syzbot


kmsan boot error: KMSAN: uninit-value in scsi_probe_and_add_lun

Status: auto-closed as invalid on 2020/01/17 14:06
Subsystems: scsi
[Documentation on labels]
First crash: 1639d, last: 1634d

Sample crash report:
memsetting inq_result (ffff888121d60a00) of len 36
scsi_execute_req() returned 262144
memsetting inq_result (ffff888121d60a00) of len 36
scsi_execute_req() returned 0
calling scsi_sanitize_inquiry_string...
...done
memsetting inq_result (ffff888121d60a00) of len 97
scsi_execute_req() returned 0
calling scsi_sanitize_inquiry_string...
=====================================================
BUG: KMSAN: uninit-value in scsi_sanitize_inquiry_string drivers/scsi/scsi_scan.c:540 [inline]
BUG: KMSAN: uninit-value in scsi_probe_lun drivers/scsi/scsi_scan.c:633 [inline]
BUG: KMSAN: uninit-value in scsi_probe_and_add_lun+0x10e3/0x5de0 drivers/scsi/scsi_scan.c:1091
CPU: 0 PID: 578 Comm: kworker/u4:14 Not tainted 5.4.0-rc5+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x128/0x220 mm/kmsan/kmsan_report.c:108
 __msan_warning+0x73/0xe0 mm/kmsan/kmsan_instr.c:245
 scsi_sanitize_inquiry_string drivers/scsi/scsi_scan.c:540 [inline]
 scsi_probe_lun drivers/scsi/scsi_scan.c:633 [inline]
 scsi_probe_and_add_lun+0x10e3/0x5de0 drivers/scsi/scsi_scan.c:1091
 __scsi_scan_target+0x3a4/0x24e0 drivers/scsi/scsi_scan.c:1566
 scsi_scan_channel drivers/scsi/scsi_scan.c:1654 [inline]
 scsi_scan_host_selected+0x78f/0xb80 drivers/scsi/scsi_scan.c:1683
 do_scsi_scan_host drivers/scsi/scsi_scan.c:1821 [inline]
 do_scan_async+0x1d4/0xc30 drivers/scsi/scsi_scan.c:1831
 async_run_entry_fn+0x16d/0x770 kernel/async.c:123
 process_one_work+0x1572/0x1ef0 kernel/workqueue.c:2269
 worker_thread+0x111b/0x2460 kernel/workqueue.c:2415
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:151 [inline]
 kmsan_internal_chain_origin+0xbd/0x180 mm/kmsan/kmsan.c:319
 kmsan_memcpy_memmove_metadata+0x25c/0x2e0 mm/kmsan/kmsan.c:254
 kmsan_memcpy_metadata+0xb/0x10 mm/kmsan/kmsan.c:274
 __msan_memcpy+0x56/0x70 mm/kmsan/kmsan_instr.c:129
 bio_copy_kern_endio_read+0x3dd/0x8e0 block/bio.c:1527
 bio_endio+0xa3e/0xbc0 block/bio.c:1818
 req_bio_endio block/blk-core.c:242 [inline]
 blk_update_request+0xd7c/0x20c0 block/blk-core.c:1462
 scsi_end_request+0x10b/0xeb0 drivers/scsi/scsi_lib.c:579
 scsi_io_completion+0x289/0x2630 drivers/scsi/scsi_lib.c:963
 scsi_finish_command+0x6f9/0x720 drivers/scsi/scsi.c:228
 scsi_softirq_done+0x772/0x980 drivers/scsi/scsi_lib.c:1477
 blk_done_softirq+0x360/0x4e0 block/blk-softirq.c:37
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 do_IRQ+0x123/0x360 arch/x86/kernel/irq.c:263
 ret_from_intr+0x0/0x33
 __nr_to_section include/linux/mmzone.h:1242 [inline]
 pfn_valid include/linux/mmzone.h:1352 [inline]
 kmsan_virt_addr_valid mm/kmsan/kmsan_shadow.c:103 [inline]
 kmsan_get_shadow_origin_ptr+0x166/0x4b0 mm/kmsan/kmsan_shadow.c:186
 __msan_metadata_ptr_for_load_4+0x10/0x20 mm/kmsan/kmsan_instr.c:54
 kmem_cache_alloc_trace+0x157/0xd10 mm/slub.c:2826
 kmalloc include/linux/slab.h:556 [inline]
 kzalloc include/linux/slab.h:690 [inline]
 call_usermodehelper_setup+0x167/0x590 kernel/umh.c:386
 kobject_uevent_env+0x23bf/0x27c0 lib/kobject_uevent.c:613
 kobject_uevent+0x6f/0x80 lib/kobject_uevent.c:641
 driver_register+0x823/0x8a0 drivers/base/driver.c:178
 __pci_register_driver+0x223/0x380 drivers/pci/pci-driver.c:1436
 nvme_init+0x3e/0x41 drivers/nvme/host/pci.c:3146
 do_one_initcall+0x4c1/0x930 init/main.c:941
 do_initcall_level+0x3a8/0x443 init/main.c:1009
 do_initcalls init/main.c:1017 [inline]
 do_basic_setup+0x52/0x63 init/main.c:1034
 kernel_init_freeable+0x24d/0x4ab init/main.c:1194
 kernel_init+0x1f/0xb20 init/main.c:1112
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Uninit was created at:
 kmsan_save_stack_with_flags+0x3f/0x90 mm/kmsan/kmsan.c:151
 kmsan_internal_alloc_meta_for_pages mm/kmsan/kmsan_shadow.c:362 [inline]
 kmsan_alloc_page+0x153/0x360 mm/kmsan/kmsan_shadow.c:391
 __alloc_pages_nodemask+0x149d/0x60c0 mm/page_alloc.c:4796
 alloc_pages_current+0x68d/0x9a0 mm/mempolicy.c:2188
 alloc_pages include/linux/gfp.h:511 [inline]
 bio_copy_kern+0x305/0xbd0 block/bio.c:1573
 blk_rq_map_kern+0x490/0x820 block/blk-map.c:237
 __scsi_execute+0x2cf/0xb00 drivers/scsi/scsi_lib.c:265
 scsi_execute_req include/scsi/scsi_device.h:451 [inline]
 scsi_probe_lun drivers/scsi/scsi_scan.c:594 [inline]
 scsi_probe_and_add_lun+0xa4f/0x5de0 drivers/scsi/scsi_scan.c:1091
 __scsi_scan_target+0x3a4/0x24e0 drivers/scsi/scsi_scan.c:1566
 scsi_scan_channel drivers/scsi/scsi_scan.c:1654 [inline]
 scsi_scan_host_selected+0x78f/0xb80 drivers/scsi/scsi_scan.c:1683
 do_scsi_scan_host drivers/scsi/scsi_scan.c:1821 [inline]
 do_scan_async+0x1d4/0xc30 drivers/scsi/scsi_scan.c:1831
 async_run_entry_fn+0x16d/0x770 kernel/async.c:123
 process_one_work+0x1572/0x1ef0 kernel/workqueue.c:2269
 worker_thread+0x111b/0x2460 kernel/workqueue.c:2415
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355
=====================================================

Crashes (24):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/18 14:05 https://github.com/google/kmsan.git master 252672db4233 1daed50a .config console log report ci-upstream-kmsan-gce
2019/11/18 14:05 https://github.com/google/kmsan.git master 252672db4233 1daed50a .config console log report ci-upstream-kmsan-gce
2019/11/18 14:05 https://github.com/google/kmsan.git master 252672db4233 1daed50a .config console log report ci-upstream-kmsan-gce
2019/11/18 12:49 https://github.com/google/kmsan.git master 29439eebdf7f 1daed50a .config console log report ci-upstream-kmsan-gce
2019/11/18 12:49 https://github.com/google/kmsan.git master 29439eebdf7f 1daed50a .config console log report ci-upstream-kmsan-gce
2019/11/18 12:49 https://github.com/google/kmsan.git master 29439eebdf7f 1daed50a .config console log report ci-upstream-kmsan-gce
2019/11/16 12:55 https://github.com/google/kmsan.git master 29439eebdf7f d5696d51 .config console log report ci-upstream-kmsan-gce
2019/11/16 12:55 https://github.com/google/kmsan.git master 29439eebdf7f d5696d51 .config console log report ci-upstream-kmsan-gce
2019/11/16 12:55 https://github.com/google/kmsan.git master 29439eebdf7f d5696d51 .config console log report ci-upstream-kmsan-gce
2019/11/15 15:36 https://github.com/google/kmsan.git master 29439eebdf7f cdac920b .config console log report ci-upstream-kmsan-gce
2019/11/15 15:36 https://github.com/google/kmsan.git master 29439eebdf7f cdac920b .config console log report ci-upstream-kmsan-gce
2019/11/15 15:36 https://github.com/google/kmsan.git master 29439eebdf7f cdac920b .config console log report ci-upstream-kmsan-gce
2019/11/15 09:00 https://github.com/google/kmsan.git master 93dad7225ff7 79248ee8 .config console log report ci-upstream-kmsan-gce
2019/11/15 09:00 https://github.com/google/kmsan.git master 93dad7225ff7 79248ee8 .config console log report ci-upstream-kmsan-gce
2019/11/15 09:00 https://github.com/google/kmsan.git master 93dad7225ff7 79248ee8 .config console log report ci-upstream-kmsan-gce
2019/11/14 21:08 https://github.com/google/kmsan.git master 93dad7225ff7 a24fe792 .config console log report ci-upstream-kmsan-gce
2019/11/14 21:08 https://github.com/google/kmsan.git master 93dad7225ff7 a24fe792 .config console log report ci-upstream-kmsan-gce
2019/11/14 21:08 https://github.com/google/kmsan.git master 93dad7225ff7 a24fe792 .config console log report ci-upstream-kmsan-gce
2019/11/14 08:54 https://github.com/google/kmsan.git master 93dad7225ff7 5d15a967 .config console log report ci-upstream-kmsan-gce
2019/11/14 08:54 https://github.com/google/kmsan.git master 93dad7225ff7 5d15a967 .config console log report ci-upstream-kmsan-gce
2019/11/14 08:54 https://github.com/google/kmsan.git master 93dad7225ff7 5d15a967 .config console log report ci-upstream-kmsan-gce
2019/11/14 01:30 https://github.com/google/kmsan.git master 93dad7225ff7 048f2d49 .config console log report ci-upstream-kmsan-gce
2019/11/14 01:30 https://github.com/google/kmsan.git master 93dad7225ff7 048f2d49 .config console log report ci-upstream-kmsan-gce
2019/11/14 01:30 https://github.com/google/kmsan.git master 93dad7225ff7 048f2d49 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.