syzbot


KMSAN: uninit-value in native_apic_mem_read

Status: closed as invalid on 2020/02/19 11:06
Subsystems: kvm
[Documentation on labels]
First crash: 2015d, last: 1964d

Sample crash report:
        reason=80000021 qualification=0000000000000000
IDTVectoring: info=00000000 errcode=00000000
TSC Offset = 0xffffffa6124de76f
EPT pointer = 0x000000018e09e01e
==================================================================
BUG: KMSAN: uninit-value in native_apic_mem_read+0x54/0x60 arch/x86/include/asm/apic.h:113
CPU: 0 PID: 7803 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #69
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x306/0x460 lib/dump_stack.c:113
 kmsan_report+0x1a2/0x2e0 mm/kmsan/kmsan.c:917
 __msan_warning+0x7c/0xe0 mm/kmsan/kmsan_instr.c:500
 native_apic_mem_read+0x54/0x60 arch/x86/include/asm/apic.h:113
 apic_read arch/x86/include/asm/apic.h:392 [inline]
 smp_spurious_interrupt+0x34e/0x6e0 arch/x86/kernel/apic/apic.c:2037
 spurious_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:897
 </IRQ>
RIP: 0010:vmx_handle_external_intr+0x1e3/0x280 arch/x86/kvm/vmx.c:10436
Code: e3 20 4c 09 fb 48 89 c1 48 c1 e1 20 4c 09 e9 0f 85 95 00 00 00 4c 89 f4 48 89 e0 48 83 e4 f0 6a 18 50 9c 6a 10 e8 bd d3 b4 09 <eb> 05 e8 56 e2 78 00 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 7d
RSP: 0018:ffff88018e3bf598 EFLAGS: 00000086 ORIG_RAX: ffffffffffffff00
RAX: ffff88018e3bf598 RBX: ffffffff8ac01520 RCX: 0000000000000000
RDX: ffffffff8c2d8000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff88018e3bf5f0 R08: ffffffff7fffffff R09: 0000000000000002
R10: 0000000000000000 R11: ffffffff812baa80 R12: fffffe0000000ef8
R13: 0000000000000000 R14: ffff88018e3bf598 R15: 000000008ac01520
 vcpu_enter_guest arch/x86/kvm/x86.c:7640 [inline]
 vcpu_run arch/x86/kvm/x86.c:7730 [inline]
 kvm_arch_vcpu_ioctl_run+0x9fe8/0x10ab0 arch/x86/kvm/x86.c:7930
*** Guest State ***
CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
CR4: actual=0x0000000000042040, shadow=0x0000000000040000, gh_mask=ffffffffffffe871
CR3 = 0x0000000000000000
 kvm_vcpu_ioctl+0x11a7/0x20b0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2590
RSP = 0x0000000000000f80  RIP = 0x0000000000000000
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xf28/0x2ca0 fs/ioctl.c:687
RFLAGS=0x00000002         DR7 = 0x0000000000000400
 ksys_ioctl fs/ioctl.c:702 [inline]
 __do_sys_ioctl fs/ioctl.c:709 [inline]
 __se_sys_ioctl+0x1da/0x270 fs/ioctl.c:707
 __x64_sys_ioctl+0x4a/0x70 fs/ioctl.c:707
 do_syscall_64+0xbe/0x100 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
RIP: 0033:0x457569
CS:   sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
RSP: 002b:00007f9c786f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000
FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c786f26d4
R13: 00000000004c0027 R14: 00000000004d0108 R15: 00000000ffffffff
GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000

Local variable description: ----regs.i.i@vmx_vcpu_run
Variable was created at:
 vmx_vcpu_run+0xb7/0x4ff0 arch/x86/kvm/vmx.c:10661
 vcpu_enter_guest arch/x86/kvm/x86.c:7605 [inline]
 vcpu_run arch/x86/kvm/x86.c:7730 [inline]
 kvm_arch_vcpu_ioctl_run+0x96b6/0x10ab0 arch/x86/kvm/x86.c:7930
==================================================================

Crashes (75):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/10/18 11:12 https://github.com/google/kmsan.git master 22ec98c3e38f d257b2d2 .config console log report syz ci-upstream-kmsan-gce
2018/12/03 04:46 https://github.com/google/kmsan.git master 9fbf73b8d4af 7dcaeaf3 .config console log report ci-upstream-kmsan-gce
2018/12/02 10:27 https://github.com/google/kmsan.git master 9fbf73b8d4af e0d8c853 .config console log report ci-upstream-kmsan-gce
2018/12/01 14:00 https://github.com/google/kmsan.git master 9fbf73b8d4af 5a581673 .config console log report ci-upstream-kmsan-gce
2018/11/30 06:07 https://github.com/google/kmsan.git master c1c8fce47960 66071e27 .config console log report ci-upstream-kmsan-gce
2018/11/29 13:15 https://github.com/google/kmsan.git master a311076453fe 4b6d14f2 .config console log report ci-upstream-kmsan-gce
2018/11/28 20:58 https://github.com/google/kmsan.git master fffec98ae2a6 4b6d14f2 .config console log report ci-upstream-kmsan-gce
2018/11/28 16:44 https://github.com/google/kmsan.git master fffec98ae2a6 4b6d14f2 .config console log report ci-upstream-kmsan-gce
2018/11/26 04:50 https://github.com/google/kmsan.git master fffec98ae2a6 3d3ec907 .config console log report ci-upstream-kmsan-gce
2018/11/25 06:31 https://github.com/google/kmsan.git master fffec98ae2a6 ecc7c870 .config console log report ci-upstream-kmsan-gce
2018/11/23 21:23 https://github.com/google/kmsan.git master fffec98ae2a6 eb9ed731 .config console log report ci-upstream-kmsan-gce
2018/11/23 10:50 https://github.com/google/kmsan.git master 50031178f793 2b0dc848 .config console log report ci-upstream-kmsan-gce
2018/11/22 18:57 https://github.com/google/kmsan.git master 50031178f793 2ee77802 .config console log report ci-upstream-kmsan-gce
2018/11/22 11:58 https://github.com/google/kmsan.git master 3ededcaa1606 2ee77802 .config console log report ci-upstream-kmsan-gce
2018/11/22 01:59 https://github.com/google/kmsan.git master 3ededcaa1606 9db828b5 .config console log report ci-upstream-kmsan-gce
2018/11/21 07:45 https://github.com/google/kmsan.git master 598a88bc28d3 5d9a3924 .config console log report ci-upstream-kmsan-gce
2018/11/20 22:02 https://github.com/google/kmsan.git master 0891758b8cda 9aca6b52 .config console log report ci-upstream-kmsan-gce
2018/11/20 04:52 https://github.com/google/kmsan.git master 2808e543aacb 9bc2a903 .config console log report ci-upstream-kmsan-gce
2018/11/19 20:56 https://github.com/google/kmsan.git master 2808e543aacb adf636a8 .config console log report ci-upstream-kmsan-gce
2018/11/19 05:00 https://github.com/google/kmsan.git master cddc52641fd2 adf636a8 .config console log report ci-upstream-kmsan-gce
2018/11/18 13:21 https://github.com/google/kmsan.git master cddc52641fd2 adf636a8 .config console log report ci-upstream-kmsan-gce
2018/11/18 06:47 https://github.com/google/kmsan.git master cddc52641fd2 adf636a8 .config console log report ci-upstream-kmsan-gce
2018/11/18 02:38 https://github.com/google/kmsan.git master cddc52641fd2 adf636a8 .config console log report ci-upstream-kmsan-gce
2018/11/17 22:43 https://github.com/google/kmsan.git master cddc52641fd2 adf636a8 .config console log report ci-upstream-kmsan-gce
2018/11/17 06:54 https://github.com/google/kmsan.git master cddc52641fd2 b08ee62a .config console log report ci-upstream-kmsan-gce
2018/11/15 04:14 https://github.com/google/kmsan.git master 006aa39cddee 5f5f6d14 .config console log report ci-upstream-kmsan-gce
2018/11/13 17:46 https://github.com/google/kmsan.git master 006aa39cddee 5f5f6d14 .config console log report ci-upstream-kmsan-gce
2018/11/09 07:44 https://github.com/google/kmsan.git master c9658ff8d68d 8fd01d3a .config console log report ci-upstream-kmsan-gce
2018/11/07 21:45 https://github.com/google/kmsan.git master 7438a3b20295 e85d2a61 .config console log report ci-upstream-kmsan-gce
2018/11/06 03:50 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/03 23:00 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/03 06:14 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/01 16:50 https://github.com/google/kmsan.git master 88b95ef4c780 1f38e9ae .config console log report ci-upstream-kmsan-gce
2018/10/31 14:27 https://github.com/google/kmsan.git master d37ea67ead41 89781090 .config console log report ci-upstream-kmsan-gce
2018/10/31 10:46 https://github.com/google/kmsan.git master 0f538cda0a8b 4ccf7bb4 .config console log report ci-upstream-kmsan-gce
2018/10/30 19:45 https://github.com/google/kmsan.git master cb4c1d77c7e1 8dbb755a .config console log report ci-upstream-kmsan-gce
2018/10/30 11:01 https://github.com/google/kmsan.git master 7e5816e23e06 2f1090da .config console log report ci-upstream-kmsan-gce
2018/10/30 08:00 https://github.com/google/kmsan.git master 7e5816e23e06 2f1090da .config console log report ci-upstream-kmsan-gce
2018/10/30 04:27 https://github.com/google/kmsan.git master 7e5816e23e06 2f1090da .config console log report ci-upstream-kmsan-gce
2018/10/29 22:31 https://github.com/google/kmsan.git master 6b52a0ee6122 7df9db2e .config console log report ci-upstream-kmsan-gce
2018/10/29 12:04 https://github.com/google/kmsan.git master 4bb25354f0b0 7df9db2e .config console log report ci-upstream-kmsan-gce
2018/10/29 06:02 https://github.com/google/kmsan.git master 4bb25354f0b0 9ca2afa1 .config console log report ci-upstream-kmsan-gce
2018/10/28 10:38 https://github.com/google/kmsan.git master 4bb25354f0b0 6f9b225a .config console log report ci-upstream-kmsan-gce
2018/10/28 02:18 https://github.com/google/kmsan.git master 4bb25354f0b0 8efba39a .config console log report ci-upstream-kmsan-gce
2018/10/27 13:49 https://github.com/google/kmsan.git master 4bb25354f0b0 8efba39a .config console log report ci-upstream-kmsan-gce
2018/10/27 04:18 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/27 02:08 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/26 18:27 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/26 11:24 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/26 09:01 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/25 19:41 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/25 11:45 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/25 05:48 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/24 23:29 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/12 21:56 https://github.com/google/kmsan.git master 22ec98c3e38f caf12900 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.