================================================================== BUG: KMSAN: uninit-value in alloc_vmap_area+0x9c3/0x15a0 mm/vmalloc.c:457 CPU: 0 PID: 4488 Comm: syz-executor1 Not tainted 4.17.0+ #9 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1125 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620 alloc_vmap_area+0x9c3/0x15a0 mm/vmalloc.c:457 __get_vm_area_node+0x3a6/0x810 mm/vmalloc.c:1409 __vmalloc_node_range+0x2a7/0x1170 mm/vmalloc.c:1754 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vzalloc+0xd8/0xf0 mm/vmalloc.c:1857 alloc_counters+0x99/0x920 net/ipv6/netfilter/ip6_tables.c:819 copy_entries_to_user net/ipv4/netfilter/arp_tables.c:674 [inline] get_entries net/ipv4/netfilter/arp_tables.c:861 [inline] do_arpt_get_ctl+0x7da/0xe60 net/ipv4/netfilter/arp_tables.c:1482 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x481/0x4e0 net/netfilter/nf_sockopt.c:122 ip_getsockopt+0x284/0x3c0 net/ipv4/ip_sockglue.c:1562 tcp_getsockopt+0x1c6/0x1f0 net/ipv4/tcp.c:3349 sock_common_getsockopt+0x13f/0x180 net/core/sock.c:2998 __sys_getsockopt+0x48c/0x550 net/socket.c:1940 __do_sys_getsockopt net/socket.c:1951 [inline] __se_sys_getsockopt net/socket.c:1948 [inline] __x64_sys_getsockopt+0x15d/0x1c0 net/socket.c:1948 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45861a RSP: 002b:0000000000a3eab8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 0000000000000091 RCX: 000000000045861a RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 0000000000a3eae0 R08: 0000000000a3eadc R09: 0000000000000001 R10: 0000000000a3f160 R11: 0000000000000212 R12: 0000000000000013 R13: 0000000000000000 R14: 00000000007024c0 R15: 0000000000001380 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 alloc_vmap_area+0x14bb/0x15a0 mm/vmalloc.c:505 __get_vm_area_node+0x3a6/0x810 mm/vmalloc.c:1409 __vmalloc_node_range+0x2a7/0x1170 mm/vmalloc.c:1754 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vmalloc+0xd8/0xf0 mm/vmalloc.c:1840 snd_pcm_oss_change_params_locked+0x631b/0x6940 sound/core/oss/pcm_oss.c:1066 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1101 [inline] snd_pcm_oss_make_ready+0x184/0x4f0 sound/core/oss/pcm_oss.c:1160 snd_pcm_oss_sync+0x433/0x1120 sound/core/oss/pcm_oss.c:1721 snd_pcm_oss_release+0x13a/0x4c0 sound/core/oss/pcm_oss.c:2560 __fput+0x458/0xa30 fs/file_table.c:209 ____fput+0x37/0x40 fs/file_table.c:243 task_work_run+0x22e/0x2b0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x110e/0x3930 kernel/exit.c:867 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 alloc_vmap_area+0x14bb/0x15a0 mm/vmalloc.c:505 __get_vm_area_node+0x3a6/0x810 mm/vmalloc.c:1409 __vmalloc_node_range+0x2a7/0x1170 mm/vmalloc.c:1754 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vmalloc+0xd8/0xf0 mm/vmalloc.c:1840 snd_pcm_plugin_alloc+0x29a/0xc70 sound/core/oss/pcm_plugin.c:70 snd_pcm_plug_alloc+0x281/0x5d0 sound/core/oss/pcm_plugin.c:129 snd_pcm_oss_change_params_locked+0x59ef/0x6940 sound/core/oss/pcm_oss.c:1038 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1101 [inline] snd_pcm_oss_make_ready+0x184/0x4f0 sound/core/oss/pcm_oss.c:1160 snd_pcm_oss_sync+0x433/0x1120 sound/core/oss/pcm_oss.c:1721 snd_pcm_oss_release+0x13a/0x4c0 sound/core/oss/pcm_oss.c:2560 __fput+0x458/0xa30 fs/file_table.c:209 ____fput+0x37/0x40 fs/file_table.c:243 task_work_run+0x22e/0x2b0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x110e/0x3930 kernel/exit.c:867 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 alloc_vmap_area+0x14bb/0x15a0 mm/vmalloc.c:505 __get_vm_area_node+0x3a6/0x810 mm/vmalloc.c:1409 __vmalloc_node_range+0x2a7/0x1170 mm/vmalloc.c:1754 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc+0xe2/0x100 mm/vmalloc.c:1810 _snd_pcm_lib_alloc_vmalloc_buffer+0x1df/0x3c0 sound/core/pcm_memory.c:411 snd_pcm_lib_alloc_vmalloc_buffer include/sound/pcm.h:1233 [inline] loopback_hw_params+0x8d/0xb0 sound/drivers/aloop.c:591 snd_pcm_hw_params+0x815/0x21b0 sound/core/pcm_native.c:681 snd_pcm_kernel_ioctl+0x1ec/0x2080 sound/core/pcm_native.c:3005 snd_pcm_oss_change_params_locked+0x48a9/0x6940 sound/core/oss/pcm_oss.c:993 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1101 [inline] snd_pcm_oss_make_ready+0x184/0x4f0 sound/core/oss/pcm_oss.c:1160 snd_pcm_oss_sync+0x433/0x1120 sound/core/oss/pcm_oss.c:1721 snd_pcm_oss_release+0x13a/0x4c0 sound/core/oss/pcm_oss.c:2560 __fput+0x458/0xa30 fs/file_table.c:209 ____fput+0x37/0x40 fs/file_table.c:243 task_work_run+0x22e/0x2b0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x110e/0x3930 kernel/exit.c:867 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Local variable description: ----t.i.i@__se_sys_nanosleep Variable was created at: __se_sys_nanosleep+0x5f/0x6a0 kernel/time/hrtimer.c:1762 __x64_sys_nanosleep+0x92/0xc0 kernel/time/hrtimer.c:1762 ==================================================================