syzbot


KMSAN: uninit-value in __list_del_entry_valid

Status: closed as invalid on 2018/06/30 22:53
Subsystems: kernel
[Documentation on labels]
First crash: 2489d, last: 2399d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in __list_del_entry_valid+0x2da/0x440 lib/list_debug.c:51
CPU: 1 PID: 4753 Comm: syz-executor968 Not tainted 4.17.0+ #9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1125
 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620
 __list_del_entry_valid+0x2da/0x440 lib/list_debug.c:51
 __list_del_entry include/linux/list.h:117 [inline]
 list_del_init include/linux/list.h:159 [inline]
 account_entity_dequeue kernel/sched/fair.c:2667 [inline]
 dequeue_entity kernel/sched/fair.c:4267 [inline]
 dequeue_task_fair+0xad7/0x3300 kernel/sched/fair.c:5407
 dequeue_task kernel/sched/core.c:762 [inline]
 deactivate_task+0x560/0x7d0 kernel/sched/core.c:778
 __schedule+0x164/0x770 kernel/sched/core.c:3474
 schedule+0x1cc/0x2f0 kernel/sched/core.c:3568
 freezable_schedule include/linux/freezer.h:172 [inline]
 do_nanosleep+0x2c3/0x9c0 kernel/time/hrtimer.c:1689
 hrtimer_nanosleep kernel/time/hrtimer.c:1743 [inline]
 __do_sys_nanosleep kernel/time/hrtimer.c:1775 [inline]
 __se_sys_nanosleep+0x4b3/0x6a0 kernel/time/hrtimer.c:1762
 __x64_sys_nanosleep+0x92/0xc0 kernel/time/hrtimer.c:1762
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x43fe30
RSP: 002b:00007ffc13ca0fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023
RAX: ffffffffffffffda RBX: 0000000000002cda RCX: 000000000043fe30
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc13ca0fc0
RBP: 0000000000002cda R08: 0000000000001291 R09: 0000000001ce3940
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000d2dec
R13: 0000000000402aa0 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:297 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464
 __list_add include/linux/list.h:65 [inline]
 list_add include/linux/list.h:79 [inline]
 list_move include/linux/list.h:171 [inline]
 pick_next_task_fair+0x2474/0x2530 kernel/sched/fair.c:6968
 pick_next_task+0x1ba/0x420 kernel/sched/core.c:3368
 __schedule+0x20f/0x770 kernel/sched/core.c:3498
 do_task_dead+0xc8/0xf0 kernel/sched/core.c:3541
 do_exit+0x347e/0x3930 kernel/exit.c:924
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 __do_sys_exit_group+0x21/0x30 kernel/exit.c:981
 __se_sys_exit_group+0x14/0x20 kernel/exit.c:979
 __x64_sys_exit_group+0x4c/0x50 kernel/exit.c:979
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave
Variable was created at:
 _raw_spin_lock_irqsave+0x45/0xf0 kernel/locking/spinlock.c:150
 do_task_dead+0x40/0xf0 kernel/sched/core.c:3536
==================================================================

Crashes (523):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/06/30 06:50 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report syz C ci-upstream-kmsan-gce
2018/06/20 01:55 https://github.com/google/kmsan.git master 123906095e30 095ef806 .config console log report syz C ci-upstream-kmsan-gce
2018/06/14 13:48 https://github.com/google/kmsan.git master 0064ced63c1b 27c5f59f .config console log report syz C ci-upstream-kmsan-gce
2018/06/14 01:03 https://github.com/google/kmsan.git master 81c310582f0e 27c5f59f .config console log report syz C ci-upstream-kmsan-gce
2018/05/26 12:52 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report syz C ci-upstream-kmsan-gce
2018/04/10 03:20 https://github.com/google/kmsan.git master e2ab7e8abba4 b9f65507 .config console log report syz C ci-upstream-kmsan-gce
2018/06/29 15:14 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report syz ci-upstream-kmsan-gce
2018/06/29 01:29 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report syz ci-upstream-kmsan-gce
2018/06/26 20:28 https://github.com/google/kmsan.git master 123906095e30 b0294c53 .config console log report syz ci-upstream-kmsan-gce
2018/06/24 01:02 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report syz ci-upstream-kmsan-gce
2018/06/22 18:46 https://github.com/google/kmsan.git master 123906095e30 c97f0d7a .config console log report syz ci-upstream-kmsan-gce
2018/06/19 19:13 https://github.com/google/kmsan.git master 123906095e30 732e4256 .config console log report syz ci-upstream-kmsan-gce
2018/06/19 04:17 https://github.com/google/kmsan.git master 123906095e30 45c54f75 .config console log report syz ci-upstream-kmsan-gce
2018/06/17 08:47 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report syz ci-upstream-kmsan-gce
2018/05/29 12:07 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report syz ci-upstream-kmsan-gce
2018/05/20 16:06 https://github.com/google/kmsan.git master 9f127b7ceaf7 f48c20b8 .config console log report syz ci-upstream-kmsan-gce
2018/05/19 04:14 https://github.com/google/kmsan.git master f6e2e65b4fff 849705db .config console log report syz ci-upstream-kmsan-gce
2018/05/01 17:40 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report syz ci-upstream-kmsan-gce
2018/04/30 06:34 https://github.com/google/kmsan.git master d2d741e5d189 bb79c6ab .config console log report syz ci-upstream-kmsan-gce
2018/04/23 13:38 https://github.com/google/kmsan.git master d2d741e5d189 20941ab3 .config console log report syz ci-upstream-kmsan-gce
2018/04/16 08:30 https://github.com/google/kmsan.git master 35ff515e4bda 7a67784c .config console log report syz ci-upstream-kmsan-gce
2018/04/13 10:55 https://github.com/google/kmsan.git master 35ff515e4bda 0a0c5db6 .config console log report syz ci-upstream-kmsan-gce
2018/04/08 14:13 https://github.com/google/kmsan.git master e2ab7e8abba4 77bd5117 .config console log report syz ci-upstream-kmsan-gce
2018/07/05 05:33 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/05 03:49 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 16:35 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 14:02 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 10:32 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 08:03 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 05:35 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 16:40 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 13:29 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 12:17 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 10:53 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 05:00 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 01:47 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report ci-upstream-kmsan-gce
2018/07/02 14:19 https://github.com/google/kmsan.git master 6c3632ffef26 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/02 12:51 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/02 10:43 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/02 05:43 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/02 02:02 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/01 17:12 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/01 07:35 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 22:37 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 20:28 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 17:14 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 13:52 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 11:09 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 09:51 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 07:55 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 06:24 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 01:47 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 00:18 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/29 22:57 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/29 21:48 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/29 14:24 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/29 09:16 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/28 19:58 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/28 12:59 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/28 10:01 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/28 03:39 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report ci-upstream-kmsan-gce
2018/06/28 01:39 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report ci-upstream-kmsan-gce
2018/06/28 00:25 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report ci-upstream-kmsan-gce
2018/06/27 22:54 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report ci-upstream-kmsan-gce
2018/06/27 15:14 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report ci-upstream-kmsan-gce
2018/04/06 21:56 https://github.com/google/kmsan.git master e2ab7e8abba4 d613535f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.