syzbot


KMSAN: uninit-value in ieee80211_beacon_get_tim (2)

Status: auto-closed as invalid on 2022/03/07 00:24
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 357d, last: 357d

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in ieee80211_beacon_get_tim+0x4b1/0x840 net/mac80211/tx.c:5237
 ieee80211_beacon_get_tim+0x4b1/0x840 net/mac80211/tx.c:5237
 ieee80211_beacon_get include/net/mac80211.h:4992 [inline]
 mac80211_hwsim_beacon_tx+0x1d3/0xd20 drivers/net/wireless/mac80211_hwsim.c:1808
 __iterate_interfaces net/mac80211/util.c:793 [inline]
 ieee80211_iterate_active_interfaces_atomic+0x48b/0x6c0 net/mac80211/util.c:829
 mac80211_hwsim_beacon+0x11d/0x340 drivers/net/wireless/mac80211_hwsim.c:1861
 __run_hrtimer+0x49f/0xc50 kernel/time/hrtimer.c:1685
 __hrtimer_run_queues kernel/time/hrtimer.c:1749 [inline]
 hrtimer_run_softirq+0x4d3/0xe80 kernel/time/hrtimer.c:1766
 __do_softirq+0x1fe/0x7eb kernel/softirq.c:558
 invoke_softirq+0xa4/0x130 kernel/softirq.c:432
 __irq_exit_rcu kernel/softirq.c:636 [inline]
 irq_exit_rcu+0x76/0x130 kernel/softirq.c:648
 sysvec_apic_timer_interrupt+0xa2/0xc0 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
 _raw_spin_unlock_irqrestore+0x6e/0xb0 kernel/locking/spinlock.c:194
 unlock_hrtimer_base kernel/time/hrtimer.c:1017 [inline]
 hrtimer_start_range_ns+0x415/0x490 kernel/time/hrtimer.c:1301
 hrtimer_start_expires include/linux/hrtimer.h:432 [inline]
 hrtimer_sleeper_start_expires kernel/time/hrtimer.c:1965 [inline]
 do_nanosleep+0x153/0xa20 kernel/time/hrtimer.c:2041
 hrtimer_nanosleep+0x3ee/0x6a0 kernel/time/hrtimer.c:2097
 common_nsleep+0x16b/0x1a0 kernel/time/posix-timers.c:1227
 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1267 [inline]
 __se_sys_clock_nanosleep kernel/time/posix-timers.c:1245 [inline]
 __ia32_sys_clock_nanosleep+0x66b/0x740 kernel/time/posix-timers.c:1245
 do_syscall_32_irqs_on arch/x86/entry/common.c:114 [inline]
 __do_fast_syscall_32+0x96/0xf0 arch/x86/entry/common.c:180
 do_fast_syscall_32+0x34/0x70 arch/x86/entry/common.c:205
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:248
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Local variable regs created at:
 __bpf_prog_run32+0x84/0x180 kernel/bpf/core.c:1795
 bpf_dispatcher_nop_func include/linux/bpf.h:727 [inline]
 __bpf_prog_run include/linux/filter.h:626 [inline]
 bpf_prog_run include/linux/filter.h:633 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1937 [inline]
 bpf_trace_run1+0xda/0x310 kernel/trace/bpf_trace.c:1973

CPU: 0 PID: 6376 Comm: syz-executor.1 Not tainted 5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
=====================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2021/12/07 00:22 https://github.com/google/kmsan.git master cdfb223e7e63 0230ba3e .config log report info KMSAN: uninit-value in ieee80211_beacon_get_tim
* Struck through repros no longer work on HEAD.