KMSAN: uninit-value in rdma_listen

Status: fixed on 2020/03/25 19:36
Subsystems: rdma
[Documentation on labels]
Fix commit: 5fc01fb846bc RDMA/cma: Rollback source IP address if failing to acquire device
First crash: 2874d, last: 2509d
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in rdma_listen (2) rdma 7 1 2296d 2296d 0/29 auto-closed as invalid on 2020/07/29 14:03

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in __list_add_valid+0x2a3/0x460 lib/list_debug.c:26
CPU: 1 PID: 7736 Comm: syz-executor019 Not tainted 4.20.0-rc3+ #91
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x32d/0x480 lib/dump_stack.c:113
 kmsan_report+0x19f/0x300 mm/kmsan/kmsan.c:911
 __msan_warning+0x76/0xc0 mm/kmsan/kmsan_instr.c:415
 __list_add_valid+0x2a3/0x460 lib/list_debug.c:26
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 cma_listen_on_all drivers/infiniband/core/cma.c:2474 [inline]
 rdma_listen+0x782/0x10a0 drivers/infiniband/core/cma.c:3489
 ucma_listen+0x32d/0x560 drivers/infiniband/core/ucma.c:1100
 ucma_write+0x5f9/0x670 drivers/infiniband/core/ucma.c:1689
 __vfs_write+0x1f4/0xb80 fs/read_write.c:485
 vfs_write+0x4a3/0x8f0 fs/read_write.c:549
 ksys_write fs/read_write.c:598 [inline]
 __do_sys_write fs/read_write.c:610 [inline]
 __se_sys_write+0x17a/0x370 fs/read_write.c:607
 __x64_sys_write+0x4a/0x70 fs/read_write.c:607
 do_syscall_64+0xcf/0x110 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x440fa9
Code: e8 cc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffcfdcd7db8 EFLAGS: 00000207 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440fa9
RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00000000004002c8 R09: 00000000004002c8
R10: 00000000004002c8 R11: 0000000000000207 R12: 0000000000013804
R13: 0000000000401f80 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:252 [inline]
 kmsan_internal_poison_shadow+0xc8/0x1c0 mm/kmsan/kmsan.c:177
 kmsan_kmalloc+0x98/0xf0 mm/kmsan/kmsan_hooks.c:104
 kmsan_slab_alloc+0xe/0x10 mm/kmsan/kmsan_hooks.c:113
 slab_post_alloc_hook mm/slab.h:446 [inline]
 slab_alloc_node mm/slub.c:2765 [inline]
 __kmalloc_node_track_caller+0xf62/0x14e0 mm/slub.c:4396
 __kmalloc_reserve net/core/skbuff.c:138 [inline]
 __alloc_skb+0x42b/0xeb0 net/core/skbuff.c:206
 alloc_skb_fclone include/linux/skbuff.h:1040 [inline]
 sk_stream_alloc_skb+0x236/0xe60 net/ipv4/tcp.c:874
 tcp_sendmsg_locked+0x2638/0x6c30 net/ipv4/tcp.c:1286
 tcp_sendmsg+0xb2/0x100 net/ipv4/tcp.c:1443
 inet_sendmsg+0x4e9/0x800 net/ipv4/af_inet.c:798
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg net/socket.c:631 [inline]
 sock_write_iter+0x3f4/0x4f0 net/socket.c:900
 call_write_iter include/linux/fs.h:1857 [inline]
 new_sync_write fs/read_write.c:474 [inline]
 __vfs_write+0x888/0xb80 fs/read_write.c:487
 vfs_write+0x4a3/0x8f0 fs/read_write.c:549
 ksys_write fs/read_write.c:598 [inline]
 __do_sys_write fs/read_write.c:610 [inline]
 __se_sys_write+0x17a/0x370 fs/read_write.c:607
 __x64_sys_write+0x4a/0x70 fs/read_write.c:607
 do_syscall_64+0xcf/0x110 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
==================================================================

Crashes (28):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/11/21 11:12 https://github.com/google/kmsan.git master 598a88bc28d3 5d9a3924 .config console log report syz C ci-upstream-kmsan-gce
2019/08/31 15:39 https://github.com/google/kmsan.git master 77d232b6aa76 fd37b39e .config console log report syz ci-upstream-kmsan-gce
2019/08/17 10:45 https://github.com/google/kmsan.git master 61ccdad1fcdf 8fd428a1 .config console log report syz ci-upstream-kmsan-gce
2019/04/06 17:29 https://github.com/google/kmsan.git master 46200eb9666d c34fde03 .config console log report syz ci-upstream-kmsan-gce
2019/09/30 12:08 https://github.com/google/kmsan.git master f5f9d3ce4686 c7a4fb99 .config console log report ci-upstream-kmsan-gce
2019/09/29 15:00 https://github.com/google/kmsan.git master 124037e07586 c1ad5441 .config console log report ci-upstream-kmsan-gce
2019/09/28 21:43 https://github.com/google/kmsan.git master 124037e07586 eb6b9855 .config console log report ci-upstream-kmsan-gce
2019/09/26 15:09 https://github.com/google/kmsan.git master 2eb4eee5708b 24d405a3 .config console log report ci-upstream-kmsan-gce
2019/09/20 10:54 https://github.com/google/kmsan.git master cebbfdbcf2b7 d96e88f3 .config console log report ci-upstream-kmsan-gce
2019/09/20 08:36 https://github.com/google/kmsan.git master cebbfdbcf2b7 4d3ae0b7 .config console log report ci-upstream-kmsan-gce
2019/09/05 11:27 https://github.com/google/kmsan.git master 040b8306f758 040fda58 .config console log report ci-upstream-kmsan-gce
2019/09/04 18:35 https://github.com/google/kmsan.git master 83f99205d6a8 040fda58 .config console log report ci-upstream-kmsan-gce
2019/09/04 01:43 https://github.com/google/kmsan.git master 4b523a2dfab0 526709ff .config console log report ci-upstream-kmsan-gce
2019/08/23 17:13 https://github.com/google/kmsan.git master 61ccdad1fcdf 78ded196 .config console log report ci-upstream-kmsan-gce
2019/06/19 05:43 https://github.com/google/kmsan.git master aad0f0dd72ab 34bf9440 .config console log report ci-upstream-kmsan-gce
2019/06/17 01:32 https://github.com/google/kmsan.git master 14cf4e4151b0 442206d7 .config console log report ci-upstream-kmsan-gce
2019/03/23 13:50 https://github.com/google/kmsan.git master c10a026b8dee 3361bde5 .config console log report ci-upstream-kmsan-gce
2019/03/22 00:36 https://github.com/google/kmsan.git master c10a026b8dee dce6e62f .config console log report ci-upstream-kmsan-gce
2019/03/21 17:28 https://github.com/google/kmsan.git master c10a026b8dee dce6e62f .config console log report ci-upstream-kmsan-gce
2019/03/15 05:07 https://github.com/google/kmsan.git master 9536b452bf7b d72db19b .config console log report ci-upstream-kmsan-gce
2019/02/08 19:14 https://github.com/google/kmsan.git master fa1981bee40f fa6c7b70 .config console log report ci-upstream-kmsan-gce
2019/01/28 22:52 https://github.com/google/kmsan.git master fa1981bee40f aa432daf .config console log report ci-upstream-kmsan-gce
2018/12/16 11:36 https://github.com/google/kmsan.git master 0a602458c72c def91db3 .config console log report ci-upstream-kmsan-gce
2018/11/22 06:02 https://github.com/google/kmsan.git master 3ededcaa1606 9db828b5 .config console log report ci-upstream-kmsan-gce
2018/11/22 05:42 https://github.com/google/kmsan.git master 3ededcaa1606 9db828b5 .config console log report ci-upstream-kmsan-gce
2018/10/29 08:01 https://github.com/google/kmsan.git master 4bb25354f0b0 9ca2afa1 .config console log report ci-upstream-kmsan-gce
2018/10/26 11:33 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/09/30 19:01 https://github.com/google/kmsan.git master 2b752aff835d 41e4b329 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.