syzbot


KMSAN: uninit-value in tcp_gro_receive

Status: closed as invalid on 2018/09/05 16:20
Subsystems: net
[Documentation on labels]
First crash: 2609d, last: 2609d

Sample crash report:
random: crng init done
==================================================================
BUG: KMSAN: uninit-value in tcp_gro_receive+0x1371/0x1ec0 net/ipv4/tcp_offload.c:223
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.17.0+ #17
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1368
 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:634
 tcp_gro_receive+0x1371/0x1ec0 net/ipv4/tcp_offload.c:223
 tcp4_gro_receive+0x3df/0xc30 net/ipv4/tcp_offload.c:317
 call_gro_receive include/linux/netdevice.h:2226 [inline]
 inet_gro_receive+0x15f9/0x1950 net/ipv4/af_inet.c:1493
 dev_gro_receive+0x214c/0x32e0 net/core/dev.c:4989
 napi_gro_receive+0x624/0xb60 net/core/dev.c:5124
 receive_buf+0x4c96/0x6ae0 drivers/net/virtio_net.c:945
 virtnet_receive drivers/net/virtio_net.c:1200 [inline]
 virtnet_poll+0x8ff/0x1420 drivers/net/virtio_net.c:1282
 napi_poll net/core/dev.c:5735 [inline]
 net_rx_action+0x766/0x1a80 net/core/dev.c:5801
 __do_softirq+0x592/0x979 kernel/softirq.c:285
 invoke_softirq kernel/softirq.c:366 [inline]
 irq_exit+0x207/0x240 kernel/softirq.c:407
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525
 do_IRQ+0x17d/0x1c0 arch/x86/kernel/irq.c:264
 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:646
 </IRQ>
RIP: 0010:native_safe_halt arch/x86/include/asm/irqflags.h:55 [inline]
RIP: 0010:arch_safe_halt arch/x86/include/asm/irqflags.h:97 [inline]
RIP: 0010:default_idle+0x20b/0x3e0 arch/x86/kernel/process.c:500
RSP: 0018:ffff8801d1e4fdf0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd5
RAX: ffff8801fd432f18 RBX: 0000000000000000 RCX: ffff8801fd032f18
RDX: ffff8801fd032f18 RSI: aaaaaaaaaaaab000 RDI: ffffea00004212c0
RBP: ffff8801d1e4fe28 R08: 0000000001080020 R09: 0000000000000002
R10: 0000000000000000 R11: ffffffff89ff18c0 R12: ffff8801d1e4fe8f
R13: ffff8801d1cdd7c0 R14: ffff8801d1e4fe8c R15: ffff8801d1cde098
 arch_cpu_idle+0x26/0x30 arch/x86/kernel/process.c:491
 default_idle_call kernel/sched/idle.c:93 [inline]
 cpuidle_idle_call kernel/sched/idle.c:153 [inline]
 do_idle+0x36d/0x830 kernel/sched/idle.c:262
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:368
 start_secondary+0x3c6/0x490 arch/x86/kernel/smpboot.c:272
 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:242

Local variable description: ----list@net_rx_action
Variable was created at:
 net_rx_action+0x6e/0x1a80 net/core/dev.c:5779
 __do_softirq+0x592/0x979 kernel/softirq.c:285
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/04 05:39 https://github.com/google/kmsan.git master 4ca559bbdeaf 317fc8ea .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.