syzbot


KMSAN: uninit-value in kick_process

Status: closed as invalid on 2018/09/19 14:03
Subsystems: kernel
[Documentation on labels]
First crash: 2177d, last: 2123d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in kick_process+0x130/0x180 kernel/sched/core.c:1445
CPU: 1 PID: 6536 Comm: udevd Not tainted 4.17.0+ #8
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1122
 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620
 kick_process+0x130/0x180 kernel/sched/core.c:1445
 set_notify_resume include/linux/tracehook.h:165 [inline]
 task_work_add+0x2cc/0x300 kernel/task_work.c:40
 fput+0x146/0x2e0 fs/file_table.c:270
 filp_close+0x27b/0x2d0 fs/open.c:1184
 __close_fd+0x47b/0x4d0 fs/file.c:635
 __do_sys_close fs/open.c:1197 [inline]
 __se_sys_close fs/open.c:1195 [inline]
 __x64_sys_close+0x90/0x160 fs/open.c:1195
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f51a68132b0
RSP: 002b:00007ffd56423368 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000001d39250 RCX: 00007f51a68132b0
RDX: 00007ffd564265c0 RSI: 0000000000000002 RDI: 0000000000000007
RBP: 0000000000625500 R08: 0000000000000001 R09: 00000000000362fc
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd56423440
R13: 0000000000000001 R14: 00007ffd564233d4 R15: 0000000001d39250

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:686
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464
 __set_task_cpu kernel/sched/sched.h:1296 [inline]
 set_task_cpu+0x6e2/0x7d0 kernel/sched/core.c:1199
 try_to_wake_up+0x10af/0x2260 kernel/sched/core.c:2063
 default_wake_function+0x92/0xb0 kernel/sched/core.c:3762
 __wake_up_common kernel/sched/wait.c:90 [inline]
 __wake_up_locked+0x21e/0x380 kernel/sched/wait.c:152
 ep_poll_callback+0xd7c/0x11c0 fs/eventpoll.c:1197
 __wake_up_common+0x45a/0xa50 kernel/sched/wait.c:90
 __wake_up_common_lock+0x196/0x370 kernel/sched/wait.c:119
 __wake_up_sync_key+0xcf/0x120 kernel/sched/wait.c:197
 pipe_release+0x2cc/0x5a0 fs/pipe.c:571
 __fput+0x458/0xa30 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x22e/0x2b0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x110e/0x3930 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 __do_sys_exit_group+0x21/0x30 kernel/exit.c:981
 __se_sys_exit_group+0x14/0x20 kernel/exit.c:979
 __x64_sys_exit_group+0x4c/0x50 kernel/exit.c:979
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Local variable description: ----wait.i@do_epoll_wait
Variable was created at:
 do_epoll_wait+0x10c/0x1770 fs/eventpoll.c:2158
 __do_sys_epoll_wait fs/eventpoll.c:2201 [inline]
 __se_sys_epoll_wait fs/eventpoll.c:2198 [inline]
 __x64_sys_epoll_wait+0x116/0x170 fs/eventpoll.c:2198
==================================================================

Crashes (17):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/06/17 01:50 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report syz ci-upstream-kmsan-gce
2018/05/16 00:42 https://github.com/google/kmsan.git master 06b2df0593a8 68ce85f1 .config console log report syz ci-upstream-kmsan-gce
2018/05/15 00:50 https://github.com/google/kmsan.git master 450487484278 d2284dda .config console log report syz ci-upstream-kmsan-gce
2018/06/26 14:02 https://github.com/google/kmsan.git master 123906095e30 089f1181 .config console log report ci-upstream-kmsan-gce
2018/06/23 06:19 https://github.com/google/kmsan.git master 123906095e30 89d2e600 .config console log report ci-upstream-kmsan-gce
2018/06/21 03:42 https://github.com/google/kmsan.git master 123906095e30 095ef806 .config console log report ci-upstream-kmsan-gce
2018/06/14 08:15 https://github.com/google/kmsan.git master 81c310582f0e 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/06/01 14:03 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
2018/05/31 12:10 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
2018/05/28 14:12 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report ci-upstream-kmsan-gce
2018/05/26 10:13 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report ci-upstream-kmsan-gce
2018/05/24 10:10 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report ci-upstream-kmsan-gce
2018/05/19 14:40 https://github.com/google/kmsan.git master 9f127b7ceaf7 849705db .config console log report ci-upstream-kmsan-gce
2018/05/16 22:18 https://github.com/google/kmsan.git master 314993d1ef28 a367c1d7 .config console log report ci-upstream-kmsan-gce
2018/05/16 09:46 https://github.com/google/kmsan.git master 06b2df0593a8 75b2448a .config console log report ci-upstream-kmsan-gce
2018/05/15 07:14 https://github.com/google/kmsan.git master 450487484278 d2284dda .config console log report ci-upstream-kmsan-gce
2018/05/03 06:50 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.