syzbot


KMSAN: uninit-value in load_elf_binary

Status: closed as invalid on 2019/03/29 09:33
Subsystems: fs mm
[Documentation on labels]
First crash: 1985d, last: 1944d

Sample crash report:
RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003
RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5b6bfe6d4
R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000004
==================================================================
BUG: KMSAN: uninit-value in load_elf_binary+0x1993/0x8400 fs/binfmt_elf.c:902
CPU: 0 PID: 24707 Comm: blkid Not tainted 4.20.0-rc7+ #15
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x173/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x12e/0x2a0 mm/kmsan/kmsan.c:613
 __msan_warning+0x82/0xf0 mm/kmsan/kmsan_instr.c:295
 load_elf_binary+0x1993/0x8400 fs/binfmt_elf.c:902
 search_binary_handler+0x2db/0xab0 fs/exec.c:1653
 exec_binprm fs/exec.c:1695 [inline]
 __do_execve_file+0x2277/0x2e30 fs/exec.c:1819
 do_execveat_common fs/exec.c:1866 [inline]
 do_execve fs/exec.c:1883 [inline]
 __do_sys_execve fs/exec.c:1964 [inline]
 __se_sys_execve+0xec/0x110 fs/exec.c:1959
 __x64_sys_execve+0x4a/0x70 fs/exec.c:1959
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x7fe234716207
Code: Bad RIP value.
RSP: 002b:00007ffc3b09b9f8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fe234716207
RDX: 0000000000c6e650 RSI: 00007ffc3b09baf0 RDI: 00007ffc3b09cb00
RBP: 0000000000625500 R08: 0000000000002971 R09: 0000000000002971
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000c6e650
R13: 0000000000000007 R14: 0000000000c5a250 R15: 0000000000000005

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:204 [inline]
 kmsan_internal_poison_shadow+0x92/0x150 mm/kmsan/kmsan.c:158
 kmsan_kmalloc+0xa6/0x130 mm/kmsan/kmsan_hooks.c:176
 kmsan_slab_alloc+0xe/0x10 mm/kmsan/kmsan_hooks.c:185
 slab_post_alloc_hook mm/slab.h:446 [inline]
 slab_alloc_node mm/slub.c:2759 [inline]
 slab_alloc mm/slub.c:2767 [inline]
 __kmalloc+0x29b/0x3a0 mm/slub.c:3808
 kmalloc include/linux/slab.h:551 [inline]
 load_elf_phdrs+0x2a8/0x3f0 fs/binfmt_elf.c:441
 load_elf_binary+0x11b3/0x8400 fs/binfmt_elf.c:838
 search_binary_handler+0x2db/0xab0 fs/exec.c:1653
 exec_binprm fs/exec.c:1695 [inline]
 __do_execve_file+0x2277/0x2e30 fs/exec.c:1819
 do_execveat_common fs/exec.c:1866 [inline]
 do_execve fs/exec.c:1883 [inline]
 __do_sys_execve fs/exec.c:1964 [inline]
 __se_sys_execve+0xec/0x110 fs/exec.c:1959
 __x64_sys_execve+0x4a/0x70 fs/exec.c:1959
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/28 04:38 https://github.com/google/kmsan.git master 79fc24ff6184 af317504 .config console log report ci-upstream-kmsan-gce
2018/11/17 08:53 https://github.com/google/kmsan.git master cddc52641fd2 b08ee62a .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.