syzbot


KMSAN: kernel-infoleak in fb_read

Status: closed as invalid on 2022/09/09 10:54
Subsystems: fbdev
[Documentation on labels]
First crash: 1356d, last: 862d

Sample crash report:
=====================================================
BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 mm/kmsan/kmsan_hooks.c:253
CPU: 0 PID: 8471 Comm: syz-executor330 Not tainted 5.8.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121
 kmsan_internal_check_memory+0x358/0x3d0 mm/kmsan/kmsan.c:457
 kmsan_copy_to_user+0x81/0x90 mm/kmsan/kmsan_hooks.c:253
 instrument_copy_to_user include/linux/instrumented.h:91 [inline]
 _copy_to_user+0x18e/0x260 lib/usercopy.c:39
 copy_to_user include/linux/uaccess.h:186 [inline]
 fb_read+0xa30/0xcf0 drivers/video/fbdev/core/fbmem.c:812
 do_loop_readv_writev fs/read_write.c:734 [inline]
 do_iter_read+0xa95/0x1020 fs/read_write.c:955
 vfs_readv fs/read_write.c:1073 [inline]
 do_readv+0x3c1/0x7f0 fs/read_write.c:1110
 __do_sys_readv fs/read_write.c:1201 [inline]
 __se_sys_readv+0x9b/0xb0 fs/read_write.c:1198
 __x64_sys_readv+0x4a/0x70 fs/read_write.c:1198
 do_syscall_64+0xad/0x160 arch/x86/entry/common.c:386
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x440239
Code: Bad RIP value.
RSP: 002b:00007ffdec11dff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440239
RDX: 0000000000000001 RSI: 0000000020000900 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a40
R13: 0000000000401ad0 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline]
 kmsan_internal_poison_shadow+0x66/0xd0 mm/kmsan/kmsan.c:127
 kmsan_slab_alloc+0x8a/0xe0 mm/kmsan/kmsan_hooks.c:80
 slab_alloc_node mm/slub.c:2839 [inline]
 slab_alloc mm/slub.c:2848 [inline]
 __kmalloc+0x312/0x410 mm/slub.c:3911
 kmalloc include/linux/slab.h:560 [inline]
 fb_read+0x71a/0xcf0 drivers/video/fbdev/core/fbmem.c:795
 do_loop_readv_writev fs/read_write.c:734 [inline]
 do_iter_read+0xa95/0x1020 fs/read_write.c:955
 vfs_readv fs/read_write.c:1073 [inline]
 do_readv+0x3c1/0x7f0 fs/read_write.c:1110
 __do_sys_readv fs/read_write.c:1201 [inline]
 __se_sys_readv+0x9b/0xb0 fs/read_write.c:1198
 __x64_sys_readv+0x4a/0x70 fs/read_write.c:1198
 do_syscall_64+0xad/0x160 arch/x86/entry/common.c:386
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Bytes 0-250 of 251 are uninitialized
Memory access of size 251 starts at ffff8881068b4900
Data copied to user address 00000000200000c0
=====================================================

Crashes (11396):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/13 05:19 https://github.com/google/kmsan.git master ce8056d1f79e bc15f7db .config console log report syz C ci-upstream-kmsan-gce
2021/12/14 11:04 https://github.com/google/kmsan.git master d82a8a8ca942 5d14b1ea .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/14 08:16 https://github.com/google/kmsan.git master d82a8a8ca942 5d14b1ea .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/14 07:01 https://github.com/google/kmsan.git master d82a8a8ca942 5d14b1ea .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/14 05:13 https://github.com/google/kmsan.git master d82a8a8ca942 5d14b1ea .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/14 03:24 https://github.com/google/kmsan.git master d82a8a8ca942 5d14b1ea .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/13 22:11 https://github.com/google/kmsan.git master d82a8a8ca942 49ca1f59 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/11 08:31 https://github.com/google/kmsan.git master 8b936c96768e 49ca1f59 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/11 05:20 https://github.com/google/kmsan.git master 8b936c96768e 49ca1f59 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/10 22:04 https://github.com/google/kmsan.git master 8b936c96768e 49ca1f59 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/10 19:57 https://github.com/google/kmsan.git master 8b936c96768e 49ca1f59 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/10 14:56 https://github.com/google/kmsan.git master 8b936c96768e 4d4ce9bc .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/10 10:29 https://github.com/google/kmsan.git master 8b936c96768e 4d4ce9bc .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/10 10:25 https://github.com/google/kmsan.git master 8b936c96768e 4d4ce9bc .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/10 01:01 https://github.com/google/kmsan.git master 8b936c96768e b54aa474 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/09 23:42 https://github.com/google/kmsan.git master 8b936c96768e b54aa474 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/09 22:38 https://github.com/google/kmsan.git master 8b936c96768e b54aa474 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/09 17:03 https://github.com/google/kmsan.git master 8b936c96768e b54aa474 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/09 12:56 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/09 11:15 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/09 07:14 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/09 03:05 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/08 18:38 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/08 15:46 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/08 11:26 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/08 06:06 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/08 03:30 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/07 17:51 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/07 15:44 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/07 13:58 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/07 09:07 https://github.com/google/kmsan.git master cdfb223e7e63 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/07 07:04 https://github.com/google/kmsan.git master cdfb223e7e63 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/07 05:38 https://github.com/google/kmsan.git master cdfb223e7e63 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/07 02:11 https://github.com/google/kmsan.git master cdfb223e7e63 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/07 01:43 https://github.com/google/kmsan.git master cdfb223e7e63 0230ba3e .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/06 17:47 https://github.com/google/kmsan.git master cdfb223e7e63 579a8754 .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/06 09:28 https://github.com/google/kmsan.git master b0f85c4ccdd4 a617004c .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/06 07:35 https://github.com/google/kmsan.git master b0f85c4ccdd4 a617004c .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/06 04:29 https://github.com/google/kmsan.git master b0f85c4ccdd4 a617004c .config console log report info ci-upstream-kmsan-gce KMSAN: kernel-infoleak in fb_read
2021/12/13 18:17 https://github.com/google/kmsan.git master 8b936c96768e 49ca1f59 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/11 02:40 https://github.com/google/kmsan.git master 8b936c96768e 49ca1f59 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/10 13:11 https://github.com/google/kmsan.git master 8b936c96768e 4d4ce9bc .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/09 05:04 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/09 04:20 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/09 02:02 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/08 23:10 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/08 23:10 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/08 21:59 https://github.com/google/kmsan.git master 8b936c96768e a4a2a501 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/08 03:29 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/07 21:25 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/12/06 19:22 https://github.com/google/kmsan.git master cdfb223e7e63 579a8754 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: kernel-infoleak in fb_read
2021/01/17 11:03 https://github.com/google/kmsan.git master 73d62e81b476 65a7a854 .config console log report info ci-upstream-kmsan-gce
2020/08/08 02:06 https://github.com/google/kmsan.git master 05fd5f9f0208 cb436c69 .config console log report ci-upstream-kmsan-gce-386
* Struck through repros no longer work on HEAD.