syzbot


KMSAN: uninit-value in do_msgsnd

Status: closed as invalid on 2018/09/05 16:10
Subsystems: kernel
[Documentation on labels]
First crash: 2616d, last: 2616d

Sample crash report:
kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain
==================================================================
BUG: KMSAN: uninit-value in do_msgsnd+0x4a6/0x2090 ipc/msg.c:798
CPU: 1 PID: 15701 Comm: syz-executor7 Not tainted 4.17.0+ #18
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1465
 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:650
 do_msgsnd+0x4a6/0x2090 ipc/msg.c:798
 ksys_msgsnd ipc/msg.c:893 [inline]
 __do_sys_msgsnd ipc/msg.c:899 [inline]
 __se_sys_msgsnd ipc/msg.c:896 [inline]
 __x64_sys_msgsnd+0x1d2/0x250 ipc/msg.c:896
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x455ab9
RSP: 002b:00007ff3427a8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
RAX: ffffffffffffffda RBX: 00007ff3427a96d4 RCX: 0000000000455ab9
RDX: 0000000000000008 RSI: 0000000020000040 RDI: 0000000000028004
RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004c02cb R14: 00000000004cfae0 R15: 0000000000000001

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:312 [inline]
 kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:222
 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:348
 __kmalloc_node+0xe44/0x1200 mm/slub.c:3865
 kmalloc_node include/linux/slab.h:554 [inline]
 kvmalloc_node+0x197/0x2f0 mm/util.c:421
 kvmalloc include/linux/mm.h:550 [inline]
 newque+0xb4/0x7d0 ipc/msg.c:139
 ipcget_new ipc/util.c:315 [inline]
 ipcget+0x2ab/0xd70 ipc/util.c:653
 ksys_msgget ipc/msg.c:289 [inline]
 __do_sys_msgget ipc/msg.c:294 [inline]
 __se_sys_msgget ipc/msg.c:292 [inline]
 __x64_sys_msgget+0x14c/0x1d0 ipc/msg.c:292
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/04 15:41 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.