsan.git master 61ccdad1fcdf 0d298d6b .config console log report ci-upstream-kmsan-gce
2019/08/15 08:22 https://github.com/google/kmsan.git master 61ccdad1fcdf 0d298d6b .config console log report ci-upstream-kmsan-gce
2019/08/15 05:54 https://github.com/google/kmsan.git master 61ccdad1fcdf 0d298d6b .config console log report ci-upstream-kmsan-gce
2019/08/14 05:47 https://github.com/google/kmsan.git master 61ccdad1fcdf ef801a3e .config console log report ci-upstream-kmsan-gce
2019/08/14 05:18 https://github.com/google/kmsan.git master 61ccdad1fcdf ef801a3e .config console log report ci-upstream-kmsan-gce
2019/08/13 11:40 https://github.com/google/kmsan.git master 61ccdad1fcdf 8620c2c2 .config console log report ci-upstream-kmsan-gce
2019/08/13 11:16 https://github.com/google/kmsan.git master 61ccdad1fcdf 8620c2c2 .config console log report ci-upstream-kmsan-gce
2019/08/12 15:21 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/11 20:20 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/11 17:02 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/10 15:13 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/10 13:59 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/10 10:40 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/10 03:17 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report ci-upstream-kmsan-gce
2019/08/08 05:49 https://github.com/google/kmsan.git master 61ccdad1fcdf e6ebef88 .config console log report ci-upstream-kmsan-gce
2019/08/07 23:39 https://github.com/google/kmsan.git master 61ccdad1fcdf e6ebef88 .config console log report ci-upstream-kmsan-gce
2019/08/07 23:03 https://github.com/google/kmsan.git master 61ccdad1fcdf e6ebef88 .config console log report ci-upstream-kmsan-gce
2019/08/07 10:45 https://github.com/google/kmsan.git master ae0c578a3cdf cdde7486 .config console log report ci-upstream-kmsan-gce
2019/08/07 09:48 https://github.com/google/kmsan.git master ae0c578a3cdf cdde7486 .config console log report ci-upstream-kmsan-gce
2019/08/07 07:44 https://github.com/google/kmsan.git master ae0c578a3cdf cdde7486 .config console log report ci-upstream-kmsan-gce
2019/08/07 07:35 https://github.com/google/kmsan.git master ae0c578a3cdf cdde7486 .config console log report ci-upstream-kmsan-gce
2019/08/06 19:17 https://github.com/google/kmsan.git master ae0c578a3cdf c6f01e54 .config console log report ci-upstream-kmsan-gce
2019/08/06 18:30 https://github.com/google/kmsan.git master ae0c578a3cdf c6f01e54 .config console log report ci-upstream-kmsan-gce
2019/08/06 17:07 https://github.com/google/kmsan.git master ae0c578a3cdf c6f01e54 .config console log report ci-upstream-kmsan-gce
2019/08/06 17:04 https://github.com/google/kmsan.git master ae0c578a3cdf c6f01e54 .config console log report ci-upstream-kmsan-gce
2019/08/06 14:00 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/06 11:04 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/06 05:22 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/06 03:24 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/06 03:12 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/06 01:50 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/06 00:06 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 23:45 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 21:46 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 18:56 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 18:04 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 17:20 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 15:56 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 15:42 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 15:24 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
2019/08/05 14:41 https://github.com/google/kmsan.git master ae0c578a3cdf 6affd8e8 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.