syzbot


KMSAN: uninit-value in __probe_kernel_read

Status: closed as invalid on 2018/06/27 15:18
Subsystems: mm
[Documentation on labels]
First crash: 2471d, last: 2451d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
BUG: KMSAN: uninit-value in raw_copy_from_user arch/x86/include/asm/uaccess_64.h:55 [inline]
BUG: KMSAN: uninit-value in __copy_from_user_inatomic include/linux/uaccess.h:69 [inline]
BUG: KMSAN: uninit-value in __probe_kernel_read+0x224/0x280 mm/maccess.c:33
CPU: 0 PID: 4491 Comm: syz-executor546 Not tainted 4.16.0+ #87
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_from_user arch/x86/include/asm/uaccess_64.h:55 [inline]
 __copy_from_user_inatomic include/linux/uaccess.h:69 [inline]
 __probe_kernel_read+0x224/0x280 mm/maccess.c:33
 is_valid_bugaddr+0xb6/0x1a0 arch/x86/kernel/traps.c:168
 report_bug+0x6f/0x880 lib/bug.c:149
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:kmsan_copy_to_user+0x141/0x160 mm/kmsan/kmsan.c:1213
RSP: 0018:ffff8801b7bafaa0 EFLAGS: 00010202
RAX: ffff8801cedabb00 RBX: ffff8801b7bafb20 RCX: 0000000000000004
RDX: 00007ffffffff000 RSI: ffff8801b7bafb20 RDI: ffffffffffffffff
RBP: ffff8801b7bafae8 R08: 0000000000000000 R09: 000077ff80000000
R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000004
R13: ffffffffffffffff R14: 0000000000000000 R15: ffff8801cedac418
 copy_to_user include/linux/uaccess.h:184 [inline]
 ucma_destroy_id+0x732/0x7c0 drivers/infiniband/core/ucma.c:618
 ucma_write+0x576/0x5e0 drivers/infiniband/core/ucma.c:1656
 __vfs_write+0x1a3/0x9f0 fs/read_write.c:480
 vfs_write+0x463/0x8d0 fs/read_write.c:544
 SYSC_write+0x172/0x360 fs/read_write.c:589
 SyS_write+0x55/0x80 fs/read_write.c:581
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x4455b9
RSP: 002b:00007f2ee691bda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 00000000004455b9
RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003
RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 006d635f616d6472
R13: 2f646e6162696e69 R14: 666e692f7665642f R15: 0000000000000001

Local variable description: ----seq.i@path_openat
Variable was created at:
 path_openat+0xa4/0x6610 fs/namei.c:3490
 do_filp_open+0x261/0x640 fs/namei.c:3554
==================================================================

Crashes (69):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/01 09:52 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report syz C ci-upstream-kmsan-gce
2018/05/14 08:18 https://github.com/google/kmsan.git master 9bad779decc0 481f030c .config console log report ci-upstream-kmsan-gce
2018/05/14 06:14 https://github.com/google/kmsan.git master 9bad779decc0 481f030c .config console log report ci-upstream-kmsan-gce
2018/05/14 02:40 https://github.com/google/kmsan.git master 9bad779decc0 481f030c .config console log report ci-upstream-kmsan-gce
2018/05/13 17:08 https://github.com/google/kmsan.git master 9bad779decc0 c05b619d .config console log report ci-upstream-kmsan-gce
2018/05/13 15:35 https://github.com/google/kmsan.git master 9bad779decc0 c05b619d .config console log report ci-upstream-kmsan-gce
2018/05/13 13:56 https://github.com/google/kmsan.git master 9bad779decc0 c05b619d .config console log report ci-upstream-kmsan-gce
2018/05/13 11:49 https://github.com/google/kmsan.git master 9bad779decc0 c05b619d .config console log report ci-upstream-kmsan-gce
2018/05/13 07:33 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/13 05:36 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/13 03:52 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/13 02:51 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/13 00:56 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 22:29 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 19:18 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 17:07 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 16:45 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 16:07 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 14:06 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 14:06 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 12:24 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report ci-upstream-kmsan-gce
2018/05/12 07:13 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/12 05:16 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/12 03:08 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/12 02:43 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 23:29 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 23:20 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 18:52 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 18:48 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 17:30 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 17:27 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 17:21 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 16:47 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 16:16 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 15:13 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 15:06 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 14:56 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 14:01 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 13:22 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 13:19 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 11:41 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/11 07:34 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/10 07:33 https://github.com/google/kmsan.git master 74ee2200b89f 12c7428a .config console log report ci-upstream-kmsan-gce
2018/05/08 18:19 https://github.com/google/kmsan.git master d2d741e5d189 b88872ba .config console log report ci-upstream-kmsan-gce
2018/05/08 14:29 https://github.com/google/kmsan.git master d2d741e5d189 045bbd4a .config console log report ci-upstream-kmsan-gce
2018/05/07 06:36 https://github.com/google/kmsan.git master d2d741e5d189 a211da1a .config console log report ci-upstream-kmsan-gce
2018/05/05 05:31 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report ci-upstream-kmsan-gce
2018/05/02 17:42 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report ci-upstream-kmsan-gce
2018/05/01 09:24 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report ci-upstream-kmsan-gce
2018/04/29 03:34 https://github.com/google/kmsan.git master d2d741e5d189 d5a5d045 .config console log report ci-upstream-kmsan-gce
2018/04/27 21:57 https://github.com/google/kmsan.git master d2d741e5d189 7785e404 .config console log report ci-upstream-kmsan-gce
2018/04/24 12:33 https://github.com/google/kmsan.git master d2d741e5d189 e7e85d36 .config console log report ci-upstream-kmsan-gce
2018/04/24 02:28 https://github.com/google/kmsan.git master d2d741e5d189 0d8e591c .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.