syzbot


kernel panic: kmsan.panic set ... (2)

Status: auto-closed as invalid on 2022/08/16 13:05
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 201d, last: 201d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel panic: kmsan.panic set ... 1 201d 201d 0/24 closed as invalid on 2022/05/18 12:26

Sample crash report:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
=====================================================
Disabling lock debugging due to kernel taint
Kernel panic - not syncing: kmsan.panic set ...
CPU: 1 PID: 3046 Comm: dhcpcd Tainted: G    B             5.18.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106
 dump_stack+0x25/0x28 lib/dump_stack.c:113
 panic+0x4fe/0xc73 kernel/panic.c:250
 kmsan_report+0x2e6/0x2f0 mm/kmsan/report.c:208
 __msan_warning+0x94/0x110 mm/kmsan/instrumentation.c:252
 __preempt_count_add arch/x86/include/asm/preempt.h:80 [inline]
 preempt_count_add+0x1b5/0x320 kernel/sched/core.c:5532
 sysvec_reschedule_ipi+0x1c/0x110 arch/x86/kernel/smp.c:225
 asm_sysvec_reschedule_ipi+0x12/0x20
RIP: 0010:smap_restore arch/x86/include/asm/smap.h:67 [inline]
RIP: 0010:get_shadow_origin_ptr mm/kmsan/instrumentation.c:36 [inline]
RIP: 0010:__msan_metadata_ptr_for_load_4+0x27/0x30 mm/kmsan/instrumentation.c:76
Code: 1f 40 00 55 48 89 e5 53 48 83 ec 10 9c 8f 45 e8 0f 01 ca 48 8b 5d e8 be 04 00 00 00 31 d2 e8 40 20 00 00 48 89 5d f0 ff 75 f0 <9d> 48 83 c4 10 5b 5d c3 90 55 48 89 e5 53 48 83 ec 10 9c 8f 45 e8
RSP: 0018:ffff88811d58b6a0 EFLAGS: 00000286
RAX: ffff88811cd8b7b8 RBX: 0000000000000282 RCX: 00000000005917b7
RDX: ffff88811d18b7b8 RSI: 000000000592bb70 RDI: ffffea000000000f
RBP: ffff88811d58b6c0 R08: 0000000000000000 R09: ffff88811d58c001
R10: ffff88811d58b800 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88811d58b7b8 R14: 0000000000000000 R15: 0000000000000000
 unwind_done arch/x86/include/asm/unwind.h:50 [inline]
 __unwind_start+0x5d0/0x7a0 arch/x86/kernel/unwind_frame.c:403
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0x240/0x3c0 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:122
 kmsan_save_stack_with_flags mm/kmsan/core.c:80 [inline]
 kmsan_internal_chain_origin+0xac/0x120 mm/kmsan/core.c:252
 kmsan_internal_memmove_metadata+0x201/0x350 mm/kmsan/core.c:163
 __msan_memcpy+0x65/0x90 mm/kmsan/instrumentation.c:145
 sock_write_iter+0x605/0x690 net/socket.c:1062
 call_write_iter include/linux/fs.h:2050 [inline]
 new_sync_write fs/read_write.c:504 [inline]
 vfs_write+0x119f/0x1e80 fs/read_write.c:591
 ksys_write+0x28b/0x510 fs/read_write.c:644
 __do_sys_write fs/read_write.c:656 [inline]
 __se_sys_write fs/read_write.c:653 [inline]
 __x64_sys_write+0xdb/0x120 fs/read_write.c:653
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f35a64e19a3
Code: 8b 15 d9 f4 0c 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
RSP: 002b:00007ffc0b9f1aa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000055b771e80700 RCX: 00007f35a64e19a3
RDX: 0000000000000047 RSI: 00007ffc0b9f1ac0 RDI: 0000000000000005
RBP: 00007ffc0b9f1ac0 R08: 0000000000000004 R09: 00007ffc0b9f1a30
R10: 0000000000000000 R11: 0000000000000246 R12: 000055b7718ddedc
R13: 00007ffc0b9f1ef0 R14: 000055b771f79220 R15: 0000000000000001
 </TASK>
Kernel Offset: disabled
Rebooting in 86400 seconds..
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	40 00 55 48          	add    %dl,0x48(%rbp)
   4:	89 e5                	mov    %esp,%ebp
   6:	53                   	push   %rbx
   7:	48 83 ec 10          	sub    $0x10,%rsp
   b:	9c                   	pushfq
   c:	8f 45 e8             	popq   -0x18(%rbp)
   f:	0f 01 ca             	clac
  12:	48 8b 5d e8          	mov    -0x18(%rbp),%rbx
  16:	be 04 00 00 00       	mov    $0x4,%esi
  1b:	31 d2                	xor    %edx,%edx
  1d:	e8 40 20 00 00       	callq  0x2062
  22:	48 89 5d f0          	mov    %rbx,-0x10(%rbp)
  26:	ff 75 f0             	pushq  -0x10(%rbp)
* 29:	9d                   	popfq <-- trapping instruction
  2a:	48 83 c4 10          	add    $0x10,%rsp
  2e:	5b                   	pop    %rbx
  2f:	5d                   	pop    %rbp
  30:	c3                   	retq
  31:	90                   	nop
  32:	55                   	push   %rbp
  33:	48 89 e5             	mov    %rsp,%rbp
  36:	53                   	push   %rbx
  37:	48 83 ec 10          	sub    $0x10,%rsp
  3b:	9c                   	pushfq
  3c:	8f 45 e8             	popq   -0x18(%rbp)

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2022/05/18 13:03 https://github.com/google/kmsan.git master a87d7972661b 744a39e2 .config log report kernel panic: kmsan.panic set ...
* Struck through repros no longer work on HEAD.