syzbot


KMSAN: uninit-value in sw842_decompress (2)

Status: upstream: reported on 2025/04/06 12:32
Subsystems: crypto
[Documentation on labels]
Reported-by: syzbot+8f77ff6144a73f0cf71b@syzkaller.appspotmail.com
First crash: 44d, last: 12d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [crypto?] KMSAN: uninit-value in sw842_decompress (2) 0 (1) 2025/04/06 12:32
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in sw842_decompress crypto 1 176d 172d 0/28 auto-obsoleted due to no activity on 2025/03/01 12:04

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in crc32_be_base+0x215/0x270 lib/crc32.c:131
 crc32_be_base+0x215/0x270 lib/crc32.c:131
 crc32_be_arch+0x3f/0x50 arch/x86/lib/crc32-glue.c:77
 crc32_be include/linux/crc32.h:28 [inline]
 sw842_decompress+0x15c6/0x1780 lib/842/842_decompress.c:385
 crypto842_sdecompress+0x46/0x60 crypto/842.c:57
 scomp_acomp_comp_decomp+0xa81/0xdd0 crypto/scompress.c:-1
 scomp_acomp_chain crypto/scompress.c:301 [inline]
 scomp_acomp_decompress+0x3a/0x210 crypto/scompress.c:317
 acomp_do_req_chain+0x377/0xa00 crypto/acompress.c:353
 crypto_acomp_decompress+0x5f/0x80 crypto/acompress.c:378
 zswap_decompress+0x510/0xea0 mm/zswap.c:1032
 zswap_load+0x26a/0x640 mm/zswap.c:1692
 swap_read_folio+0x66d/0x30a0 mm/page_io.c:643
 swap_cluster_readahead+0xa82/0xb20 mm/swap_state.c:638
 swapin_readahead+0x1d9/0x15b0 mm/swap_state.c:814
 do_swap_page+0xa35/0x9d60 mm/memory.c:4532
 handle_pte_fault mm/memory.c:6000 [inline]
 __handle_mm_fault mm/memory.c:6140 [inline]
 handle_mm_fault+0x40c2/0xdf50 mm/memory.c:6309
 do_user_addr_fault+0x177d/0x2560 arch/x86/mm/fault.c:1337
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x5a/0xc0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x2b/0x30 arch/x86/include/asm/idtentry.h:623

Uninit was created at:
 __alloc_frozen_pages_noprof+0x689/0xf00 mm/page_alloc.c:4993
 alloc_pages_mpol+0x328/0x860 mm/mempolicy.c:2301
 folio_alloc_mpol_noprof+0x56/0x1d0 mm/mempolicy.c:2320
 __read_swap_cache_async+0x2a7/0x980 mm/swap_state.c:403
 swap_cluster_readahead+0x9ff/0xb20 mm/swap_state.c:635
 swapin_readahead+0x1d9/0x15b0 mm/swap_state.c:814
 do_swap_page+0xa35/0x9d60 mm/memory.c:4532
 handle_pte_fault mm/memory.c:6000 [inline]
 __handle_mm_fault mm/memory.c:6140 [inline]
 handle_mm_fault+0x40c2/0xdf50 mm/memory.c:6309
 do_user_addr_fault+0x177d/0x2560 arch/x86/mm/fault.c:1337
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x5a/0xc0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x2b/0x30 arch/x86/include/asm/idtentry.h:623

CPU: 1 UID: 0 PID: 21642 Comm: syz.5.3912 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
=====================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/04 18:23 upstream 02ddfb981de8 b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
2025/04/02 12:25 upstream acc4d5ff0b61 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in sw842_decompress
* Struck through repros no longer work on HEAD.