syzbot


KMSAN: uninit-value in __mod_timer

Status: closed as invalid on 2018/09/13 15:12
Subsystems: lvs
[Documentation on labels]
First crash: 2189d, last: 2115d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in lock_timer_base kernel/time/timer.c:939 [inline]
BUG: KMSAN: uninit-value in __mod_timer+0x430/0x2c40 kernel/time/timer.c:1010
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.16.0+ #85
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 lock_timer_base kernel/time/timer.c:939 [inline]
 __mod_timer+0x430/0x2c40 kernel/time/timer.c:1010
 mod_timer+0x70/0x80 kernel/time/timer.c:1102
 estimation_timer+0x12ed/0x1310 net/netfilter/ipvs/ip_vs_est.c:138
 call_timer_fn+0x26a/0x5a0 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0xda7/0x11c0 kernel/time/timer.c:1666
 run_timer_softirq+0x43/0x70 kernel/time/timer.c:1692
 __do_softirq+0x56d/0x93d kernel/softirq.c:285
 invoke_softirq kernel/softirq.c:365 [inline]
 irq_exit+0x202/0x240 kernel/softirq.c:405
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:541
 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:857
 </IRQ>
RIP: 0010:native_safe_halt arch/x86/include/asm/irqflags.h:55 [inline]
RIP: 0010:arch_safe_halt arch/x86/include/asm/irqflags.h:97 [inline]
RIP: 0010:default_idle+0x1fb/0x3c0 arch/x86/kernel/process.c:354
RSP: 0018:ffffffff8aa0fd88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12
RAX: ffff8801fddd81a0 RBX: 0000000000000000 RCX: ffff880000000000
RDX: ffff8801fd9d81a0 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000
RBP: ffffffff8aa0fdc0 R08: 0000000001080020 R09: 0000000000000002
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff8aa36c00 R14: ffffffff8aa0fe24 R15: ffffffff8aa37518
 arch_cpu_idle+0x20/0x30 arch/x86/kernel/process.c:345
 default_idle_call kernel/sched/idle.c:98 [inline]
 cpuidle_idle_call kernel/sched/idle.c:156 [inline]
 do_idle+0x349/0x790 kernel/sched/idle.c:246
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:351
 rest_init+0x1c1/0x1f0 init/main.c:438
 start_kernel+0xf93/0xfb0 init/main.c:719
 x86_64_start_reservations arch/x86/kernel/head64.c:378 [inline]
 x86_64_start_kernel+0x2fa/0x310 arch/x86/kernel/head64.c:359
 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:239

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528
 timer_set_idx kernel/time/timer.c:480 [inline]
 enqueue_timer kernel/time/timer.c:539 [inline]
 __internal_add_timer kernel/time/timer.c:548 [inline]
 internal_add_timer kernel/time/timer.c:590 [inline]
 __mod_timer+0x21a6/0x2c40 kernel/time/timer.c:1055
 mod_timer+0x70/0x80 kernel/time/timer.c:1102
 estimation_timer+0x12ed/0x1310 net/netfilter/ipvs/ip_vs_est.c:138
 call_timer_fn+0x26a/0x5a0 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0xda7/0x11c0 kernel/time/timer.c:1666
 run_timer_softirq+0x43/0x70 kernel/time/timer.c:1692
 __do_softirq+0x56d/0x93d kernel/softirq.c:285
Local variable description: ----__wait111@rcu_gp_kthread
Variable was created at:
 rcu_gp_kthread+0x9c/0x38d0 kernel/rcu/tree.c:2180
 kthread+0x539/0x720 kernel/kthread.c:239
==================================================================

Crashes (121):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/22 05:12 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report syz C ci-upstream-kmsan-gce
2018/06/28 03:33 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report syz ci-upstream-kmsan-gce
2018/05/22 06:59 https://github.com/google/kmsan.git master 9f127b7ceaf7 f48c20b8 .config console log report syz ci-upstream-kmsan-gce
2018/07/04 19:14 https://github.com/google/kmsan.git master accdc89e1dc3 e1b966c6 .config console log report ci-upstream-kmsan-gce
2018/07/04 16:33 https://github.com/google/kmsan.git master accdc89e1dc3 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 13:57 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/03 12:05 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
2018/07/02 21:56 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report ci-upstream-kmsan-gce
2018/07/02 17:21 https://github.com/google/kmsan.git master 6c3632ffef26 574780b0 .config console log report ci-upstream-kmsan-gce
2018/07/01 22:44 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/01 17:15 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/01 15:24 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/01 13:31 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/07/01 07:15 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 20:27 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 14:36 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/30 03:13 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/28 20:55 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/28 09:17 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/28 02:05 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report ci-upstream-kmsan-gce
2018/06/27 19:59 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report ci-upstream-kmsan-gce
2018/06/27 16:01 https://github.com/google/kmsan.git master 123906095e30 43e60f7e .config console log report ci-upstream-kmsan-gce
2018/06/26 23:33 https://github.com/google/kmsan.git master 123906095e30 b0294c53 .config console log report ci-upstream-kmsan-gce
2018/06/26 19:04 https://github.com/google/kmsan.git master 123906095e30 b0294c53 .config console log report ci-upstream-kmsan-gce
2018/06/25 19:02 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report ci-upstream-kmsan-gce
2018/06/24 09:13 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report ci-upstream-kmsan-gce
2018/06/24 06:09 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report ci-upstream-kmsan-gce
2018/06/23 18:37 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report ci-upstream-kmsan-gce
2018/06/23 13:52 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report ci-upstream-kmsan-gce
2018/06/23 05:35 https://github.com/google/kmsan.git master 123906095e30 89d2e600 .config console log report ci-upstream-kmsan-gce
2018/06/22 10:20 https://github.com/google/kmsan.git master 123906095e30 095ef806 .config console log report ci-upstream-kmsan-gce
2018/06/20 01:27 https://github.com/google/kmsan.git master 123906095e30 095ef806 .config console log report ci-upstream-kmsan-gce
2018/06/19 23:09 https://github.com/google/kmsan.git master 123906095e30 095ef806 .config console log report ci-upstream-kmsan-gce
2018/06/19 11:14 https://github.com/google/kmsan.git master 123906095e30 732e4256 .config console log report ci-upstream-kmsan-gce
2018/06/19 08:13 https://github.com/google/kmsan.git master 123906095e30 45c54f75 .config console log report ci-upstream-kmsan-gce
2018/06/19 02:07 https://github.com/google/kmsan.git master 123906095e30 45c54f75 .config console log report ci-upstream-kmsan-gce
2018/06/19 01:00 https://github.com/google/kmsan.git master 123906095e30 45c54f75 .config console log report ci-upstream-kmsan-gce
2018/06/18 18:28 https://github.com/google/kmsan.git master 123906095e30 45c54f75 .config console log report ci-upstream-kmsan-gce
2018/06/17 22:52 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/06/16 03:49 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/06/15 16:49 https://github.com/google/kmsan.git master 88e0e95b30f1 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/06/14 13:19 https://github.com/google/kmsan.git master 0064ced63c1b 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/06/14 09:36 https://github.com/google/kmsan.git master 81c310582f0e 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/04/21 16:11 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.