syzbot


KMSAN: uninit-value in arp_mc_map

Status: auto-closed as invalid on 2019/09/08 16:37
Subsystems: net
[Documentation on labels]
First crash: 1957d, last: 1864d

Sample crash report:
==================================================================
BUG: KMSAN: uninit-value in __arch_swab32 arch/x86/include/uapi/asm/swab.h:10 [inline]
BUG: KMSAN: uninit-value in __fswab32 include/uapi/linux/swab.h:59 [inline]
BUG: KMSAN: uninit-value in ip_eth_mc_map include/net/ip.h:520 [inline]
BUG: KMSAN: uninit-value in arp_mc_map+0x6a0/0x9b0 net/ipv4/arp.c:194
CPU: 1 PID: 12515 Comm: syz-executor.1 Not tainted 5.0.0+ #11
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x173/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x12e/0x2a0 mm/kmsan/kmsan.c:600
 __msan_warning+0x82/0xf0 mm/kmsan/kmsan_instr.c:313
 __arch_swab32 arch/x86/include/uapi/asm/swab.h:10 [inline]
 __fswab32 include/uapi/linux/swab.h:59 [inline]
 ip_eth_mc_map include/net/ip.h:520 [inline]
 arp_mc_map+0x6a0/0x9b0 net/ipv4/arp.c:194
 arp_constructor+0x422/0xa50 net/ipv4/arp.c:272
 ___neigh_create+0xe19/0x2890 net/core/neighbour.c:596
 __neigh_create+0xbd/0xd0 net/core/neighbour.c:670
 ip_finish_output2+0xa0f/0x1820 net/ipv4/ip_output.c:224
 ip_finish_output+0xd2b/0xfd0 net/ipv4/ip_output.c:317
 NF_HOOK_COND include/linux/netfilter.h:278 [inline]
 ip_output+0x53f/0x610 net/ipv4/ip_output.c:405
 dst_output include/net/dst.h:444 [inline]
 ip_local_out+0x164/0x1d0 net/ipv4/ip_output.c:124
 iptunnel_xmit+0x8a7/0xde0 net/ipv4/ip_tunnel_core.c:91
 ip_tunnel_xmit+0x357d/0x3ca0 net/ipv4/ip_tunnel.c:784
 __gre_xmit net/ipv4/ip_gre.c:444 [inline]
 ipgre_xmit+0x1098/0x11c0 net/ipv4/ip_gre.c:702
 __netdev_start_xmit include/linux/netdevice.h:4385 [inline]
 netdev_start_xmit include/linux/netdevice.h:4394 [inline]
 xmit_one net/core/dev.c:3278 [inline]
 dev_hard_start_xmit+0x604/0xc40 net/core/dev.c:3294
 __dev_queue_xmit+0x2e48/0x3b80 net/core/dev.c:3864
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:3897
 packet_snd net/packet/af_packet.c:2933 [inline]
 packet_sendmsg+0x7d3a/0x8d30 net/packet/af_packet.c:2958
 sock_sendmsg_nosec net/socket.c:622 [inline]
 sock_sendmsg net/socket.c:632 [inline]
 ___sys_sendmsg+0xdb9/0x11b0 net/socket.c:2115
 __sys_sendmsg net/socket.c:2153 [inline]
 __do_sys_sendmsg net/socket.c:2162 [inline]
 __se_sys_sendmsg+0x305/0x460 net/socket.c:2160
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2160
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x457f29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f8976becc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29
RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000003
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8976bed6d4
R13: 00000000004c5561 R14: 00000000004d9408 R15: 00000000ffffffff

Uninit was created at:
No stack
==================================================================

Crashes (47):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/12 16:07 https://github.com/google/kmsan.git master a695dc5e929e a71bfb62 .config console log report ci-upstream-kmsan-gce
2019/03/12 06:43 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/12 02:42 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/10 02:27 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/09 10:30 https://github.com/google/kmsan.git master a695dc5e929e 12365b99 .config console log report ci-upstream-kmsan-gce
2019/03/07 23:44 https://github.com/google/kmsan.git master a695dc5e929e 4b69c3cb .config console log report ci-upstream-kmsan-gce
2019/03/06 22:26 https://github.com/google/kmsan.git master a695dc5e929e 18215b8d .config console log report ci-upstream-kmsan-gce
2019/03/05 20:08 https://github.com/google/kmsan.git master 6c55aa96dcda 16559f86 .config console log report ci-upstream-kmsan-gce
2019/03/05 19:57 https://github.com/google/kmsan.git master 6c55aa96dcda 16559f86 .config console log report ci-upstream-kmsan-gce
2019/03/04 09:41 https://github.com/google/kmsan.git master fa1981bee40f 7c693b52 .config console log report ci-upstream-kmsan-gce
2019/03/01 20:12 https://github.com/google/kmsan.git master fa1981bee40f 68d9e495 .config console log report ci-upstream-kmsan-gce
2019/02/28 12:52 https://github.com/google/kmsan.git master fa1981bee40f 09aeeba4 .config console log report ci-upstream-kmsan-gce
2019/02/28 07:57 https://github.com/google/kmsan.git master fa1981bee40f 34ec456b .config console log report ci-upstream-kmsan-gce
2019/02/27 21:31 https://github.com/google/kmsan.git master fa1981bee40f 083cfd0e .config console log report ci-upstream-kmsan-gce
2019/02/21 10:35 https://github.com/google/kmsan.git master fa1981bee40f 3133098b .config console log report ci-upstream-kmsan-gce
2019/02/21 02:57 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/21 01:20 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/20 13:10 https://github.com/google/kmsan.git master fa1981bee40f c95f0707 .config console log report ci-upstream-kmsan-gce
2019/02/13 03:22 https://github.com/google/kmsan.git master fa1981bee40f 1eedba36 .config console log report ci-upstream-kmsan-gce
2019/02/12 16:09 https://github.com/google/kmsan.git master fa1981bee40f 6ecc6d0f .config console log report ci-upstream-kmsan-gce
2019/02/12 15:44 https://github.com/google/kmsan.git master fa1981bee40f 6ecc6d0f .config console log report ci-upstream-kmsan-gce
2019/02/11 07:12 https://github.com/google/kmsan.git master fa1981bee40f b4f792e4 .config console log report ci-upstream-kmsan-gce
2019/02/11 07:03 https://github.com/google/kmsan.git master fa1981bee40f b4f792e4 .config console log report ci-upstream-kmsan-gce
2019/02/11 07:03 https://github.com/google/kmsan.git master fa1981bee40f b4f792e4 .config console log report ci-upstream-kmsan-gce
2019/02/10 06:51 https://github.com/google/kmsan.git master fa1981bee40f b4f792e4 .config console log report ci-upstream-kmsan-gce
2019/02/09 23:32 https://github.com/google/kmsan.git master fa1981bee40f d75f7686 .config console log report ci-upstream-kmsan-gce
2019/02/08 22:53 https://github.com/google/kmsan.git master fa1981bee40f fa6c7b70 .config console log report ci-upstream-kmsan-gce
2019/02/04 21:26 https://github.com/google/kmsan.git master fa1981bee40f d672172c .config console log report ci-upstream-kmsan-gce
2019/01/31 18:09 https://github.com/google/kmsan.git master fa1981bee40f 0e8ea0a3 .config console log report ci-upstream-kmsan-gce
2019/01/28 11:21 https://github.com/google/kmsan.git master 02f2d5aea531 629c2a27 .config console log report ci-upstream-kmsan-gce
2019/01/25 23:48 https://github.com/google/kmsan.git master 02f2d5aea531 ebf7a37c .config console log report ci-upstream-kmsan-gce
2019/01/20 20:15 https://github.com/google/kmsan.git master 02f2d5aea531 fd37a550 .config console log report ci-upstream-kmsan-gce
2019/01/17 01:05 https://github.com/google/kmsan.git master 02f2d5aea531 d538790b .config console log report ci-upstream-kmsan-gce
2019/01/16 05:31 https://github.com/google/kmsan.git master 02f2d5aea531 b47fa78d .config console log report ci-upstream-kmsan-gce
2019/01/14 02:28 https://github.com/google/kmsan.git master 02f2d5aea531 c3f3344c .config console log report ci-upstream-kmsan-gce
2019/01/12 20:33 https://github.com/google/kmsan.git master 02f2d5aea531 c3f3344c .config console log report ci-upstream-kmsan-gce
2019/01/06 03:10 https://github.com/google/kmsan.git master 11587f6ee534 53be0a37 .config console log report ci-upstream-kmsan-gce
2019/01/04 17:01 https://github.com/google/kmsan.git master 11587f6ee534 0127e3ba .config console log report ci-upstream-kmsan-gce
2019/01/01 22:17 https://github.com/google/kmsan.git master 8ba10281f9e5 3d85f48c .config console log report ci-upstream-kmsan-gce
2018/12/31 13:43 https://github.com/google/kmsan.git master 8ba10281f9e5 2b42fdc8 .config console log report ci-upstream-kmsan-gce
2018/12/30 20:58 https://github.com/google/kmsan.git master 8ba10281f9e5 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/29 00:30 https://github.com/google/kmsan.git master 79fc24ff6184 e33ad0f1 .config console log report ci-upstream-kmsan-gce
2018/12/24 12:42 https://github.com/google/kmsan.git master e9021948e109 be79df56 .config console log report ci-upstream-kmsan-gce
2018/12/11 08:35 https://github.com/google/kmsan.git master 3f06bda61398 4093e33b .config console log report ci-upstream-kmsan-gce
2018/12/10 00:35 https://github.com/google/kmsan.git master 3f06bda61398 96cc4c50 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.