KMSAN: uninit-value in hsr_get

KMSAN: uninit-value in hsr_get_node
Status: upstream: reported on 2020/08/10 15:37
Reported-by: syzbot+d205b494fafacf899b18@syzkaller.appspotmail.com
First crash: 50d, last: 22h49m

Sample crash report:

=====================================================
BUG: KMSAN: uninit-value in hsr_get_node+0x45d/0xba0 net/hsr/hsr_framereg.c:220
CPU: 1 PID: 13028 Comm: syz-executor.0 Not tainted 5.9.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:122
 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:219
 hsr_get_node+0x45d/0xba0 net/hsr/hsr_framereg.c:220
 fill_frame_info net/hsr/hsr_forward.c:498 [inline]
 hsr_forward_skb+0x9d9/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4634 [inline]
 netdev_start_xmit include/linux/netdevice.h:4648 [inline]
 xmit_one+0x3cf/0x750 net/core/dev.c:3561
 dev_hard_start_xmit net/core/dev.c:3577 [inline]
 __dev_queue_xmit+0x3aad/0x4470 net/core/dev.c:4136
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4169
 __bpf_tx_skb net/core/filter.c:2112 [inline]
 __bpf_redirect_common net/core/filter.c:2151 [inline]
 __bpf_redirect+0x1479/0x16b0 net/core/filter.c:2158
 ____bpf_clone_redirect net/core/filter.c:2191 [inline]
 bpf_clone_redirect+0x498/0x650 net/core/filter.c:2163
 ___bpf_prog_run+0x4498/0x98e0 kernel/bpf/core.c:1516
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1694
 bpf_test_run+0x52d/0xed0 include/linux/filter.h:734
 bpf_prog_test_run_skb+0x17d0/0x3500 net/bpf/test_run.c:496
 bpf_prog_test_run kernel/bpf/syscall.c:2996 [inline]
 __do_sys_bpf+0xb7d4/0x1aa20 kernel/bpf/syscall.c:4196
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4136
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4136
 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline]
 __do_fast_syscall_32+0x129/0x180 arch/x86/entry/common.c:139
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fb2549
Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f558b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:143 [inline]
 kmsan_internal_poison_shadow+0x66/0xd0 mm/kmsan/kmsan.c:126
 kmsan_slab_alloc+0x8a/0xe0 mm/kmsan/kmsan_hooks.c:80
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0x9aa/0x12f0 mm/slub.c:4511
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x26e/0x1e30 net/core/skbuff.c:1629
 skb_ensure_writable+0x4d1/0x590 net/core/skbuff.c:5458
 __bpf_try_make_writable net/core/filter.c:1650 [inline]
 bpf_try_make_writable net/core/filter.c:1656 [inline]
 bpf_try_make_head_writable net/core/filter.c:1664 [inline]
 ____bpf_clone_redirect net/core/filter.c:2185 [inline]
 bpf_clone_redirect+0x26c/0x650 net/core/filter.c:2163
 ___bpf_prog_run+0x4498/0x98e0 kernel/bpf/core.c:1516
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1694
 bpf_test_run+0x52d/0xed0 include/linux/filter.h:734
 bpf_prog_test_run_skb+0x17d0/0x3500 net/bpf/test_run.c:496
 bpf_prog_test_run kernel/bpf/syscall.c:2996 [inline]
 __do_sys_bpf+0xb7d4/0x1aa20 kernel/bpf/syscall.c:4196
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4136
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4136
 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline]
 __do_fast_syscall_32+0x129/0x180 arch/x86/entry/common.c:139
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================

Crashes (101):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Maintainers
ci-upstream-kmsan-gce-386	2020/09/28 06:08	https://github.com/google/kmsan.git master	c5a13b33	5dd8aee8	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/28 05:43	https://github.com/google/kmsan.git master	c5a13b33	5dd8aee8	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/27 03:46	https://github.com/google/kmsan.git master	c5a13b33	2d5ea0cb	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/26 12:19	https://github.com/google/kmsan.git master	c5a13b33	4a006f63	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/26 09:58	https://github.com/google/kmsan.git master	c5a13b33	4a006f63	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/26 08:04	https://github.com/google/kmsan.git master	c5a13b33	4a006f63	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/25 05:30	https://github.com/google/kmsan.git master	c5a13b33	54289b08	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/25 01:56	https://github.com/google/kmsan.git master	c5a13b33	54289b08	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/24 12:25	https://github.com/google/kmsan.git master	c5a13b33	54289b08	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/22 12:32	https://github.com/google/kmsan.git master	c5a13b33	9e1fa68e	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/22 12:31	https://github.com/google/kmsan.git master	c5a13b33	9e1fa68e	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/22 03:38	https://github.com/google/kmsan.git master	c5a13b33	9e1fa68e	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/22 02:36	https://github.com/google/kmsan.git master	c5a13b33	9e1fa68e	.config	log	report	info	ap420073@gmail.com, davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, m-karicheri2@ti.com, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/11 07:05	https://github.com/google/kmsan.git master	3b3ea602	409809d8	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/09 04:22	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/08 23:50	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/08 15:28	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/08 11:26	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/08 10:25	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/08 10:09	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/08 01:09	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/06 08:48	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/05 21:20	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/05 18:53	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/05 17:22	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/05 11:01	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/05 08:16	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/04 20:24	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/04 01:22	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/03 05:46	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/02 17:56	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/02 17:31	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/09/02 17:31	https://github.com/google/kmsan.git master	3b3ea602	abf9ba4f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/31 20:19	https://github.com/google/kmsan.git master	3b3ea602	d5a3ae1f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/31 20:19	https://github.com/google/kmsan.git master	3b3ea602	d5a3ae1f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/28 23:38	https://github.com/google/kmsan.git master	3b3ea602	d5a3ae1f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/28 23:15	https://github.com/google/kmsan.git master	3b3ea602	d5a3ae1f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/28 22:29	https://github.com/google/kmsan.git master	3b3ea602	d5a3ae1f	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/28 01:10	https://github.com/google/kmsan.git master	ce8056d1	816e0689	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/26 08:19	https://github.com/google/kmsan.git master	ce8056d1	344da168	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/26 06:18	https://github.com/google/kmsan.git master	ce8056d1	344da168	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/10 00:07	https://github.com/google/kmsan.git master	ce8056d1	70301872	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci-upstream-kmsan-gce-386	2020/08/09 17:50	https://github.com/google/kmsan.git master	ce8056d1	70301872	.config	log	report		alex.shi@linux.alibaba.com, ap420073@gmail.com, davem@davemloft.net, frextrite@gmail.com, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org