syzbot


kmsan boot error: KMSAN: uninit-value in __map_kernel_range_noflush

Status: auto-closed as invalid on 2021/01/08 01:53
Subsystems: mm
[Documentation on labels]
First crash: 1774d, last: 1774d

Sample crash report:
ACPI: Sleep Button [SLPF]
ioatdma: Intel(R) QuickData Technology Driver 5.00
PCI Interrupt Link [LNKC] enabled at IRQ 11
virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver
PCI Interrupt Link [LNKD] enabled at IRQ 10
virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver
PCI Interrupt Link [LNKA] enabled at IRQ 10
virtio-pci 0000:00:05.0: virtio_pci: leaving for legacy driver
N_HDLC line discipline registered with maxframe=4096
Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A
00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A
00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A
Cyclades driver 2.6
Initializing Nozomi driver 2.1d
RocketPort device driver module, version 2.09, 12-June-2003
No rocketport ports found; unloading driver
Non-volatile memory driver v1.3
Linux agpgart interface v0.103
[drm] Initialized vgem 1.0.0 20120112 for vgem on minor 0
[drm] Initialized vkms 1.0.0 20180514 for vkms on minor 1
usbcore: registered new interface driver udl
brd: module loaded
loop: module loaded
zram: Added device: zram0
null_blk: module loaded
Guest personality initialized and is inactive
VMCI host device registered (name=vmci, major=10, minor=56)
Initialized host personality
usbcore: registered new interface driver rtsx_usb
usbcore: registered new interface driver viperboard
usbcore: registered new interface driver dln2
usbcore: registered new interface driver pn533_usb
nfcsim 0.2 initialized
usbcore: registered new interface driver port100
usbcore: registered new interface driver nfcmrvl
Loading iSCSI transport class v2.0-870.
scsi host0: Virtio SCSI HBA
hv_vmbus: registering driver hv_storvsc
st: Version 20160209, fixed bufsize 32768, s/g segs 256
Rounding down aligned max_sectors from 4294967295 to 4294967288
db_root: cannot open: /etc/target
wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information.
wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
eql: Equalizer2002: Simon Janes (simon@ncm.com) and David S. Miller (davem@redhat.com)
MACsec IEEE 802.1AE
libphy: Fixed MDIO Bus: probed
tun: Universal TUN/TAP device driver, 1.6
=====================================================
BUG: KMSAN: uninit-value in vmap_pte_range mm/vmalloc.c:219 [inline]
BUG: KMSAN: uninit-value in vmap_pmd_range mm/vmalloc.c:240 [inline]
BUG: KMSAN: uninit-value in vmap_pud_range mm/vmalloc.c:258 [inline]
BUG: KMSAN: uninit-value in vmap_p4d_range mm/vmalloc.c:276 [inline]
BUG: KMSAN: uninit-value in __map_kernel_range_noflush+0xb3a/0x12d0 mm/vmalloc.c:317
CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.9.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:122
 __msan_warning+0x55/0x90 mm/kmsan/kmsan_instr.c:201
 vmap_pte_range mm/vmalloc.c:219 [inline]
 vmap_pmd_range mm/vmalloc.c:240 [inline]
 vmap_pud_range mm/vmalloc.c:258 [inline]
 vmap_p4d_range mm/vmalloc.c:276 [inline]
 __map_kernel_range_noflush+0xb3a/0x12d0 mm/vmalloc.c:317
 kmsan_ioremap_page_range+0xa8/0x140 mm/kmsan/kmsan_hooks.c:191
 ioremap_page_range+0x1d84/0x1e80 mm/ioremap.c:249
 __ioremap_caller+0xe31/0x1260 arch/x86/mm/ioremap.c:283
 ioremap+0x87/0xa0 arch/x86/mm/ioremap.c:337
 msix_map_region drivers/pci/msi.c:691 [inline]
 msix_capability_init drivers/pci/msi.c:786 [inline]
 __pci_enable_msix drivers/pci/msi.c:1002 [inline]
 __pci_enable_msix_range+0x10c5/0x3000 drivers/pci/msi.c:1136
 pci_alloc_irq_vectors_affinity+0x2aa/0x6e0 drivers/pci/msi.c:1205
 vp_request_msix_vectors drivers/virtio/virtio_pci_common.c:133 [inline]
 vp_find_vqs_msix+0xa27/0x1e10 drivers/virtio/virtio_pci_common.c:304
 vp_find_vqs+0x18c/0xaa0 drivers/virtio/virtio_pci_common.c:400
 virtnet_find_vqs drivers/net/virtio_net.c:2762 [inline]
 init_vqs+0x15f4/0x20a0 drivers/net/virtio_net.c:2843
 virtnet_probe+0x280d/0x4730 drivers/net/virtio_net.c:3092
 virtio_dev_probe+0xffa/0x1700 drivers/virtio/virtio.c:248
 really_probe+0xde5/0x2430 drivers/base/dd.c:553
 driver_probe_device+0x293/0x390 drivers/base/dd.c:738
 device_driver_attach+0x25a/0x490 drivers/base/dd.c:1013
 __driver_attach+0x78c/0x840 drivers/base/dd.c:1090
 bus_for_each_dev+0x210/0x340 drivers/base/bus.c:305
 driver_attach+0x89/0xb0 drivers/base/dd.c:1106
 bus_add_driver+0x6cf/0xcc0 drivers/base/bus.c:622
 driver_register+0x476/0x8e0 drivers/base/driver.c:171
 register_virtio_driver+0x120/0x170 drivers/virtio/virtio.c:299
 virtio_net_driver_init+0x16f/0x25e drivers/net/virtio_net.c:3286
 do_one_initcall+0x4fb/0x9f0 init/main.c:1208
 do_initcall_level+0x336/0x3c5 init/main.c:1281
 do_initcalls+0x18d/0x24f init/main.c:1297
 do_basic_setup+0x33/0x36 init/main.c:1317
 kernel_init_freeable+0x242/0x395 init/main.c:1517
 kernel_init+0x1f/0x840 init/main.c:1406
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----tmp@number created at:
 number+0xac/0x2510 lib/vsprintf.c:426
 number+0xac/0x2510 lib/vsprintf.c:426
=====================================================

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/10/10 01:52 https://github.com/google/kmsan.git master e67f4ba870c2 93817d89 .config console log report ci-upstream-kmsan-gce
2020/10/09 17:16 https://github.com/google/kmsan.git master e67f4ba870c2 d81b165e .config console log report ci-upstream-kmsan-gce
2020/10/09 17:16 https://github.com/google/kmsan.git master e67f4ba870c2 d81b165e .config console log report ci-upstream-kmsan-gce
2020/10/09 17:16 https://github.com/google/kmsan.git master e67f4ba870c2 d81b165e .config console log report ci-upstream-kmsan-gce
2020/10/10 01:34 https://github.com/google/kmsan.git master e67f4ba870c2 93817d89 .config console log report ci-upstream-kmsan-gce-386
2020/10/09 16:58 https://github.com/google/kmsan.git master e67f4ba870c2 d81b165e .config console log report ci-upstream-kmsan-gce-386
2020/10/09 16:58 https://github.com/google/kmsan.git master e67f4ba870c2 d81b165e .config console log report ci-upstream-kmsan-gce-386
2020/10/09 16:58 https://github.com/google/kmsan.git master e67f4ba870c2 d81b165e .config console log report ci-upstream-kmsan-gce-386
* Struck through repros no longer work on HEAD.