syzbot


KMSAN: uninit-value in anubis_crypt

Status: closed as invalid on 2018/06/27 15:18
Subsystems: crypto
[Documentation on labels]
First crash: 2650d, last: 2650d

Sample crash report:
alg: No test for cmac(anubis) (cmac(anubis-generic))
==================================================================
BUG: KMSAN: uninit-value in __arch_swab32 arch/x86/include/uapi/asm/swab.h:10 [inline]
BUG: KMSAN: uninit-value in __fswab32 include/uapi/linux/swab.h:59 [inline]
BUG: KMSAN: uninit-value in anubis_crypt+0x1203/0x14d0 crypto/anubis.c:588
CPU: 0 PID: 10403 Comm: syz-executor7 Not tainted 4.17.0-rc3+ #92
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 __arch_swab32 arch/x86/include/uapi/asm/swab.h:10 [inline]
 __fswab32 include/uapi/linux/swab.h:59 [inline]
 anubis_crypt+0x1203/0x14d0 crypto/anubis.c:588
 anubis_encrypt+0xbf/0xe0 crypto/anubis.c:665
 cipher_encrypt_unaligned+0x193/0x250 crypto/cipher.c:89
 crypto_cipher_encrypt_one include/linux/crypto.h:1576 [inline]
 crypto_cmac_digest_update+0x538/0x890 crypto/cmac.c:155
 crypto_shash_update crypto/shash.c:117 [inline]
 shash_ahash_update crypto/shash.c:239 [inline]
 shash_async_update+0x290/0x360 crypto/shash.c:247
 crypto_ahash_update include/crypto/hash.h:525 [inline]
 hash_sendmsg+0x41b/0x1110 crypto/algif_hash.c:107
 sock_sendmsg_nosec net/socket.c:629 [inline]
 sock_sendmsg net/socket.c:639 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2117
 __sys_sendmsg net/socket.c:2155 [inline]
 __do_sys_sendmsg net/socket.c:2164 [inline]
 __se_sys_sendmsg net/socket.c:2162 [inline]
 __x64_sys_sendmsg+0x331/0x460 net/socket.c:2162
 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4559d9
RSP: 002b:00007fc890d81c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fc890d826d4 RCX: 00000000004559d9
RDX: 0000000000000010 RSI: 00000000204f0000 RDI: 0000000000000014
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000598 R14: 00000000006fc6e0 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528
 __crypto_xor+0x23c/0x16b0 crypto/algapi.c:1004
 crypto_xor include/crypto/algapi.h:209 [inline]
 crypto_cmac_digest_update+0x4d4/0x890 crypto/cmac.c:154
 crypto_shash_update crypto/shash.c:117 [inline]
 shash_ahash_update crypto/shash.c:239 [inline]
 shash_async_update+0x290/0x360 crypto/shash.c:247
 crypto_ahash_update include/crypto/hash.h:525 [inline]
 hash_sendmsg+0x41b/0x1110 crypto/algif_hash.c:107
 sock_sendmsg_nosec net/socket.c:629 [inline]
 sock_sendmsg net/socket.c:639 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2117
 __sys_sendmsg net/socket.c:2155 [inline]
 __do_sys_sendmsg net/socket.c:2164 [inline]
 __se_sys_sendmsg net/socket.c:2162 [inline]
 __x64_sys_sendmsg+0x331/0x460 net/socket.c:2162
 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:814
 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:868
 __alloc_pages_nodemask+0xf8e/0x5dd0 mm/page_alloc.c:4402
 __alloc_pages include/linux/gfp.h:458 [inline]
 __alloc_pages_node include/linux/gfp.h:471 [inline]
 alloc_pages_vma+0x1565/0x1800 mm/mempolicy.c:2049
 do_huge_pmd_anonymous_page+0xbdb/0x2550 mm/huge_memory.c:722
 create_huge_pmd mm/memory.c:3854 [inline]
 __handle_mm_fault mm/memory.c:4058 [inline]
 handle_mm_fault+0x428f/0x7e50 mm/memory.c:4124
 __do_page_fault+0xec4/0x1a10 arch/x86/mm/fault.c:1400
 do_page_fault+0xd3/0x260 arch/x86/mm/fault.c:1477
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/15 00:10 https://github.com/google/kmsan.git master 450487484278 d2284dda .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.