syzbot

 sign-in | mailing list | source | docs
🐞 Open [978] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12472] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: kernel-infoleak in copyout

Status: closed as invalid on 2019/05/15 17:57
Subsystems: fs
[Documentation on labels]
First crash: 1961d, last: 1800d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: kernel-infoleak in copyout (2) net C 6723 315d 1484d 22/26 fixed on 2023/06/08 14:41

Sample crash report:
==================================================================
BUG: KMSAN: kernel-infoleak in copyout+0x16b/0x1f0 lib/iov_iter.c:144
CPU: 1 PID: 9352 Comm: blkid Not tainted 5.1.0-rc7+ #5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x130/0x2a0 mm/kmsan/kmsan.c:619
 kmsan_internal_check_memory+0x974/0xa80 mm/kmsan/kmsan.c:713
 kmsan_copy_to_user+0xa9/0xb0 mm/kmsan/kmsan_hooks.c:492
 copyout+0x16b/0x1f0 lib/iov_iter.c:144
 copy_page_to_iter_iovec lib/iov_iter.c:216 [inline]
 copy_page_to_iter+0x654/0x1910 lib/iov_iter.c:905
 generic_file_buffered_read mm/filemap.c:2206 [inline]
 generic_file_read_iter+0x2979/0x3e70 mm/filemap.c:2386
 blkdev_read_iter+0x20d/0x270 fs/block_dev.c:1986
 call_read_iter include/linux/fs.h:1860 [inline]
 new_sync_read fs/read_write.c:406 [inline]
 __vfs_read+0x9af/0xbe0 fs/read_write.c:418
 vfs_read+0x359/0x6f0 fs/read_write.c:452
 ksys_read+0x1c5/0x440 fs/read_write.c:579
 __do_sys_read fs/read_write.c:589 [inline]
 __se_sys_read+0x92/0xb0 fs/read_write.c:587
 __x64_sys_read+0x4a/0x70 fs/read_write.c:587
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x7f3fc8c07310
Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24
RSP: 002b:00007ffd1826c6e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fc8c07310
RDX: 0000000000000400 RSI: 00000000023b8b18 RDI: 0000000000000003
RBP: 00000000023b8af0 R08: 0000000000000028 R09: 0000000001680000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000023b6030
R13: 0000000000000400 R14: 00000000023b6080 R15: 00000000023b8b08

Uninit was created at:
 kmsan_save_stack_with_flags+0x7a/0x130 mm/kmsan/kmsan.c:205
 kmsan_internal_alloc_meta_for_pages+0x10f/0x500 mm/kmsan/kmsan_hooks.c:99
 kmsan_alloc_page+0x7a/0xf0 mm/kmsan/kmsan_hooks.c:243
 __alloc_pages_nodemask+0x143d/0x5e90 mm/page_alloc.c:4655
 alloc_pages_current+0x6a0/0x9b0 mm/mempolicy.c:2132
 alloc_pages include/linux/gfp.h:511 [inline]
 __page_cache_alloc+0x95/0x320 mm/filemap.c:948
 pagecache_get_page+0x443/0x11f0 mm/filemap.c:1644
 filemap_fault+0x2705/0x2cd0 mm/filemap.c:2595
 __do_fault mm/memory.c:3042 [inline]
 do_shared_fault mm/memory.c:3507 [inline]
 do_fault mm/memory.c:3585 [inline]
 handle_pte_fault mm/memory.c:3812 [inline]
 __handle_mm_fault mm/memory.c:3936 [inline]
 handle_mm_fault+0x49d9/0x9fa0 mm/memory.c:3973
 do_user_addr_fault arch/x86/mm/fault.c:1495 [inline]
 __do_page_fault+0xdf9/0x17f0 arch/x86/mm/fault.c:1561
 do_page_fault+0xb1/0x4d0 arch/x86/mm/fault.c:1592
 page_fault+0x3d/0x50 arch/x86/entry/entry_64.S:1156

Bytes 0-1023 of 1024 are uninitialized
Memory access of size 1024 starts at ffff8880b09d0000
Data copied to user address 00000000023b8b18
==================================================================

Crashes (1860):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/05/09 19:18 https://github.com/google/kmsan.git master d062d017e907 6fc130d3 .config console log report syz C ci-upstream-kmsan-gce
2019/04/20 16:10 https://github.com/google/kmsan.git master 199a02db1f61 b0e8efcb .config console log report syz C ci-upstream-kmsan-gce
2019/04/02 19:49 https://github.com/google/kmsan.git master 088c01ea0855 dfd3394d .config console log report syz C ci-upstream-kmsan-gce
2019/01/28 04:30 https://github.com/google/kmsan.git master 02f2d5aea531 c73f090a .config console log report syz C ci-upstream-kmsan-gce
2018/12/12 23:25 https://github.com/google/kmsan.git master 42db043be545 02613a41 .config console log report syz C ci-upstream-kmsan-gce
2018/12/07 09:11 https://github.com/google/kmsan.git master f39a96843744 dcf836b1 .config console log report syz ci-upstream-kmsan-gce
2019/05/15 15:37 https://github.com/google/kmsan.git master 3b955a409bf3 3345130d .config console log report ci-upstream-kmsan-gce
2019/05/15 12:19 https://github.com/google/kmsan.git master d062d017e907 3345130d .config console log report ci-upstream-kmsan-gce
2019/05/15 10:38 https://github.com/google/kmsan.git master d062d017e907 3345130d .config console log report ci-upstream-kmsan-gce
2019/05/14 19:45 https://github.com/google/kmsan.git master d062d017e907 bd4e3ac7 .config console log report ci-upstream-kmsan-gce
2019/05/14 15:43 https://github.com/google/kmsan.git master d062d017e907 ada3c44c .config console log report ci-upstream-kmsan-gce
2019/05/14 11:26 https://github.com/google/kmsan.git master d062d017e907 ada3c44c .config console log report ci-upstream-kmsan-gce
2019/05/14 07:24 https://github.com/google/kmsan.git master d062d017e907 ada3c44c .config console log report ci-upstream-kmsan-gce
2019/05/13 06:40 https://github.com/google/kmsan.git master d062d017e907 16ab1e89 .config console log report ci-upstream-kmsan-gce
2019/05/12 18:40 https://github.com/google/kmsan.git master d062d017e907 5f302c04 .config console log report ci-upstream-kmsan-gce
2019/05/12 17:39 https://github.com/google/kmsan.git master d062d017e907 c017728b .config console log report ci-upstream-kmsan-gce
2019/05/12 06:00 https://github.com/google/kmsan.git master d062d017e907 c017728b .config console log report ci-upstream-kmsan-gce
2019/05/11 18:44 https://github.com/google/kmsan.git master d062d017e907 0637a7f0 .config console log report ci-upstream-kmsan-gce
2019/05/11 04:01 https://github.com/google/kmsan.git master d062d017e907 46caad94 .config console log report ci-upstream-kmsan-gce
2019/05/11 02:05 https://github.com/google/kmsan.git master d062d017e907 46caad94 .config console log report ci-upstream-kmsan-gce
2019/05/10 19:09 https://github.com/google/kmsan.git master d062d017e907 cfeec859 .config console log report ci-upstream-kmsan-gce
2019/05/10 14:53 https://github.com/google/kmsan.git master d062d017e907 cfeec859 .config console log report ci-upstream-kmsan-gce
2019/05/10 05:55 https://github.com/google/kmsan.git master d062d017e907 018207ef .config console log report ci-upstream-kmsan-gce
2019/05/09 18:29 https://github.com/google/kmsan.git master d062d017e907 6fc130d3 .config console log report ci-upstream-kmsan-gce
2019/05/09 13:11 https://github.com/google/kmsan.git master d062d017e907 6fc130d3 .config console log report ci-upstream-kmsan-gce
2019/05/09 10:31 https://github.com/google/kmsan.git master d062d017e907 1ab4c999 .config console log report ci-upstream-kmsan-gce
2019/05/09 03:33 https://github.com/google/kmsan.git master d062d017e907 1ab4c999 .config console log report ci-upstream-kmsan-gce
2019/05/08 21:22 https://github.com/google/kmsan.git master d062d017e907 1ab4c999 .config console log report ci-upstream-kmsan-gce
2019/05/08 09:28 https://github.com/google/kmsan.git master d062d017e907 a7383bfa .config console log report ci-upstream-kmsan-gce
2019/05/07 21:33 https://github.com/google/kmsan.git master d062d017e907 a7383bfa .config console log report ci-upstream-kmsan-gce
2019/05/07 08:03 https://github.com/google/kmsan.git master d062d017e907 d28f4ce5 .config console log report ci-upstream-kmsan-gce
2019/05/07 07:27 https://github.com/google/kmsan.git master d062d017e907 d28f4ce5 .config console log report ci-upstream-kmsan-gce
2019/05/04 19:09 https://github.com/google/kmsan.git master d062d017e907 d28f4ce5 .config console log report ci-upstream-kmsan-gce
2019/05/04 14:37 https://github.com/google/kmsan.git master d062d017e907 d28f4ce5 .config console log report ci-upstream-kmsan-gce
2019/05/04 04:09 https://github.com/google/kmsan.git master d062d017e907 d28f4ce5 .config console log report ci-upstream-kmsan-gce
2019/05/03 20:19 https://github.com/google/kmsan.git master d062d017e907 d28f4ce5 .config console log report ci-upstream-kmsan-gce
2019/05/03 16:07 https://github.com/google/kmsan.git master d062d017e907 1bfa09b9 .config console log report ci-upstream-kmsan-gce
2019/05/03 10:33 https://github.com/google/kmsan.git master d062d017e907 1bfa09b9 .config console log report ci-upstream-kmsan-gce
2019/05/03 08:56 https://github.com/google/kmsan.git master d062d017e907 1bfa09b9 .config console log report ci-upstream-kmsan-gce
2019/05/03 07:24 https://github.com/google/kmsan.git master d062d017e907 1bfa09b9 .config console log report ci-upstream-kmsan-gce
2019/05/03 05:18 https://github.com/google/kmsan.git master d062d017e907 e9039493 .config console log report ci-upstream-kmsan-gce
2019/05/02 19:12 https://github.com/google/kmsan.git master d062d017e907 e9039493 .config console log report ci-upstream-kmsan-gce
2019/05/02 18:13 https://github.com/google/kmsan.git master d062d017e907 e9039493 .config console log report ci-upstream-kmsan-gce
2019/05/02 14:52 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/02 13:05 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/02 11:16 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/02 08:21 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/02 06:25 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/02 05:17 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/01 22:49 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/01 19:44 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/01 18:42 https://github.com/google/kmsan.git master d062d017e907 7516d9fa .config console log report ci-upstream-kmsan-gce
2019/05/01 13:48 https://github.com/google/kmsan.git master d062d017e907 618456b4 .config console log report ci-upstream-kmsan-gce
2019/05/01 12:46 https://github.com/google/kmsan.git master d062d017e907 618456b4 .config console log report ci-upstream-kmsan-gce
2019/05/01 04:57 https://github.com/google/kmsan.git master d062d017e907 618456b4 .config console log report ci-upstream-kmsan-gce
2018/12/05 12:26 https://github.com/google/kmsan.git master 61312858e7d8 ac6c0578 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.