fail_dump lib/fault-inject.c:51 [inline] should_fail+0x87b/0xab0 lib/fault-inject.c:149 should_failslab+0x279/0x2a0 mm/failslab.c:32 device syz_tun entered promiscuous mode slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc_node mm/slub.c:2663 [inline] slab_alloc mm/slub.c:2745 [inline] kmem_cache_alloc+0x136/0xb90 mm/slub.c:2750 ================================================================== BUG: KMSAN: uninit-value in show_trace_log_lvl+0xda4/0x1030 arch/x86/kernel/dumpstack.c:203 device syz_tun left promiscuous mode CPU: 0 PID: 7162 Comm: syz-executor7 Not tainted 4.16.0+ #84 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x14a/0x1d0 lib/dump_stack.c:53 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676 show_trace_log_lvl+0xda4/0x1030 arch/x86/kernel/dumpstack.c:203 netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236 __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x87b/0xab0 lib/fault-inject.c:149 should_failslab+0x279/0x2a0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc_node mm/slub.c:2663 [inline] slab_alloc mm/slub.c:2745 [inline] kmem_cache_alloc+0x136/0xb90 mm/slub.c:2750 kmem_cache_zalloc include/linux/slab.h:691 [inline] jbd2_alloc_handle include/linux/jbd2.h:1421 [inline] new_handle fs/jbd2/transaction.c:400 [inline] jbd2__journal_start+0x274/0xc90 fs/jbd2/transaction.c:425 __ext4_journal_start_sb+0x493/0x6f0 fs/ext4/ext4_jbd2.c:81 __ext4_journal_start fs/ext4/ext4_jbd2.h:311 [inline] ext4_punch_hole+0xf94/0x1c70 fs/ext4/inode.c:4278 ext4_fallocate+0x443/0x3790 fs/ext4/extents.c:4924 vfs_fallocate+0x9dc/0xde0 fs/open.c:319 SYSC_fallocate+0x119/0x1d0 fs/open.c:342 SyS_fallocate+0x64/0x90 fs/open.c:336 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x455329 RSP: 002b:00007f1bff465c68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d RAX: ffffffffffffffda RBX: 00007f1bff4666d4 RCX: 0000000000455329 RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000014 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000015 R13: 000000000000007d R14: 00000000006f3c58 R15: 0000000000000000 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521 update_stack_state+0x9e2/0xa40 arch/x86/kernel/unwind_frame.c:261 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236 __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x87b/0xab0 lib/fault-inject.c:149 should_failslab+0x279/0x2a0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc_node mm/slub.c:2663 [inline] slab_alloc mm/slub.c:2745 [inline] kmem_cache_alloc+0x136/0xb90 mm/slub.c:2750 kmem_cache_zalloc include/linux/slab.h:691 [inline] jbd2_alloc_handle include/linux/jbd2.h:1421 [inline] new_handle fs/jbd2/transaction.c:400 [inline] jbd2__journal_start+0x274/0xc90 fs/jbd2/transaction.c:425 __ext4_journal_start_sb+0x493/0x6f0 fs/ext4/ext4_jbd2.c:81 __ext4_journal_start fs/ext4/ext4_jbd2.h:311 [inline] ext4_punch_hole+0xf94/0x1c70 fs/ext4/inode.c:4278 ext4_fallocate+0x443/0x3790 fs/ext4/extents.c:4924 vfs_fallocate+0x9dc/0xde0 fs/open.c:319 SYSC_fallocate+0x119/0x1d0 fs/open.c:342 SyS_fallocate+0x64/0x90 fs/open.c:336 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 Local variable description: ----locked_pvec@truncate_inode_pages_range Variable was created at: truncate_inode_pages_range+0x12d/0x2810 mm/truncate.c:295 truncate_pagecache_range+0x1a2/0x1c0 mm/truncate.c:915 ==================================================================