syzbot


KMSAN: uninit-value in netif_receive_generic_xdp

Status: auto-closed as invalid on 2021/11/13 15:00
Subsystems: bpf net
[Documentation on labels]
Reported-by: syzbot+026212ad75beeadc9907@syzkaller.appspotmail.com
First crash: 1288d, last: 976d
Discussions (1)
Title Replies (including bot) Last reply
KMSAN: uninit-value in netif_receive_generic_xdp 0 (1) 2020/09/12 07:59

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in netif_receive_generic_xdp+0x15c2/0x2590 net/core/dev.c:4751
CPU: 1 PID: 27344 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:121
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 netif_receive_generic_xdp+0x15c2/0x2590 net/core/dev.c:4751
 do_xdp_generic net/core/dev.c:4816 [inline]
 __netif_receive_skb_core+0x294a/0x65a0 net/core/dev.c:5207
 __netif_receive_skb_one_core net/core/dev.c:5382 [inline]
 __netif_receive_skb+0xf2/0x640 net/core/dev.c:5498
 process_backlog+0x517/0xbd0 net/core/dev.c:6365
 __napi_poll+0x13e/0xca0 net/core/dev.c:6912
 napi_poll net/core/dev.c:6979 [inline]
 net_rx_action+0x726/0x14a0 net/core/dev.c:7065
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:dev_get_by_index_rcu+0x6b/0x2a0 net/core/dev.c:959
Code: 00 00 48 85 db 0f 85 91 00 00 00 44 89 7d cc 45 0f b6 f7 49 c1 e6 03 4d 03 34 24 4c 89 e7 e8 dc e7 dd f5 41 0f b6 cd 48 8b 00 <48> 09 c8 75 7a 4c 89 6d c0 49 8b 1e 4c 89 f7 e8 c1 e7 dd f5 4c 8b
RSP: 0018:ffff8881918d3338 EFLAGS: 00000286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88809cf20130 RSI: 0000000000000130 RDI: ffff88809d320130
RBP: ffff8881918d3388 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000b1ffb3de R11: 0000000000000000 R12: ffff88809d320130
R13: 0000000000000000 R14: ffff88807a86c808 R15: 0000000000000001
 ____bpf_clone_redirect net/core/filter.c:2429 [inline]
 bpf_clone_redirect+0x12a/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x2b78/0xb950 kernel/bpf/core.c:1525
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1750
 bpf_test_run+0x53f/0xe60 include/linux/filter.h:770
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3132 [inline]
 __do_sys_bpf+0xbe6f/0x1aba0 kernel/bpf/syscall.c:4411
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4351
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4351
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x127/0x180 arch/x86/entry/common.c:142
 do_fast_syscall_32+0x77/0xd0 arch/x86/entry/common.c:168
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:211
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fab549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55a55fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:120 [inline]
 kmsan_internal_poison_shadow+0x66/0xd0 mm/kmsan/kmsan.c:103
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1676
 netif_receive_generic_xdp+0x61c/0x2590 net/core/dev.c:4699
 do_xdp_generic net/core/dev.c:4816 [inline]
 __netif_receive_skb_core+0x294a/0x65a0 net/core/dev.c:5207
 __netif_receive_skb_one_core net/core/dev.c:5382 [inline]
 __netif_receive_skb+0xf2/0x640 net/core/dev.c:5498
 process_backlog+0x517/0xbd0 net/core/dev.c:6365
 __napi_poll+0x13e/0xca0 net/core/dev.c:6912
 napi_poll net/core/dev.c:6979 [inline]
 net_rx_action+0x726/0x14a0 net/core/dev.c:7065
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================

Crashes (85):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/07/16 14:59 https://github.com/google/kmsan.git master 57b5797c8013 f115ae98 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/14 16:32 https://github.com/google/kmsan.git master 57b5797c8013 94e0b707 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/14 13:05 https://github.com/google/kmsan.git master 57b5797c8013 484502bd .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/14 05:58 https://github.com/google/kmsan.git master 57b5797c8013 484502bd .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/12 21:10 https://github.com/google/kmsan.git master 57b5797c8013 f415556d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/09 09:18 https://github.com/google/kmsan.git master 57b5797c8013 281e815f .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/07 07:25 https://github.com/google/kmsan.git master 57b5797c8013 4846d5c1 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/06 13:14 https://github.com/google/kmsan.git master 57b5797c8013 6c4484eb .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/06 09:25 https://github.com/google/kmsan.git master 57b5797c8013 6c4484eb .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/02 22:43 https://github.com/google/kmsan.git master 57b5797c8013 55aa55c2 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/07/01 13:24 https://github.com/google/kmsan.git master 57b5797c8013 658ebc66 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/30 14:34 https://github.com/google/kmsan.git master 57b5797c8013 84fd4c77 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/29 21:03 https://github.com/google/kmsan.git master 57b5797c8013 a4fccb01 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/26 11:03 https://github.com/google/kmsan.git master 57b5797c8013 9d2ab5df .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/24 20:17 https://github.com/google/kmsan.git master a520ce29b172 0edbbe31 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/24 08:30 https://github.com/google/kmsan.git master 31ffdb453231 ec865f6a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/16 00:37 https://github.com/google/kmsan.git master 7bcc9a7be76b 990d3cbe .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/15 12:31 https://github.com/google/kmsan.git master 7bcc9a7be76b 58636922 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/09 04:50 https://github.com/google/kmsan.git master 6099c9da2f7d 5c2fe346 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/05 12:35 https://github.com/google/kmsan.git master 6099c9da2f7d 500c2339 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/05 11:23 https://github.com/google/kmsan.git master 6099c9da2f7d 500c2339 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/04 15:52 https://github.com/google/kmsan.git master 6099c9da2f7d 966a236b .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/06/02 18:31 https://github.com/google/kmsan.git master 6099c9da2f7d 0740de69 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/29 21:00 https://github.com/google/kmsan.git master 6099c9da2f7d 325a8dab .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/29 14:32 https://github.com/google/kmsan.git master 6099c9da2f7d 858ea628 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/28 16:26 https://github.com/google/kmsan.git master 6099c9da2f7d 858ea628 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/20 17:12 https://github.com/google/kmsan.git master 6099c9da2f7d c560a65d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/18 19:11 https://github.com/google/kmsan.git master 6099c9da2f7d a343ba6b .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/17 16:32 https://github.com/google/kmsan.git master bdefec9ab855 a2eb125d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/17 13:34 https://github.com/google/kmsan.git master bdefec9ab855 a2eb125d .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/16 00:49 https://github.com/google/kmsan.git master bdefec9ab855 f54a5c09 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/14 13:20 https://github.com/google/kmsan.git master bdefec9ab855 8bdd5343 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/11 16:14 https://github.com/google/kmsan.git master bdefec9ab855 ca873091 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/07 01:33 https://github.com/google/kmsan.git master 4ebaab5fb428 06585184 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/05/04 23:00 https://github.com/google/kmsan.git master 4ebaab5fb428 06c27ff5 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/25 12:31 https://github.com/google/kmsan.git master 4ebaab5fb428 36c88236 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/21 23:16 https://github.com/google/kmsan.git master 4ebaab5fb428 2bc8999a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/21 16:10 https://github.com/google/kmsan.git master 4ebaab5fb428 95777977 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/20 19:20 https://github.com/google/kmsan.git master 4ebaab5fb428 c0ced557 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/16 19:33 https://github.com/google/kmsan.git master 4ebaab5fb428 7e2b734b .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/16 03:41 https://github.com/google/kmsan.git master 4ebaab5fb428 c59079a6 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/10 20:21 https://github.com/google/kmsan.git master 4ebaab5fb428 bfeda1b1 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/10 14:00 https://github.com/google/kmsan.git master 4ebaab5fb428 bfeda1b1 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/04/03 11:43 https://github.com/google/kmsan.git master 29ad81a1074a 6a81331a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/03/31 16:28 https://github.com/google/kmsan.git master 29ad81a1074a 6a81331a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/02/20 16:03 https://github.com/google/kmsan.git master 29ad81a1074a 3e5ed8b4 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/02/17 21:47 https://github.com/google/kmsan.git master 29ad81a1074a 14052202 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/02/17 20:28 https://github.com/google/kmsan.git master 29ad81a1074a 14052202 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/02/17 15:59 https://github.com/google/kmsan.git master 29ad81a1074a 052f8d9f .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/02/12 14:12 https://github.com/google/kmsan.git master 29ad81a1074a a5f86b15 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/02/11 13:50 https://github.com/google/kmsan.git master 73d62e81b476 a52ee10a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/02/10 09:11 https://github.com/google/kmsan.git master 73d62e81b476 2bd9619f .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/02/04 17:44 https://github.com/google/kmsan.git master 73d62e81b476 42b90a7c .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in netif_receive_generic_xdp
2021/01/14 21:50 https://github.com/google/kmsan.git master 73d62e81b476 65a7a854 .config console log report info ci-upstream-kmsan-gce-386
2020/12/16 09:06 https://github.com/google/kmsan.git master 73d62e81b476 f213e07e .config console log report info ci-upstream-kmsan-gce-386
2020/12/09 07:51 https://github.com/google/kmsan.git master 73d62e81b476 40cc414d .config console log report info ci-upstream-kmsan-gce-386
2020/10/24 17:59 https://github.com/google/kmsan.git master e16174226146 a1839e81 .config console log report info ci-upstream-kmsan-gce-386
2020/09/19 12:38 https://github.com/google/kmsan.git master c5a13b33ec11 53ce8104 .config console log report info ci-upstream-kmsan-gce-386
2020/09/07 18:00 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce-386
* Struck through repros no longer work on HEAD.