syzbot


KMSAN: uninit-value in update_cfs_rq_load_avg

Status: closed as invalid on 2018/07/06 09:38
Subsystems: kernel
[Documentation on labels]
First crash: 2704d, last: 2615d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in accumulate_sum kernel/sched/fair.c:3131 [inline]
BUG: KMSAN: uninit-value in ___update_load_sum kernel/sched/fair.c:3214 [inline]
BUG: KMSAN: uninit-value in __update_load_avg_cfs_rq kernel/sched/fair.c:3320 [inline]
BUG: KMSAN: uninit-value in update_cfs_rq_load_avg+0x1370/0x1aa0 kernel/sched/fair.c:3696
CPU: 1 PID: 4534 Comm: syz-executor010 Not tainted 4.17.0+ #17
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1368
 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:634
 accumulate_sum kernel/sched/fair.c:3131 [inline]
 ___update_load_sum kernel/sched/fair.c:3214 [inline]
 __update_load_avg_cfs_rq kernel/sched/fair.c:3320 [inline]
 update_cfs_rq_load_avg+0x1370/0x1aa0 kernel/sched/fair.c:3696
 update_load_avg+0xe50/0x2cc0 kernel/sched/fair.c:3797
 dequeue_task_fair+0x29d8/0x3300 kernel/sched/fair.c:5441
 dequeue_task kernel/sched/core.c:762 [inline]
 deactivate_task+0x560/0x7d0 kernel/sched/core.c:778
 __schedule+0x164/0x770 kernel/sched/core.c:3474
 schedule+0x1cc/0x2f0 kernel/sched/core.c:3568
 freezable_schedule include/linux/freezer.h:172 [inline]
 do_nanosleep+0x2c3/0x9c0 kernel/time/hrtimer.c:1689
 hrtimer_nanosleep kernel/time/hrtimer.c:1743 [inline]
 __do_sys_nanosleep kernel/time/hrtimer.c:1775 [inline]
 __se_sys_nanosleep+0x4b3/0x6a0 kernel/time/hrtimer.c:1762
 __x64_sys_nanosleep+0x92/0xc0 kernel/time/hrtimer.c:1762
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x441130
RSP: 002b:00007ffcffd27998 EFLAGS: 00000246 ORIG_RAX: 0000000000000023
RAX: ffffffffffffffda RBX: 0000000000000b78 RCX: 0000000000441130
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffcffd279a0
RBP: 0000000000000b78 R08: 0000000000000001 R09: 0000000001587940
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000b66
R13: 0000000000152b3f R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:287 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:302 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:692
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:478
 update_load_sub kernel/sched/fair.c:129 [inline]
 account_entity_dequeue kernel/sched/fair.c:2661 [inline]
 dequeue_entity kernel/sched/fair.c:4267 [inline]
 dequeue_task_fair+0x14ea/0x3300 kernel/sched/fair.c:5407
 dequeue_task kernel/sched/core.c:762 [inline]
 deactivate_task+0x560/0x7d0 kernel/sched/core.c:778
 __schedule+0x164/0x770 kernel/sched/core.c:3474
 do_task_dead+0xc8/0xf0 kernel/sched/core.c:3541
 do_exit+0x347e/0x3930 kernel/exit.c:924
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 __do_sys_exit_group+0x21/0x30 kernel/exit.c:981
 __se_sys_exit_group+0x14/0x20 kernel/exit.c:979
 __x64_sys_exit_group+0x4c/0x50 kernel/exit.c:979
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x63/0xe7

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:287 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:302 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:692
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:478
 update_load_set kernel/sched/fair.c:135 [inline]
 reweight_entity+0x128b/0x1a30 kernel/sched/fair.c:2780
 update_cfs_group kernel/sched/fair.c:2991 [inline]
 entity_tick kernel/sched/fair.c:4464 [inline]
 task_tick_fair+0x5f8/0x1050 kernel/sched/fair.c:9893
 scheduler_tick+0x28d/0x490 kernel/sched/core.c:3105
 update_process_times+0x157/0x1a0 kernel/time/timer.c:1641
 tick_sched_handle kernel/time/tick-sched.c:164 [inline]
 tick_sched_timer+0x3ba/0x520 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025
 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053

Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave
Variable was created at:
 _raw_spin_lock_irqsave+0x45/0xf0 kernel/locking/spinlock.c:150
 hrtimer_interrupt+0x107/0x13c0 kernel/time/hrtimer.c:1499
==================================================================

Crashes (4507):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/04 04:27 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report syz C ci-upstream-kmsan-gce
2018/06/30 21:30 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report syz C ci-upstream-kmsan-gce
2018/06/30 09:42 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report syz C ci-upstream-kmsan-gce
2018/06/29 05:48 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report syz C ci-upstream-kmsan-gce
2018/06/27 07:18 https://github.com/google/kmsan.git master 123906095e30 b0294c53 .config console log report syz C ci-upstream-kmsan-gce
2018/06/18 11:57 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report syz C ci-upstream-kmsan-gce
2018/06/17 04:03 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report syz C ci-upstream-kmsan-gce
2018/06/17 02:32 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report syz C ci-upstream-kmsan-gce
2018/06/09 20:19 https://github.com/google/kmsan.git master d6c351f832e3 866118af .config console log report syz C ci-upstream-kmsan-gce
2018/05/24 12:40 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report syz C ci-upstream-kmsan-gce
2018/05/22 00:56 https://github.com/google/kmsan.git master 9f127b7ceaf7 f48c20b8 .config console log report syz C ci-upstream-kmsan-gce
2018/05/16 15:38 https://github.com/google/kmsan.git master 9822946c7fee 75b2448a .config console log report syz C ci-upstream-kmsan-gce
2018/05/06 03:39 https://github.com/google/kmsan.git master d2d741e5d189 78b251cb .config console log report syz C ci-upstream-kmsan-gce
2018/05/04 09:35 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report syz C ci-upstream-kmsan-gce
2018/04/29 11:21 https://github.com/google/kmsan.git master d2d741e5d189 d5a5d045 .config console log report syz C ci-upstream-kmsan-gce
2018/04/26 18:00 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report syz C ci-upstream-kmsan-gce
2018/04/25 11:34 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report syz C ci-upstream-kmsan-gce
2018/04/22 05:47 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report syz C ci-upstream-kmsan-gce
2018/04/09 01:00 https://github.com/google/kmsan.git master e2ab7e8abba4 77bd5117 .config console log report syz C ci-upstream-kmsan-gce
2018/04/07 21:34 https://github.com/google/kmsan.git master e2ab7e8abba4 66f22a7f .config console log report syz C ci-upstream-kmsan-gce
2018/07/02 03:51 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report syz ci-upstream-kmsan-gce
2018/06/30 17:07 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report syz ci-upstream-kmsan-gce
2018/06/23 11:43 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report syz ci-upstream-kmsan-gce
2018/06/21 20:03 https://github.com/google/kmsan.git master 123906095e30 095ef806 .config console log report syz ci-upstream-kmsan-gce
2018/06/18 10:02 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report syz ci-upstream-kmsan-gce
2018/06/06 02:45 https://github.com/google/kmsan.git master 8fc8ecd1c58a 863a24bb .config console log report syz ci-upstream-kmsan-gce
2018/05/27 00:30 https://github.com/google/kmsan.git master 1b9cd4eccac9 f48c20b8 .config console log report syz ci-upstream-kmsan-gce
2018/05/22 06:35 https://github.com/google/kmsan.git master 9f127b7ceaf7 f48c20b8 .config console log report syz ci-upstream-kmsan-gce
2018/05/20 21:38 https://github.com/google/kmsan.git master 9f127b7ceaf7 f48c20b8 .config console log report syz ci-upstream-kmsan-gce
2018/05/12 22:22 https://github.com/google/kmsan.git master 74ee2200b89f e726f42b .config console log report syz ci-upstream-kmsan-gce
2018/05/04 06:20 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report syz ci-upstream-kmsan-gce
2018/05/04 03:20 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report syz ci-upstream-kmsan-gce
2018/05/03 22:53 https://github.com/google/kmsan.git master d2d741e5d189 9ce14f4b .config console log report syz ci-upstream-kmsan-gce
2018/05/02 22:19 https://github.com/google/kmsan.git master d2d741e5d189 d5b114b4 .config console log report syz ci-upstream-kmsan-gce
2018/04/28 03:59 https://github.com/google/kmsan.git master d2d741e5d189 d5a5d045 .config console log report syz ci-upstream-kmsan-gce
2018/04/27 18:24 https://github.com/google/kmsan.git master d2d741e5d189 7785e404 .config console log report syz ci-upstream-kmsan-gce
2018/04/27 03:12 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config console log report syz ci-upstream-kmsan-gce
2018/04/18 08:52 https://github.com/google/kmsan.git master 48c6a2b0ab1b 52643b44 .config console log report syz ci-upstream-kmsan-gce
2018/04/17 11:59 https://github.com/google/kmsan.git master 48c6a2b0ab1b b80fd3b5 .config console log report syz ci-upstream-kmsan-gce
2018/04/14 13:50 https://github.com/google/kmsan.git master 35ff515e4bda 7a67784c .config console log report syz ci-upstream-kmsan-gce
2018/04/10 03:12 https://github.com/google/kmsan.git master e2ab7e8abba4 b9f65507 .config console log report syz ci-upstream-kmsan-gce
2018/07/05 15:14 https://github.com/google/kmsan.git master c1adbc427188 f525fd72 .config console log report ci-upstream-kmsan-gce
2018/07/05 13:44 https://github.com/google/kmsan.git master c1adbc427188 f525fd72 .config console log report ci-upstream-kmsan-gce
2018/07/05 12:39 https://github.com/google/kmsan.git master c1adbc427188 f525fd72 .config console log report ci-upstream-kmsan-gce
2018/07/05 11:30 https://github.com/google/kmsan.git master c1adbc427188 f525fd72 .config console log report ci-upstream-kmsan-gce
2018/07/05 10:37 https://github.com/google/kmsan.git master c1adbc427188 f525fd72 .config console log report ci-upstream-kmsan-gce
2018/07/05 08:12 https://github.com/google/kmsan.git master c1adbc427188 f525fd72 .config console log report ci-upstream-kmsan-gce
2018/07/05 07:02 https://github.com/google/kmsan.git master c1adbc427188 f525fd72 .config console log report ci-upstream-kmsan-gce
2018/07/05 05:56 https://github.com/google/kmsan.git master c1adbc427188 f525fd72 .config console log report ci-upstream-kmsan-gce
2018/07/05 04:24 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/05 04:01 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/05 02:51 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/05 01:05 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 23:30 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 22:29 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 21:21 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 21:02 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 19:56 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 18:54 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 17:48 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 16:48 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 15:19 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 14:11 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 13:09 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 12:46 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 11:22 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 09:10 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 07:50 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 06:24 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 05:45 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 03:35 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 02:33 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/04 01:04 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 23:57 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 21:07 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 18:59 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 17:08 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 15:39 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 14:21 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 13:05 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 11:58 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 10:46 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 07:09 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 06:38 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/04/06 22:32 https://github.com/google/kmsan.git master e2ab7e8abba4 d613535f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.