syzbot

 sign-in | mailing list | source | docs
🐞 Open [1002] ≡ Subsystems 🐞 Fixed [5246] 🐞 Invalid [12540] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in btrfs_scan_one_device

Status: closed as invalid on 2018/04/22 15:44
Subsystems: btrfs
[Documentation on labels]
First crash: 2200d, last: 2199d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in btrfs_scan_one_device (2) btrfs C 10 2059d 2069d 0/26 closed as invalid on 2018/09/10 08:50

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in btrfs_read_disk_super fs/btrfs/volumes.c:1160 [inline]
BUG: KMSAN: uninit-value in btrfs_scan_one_device+0x4b6/0x920 fs/btrfs/volumes.c:1204
CPU: 0 PID: 4513 Comm: syzkaller334174 Not tainted 4.16.0+ #85
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 btrfs_read_disk_super fs/btrfs/volumes.c:1160 [inline]
 btrfs_scan_one_device+0x4b6/0x920 fs/btrfs/volumes.c:1204
 btrfs_mount_root+0x332/0x21b0 fs/btrfs/super.c:1538
 mount_fs+0x296/0x780 fs/super.c:1222
 vfs_kern_mount+0x222/0x990 fs/namespace.c:1037
 btrfs_mount+0x7fe/0x2db0 fs/btrfs/super.c:1657
 mount_fs+0x296/0x780 fs/super.c:1222
 vfs_kern_mount+0x222/0x990 fs/namespace.c:1037
 do_new_mount fs/namespace.c:2512 [inline]
 do_mount+0xca5/0x4ed0 fs/namespace.c:2842
 SYSC_mount+0x32e/0x3d0 fs/namespace.c:3058
 SyS_mount+0x77/0xa0 fs/namespace.c:3035
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x442e0a
RSP: 002b:00007ffc268237c8 EFLAGS: 00000217 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000020001758 RCX: 0000000000442e0a
RDX: 0000000020001200 RSI: 0000000020001240 RDI: 00007ffc268237d0
RBP: 0000000000000003 R08: 0000000020001780 R09: 000000000000000a
R10: 0000000000010000 R11: 0000000000000217 R12: 0000000000000004
R13: 0000000000401d00 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684
 kmsan_memcpy_origins+0x11d/0x170 mm/kmsan/kmsan.c:526
 __msan_memcpy+0x109/0x160 mm/kmsan/kmsan_instr.c:477
 memcpy_to_page lib/iov_iter.c:466 [inline]
 _copy_to_iter+0x852/0x28f0 lib/iov_iter.c:571
 copy_to_iter include/linux/uio.h:106 [inline]
 copy_page_to_iter+0x383/0x1b70 lib/iov_iter.c:712
 shmem_file_read_iter+0x99f/0x1180 mm/shmem.c:2507
 do_iter_readv_writev+0x84d/0xa00 include/linux/fs.h:1776
 do_iter_read+0x303/0xd70 fs/read_write.c:895
 vfs_iter_read+0x118/0x180 fs/read_write.c:909
 lo_read_simple drivers/block/loop.c:348 [inline]
 do_req_filebacked drivers/block/loop.c:589 [inline]
 loop_handle_cmd drivers/block/loop.c:1724 [inline]
 loop_queue_work+0x270e/0x3ef0 drivers/block/loop.c:1738
 kthread_worker_fn+0x58f/0x900 kernel/kthread.c:644
 loop_kthread_worker_fn+0x90/0xb0 drivers/block/loop.c:841
 kthread+0x539/0x720 kernel/kthread.c:239
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:406
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:814
 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:868
 __alloc_pages_nodemask+0xf5b/0x5dc0 mm/page_alloc.c:4283
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
 shmem_alloc_page mm/shmem.c:1471 [inline]
 shmem_alloc_and_acct_page+0x6d5/0x1000 mm/shmem.c:1496
 shmem_getpage_gfp+0x35db/0x5770 mm/shmem.c:1771
 shmem_getpage mm/shmem.c:131 [inline]
 shmem_file_read_iter+0x508/0x1180 mm/shmem.c:2456
 do_iter_readv_writev+0x84d/0xa00 include/linux/fs.h:1776
 do_iter_read+0x303/0xd70 fs/read_write.c:895
 vfs_iter_read+0x118/0x180 fs/read_write.c:909
 lo_read_simple drivers/block/loop.c:348 [inline]
 do_req_filebacked drivers/block/loop.c:589 [inline]
 loop_handle_cmd drivers/block/loop.c:1724 [inline]
 loop_queue_work+0x270e/0x3ef0 drivers/block/loop.c:1738
 kthread_worker_fn+0x58f/0x900 kernel/kthread.c:644
 loop_kthread_worker_fn+0x90/0xb0 drivers/block/loop.c:841
 kthread+0x539/0x720 kernel/kthread.c:239
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:406
==================================================================

Crashes (74):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/21 16:23 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report syz C ci-upstream-kmsan-gce
2018/04/22 08:43 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 08:29 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 08:19 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 08:16 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 08:16 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 08:11 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 07:25 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 06:50 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 06:16 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 06:14 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 04:56 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 04:48 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 04:25 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 04:18 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 03:50 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 03:42 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 03:04 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 02:41 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 01:41 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 00:53 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 00:45 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 00:40 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 00:11 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/22 00:00 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 23:52 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 22:25 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 20:38 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 19:58 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 19:29 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 19:01 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 18:11 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 17:56 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 17:17 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 16:50 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 16:37 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 16:10 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 15:40 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 15:13 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
2018/04/21 15:10 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.