syzbot


KMSAN: uninit-value in lzo1x_1_do_compress

Status: auto-obsoleted due to no activity on 2023/10/05 05:10
Subsystems: crypto
[Documentation on labels]
First crash: 323d, last: 307d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in lzo1x_1_do_compress (2) crypto C 12 11d 116d 0/26 upstream: reported C repro on 2024/01/14 10:14

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in lzo1x_1_do_compress+0x1909/0x2510 lib/lzo/lzo1x_compress.c:168
 lzo1x_1_do_compress+0x1909/0x2510 lib/lzo/lzo1x_compress.c:168
 lzogeneric1x_1_compress+0x26a/0x11a0 lib/lzo/lzo1x_compress.c:333
 lzo1x_1_compress+0x47/0x70 lib/lzo/lzo1x_compress.c:383
 __lzo_compress crypto/lzo.c:58 [inline]
 lzo_scompress+0x98/0x180 crypto/lzo.c:79
 scomp_acomp_comp_decomp+0x4b6/0x780
 scomp_acomp_compress+0x32/0x40 crypto/scompress.c:159
 crypto_acomp_compress include/crypto/acompress.h:302 [inline]
 zswap_frontswap_store+0x178f/0x2d90 mm/zswap.c:1260
 __frontswap_store+0x25a/0x4d0 mm/frontswap.c:186
 frontswap_store include/linux/frontswap.h:66 [inline]
 swap_writepage+0x1d3/0x3d0 mm/page_io.c:201
 shmem_writepage+0x1c7a/0x2450 mm/shmem.c:1442
 pageout mm/vmscan.c:1350 [inline]
 shrink_folio_list+0x52c8/0x74c0 mm/vmscan.c:2009
 evict_folios+0x8763/0xa6d0 mm/vmscan.c:5143
 try_to_shrink_lruvec+0x16c2/0x1be0 mm/vmscan.c:5319
 shrink_one+0x479/0xcd0 mm/vmscan.c:5363
 shrink_many mm/vmscan.c:5415 [inline]
 lru_gen_shrink_node mm/vmscan.c:5532 [inline]
 shrink_node+0x48ea/0x56e0 mm/vmscan.c:6473
 kswapd_shrink_node mm/vmscan.c:7273 [inline]
 balance_pgdat+0x12fa/0x31f0 mm/vmscan.c:7463
 kswapd+0x91d/0xf10 mm/vmscan.c:7723
 kthread+0x3e8/0x540 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

Uninit was stored to memory at:
 memcpy_dir crypto/scatterwalk.c:23 [inline]
 scatterwalk_copychunks crypto/scatterwalk.c:38 [inline]
 scatterwalk_map_and_copy+0x6dc/0x9a0 crypto/scatterwalk.c:67
 scomp_acomp_comp_decomp+0x376/0x780 crypto/scompress.c:134
 scomp_acomp_compress+0x32/0x40 crypto/scompress.c:159
 crypto_acomp_compress include/crypto/acompress.h:302 [inline]
 zswap_frontswap_store+0x178f/0x2d90 mm/zswap.c:1260
 __frontswap_store+0x25a/0x4d0 mm/frontswap.c:186
 frontswap_store include/linux/frontswap.h:66 [inline]
 swap_writepage+0x1d3/0x3d0 mm/page_io.c:201
 shmem_writepage+0x1c7a/0x2450 mm/shmem.c:1442
 pageout mm/vmscan.c:1350 [inline]
 shrink_folio_list+0x52c8/0x74c0 mm/vmscan.c:2009
 evict_folios+0x8763/0xa6d0 mm/vmscan.c:5143
 try_to_shrink_lruvec+0x16c2/0x1be0 mm/vmscan.c:5319
 shrink_one+0x479/0xcd0 mm/vmscan.c:5363
 shrink_many mm/vmscan.c:5415 [inline]
 lru_gen_shrink_node mm/vmscan.c:5532 [inline]
 shrink_node+0x48ea/0x56e0 mm/vmscan.c:6473
 kswapd_shrink_node mm/vmscan.c:7273 [inline]
 balance_pgdat+0x12fa/0x31f0 mm/vmscan.c:7463
 kswapd+0x91d/0xf10 mm/vmscan.c:7723
 kthread+0x3e8/0x540 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

Uninit was stored to memory at:
 memcpy_from_iter lib/iov_iter.c:639 [inline]
 copy_page_from_iter_atomic+0x1271/0x26d0 lib/iov_iter.c:872
 generic_perform_write+0x4a2/0xbb0 mm/filemap.c:3937
 __generic_file_write_iter+0x393/0x920 mm/filemap.c:4057
 generic_file_write_iter+0x103/0x5b0 mm/filemap.c:4089
 do_iter_write+0x605/0x1310 fs/read_write.c:860
 vfs_iter_write+0x88/0xe0 fs/read_write.c:901
 lo_write_bvec drivers/block/loop.c:249 [inline]
 lo_write_simple drivers/block/loop.c:271 [inline]
 do_req_filebacked drivers/block/loop.c:495 [inline]
 loop_handle_cmd drivers/block/loop.c:1888 [inline]
 loop_process_work+0x206d/0x3990 drivers/block/loop.c:1923
 loop_rootcg_workfn+0x2b/0x30 drivers/block/loop.c:1954
 process_one_work+0xb0d/0x1410 kernel/workqueue.c:2408
 worker_thread+0x107e/0x1d60 kernel/workqueue.c:2555
 kthread+0x3e8/0x540 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

Uninit was stored to memory at:
 lmWriteRecord+0xee3/0x17a0 fs/jfs/jfs_logmgr.c:473
 lmLogInit+0x1c47/0x25f0 fs/jfs/jfs_logmgr.c:1367
 open_inline_log fs/jfs/jfs_logmgr.c:1175 [inline]
 lmLogOpen+0xa3d/0x2170 fs/jfs/jfs_logmgr.c:1069
 jfs_mount_rw+0xf2/0x9f0 fs/jfs/jfs_mount.c:257
 jfs_fill_super+0x77f/0x1310 fs/jfs/super.c:565
 mount_bdev+0x4e1/0x7f0 fs/super.c:1380
 jfs_do_mount+0x4d/0x60 fs/jfs/super.c:670
 legacy_get_tree+0x110/0x290 fs/fs_context.c:610
 vfs_get_tree+0xa5/0x500 fs/super.c:1510
 do_new_mount+0x68d/0x1540 fs/namespace.c:3039
 path_mount+0x725/0x1ee0 fs/namespace.c:3369
 do_mount fs/namespace.c:3382 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x725/0x810 fs/namespace.c:3568
 __ia32_sys_mount+0xe3/0x150 fs/namespace.c:3568
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Local variable lrd created at:
 lmLogInit+0x41/0x25f0 fs/jfs/jfs_logmgr.c:1243
 open_inline_log fs/jfs/jfs_logmgr.c:1175 [inline]
 lmLogOpen+0xa3d/0x2170 fs/jfs/jfs_logmgr.c:1069

CPU: 0 PID: 80 Comm: kswapd0 Not tainted 6.4.0-syzkaller-g257152fe29be #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
=====================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/07 05:04 https://github.com/google/kmsan.git master 257152fe29be 1a2f6297 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in lzo1x_1_do_compress
2023/06/21 03:04 https://github.com/google/kmsan.git master e6bc8833d80f 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in lzo1x_1_do_compress
* Struck through repros no longer work on HEAD.