syzbot


KMSAN: uninit-value in __kmalloc_node_track_caller

Status: closed as invalid on 2018/09/27 12:03
Subsystems: net
[Documentation on labels]
First crash: 2203d, last: 2030d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in slab_alloc_node mm/slub.c:2703 [inline]
BUG: KMSAN: uninit-value in __kmalloc_node_track_caller+0x8da/0x1380 mm/slub.c:4351
CPU: 1 PID: 6372 Comm: syz-executor969 Not tainted 4.19.0-rc4+ #56
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x2f6/0x430 lib/dump_stack.c:113
 kmsan_report+0x183/0x2b0 mm/kmsan/kmsan.c:956
 __msan_warning+0x70/0xc0 mm/kmsan/kmsan_instr.c:645
 slab_alloc_node mm/slub.c:2703 [inline]
 __kmalloc_node_track_caller+0x8da/0x1380 mm/slub.c:4351
 __kmalloc_reserve net/core/skbuff.c:138 [inline]
 __alloc_skb+0x40d/0xe50 net/core/skbuff.c:206
 alloc_skb_fclone include/linux/skbuff.h:1038 [inline]
 sk_stream_alloc_skb+0x22a/0xe30 net/ipv4/tcp.c:874
 tcp_sendmsg_locked+0x2431/0x6a20 net/ipv4/tcp.c:1286
 tcp_sendmsg+0xb2/0x100 net/ipv4/tcp.c:1443
 inet_sendmsg+0x4c5/0x7d0 net/ipv4/af_inet.c:798
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg net/socket.c:631 [inline]
 __sys_sendto+0x868/0xa30 net/socket.c:1786
 __do_sys_sendto net/socket.c:1798 [inline]
 __se_sys_sendto+0x107/0x130 net/socket.c:1794
 __x64_sys_sendto+0x6e/0x90 net/socket.c:1794
 do_syscall_64+0xb8/0x100 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x448889
Code: e8 fc e5 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 01 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f19e5951da8 EFLAGS: 00000216 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000700028 RCX: 0000000000448889
RDX: fffffffffffffedd RSI: 0000000020000280 RDI: 0000000000000004
RBP: 0000000000700020 R08: 0000000020000080 R09: 000000000000001c
R10: 000000002000012c R11: 0000000000000216 R12: 000000000070002c
R13: 000000000080fc6f R14: 00007f19e59529c0 R15: 000000000000002d

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:256 [inline]
 kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:181
 kmsan_kmalloc+0x98/0x100 mm/kmsan/kmsan_hooks.c:91
 kmsan_slab_alloc+0x10/0x20 mm/kmsan/kmsan_hooks.c:100
 slab_post_alloc_hook mm/slab.h:446 [inline]
 slab_alloc_node mm/slub.c:2718 [inline]
 __kmalloc_node_track_caller+0xb55/0x1380 mm/slub.c:4351
 __kmalloc_reserve net/core/skbuff.c:138 [inline]
 __alloc_skb+0x40d/0xe50 net/core/skbuff.c:206
 alloc_skb include/linux/skbuff.h:996 [inline]
 __tcp_send_ack+0x10d/0x880 net/ipv4/tcp_output.c:3584
 tcp_send_ack+0x68/0x90 net/ipv4/tcp_output.c:3611
 tcp_delack_timer_handler+0x5f3/0xc00 net/ipv4/tcp_timer.c:301
 tcp_delack_timer+0x1a4/0x340 net/ipv4/tcp_timer.c:328
 call_timer_fn+0x310/0x6c0 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0xe25/0x1280 kernel/time/timer.c:1682
 run_timer_softirq+0x2e/0x50 kernel/time/timer.c:1695
 __do_softirq+0x614/0xa72 kernel/softirq.c:292
==================================================================

Crashes (288):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/09/23 21:14 https://github.com/google/kmsan.git master 7ace43031cfc 28d9ac76 .config console log report syz C ci-upstream-kmsan-gce
2018/09/03 22:58 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report syz C ci-upstream-kmsan-gce
2018/08/12 22:22 https://github.com/google/kmsan.git master 0cc51dc9a291 7a88b141 .config console log report syz C ci-upstream-kmsan-gce
2018/07/09 10:24 https://github.com/google/kmsan.git master a00de5aa4da3 f25e5770 .config console log report syz C ci-upstream-kmsan-gce
2018/06/18 00:09 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report syz C ci-upstream-kmsan-gce
2018/06/01 20:19 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report syz C ci-upstream-kmsan-gce
2018/05/03 19:08 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report syz C ci-upstream-kmsan-gce
2018/09/08 19:42 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report syz ci-upstream-kmsan-gce
2018/08/28 19:18 https://github.com/google/kmsan.git master 2dca2cbde67a b771b17e .config console log report syz ci-upstream-kmsan-gce
2018/08/24 17:30 https://github.com/google/kmsan.git master 0cc51dc9a291 95b5c82b .config console log report syz ci-upstream-kmsan-gce
2018/07/11 09:54 https://github.com/google/kmsan.git master b64f7ec04e12 2e0e3130 .config console log report syz ci-upstream-kmsan-gce
2018/07/07 09:19 https://github.com/google/kmsan.git master a00de5aa4da3 6c0c0099 .config console log report syz ci-upstream-kmsan-gce
2018/07/02 23:52 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report syz ci-upstream-kmsan-gce
2018/07/02 19:22 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report syz ci-upstream-kmsan-gce
2018/06/27 03:20 https://github.com/google/kmsan.git master 123906095e30 b0294c53 .config console log report syz ci-upstream-kmsan-gce
2018/06/26 02:41 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report syz ci-upstream-kmsan-gce
2018/06/20 10:52 https://github.com/google/kmsan.git master 123906095e30 095ef806 .config console log report syz ci-upstream-kmsan-gce
2018/06/12 07:43 https://github.com/google/kmsan.git master 5cdf0501ac1b 112eec79 .config console log report syz ci-upstream-kmsan-gce
2018/05/26 09:16 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report syz ci-upstream-kmsan-gce
2018/05/24 18:46 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report syz ci-upstream-kmsan-gce
2018/09/26 19:56 https://github.com/google/kmsan.git master eb2e67596de2 455b6354 .config console log report ci-upstream-kmsan-gce
2018/09/26 07:32 https://github.com/google/kmsan.git master eb2e67596de2 b7e11289 .config console log report ci-upstream-kmsan-gce
2018/09/24 15:12 https://github.com/google/kmsan.git master f94b97e38776 2f485cdf .config console log report ci-upstream-kmsan-gce
2018/09/24 05:14 https://github.com/google/kmsan.git master 7ace43031cfc 28d9ac76 .config console log report ci-upstream-kmsan-gce
2018/09/24 02:16 https://github.com/google/kmsan.git master 7ace43031cfc 28d9ac76 .config console log report ci-upstream-kmsan-gce
2018/09/23 22:45 https://github.com/google/kmsan.git master 7ace43031cfc 28d9ac76 .config console log report ci-upstream-kmsan-gce
2018/09/21 09:50 https://github.com/google/kmsan.git master 7ace43031cfc 37079712 .config console log report ci-upstream-kmsan-gce
2018/09/18 09:25 https://github.com/google/kmsan.git master 99e79f6a8963 7f125108 .config console log report ci-upstream-kmsan-gce
2018/09/15 17:51 https://github.com/google/kmsan.git master 5815ca49bf07 a343a400 .config console log report ci-upstream-kmsan-gce
2018/09/15 05:52 https://github.com/google/kmsan.git master 5815ca49bf07 a343a400 .config console log report ci-upstream-kmsan-gce
2018/09/15 02:43 https://github.com/google/kmsan.git master 5815ca49bf07 a343a400 .config console log report ci-upstream-kmsan-gce
2018/09/10 18:16 https://github.com/google/kmsan.git master 915c18a6ce9b f167cb6b .config console log report ci-upstream-kmsan-gce
2018/09/10 09:33 https://github.com/google/kmsan.git master 915c18a6ce9b 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/08 19:40 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/07 18:45 https://github.com/google/kmsan.git master 42a037ca8d9d 69cfeb80 .config console log report ci-upstream-kmsan-gce
2018/09/07 13:31 https://github.com/google/kmsan.git master 42a037ca8d9d 69cfeb80 .config console log report ci-upstream-kmsan-gce
2018/09/07 12:07 https://github.com/google/kmsan.git master 42a037ca8d9d e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/07 09:34 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/06 17:45 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 12:24 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 10:08 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/05 12:47 https://github.com/google/kmsan.git master 43e4752ae5dc 196410e4 .config console log report ci-upstream-kmsan-gce
2018/09/04 04:00 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 20:03 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 16:20 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 08:08 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 06:52 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 04:12 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/01 20:49 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/01 02:06 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/01 00:42 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/08/31 22:04 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/08/30 21:08 https://github.com/google/kmsan.git master 25114c64b719 938220fd .config console log report ci-upstream-kmsan-gce
2018/08/30 02:10 https://github.com/google/kmsan.git master 2dca2cbde67a 6c7e9d3d .config console log report ci-upstream-kmsan-gce
2018/08/29 21:52 https://github.com/google/kmsan.git master 2dca2cbde67a 4937cb2b .config console log report ci-upstream-kmsan-gce
2018/08/29 14:42 https://github.com/google/kmsan.git master 2dca2cbde67a 53ff8784 .config console log report ci-upstream-kmsan-gce
2018/08/29 12:11 https://github.com/google/kmsan.git master 2dca2cbde67a 53ff8784 .config console log report ci-upstream-kmsan-gce
2018/08/29 07:42 https://github.com/google/kmsan.git master 2dca2cbde67a 53ff8784 .config console log report ci-upstream-kmsan-gce
2018/08/28 14:49 https://github.com/google/kmsan.git master 72cde92031e1 7ef1de9e .config console log report ci-upstream-kmsan-gce
2018/08/28 11:50 https://github.com/google/kmsan.git master 72cde92031e1 7ef1de9e .config console log report ci-upstream-kmsan-gce
2018/08/27 23:41 https://github.com/google/kmsan.git master 0cc51dc9a291 7ef1de9e .config console log report ci-upstream-kmsan-gce
2018/08/27 08:34 https://github.com/google/kmsan.git master 0cc51dc9a291 758cd203 .config console log report ci-upstream-kmsan-gce
2018/08/26 06:36 https://github.com/google/kmsan.git master 0cc51dc9a291 758cd203 .config console log report ci-upstream-kmsan-gce
2018/08/25 17:51 https://github.com/google/kmsan.git master 0cc51dc9a291 9be5aa1d .config console log report ci-upstream-kmsan-gce
2018/08/25 06:17 https://github.com/google/kmsan.git master 0cc51dc9a291 9be5aa1d .config console log report ci-upstream-kmsan-gce
2018/08/24 18:34 https://github.com/google/kmsan.git master 0cc51dc9a291 9b0f5c75 .config console log report ci-upstream-kmsan-gce
2018/04/06 23:28 https://github.com/google/kmsan.git master e2ab7e8abba4 d613535f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.