KMSAN: uninit-value in hrtimer_update_next_event

Status: auto-obsoleted due to no activity on 2023/05/10 19:26
Subsystems: kernel
[Documentation on labels]
First crash: 1271d, last: 1271d
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: unable to handle kernel paging request in hrtimer_update_next_event kernel 8 1 1502d 1498d 0/29 auto-obsoleted due to no activity on 2022/09/21 13:03
upstream KMSAN: uninit-value in number (4) kernel 7 syz, C 7189 1349d 1727d 0/29 closed as invalid on 2022/11/28 10:01

Sample crash report:
ffff88813fc05fc0: ffff888090f05268 (0xffff888090f05268)
ffff88813fc05fc8: 0000000000000000 ...
ffff88813fc05fe8: ffff888090f05258 (0xffff888090f05258)
ffff88813fc05ff0: ffffffff90b803d9 (sysvec_apic_timer_interrupt+0x99/0xc0 arch/x86/kernel/apic/apic.c:1107)
ffff88813fc05ff8: ffff888090f05248 (0xffff888090f05248)
BUG: KMSAN: uninit-value in __hrtimer_get_next_event kernel/time/hrtimer.c:578 [inline]
BUG: KMSAN: uninit-value in hrtimer_update_next_event+0x48c/0xcb0 kernel/time/hrtimer.c:604
 __hrtimer_get_next_event kernel/time/hrtimer.c:578 [inline]
 hrtimer_update_next_event+0x48c/0xcb0 kernel/time/hrtimer.c:604
 hrtimer_interrupt+0x57d/0x1d80 kernel/time/hrtimer.c:1814
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline]
 __sysvec_apic_timer_interrupt+0x17c/0x5f0 arch/x86/kernel/apic/apic.c:1113
 sysvec_apic_timer_interrupt+0x99/0xc0 arch/x86/kernel/apic/apic.c:1107

Local variable _iph186 created at:
 __skb_flow_dissect+0x1e3a/0xb1c0 net/core/flow_dissector.c:1137
 skb_flow_dissect_flow_keys include/linux/skbuff.h:1498 [inline]
 ___skb_get_hash+0xf4/0xbb0 net/core/flow_dissector.c:1700

CPU: 0 PID: 5085 Comm: kworker/0:6 Not tainted 6.2.0-rc7-syzkaller-80760-g8c89ecf5c13b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Workqueue: mld mld_ifc_work
=====================================================
Kernel panic - not syncing: kmsan.panic set ...
CPU: 0 PID: 5085 Comm: kworker/0:6 Tainted: G    B              6.2.0-rc7-syzkaller-80760-g8c89ecf5c13b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Workqueue: mld mld_ifc_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x200/0x290 lib/dump_stack.c:106
 dump_stack+0x29/0x30 lib/dump_stack.c:113
 panic+0x4fd/0xc70 kernel/panic.c:318
 kmsan_report+0x2d0/0x2d0 mm/kmsan/report.c:216
 __msan_warning+0x96/0x110 mm/kmsan/instrumentation.c:317
 __hrtimer_get_next_event kernel/time/hrtimer.c:578 [inline]
 hrtimer_update_next_event+0x48c/0xcb0 kernel/time/hrtimer.c:604
 hrtimer_interrupt+0x57d/0x1d80 kernel/time/hrtimer.c:1814
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline]
 __sysvec_apic_timer_interrupt+0x17c/0x5f0 arch/x86/kernel/apic/apic.c:1113
 sysvec_apic_timer_interrupt+0x99/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/09 19:25 https://github.com/google/kmsan.git master 8c89ecf5c13b 07980f9d .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in hrtimer_update_next_event
* Struck through repros no longer work on HEAD.