syzbot

 sign-in | mailing list | source | docs
🐞 Open [1036] ≡ Subsystems 🐞 Fixed [5265] 🐞 Invalid [12594] ⬇ Missing Backports [85] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in copy_page_to_iter (2)

Status: closed as invalid on 2018/06/29 16:18
Subsystems: mm
[Documentation on labels]
First crash: 2207d, last: 2160d
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in copy_page_to_iter (3) fs C 23 1386d 1390d 0/26 closed as invalid on 2020/07/22 14:02
upstream KMSAN: uninit-value in copy_page_to_iter fs C 2911 2207d 2223d 0/26 closed as invalid on 2018/04/22 15:44

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
==================================================================
BUG: KMSAN: uninit-value in copyout lib/iov_iter.c:140 [inline]
BUG: KMSAN: uninit-value in copy_page_to_iter_iovec lib/iov_iter.c:212 [inline]
BUG: KMSAN: uninit-value in copy_page_to_iter+0x754/0x1b70 lib/iov_iter.c:716
CPU: 1 PID: 4523 Comm: syz-executor535 Not tainted 4.17.0-rc3+ #88
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 kmsan_internal_check_memory+0x174/0x1e0 mm/kmsan/kmsan.c:1176
 kmsan_copy_to_user+0x69/0x160 mm/kmsan/kmsan.c:1199
 copyout lib/iov_iter.c:140 [inline]
 copy_page_to_iter_iovec lib/iov_iter.c:212 [inline]
 copy_page_to_iter+0x754/0x1b70 lib/iov_iter.c:716
 process_vm_rw_pages mm/process_vm_access.c:53 [inline]
 process_vm_rw_single_vec mm/process_vm_access.c:124 [inline]
 process_vm_rw_core+0xf6a/0x1930 mm/process_vm_access.c:220
 process_vm_rw+0x3d5/0x500 mm/process_vm_access.c:288
 __do_sys_process_vm_readv mm/process_vm_access.c:302 [inline]
 __se_sys_process_vm_readv mm/process_vm_access.c:298 [inline]
 __x64_sys_process_vm_readv+0x1a0/0x200 mm/process_vm_access.c:298
 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x445569
RSP: 002b:00007fc373a88da8 EFLAGS: 00000216 ORIG_RAX: 0000000000000136
RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 0000000000445569
RDX: 0000000000000001 RSI: 0000000020000200 RDI: 00000000000011aa
RBP: 00000000006dac20 R08: 0000000000000004 R09: 0000000000000000
R10: 0000000020000540 R11: 0000000000000216 R12: 0000000000000000
R13: 00007ffc0f9c50af R14: 00007fc373a899c0 R15: 0000000000000002

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:814
 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:868
 __alloc_pages_nodemask+0xf8e/0x5dd0 mm/page_alloc.c:4402
 __alloc_pages include/linux/gfp.h:458 [inline]
 __alloc_pages_node include/linux/gfp.h:471 [inline]
 alloc_pages_vma+0x1565/0x1800 mm/mempolicy.c:2049
 do_huge_pmd_anonymous_page+0xbdb/0x2550 mm/huge_memory.c:722
 create_huge_pmd mm/memory.c:3854 [inline]
 __handle_mm_fault mm/memory.c:4058 [inline]
 handle_mm_fault+0x428f/0x7e50 mm/memory.c:4124
 __do_page_fault+0xec4/0x1a10 arch/x86/mm/fault.c:1400
 do_page_fault+0xd3/0x260 arch/x86/mm/fault.c:1477
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160

Bytes 0-161 of 162 are uninitialized
==================================================================

Crashes (4710):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/12 19:07 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report syz C ci-upstream-kmsan-gce
2018/04/22 16:56 https://github.com/google/kmsan.git master d2d741e5d189 d23fcf6c .config console log report syz C ci-upstream-kmsan-gce
2018/06/08 10:23 https://github.com/google/kmsan.git master c6a6aed994b6 f7b27b7a .config console log report ci-upstream-kmsan-gce
2018/06/08 06:16 https://github.com/google/kmsan.git master c6a6aed994b6 f7b27b7a .config console log report ci-upstream-kmsan-gce
2018/06/08 02:22 https://github.com/google/kmsan.git master c6a6aed994b6 645e75f8 .config console log report ci-upstream-kmsan-gce
2018/06/08 00:30 https://github.com/google/kmsan.git master c6a6aed994b6 645e75f8 .config console log report ci-upstream-kmsan-gce
2018/06/07 23:24 https://github.com/google/kmsan.git master c6a6aed994b6 645e75f8 .config console log report ci-upstream-kmsan-gce
2018/06/07 20:23 https://github.com/google/kmsan.git master c6a6aed994b6 645e75f8 .config console log report ci-upstream-kmsan-gce
2018/06/07 18:38 https://github.com/google/kmsan.git master c6a6aed994b6 645e75f8 .config console log report ci-upstream-kmsan-gce
2018/06/07 16:58 https://github.com/google/kmsan.git master c6a6aed994b6 645e75f8 .config console log report ci-upstream-kmsan-gce
2018/06/07 15:34 https://github.com/google/kmsan.git master c6a6aed994b6 645e75f8 .config console log report ci-upstream-kmsan-gce
2018/06/07 13:59 https://github.com/google/kmsan.git master c6a6aed994b6 645e75f8 .config console log report ci-upstream-kmsan-gce
2018/06/07 13:18 https://github.com/google/kmsan.git master 6d08036f7a00 8b06421c .config console log report ci-upstream-kmsan-gce
2018/06/07 10:08 https://github.com/google/kmsan.git master 6d08036f7a00 d2ba33fa .config console log report ci-upstream-kmsan-gce
2018/06/07 08:59 https://github.com/google/kmsan.git master 6d08036f7a00 d2ba33fa .config console log report ci-upstream-kmsan-gce
2018/06/07 06:31 https://github.com/google/kmsan.git master b9a5d319699c e0e534c6 .config console log report ci-upstream-kmsan-gce
2018/06/07 04:33 https://github.com/google/kmsan.git master b9a5d319699c e0e534c6 .config console log report ci-upstream-kmsan-gce
2018/06/07 02:15 https://github.com/google/kmsan.git master b9a5d319699c e0e534c6 .config console log report ci-upstream-kmsan-gce
2018/06/06 23:59 https://github.com/google/kmsan.git master b9a5d319699c e0e534c6 .config console log report ci-upstream-kmsan-gce
2018/06/06 18:41 https://github.com/google/kmsan.git master b9a5d319699c 41f9540d .config console log report ci-upstream-kmsan-gce
2018/06/06 17:20 https://github.com/google/kmsan.git master b9a5d319699c 41f9540d .config console log report ci-upstream-kmsan-gce
2018/06/06 13:06 https://github.com/google/kmsan.git master 8fc8ecd1c58a 41f9540d .config console log report ci-upstream-kmsan-gce
2018/06/06 11:12 https://github.com/google/kmsan.git master 8fc8ecd1c58a 41f9540d .config console log report ci-upstream-kmsan-gce
2018/06/06 08:58 https://github.com/google/kmsan.git master 8fc8ecd1c58a 41f9540d .config console log report ci-upstream-kmsan-gce
2018/06/06 06:31 https://github.com/google/kmsan.git master 8fc8ecd1c58a 863a24bb .config console log report ci-upstream-kmsan-gce
2018/06/06 04:09 https://github.com/google/kmsan.git master 8fc8ecd1c58a 863a24bb .config console log report ci-upstream-kmsan-gce
2018/06/05 23:15 https://github.com/google/kmsan.git master 8fc8ecd1c58a 863a24bb .config console log report ci-upstream-kmsan-gce
2018/06/05 22:11 https://github.com/google/kmsan.git master 8fc8ecd1c58a 863a24bb .config console log report ci-upstream-kmsan-gce
2018/06/05 18:57 https://github.com/google/kmsan.git master 8fc8ecd1c58a a316ff92 .config console log report ci-upstream-kmsan-gce
2018/06/05 17:04 https://github.com/google/kmsan.git master 8fc8ecd1c58a a316ff92 .config console log report ci-upstream-kmsan-gce
2018/06/05 13:39 https://github.com/google/kmsan.git master 8fc8ecd1c58a a316ff92 .config console log report ci-upstream-kmsan-gce
2018/06/05 11:22 https://github.com/google/kmsan.git master 8fc8ecd1c58a a316ff92 .config console log report ci-upstream-kmsan-gce
2018/06/05 08:58 https://github.com/google/kmsan.git master 8fc8ecd1c58a a316ff92 .config console log report ci-upstream-kmsan-gce
2018/06/05 07:33 https://github.com/google/kmsan.git master 8fc8ecd1c58a a50d873b .config console log report ci-upstream-kmsan-gce
2018/06/05 04:43 https://github.com/google/kmsan.git master 8fc8ecd1c58a a50d873b .config console log report ci-upstream-kmsan-gce
2018/06/04 21:14 https://github.com/google/kmsan.git master 8fc8ecd1c58a a50d873b .config console log report ci-upstream-kmsan-gce
2018/06/04 20:12 https://github.com/google/kmsan.git master 8fc8ecd1c58a a50d873b .config console log report ci-upstream-kmsan-gce
2018/06/04 18:16 https://github.com/google/kmsan.git master 8fc8ecd1c58a 6cbe7c26 .config console log report ci-upstream-kmsan-gce
2018/06/04 16:22 https://github.com/google/kmsan.git master 8fc8ecd1c58a 6cbe7c26 .config console log report ci-upstream-kmsan-gce
2018/06/04 13:10 https://github.com/google/kmsan.git master 8fc8ecd1c58a 6cbe7c26 .config console log report ci-upstream-kmsan-gce
2018/06/04 08:59 https://github.com/google/kmsan.git master 8fc8ecd1c58a 6cbe7c26 .config console log report ci-upstream-kmsan-gce
2018/06/04 06:59 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
2018/06/04 04:23 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
2018/06/04 03:17 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
2018/06/04 00:41 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.