From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id E8E9CC46CD2 for ; Tue, 2 Jan 2024 07:38:23 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 3F9BB6B0183; Tue, 2 Jan 2024 02:38:23 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 3AA5D6B0184; Tue, 2 Jan 2024 02:38:23 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 272606B0185; Tue, 2 Jan 2024 02:38:23 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0013.hostedemail.com [216.40.44.13]) by kanga.kvack.org (Postfix) with ESMTP id 179766B0183 for ; Tue, 2 Jan 2024 02:38:23 -0500 (EST) Received: from smtpin04.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay05.hostedemail.com (Postfix) with ESMTP id D94CD4046B for ; Tue, 2 Jan 2024 07:38:22 +0000 (UTC) X-FDA: 81633568044.04.695B9A0 Received: from www262.sakura.ne.jp (www262.sakura.ne.jp [202.181.97.72]) by imf01.hostedemail.com (Postfix) with ESMTP id 3FACD40010 for ; Tue, 2 Jan 2024 07:38:19 +0000 (UTC) Authentication-Results: imf01.hostedemail.com; dkim=none; spf=none (imf01.hostedemail.com: domain of penguin-kernel@I-love.SAKURA.ne.jp has no SPF policy when checking 202.181.97.72) smtp.mailfrom=penguin-kernel@I-love.SAKURA.ne.jp; dmarc=none ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1704181101; a=rsa-sha256; cv=none; b=Kf/FBiTVLWrqZ8AxuL1zK0vekwG1DbuxxYVNZ1FMVeBwDbm2AmpufcZdbBUG1PKOMB3OoR jujQ+giQwQKLAUQMEWDLkK/MU/fxYz4oXiD3ogoF8bsu3lHbAYQ8ORf25wVIm96MMLhJ/Z fOwNsC6XcWnqj4b+GVD8G2KRCt1WMJE= ARC-Authentication-Results: i=1; imf01.hostedemail.com; dkim=none; spf=none (imf01.hostedemail.com: domain of penguin-kernel@I-love.SAKURA.ne.jp has no SPF policy when checking 202.181.97.72) smtp.mailfrom=penguin-kernel@I-love.SAKURA.ne.jp; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1704181101; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=6Nib2q6iHhvKUFmgynrRK3YLzStb7eLtniOvWtxGi7M=; b=DUmOgHDByR0gM7TrHPXU8ePMkukjyou0BOEa7ZHy07vbOPA050YkRuWB4c0aMCcEMEI223 e6LU5/2SIoflAsAktrmef3vxF/nARonk6sBkspbG6CDz3lf+Yi66i+aIboWkKRc3sxLXiv LTlR4j/CvDBcRBW/jHzzQL9fFhXaEec= Received: from fsav117.sakura.ne.jp (fsav117.sakura.ne.jp [27.133.134.244]) by www262.sakura.ne.jp (8.15.2/8.15.2) with ESMTP id 4027cEXN048721; Tue, 2 Jan 2024 16:38:14 +0900 (JST) (envelope-from penguin-kernel@I-love.SAKURA.ne.jp) Received: from www262.sakura.ne.jp (202.181.97.72) by fsav117.sakura.ne.jp (F-Secure/fsigk_smtp/550/fsav117.sakura.ne.jp); Tue, 02 Jan 2024 16:38:14 +0900 (JST) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/fsav117.sakura.ne.jp) Received: from [192.168.1.6] (M106072142033.v4.enabler.ne.jp [106.72.142.33]) (authenticated bits=0) by www262.sakura.ne.jp (8.15.2/8.15.2) with ESMTPSA id 4027cDIh048716 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NO); Tue, 2 Jan 2024 16:38:14 +0900 (JST) (envelope-from penguin-kernel@I-love.SAKURA.ne.jp) Message-ID: <2c1dad81-9b22-47fb-b0e9-6e4a2a2c67be@I-love.SAKURA.ne.jp> Date: Tue, 2 Jan 2024 16:38:13 +0900 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [syzbot] [virtualization?] KMSAN: uninit-value in virtqueue_add (4) Content-Language: en-US To: syzbot , syzkaller-bugs@googlegroups.com, linux-mm References: <000000000000fd588e060de27ef4@google.com> From: Tetsuo Handa In-Reply-To: <000000000000fd588e060de27ef4@google.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Rspam-User: X-Rspamd-Server: rspam06 X-Rspamd-Queue-Id: 3FACD40010 X-Stat-Signature: 1upomrmqb4n7f5ac3bwujbiogui3cfbb X-HE-Tag: 1704181099-61498 X-HE-Meta: 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 iuHc8t9M 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 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: #syz set subsystems: mm On 2024/01/01 22:38, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: fbafc3e621c3 Merge tag 'for_linus' of git://git.kernel.org.. > git tree: upstream > console+strace: https://syzkaller.appspot.com/x/log.txt?x=173df3e9e80000 > kernel config: https://syzkaller.appspot.com/x/.config?x=e0c7078a6b901aa3 > dashboard link: https://syzkaller.appspot.com/bug?extid=d7521c1e3841ed075a42 > compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1300b4a1e80000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=130b0379e80000 > > Downloadable assets: > disk image: https://storage.googleapis.com/syzbot-assets/1520f7b6daa4/disk-fbafc3e6.raw.xz > vmlinux: https://storage.googleapis.com/syzbot-assets/8b490af009d5/vmlinux-fbafc3e6.xz > kernel image: https://storage.googleapis.com/syzbot-assets/202ca200f4a4/bzImage-fbafc3e6.xz > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+d7521c1e3841ed075a42@syzkaller.appspotmail.com > > ===================================================== > BUG: KMSAN: uninit-value in vring_map_one_sg drivers/virtio/virtio_ring.c:380 [inline] > BUG: KMSAN: uninit-value in virtqueue_add_split drivers/virtio/virtio_ring.c:614 [inline] > BUG: KMSAN: uninit-value in virtqueue_add+0x21c6/0x6530 drivers/virtio/virtio_ring.c:2210 > vring_map_one_sg drivers/virtio/virtio_ring.c:380 [inline] > virtqueue_add_split drivers/virtio/virtio_ring.c:614 [inline] > virtqueue_add+0x21c6/0x6530 drivers/virtio/virtio_ring.c:2210 > virtqueue_add_sgs+0x186/0x1a0 drivers/virtio/virtio_ring.c:2244 > __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:467 [inline] > virtscsi_add_cmd+0x838/0xad0 drivers/scsi/virtio_scsi.c:501 > virtscsi_queuecommand+0x896/0xa60 drivers/scsi/virtio_scsi.c:598 > scsi_dispatch_cmd drivers/scsi/scsi_lib.c:1516 [inline] > scsi_queue_rq+0x4874/0x5790 drivers/scsi/scsi_lib.c:1758 > blk_mq_dispatch_rq_list+0x13f8/0x3600 block/blk-mq.c:2049 > __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] > blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] > __blk_mq_sched_dispatch_requests+0x10af/0x2500 block/blk-mq-sched.c:309 > blk_mq_sched_dispatch_requests+0x160/0x2d0 block/blk-mq-sched.c:333 > blk_mq_run_work_fn+0xd0/0x280 block/blk-mq.c:2434 > process_one_work kernel/workqueue.c:2627 [inline] > process_scheduled_works+0x104e/0x1e70 kernel/workqueue.c:2700 > worker_thread+0xf45/0x1490 kernel/workqueue.c:2781 > kthread+0x3ed/0x540 kernel/kthread.c:388 > ret_from_fork+0x66/0x80 arch/x86/kernel/process.c:147 > ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 > > Uninit was created at: > __alloc_pages+0x9a4/0xe00 mm/page_alloc.c:4591 > alloc_pages_mpol+0x62b/0x9d0 mm/mempolicy.c:2133 > alloc_pages mm/mempolicy.c:2204 [inline] > folio_alloc+0x1da/0x380 mm/mempolicy.c:2211 > filemap_alloc_folio+0xa5/0x430 mm/filemap.c:974 > __filemap_get_folio+0xa5a/0x1760 mm/filemap.c:1918 > ext4_da_write_begin+0x7f8/0xec0 fs/ext4/inode.c:2891 > generic_perform_write+0x3f5/0xc40 mm/filemap.c:3918 > ext4_buffered_write_iter+0x564/0xaa0 fs/ext4/file.c:299 > ext4_file_write_iter+0x20f/0x3460 > __kernel_write_iter+0x329/0x930 fs/read_write.c:517 > dump_emit_page fs/coredump.c:888 [inline] > dump_user_range+0x593/0xcd0 fs/coredump.c:915 > elf_core_dump+0x528d/0x5a40 fs/binfmt_elf.c:2077 > do_coredump+0x32c9/0x4920 fs/coredump.c:764 > get_signal+0x2185/0x2d10 kernel/signal.c:2890 > arch_do_signal_or_restart+0x53/0xca0 arch/x86/kernel/signal.c:309 > exit_to_user_mode_loop+0xe8/0x320 kernel/entry/common.c:168 > exit_to_user_mode_prepare+0x163/0x220 kernel/entry/common.c:204 > irqentry_exit_to_user_mode+0xd/0x30 kernel/entry/common.c:309 > irqentry_exit+0x16/0x40 kernel/entry/common.c:412 > exc_page_fault+0x246/0x6f0 arch/x86/mm/fault.c:1564 > asm_exc_page_fault+0x2b/0x30 arch/x86/include/asm/idtentry.h:570 > > Bytes 0-4095 of 4096 are uninitialized > Memory access of size 4096 starts at ffff88812c79c000 > > CPU: 0 PID: 997 Comm: kworker/0:1H Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 > Workqueue: kblockd blk_mq_run_work_fn > =====================================================