syzbot


KMSAN: uninit-value in bond_start_xmit

Status: closed as invalid on 2018/09/10 09:40
Subsystems: net
[Documentation on labels]
First crash: 2196d, last: 2054d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in bond_start_xmit (2) net C 2309 1725d 2049d 12/26 fixed on 2019/08/05 13:45

Sample crash report:
IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
8021q: adding VLAN 0 to HW filter on device team0
==================================================================
BUG: KMSAN: uninit-value in bond_xmit_roundrobin drivers/net/bonding/bond_main.c:3822 [inline]
BUG: KMSAN: uninit-value in __bond_start_xmit drivers/net/bonding/bond_main.c:4091 [inline]
BUG: KMSAN: uninit-value in bond_start_xmit+0x19d6/0x2cd0 drivers/net/bonding/bond_main.c:4125
CPU: 0 PID: 4513 Comm: syzkaller073584 Not tainted 4.16.0+ #87
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 bond_xmit_roundrobin drivers/net/bonding/bond_main.c:3822 [inline]
 __bond_start_xmit drivers/net/bonding/bond_main.c:4091 [inline]
 bond_start_xmit+0x19d6/0x2cd0 drivers/net/bonding/bond_main.c:4125
 __netdev_start_xmit include/linux/netdevice.h:4066 [inline]
 netdev_start_xmit include/linux/netdevice.h:4075 [inline]
 xmit_one net/core/dev.c:3026 [inline]
 dev_hard_start_xmit+0x5f1/0xc70 net/core/dev.c:3042
 __dev_queue_xmit+0x27ee/0x3520 net/core/dev.c:3557
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:3590
 pppoe_sendmsg+0xb5c/0xbc0 drivers/net/ppp/pppoe.c:898
 sock_sendmsg_nosec net/socket.c:630 [inline]
 sock_sendmsg net/socket.c:640 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2046
 __sys_sendmmsg+0x42d/0x800 net/socket.c:2136
 SYSC_sendmmsg+0xc4/0x110 net/socket.c:2167
 SyS_sendmmsg+0x63/0x90 net/socket.c:2162
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x441869
RSP: 002b:00007ffda1ce3328 EFLAGS: 00000217 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441869
RDX: 0000000000000001 RSI: 0000000020002f80 RDI: 0000000000000003
RBP: 00000000006cd018 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000402620
R13: 00000000004026b0 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:188
 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:314
 kmsan_slab_alloc+0x11/0x20 mm/kmsan/kmsan.c:321
 slab_post_alloc_hook mm/slab.h:445 [inline]
 slab_alloc_node mm/slub.c:2737 [inline]
 __kmalloc_node_track_caller+0xaed/0x11c0 mm/slub.c:4369
 __kmalloc_reserve net/core/skbuff.c:138 [inline]
 __alloc_skb+0x2cf/0x9f0 net/core/skbuff.c:206
 alloc_skb include/linux/skbuff.h:984 [inline]
 sock_wmalloc+0x13e/0x6e0 net/core/sock.c:1937
 pppoe_sendmsg+0x40d/0xbc0 drivers/net/ppp/pppoe.c:865
 sock_sendmsg_nosec net/socket.c:630 [inline]
 sock_sendmsg net/socket.c:640 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2046
 __sys_sendmmsg+0x42d/0x800 net/socket.c:2136
 SYSC_sendmmsg+0xc4/0x110 net/socket.c:2167
 SyS_sendmmsg+0x63/0x90 net/socket.c:2162
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
==================================================================

Crashes (697):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/24 00:58 https://github.com/google/kmsan.git master d2d741e5d189 0d8e591c .config console log report syz C ci-upstream-kmsan-gce
2018/09/10 05:45 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/10 03:58 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/09 06:49 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/09 04:59 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/09 01:32 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/08 23:26 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/08 04:38 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report ci-upstream-kmsan-gce
2018/09/07 22:27 https://github.com/google/kmsan.git master 42a037ca8d9d 69cfeb80 .config console log report ci-upstream-kmsan-gce
2018/09/07 18:26 https://github.com/google/kmsan.git master 42a037ca8d9d 69cfeb80 .config console log report ci-upstream-kmsan-gce
2018/09/07 15:22 https://github.com/google/kmsan.git master 42a037ca8d9d 69cfeb80 .config console log report ci-upstream-kmsan-gce
2018/09/07 09:28 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/07 06:36 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/07 03:34 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/07 00:44 https://github.com/google/kmsan.git master 43e4752ae5dc e30d3b52 .config console log report ci-upstream-kmsan-gce
2018/09/06 14:21 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 13:10 https://github.com/google/kmsan.git master 43e4752ae5dc 0bb7a7eb .config console log report ci-upstream-kmsan-gce
2018/09/06 06:16 https://github.com/google/kmsan.git master 43e4752ae5dc 873745f2 .config console log report ci-upstream-kmsan-gce
2018/09/06 04:36 https://github.com/google/kmsan.git master 43e4752ae5dc 873745f2 .config console log report ci-upstream-kmsan-gce
2018/09/06 01:09 https://github.com/google/kmsan.git master 43e4752ae5dc 873745f2 .config console log report ci-upstream-kmsan-gce
2018/09/05 22:47 https://github.com/google/kmsan.git master 43e4752ae5dc 196410e4 .config console log report ci-upstream-kmsan-gce
2018/09/05 19:12 https://github.com/google/kmsan.git master 43e4752ae5dc 196410e4 .config console log report ci-upstream-kmsan-gce
2018/09/05 17:23 https://github.com/google/kmsan.git master 43e4752ae5dc 196410e4 .config console log report ci-upstream-kmsan-gce
2018/09/05 15:35 https://github.com/google/kmsan.git master 43e4752ae5dc 196410e4 .config console log report ci-upstream-kmsan-gce
2018/09/05 13:09 https://github.com/google/kmsan.git master 43e4752ae5dc 196410e4 .config console log report ci-upstream-kmsan-gce
2018/09/05 08:32 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/05 07:09 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/05 02:46 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/05 01:23 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/04 18:47 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/04 13:54 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/04 07:09 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/04 00:56 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 22:14 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 12:40 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/03 01:52 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 15:00 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 12:44 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 09:45 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 06:38 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/02 01:25 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/01 21:16 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/01 14:19 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/01 11:32 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/09/01 10:20 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report ci-upstream-kmsan-gce
2018/04/21 15:18 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.