mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: Bart Van Assche <bvanassche@acm.org>
To: syzbot <syzbot+a7b56f5926d90eaf5071@syzkaller.appspotmail.com>,
	James.Bottomley@HansenPartnership.com,
	linux-kernel@vger.kernel.org, linux-scsi@vger.kernel.org,
	martin.petersen@oracle.com, syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] [scsi?] upstream test error: KMSAN: uninit-value in scsi_get_vpd_buf
Date: Wed, 8 Oct 2025 13:16:07 -0700	[thread overview]
Message-ID: <9147add6-303f-4ffe-95b6-9464d3a5f071@acm.org> (raw)
In-Reply-To: <68e6c0fe.050a0220.256323.00fd.GAE@google.com>

On 10/8/25 12:52 PM, syzbot wrote:
> scsi 0:0:1:0: Direct-Access     Google   PersistentDisk   1    PQ: 0 ANSI: 6
> =====================================================
> BUG: KMSAN: uninit-value in scsi_vpd_inquiry drivers/scsi/scsi.c:323 [inline]
> BUG: KMSAN: uninit-value in scsi_get_vpd_buf+0x4cc/0x720 drivers/scsi/scsi.c:455
>   scsi_vpd_inquiry drivers/scsi/scsi.c:323 [inline]
>   scsi_get_vpd_buf+0x4cc/0x720 drivers/scsi/scsi.c:455
>   scsi_update_vpd_page drivers/scsi/scsi.c:479 [inline]
>   scsi_attach_vpd+0x380/0xe70 drivers/scsi/scsi.c:520
>   scsi_add_lun drivers/scsi/scsi_scan.c:1110 [inline]
>   scsi_probe_and_add_lun+0x6933/0x7f20 drivers/scsi/scsi_scan.c:1288
>   __scsi_scan_target+0x2fb/0x2050 drivers/scsi/scsi_scan.c:1776
>   scsi_scan_channel drivers/scsi/scsi_scan.c:1864 [inline]
>   scsi_scan_host_selected+0x68f/0x9a0 drivers/scsi/scsi_scan.c:1893
>   do_scsi_scan_host drivers/scsi/scsi_scan.c:2032 [inline]
>   do_scan_async+0x1ad/0xdc0 drivers/scsi/scsi_scan.c:2042
>   async_run_entry_fn+0x90/0x570 kernel/async.c:129
>   process_one_work kernel/workqueue.c:3263 [inline]
>   process_scheduled_works+0xb91/0x1d80 kernel/workqueue.c:3346
>   worker_thread+0xedf/0x1590 kernel/workqueue.c:3427
>   kthread+0xd59/0xf00 kernel/kthread.c:463
>   ret_from_fork+0x233/0x380 arch/x86/kernel/process.c:158
>   ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Syzkaller team, does the above output perhaps indicate that the 
implementation of one of the VPD pages in the Google Persistent Disk
product is not compliant with the SCSI standard? Although it would be
easy to suppress the above complaint by zero-initializing VPD buffers
before submitting an INQUIRY command, I think the above complaint
indicates that the response to an INQUIRY command is shorter than four
bytes. The SCSI SPC standard requires that INQUIRY responses are at
least four bytes long if the EVPD bit has been set.

Thanks,

Bart.



      reply	other threads:[~2025-10-08 20:16 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-10-08 19:52 syzbot
2025-10-08 20:16 ` Bart Van Assche [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=9147add6-303f-4ffe-95b6-9464d3a5f071@acm.org \
    --to=bvanassche@acm.org \
    --cc=James.Bottomley@HansenPartnership.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-scsi@vger.kernel.org \
    --cc=martin.petersen@oracle.com \
    --cc=syzbot+a7b56f5926d90eaf5071@syzkaller.appspotmail.com \
    --cc=syzkaller-bugs@googlegroups.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®