KMSAN: uninit-value in hsr_get

KMSAN: uninit-value in hsr_get_node
Status: upstream: reported on 2020/08/10 15:37
Reported-by: syzbot+d205b494fafacf899b18@syzkaller.appspotmail.com
First crash: 159d, last: 18h21m

Sample crash report:

hsr_slave_0: hsr_addr_subst_dest: Unknown node
hsr_slave_1: hsr_addr_subst_dest: Unknown node
=====================================================
BUG: KMSAN: uninit-value in hsr_get_node+0x45d/0xba0 net/hsr/hsr_framereg.c:220
CPU: 0 PID: 8691 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:118
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 hsr_get_node+0x45d/0xba0 net/hsr/hsr_framereg.c:220
 fill_frame_info net/hsr/hsr_forward.c:498 [inline]
 hsr_forward_skb+0x9d9/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4718 [inline]
 netdev_start_xmit include/linux/netdevice.h:4732 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3564
 dev_hard_start_xmit net/core/dev.c:3580 [inline]
 __dev_queue_xmit+0x3426/0x4590 net/core/dev.c:4140
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4173
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1521
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1699
 bpf_test_run+0x54c/0xe40 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1906/0x34f0 net/bpf/test_run.c:581
 bpf_prog_test_run kernel/bpf/syscall.c:3125 [inline]
 __do_sys_bpf+0xbfd9/0x1aee0 kernel/bpf/syscall.c:4417
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4357
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4357
 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:139
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f59549
Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f55530cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2906 [inline]
 __kmalloc_node_track_caller+0xa48/0x1610 mm/slub.c:4512
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1622
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5452
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1521
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1699
 bpf_test_run+0x54c/0xe40 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1906/0x34f0 net/bpf/test_run.c:581
 bpf_prog_test_run kernel/bpf/syscall.c:3125 [inline]
 __do_sys_bpf+0xbfd9/0x1aee0 kernel/bpf/syscall.c:4417
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4357
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4357
 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:139
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================

Crashes (269):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Maintainers
ci-upstream-kmsan-gce-386	2021/01/15 03:08	https://github.com/google/kmsan.git master	73d62e81	65a7a854	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2021/01/13 08:22	https://github.com/google/kmsan.git master	73d62e81	0cdd6185	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2021/01/12 01:16	https://github.com/google/kmsan.git master	73d62e81	2c1f2513	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2021/01/09 00:25	https://github.com/google/kmsan.git master	73d62e81	c104d4a3	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2021/01/07 12:12	https://github.com/google/kmsan.git master	73d62e81	c104d4a3	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2021/01/03 21:39	https://github.com/google/kmsan.git master	73d62e81	79264ae3	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/31 13:15	https://github.com/google/kmsan.git master	73d62e81	5cc121d6	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/29 23:11	https://github.com/google/kmsan.git master	73d62e81	80910769	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/28 08:09	https://github.com/google/kmsan.git master	73d62e81	2242f77f	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/28 02:47	https://github.com/google/kmsan.git master	73d62e81	2242f77f	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/25 01:38	https://github.com/google/kmsan.git master	73d62e81	c2c1d1dd	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/24 08:24	https://github.com/google/kmsan.git master	73d62e81	c2c1d1dd	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/18 05:55	https://github.com/google/kmsan.git master	73d62e81	04201c06	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/16 11:37	https://github.com/google/kmsan.git master	73d62e81	f213e07e	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/15 20:53	https://github.com/google/kmsan.git master	73d62e81	97183ed7	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/14 21:21	https://github.com/google/kmsan.git master	73d62e81	97183ed7	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/14 06:11	https://github.com/google/kmsan.git master	73d62e81	b22a7ec3	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/12 01:39	https://github.com/google/kmsan.git master	73d62e81	ba24ffcd	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/11 22:10	https://github.com/google/kmsan.git master	73d62e81	ba24ffcd	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/07 01:06	https://github.com/google/kmsan.git master	73d62e81	c521566d	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/07 01:00	https://github.com/google/kmsan.git master	73d62e81	c521566d	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/05 07:26	https://github.com/google/kmsan.git master	73d62e81	20366b87	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/03 08:39	https://github.com/google/kmsan.git master	73d62e81	8c9190ef	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/12/02 12:36	https://github.com/google/kmsan.git master	73d62e81	c42a35e9	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/30 03:58	https://github.com/google/kmsan.git master	73d62e81	a0092f9d	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/28 02:53	https://github.com/google/kmsan.git master	73d62e81	486f93ef	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/26 21:43	https://github.com/google/kmsan.git master	73d62e81	1d2b823e	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/25 16:50	https://github.com/google/kmsan.git master	73d62e81	1a1f4bd8	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/25 15:12	https://github.com/google/kmsan.git master	73d62e81	1a1f4bd8	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/25 03:49	https://github.com/google/kmsan.git master	73d62e81	e34b696c	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/25 03:29	https://github.com/google/kmsan.git master	73d62e81	e34b696c	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/22 12:56	https://github.com/google/kmsan.git master	73d62e81	0d27f508	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/21 13:16	https://github.com/google/kmsan.git master	73d62e81	68068804	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/21 11:58	https://github.com/google/kmsan.git master	73d62e81	68068804	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/20 01:31	https://github.com/google/kmsan.git master	73d62e81	0767f13f	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/19 02:06	https://github.com/google/kmsan.git master	73d62e81	0767f13f	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/16 23:23	https://github.com/google/kmsan.git master	73d62e81	1bf9a662	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/11 10:16	https://github.com/google/kmsan.git master	e1617422	cca87986	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/10 07:15	https://github.com/google/kmsan.git master	e1617422	64069d48	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/10 03:45	https://github.com/google/kmsan.git master	e1617422	64069d48	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/10 03:29	https://github.com/google/kmsan.git master	e1617422	64069d48	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/10 01:05	https://github.com/google/kmsan.git master	e1617422	64069d48	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/07 23:02	https://github.com/google/kmsan.git master	e1617422	64069d48	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/11/07 09:32	https://github.com/google/kmsan.git master	e1617422	64069d48	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/10 00:07	https://github.com/google/kmsan.git master	ce8056d1	70301872	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/09 17:50	https://github.com/google/kmsan.git master	ce8056d1	70301872	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org