syzbot


KMSAN: uninit-value in sw842_decompress (2)

Status: upstream: reported on 2025/04/06 12:32
Subsystems: crypto
[Documentation on labels]
Reported-by: syzbot+8f77ff6144a73f0cf71b@syzkaller.appspotmail.com
First crash: 282d, last: 7d13h
Discussions (3)
Title Replies (including bot) Last reply
[syzbot] Monthly crypto report (Sep 2025) 0 (1) 2025/09/12 12:50
[syzbot] Monthly crypto report (Jul 2025) 0 (1) 2025/07/31 12:52
[syzbot] [crypto?] KMSAN: uninit-value in sw842_decompress (2) 0 (1) 2025/04/06 12:32
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in sw842_decompress crypto 7 1 414d 410d 0/29 auto-obsoleted due to no activity on 2025/03/01 12:04

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in sw842_decompress+0x11f3/0x1780 lib/842/842_decompress.c:303
 sw842_decompress+0x11f3/0x1780 lib/842/842_decompress.c:303
 crypto842_sdecompress+0x46/0x60 crypto/842.c:53
 scomp_acomp_comp_decomp+0xa49/0x1120 include/crypto/internal/scompress.h:-1
 scomp_acomp_decompress+0x30/0x40 crypto/scompress.c:287
 crypto_acomp_decompress+0x5b4/0xe80 crypto/acompress.c:303
 zswap_decompress+0x729/0x1000 mm/zswap.c:967
 zswap_load+0x262/0x570 mm/zswap.c:1627
 swap_read_folio+0x662/0x3050 mm/page_io.c:637
 swap_cluster_readahead+0xa8c/0xb20 mm/swap_state.c:668
 swapin_readahead+0x217/0x1990 mm/swap_state.c:821
 do_swap_page+0x984/0x99b0 mm/memory.c:4753
 handle_pte_fault mm/memory.c:6276 [inline]
 __handle_mm_fault mm/memory.c:6411 [inline]
 handle_mm_fault+0x3034/0x6ee0 mm/memory.c:6580
 do_user_addr_fault+0x1777/0x2550 arch/x86/mm/fault.c:1336
 handle_page_fault arch/x86/mm/fault.c:1476 [inline]
 exc_page_fault+0x74/0xc0 arch/x86/mm/fault.c:1532
 asm_exc_page_fault+0x2b/0x30 arch/x86/include/asm/idtentry.h:618

Uninit was stored to memory at:
 sw842_decompress+0x11ec/0x1780 lib/842/842_decompress.c:303
 crypto842_sdecompress+0x46/0x60 crypto/842.c:53
 scomp_acomp_comp_decomp+0xa49/0x1120 include/crypto/internal/scompress.h:-1
 scomp_acomp_decompress+0x30/0x40 crypto/scompress.c:287
 crypto_acomp_decompress+0x5b4/0xe80 crypto/acompress.c:303
 zswap_decompress+0x729/0x1000 mm/zswap.c:967
 zswap_load+0x262/0x570 mm/zswap.c:1627
 swap_read_folio+0x662/0x3050 mm/page_io.c:637
 swap_cluster_readahead+0xa8c/0xb20 mm/swap_state.c:668
 swapin_readahead+0x217/0x1990 mm/swap_state.c:821
 do_swap_page+0x984/0x99b0 mm/memory.c:4753
 handle_pte_fault mm/memory.c:6276 [inline]
 __handle_mm_fault mm/memory.c:6411 [inline]
 handle_mm_fault+0x3034/0x6ee0 mm/memory.c:6580
 do_user_addr_fault+0x1777/0x2550 arch/x86/mm/fault.c:1336
 handle_page_fault arch/x86/mm/fault.c:1476 [inline]
 exc_page_fault+0x74/0xc0 arch/x86/mm/fault.c:1532
 asm_exc_page_fault+0x2b/0x30 arch/x86/include/asm/idtentry.h:618

Uninit was stored to memory at:
 next_bits+0xac2/0xda0 lib/842/842_decompress.c:118
 sw842_decompress+0x1a6/0x1780 lib/842/842_decompress.c:297
 crypto842_sdecompress+0x46/0x60 crypto/842.c:53
 scomp_acomp_comp_decomp+0xa49/0x1120 include/crypto/internal/scompress.h:-1
 scomp_acomp_decompress+0x30/0x40 crypto/scompress.c:287
 crypto_acomp_decompress+0x5b4/0xe80 crypto/acompress.c:303
 zswap_decompress+0x729/0x1000 mm/zswap.c:967
 zswap_load+0x262/0x570 mm/zswap.c:1627
 swap_read_folio+0x662/0x3050 mm/page_io.c:637
 swap_cluster_readahead+0xa8c/0xb20 mm/swap_state.c:668
 swapin_readahead+0x217/0x1990 mm/swap_state.c:821
 do_swap_page+0x984/0x99b0 mm/memory.c:4753
 handle_pte_fault mm/memory.c:6276 [inline]
 __handle_mm_fault mm/memory.c:6411 [inline]
 handle_mm_fault+0x3034/0x6ee0 mm/memory.c:6580
 do_user_addr_fault+0x1777/0x2550 arch/x86/mm/fault.c:1336
 handle_page_fault arch/x86/mm/fault.c:1476 [inline]
 exc_page_fault+0x74/0xc0 arch/x86/mm/fault.c:1532
 asm_exc_page_fault+0x2b/0x30 arch/x86/include/asm/idtentry.h:618

Uninit was created at:
 __alloc_frozen_pages_noprof+0x421/0xab0 mm/page_alloc.c:5233
 __alloc_pages_noprof+0x41/0xd0 mm/page_alloc.c:5244
 __alloc_pages_node_noprof include/linux/gfp.h:285 [inline]
 alloc_pages_node_noprof include/linux/gfp.h:312 [inline]
 alloc_zpdesc mm/zsmalloc.c:237 [inline]
 alloc_zspage+0x394/0x19f0 mm/zsmalloc.c:984
 zs_malloc+0x79d/0x1250 mm/zsmalloc.c:1300
 zswap_compress mm/zswap.c:909 [inline]
 zswap_store_page mm/zswap.c:1428 [inline]
 zswap_store+0x24a0/0x4a90 mm/zswap.c:1539
 swap_writeout+0x8c1/0x1390 mm/page_io.c:275
 writeout mm/vmscan.c:651 [inline]
 pageout mm/vmscan.c:698 [inline]
 shrink_folio_list+0x59e0/0x7fc0 mm/vmscan.c:1418
 evict_folios+0x999d/0xbf30 mm/vmscan.c:4711
 try_to_shrink_lruvec+0x12b6/0x17e0 mm/vmscan.c:4874
 shrink_one+0x43c/0xbd0 mm/vmscan.c:4919
 shrink_many mm/vmscan.c:4982 [inline]
 lru_gen_shrink_node mm/vmscan.c:5060 [inline]
 shrink_node+0x453a/0x51e0 mm/vmscan.c:6047
 shrink_zones mm/vmscan.c:6300 [inline]
 do_try_to_free_pages+0x849/0x26b0 mm/vmscan.c:6362
 try_to_free_pages+0x986/0x16d0 mm/vmscan.c:6608
 __perform_reclaim mm/page_alloc.c:4377 [inline]
 __alloc_pages_direct_reclaim+0x10d/0x340 mm/page_alloc.c:4399
 __alloc_pages_slowpath+0xd30/0x18f0 mm/page_alloc.c:4843
 __alloc_frozen_pages_noprof+0x595/0xab0 mm/page_alloc.c:5223
 alloc_pages_mpol+0x328/0x860 mm/mempolicy.c:2486
 alloc_frozen_pages_noprof mm/mempolicy.c:2557 [inline]
 alloc_pages_noprof+0x102/0x280 mm/mempolicy.c:2577
 pagetable_alloc_noprof include/linux/mm.h:3190 [inline]
 __pte_alloc_one_noprof include/asm-generic/pgalloc.h:76 [inline]
 pte_alloc_one+0x3c/0x350 arch/x86/mm/pgtable.c:18
 __pte_alloc+0x3b/0x770 mm/memory.c:453
 copy_pte_range mm/memory.c:1237 [inline]
 copy_pmd_range mm/memory.c:1392 [inline]
 copy_pud_range mm/memory.c:1429 [inline]
 copy_p4d_range mm/memory.c:1453 [inline]
 copy_page_range+0xf1b7/0x10790 mm/memory.c:1535
 dup_mmap+0x1991/0x2d60 mm/mmap.c:1827
 dup_mm kernel/fork.c:1529 [inline]
 copy_mm+0x231/0x9d0 kernel/fork.c:1581
 copy_process+0x284e/0x5dd0 kernel/fork.c:2221
 kernel_clone+0x416/0x1080 kernel/fork.c:2651
 __do_sys_clone kernel/fork.c:2792 [inline]
 __se_sys_clone kernel/fork.c:2776 [inline]
 __x64_sys_clone+0x253/0x360 kernel/fork.c:2776
 x64_sys_call+0x1666/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:57
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

CPU: 0 UID: 0 PID: 7579 Comm: syz.4.519 Not tainted syzkaller #0 PREEMPT(none) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
=====================================================

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/22 07:06 upstream 765b233a9b94 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/10/26 19:45 upstream 72761a7e3122 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/10/21 23:54 upstream 6548d364a3e8 9832ed61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/10/07 02:03 upstream 9b0d551bcc05 91305dbe .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/10/07 01:07 upstream 9b0d551bcc05 91305dbe .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/27 12:27 upstream fec734e8d564 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/26 19:43 upstream 4ff71af020ae 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/25 15:04 upstream bf40f4b87761 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/23 17:11 upstream cec1e6e5d1ab 0ac7291c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/22 12:32 upstream 07e27ad16399 0ac7291c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/20 02:21 upstream 097a6c336d00 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/13 07:09 upstream 22f20375f5b7 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/05 04:04 upstream d69eb204c255 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/09/01 06:25 upstream 5c3b3264e585 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/08/25 10:49 upstream 69fd6b99b8f8 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/08/18 00:31 upstream 8d561baae505 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/08/12 17:08 upstream 53e760d89498 c06e8995 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/08/07 16:12 upstream 6e64f4580381 04cffc22 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/07/24 06:56 upstream 01a412d06bc5 0c1d6ded .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/07/21 19:18 upstream 89be9a83ccf1 0b3788a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/07/17 06:53 upstream e2291551827f 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/07/14 21:43 upstream 347e9f5043c8 03fcfc4b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/07/14 09:28 upstream 5d5d62298b8b 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/07/04 08:42 upstream 17bbde2e1716 76ad128c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/07/02 03:46 upstream 66701750d556 ffe4b334 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/06/28 16:02 upstream 35e261cd95dd fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/05/04 18:23 upstream 02ddfb981de8 b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/04/02 12:25 upstream acc4d5ff0b61 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2026/01/02 06:08 upstream b69053dd3ffb d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in sw842_decompress
2026/01/02 02:53 upstream b69053dd3ffb d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in sw842_decompress
2025/09/12 02:06 upstream 02ffd6f89c50 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in sw842_decompress
2025/06/27 01:07 upstream e34a79b96ab9 803ce19b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in sw842_decompress
* Struck through repros no longer work on HEAD.