syzbot


KMSAN: uninit-value in send_hsr_supervision_frame

Status: closed as invalid on 2018/12/30 13:40
Subsystems: net
[Documentation on labels]
First crash: 1937d, last: 1936d

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
8021q: adding VLAN 0 to HW filter on device batadv0
==================================================================
BUG: KMSAN: uninit-value in set_hsr_tag_path net/hsr/hsr_main.h:86 [inline]
BUG: KMSAN: uninit-value in set_hsr_stag_path net/hsr/hsr_main.h:129 [inline]
BUG: KMSAN: uninit-value in send_hsr_supervision_frame+0x1056/0x1510 net/hsr/hsr_device.c:293
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.20.0-rc7+ #16
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x173/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x12e/0x2a0 mm/kmsan/kmsan.c:613
 __msan_warning+0x82/0xf0 mm/kmsan/kmsan_instr.c:295
 set_hsr_tag_path net/hsr/hsr_main.h:86 [inline]
 set_hsr_stag_path net/hsr/hsr_main.h:129 [inline]
 send_hsr_supervision_frame+0x1056/0x1510 net/hsr/hsr_device.c:293
 hsr_announce+0x14c/0x3a0 net/hsr/hsr_device.c:342
 call_timer_fn+0x285/0x600 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0xdb4/0x11d0 kernel/time/timer.c:1682
 run_timer_softirq+0x2e/0x50 kernel/time/timer.c:1695
 __do_softirq+0x53f/0x93a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x214/0x250 kernel/softirq.c:416
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:536
 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1063
 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:814
 </IRQ>
RIP: 0010:default_idle+0x27e/0x4e0 arch/x86/kernel/process.c:562
Code: 04 24 00 00 00 00 8b 45 c0 41 89 44 24 08 8b 45 c4 41 89 84 24 90 0c 00 00 48 c7 c7 d8 22 cb 8b 8b 75 bc e8 84 3b b0 f6 fb f4 <65> 8b 04 25 20 a1 02 00 89 45 b8 8b 1c 25 20 32 04 8c 48 c7 c7 20
RSP: 0018:ffffffff8bc0fd58 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: ffff888112443220 RBX: 0000000000000000 RCX: ffff888112443220
RDX: ffff888112043220 RSI: 0000160000000000 RDI: ccccccccccccd000
RBP: ffffffff8bc0fda0 R08: 0000000000000002 R09: ffffffff8bc0fd08
R10: 0000000000000000 R11: ffffffff8acbf5c0 R12: ffffffff8bc36ac8
R13: 0000000000000000 R14: ffffffff8bc36140 R15: ffffffff8bc36ac8
 arch_cpu_idle+0x26/0x30 arch/x86/kernel/process.c:552
 default_idle_call kernel/sched/idle.c:93 [inline]
 cpuidle_idle_call kernel/sched/idle.c:153 [inline]
 do_idle+0x22d/0x800 kernel/sched/idle.c:262
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:353
 rest_init+0x1c1/0x1f0 init/main.c:444
 arch_call_rest_init+0x13/0x15
 start_kernel+0x9d7/0xbb1 init/main.c:747
 x86_64_start_reservations+0x19/0x2f arch/x86/kernel/head64.c:470
 x86_64_start_kernel+0x84/0x87 arch/x86/kernel/head64.c:451
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243

Uninit was created at:
 kmsan_save_stack_with_flags+0x7a/0x130 mm/kmsan/kmsan.c:204
 kmsan_internal_alloc_meta_for_pages+0x113/0x580 mm/kmsan/kmsan_hooks.c:98
 kmsan_alloc_page+0x7e/0x100 mm/kmsan/kmsan_hooks.c:396
 __alloc_pages_nodemask+0x1587/0x5f20 mm/page_alloc.c:4416
 __alloc_pages include/linux/gfp.h:475 [inline]
 __alloc_pages_node include/linux/gfp.h:488 [inline]
 alloc_pages_node include/linux/gfp.h:502 [inline]
 __page_frag_cache_refill mm/page_alloc.c:4488 [inline]
 page_frag_alloc+0x3c1/0x980 mm/page_alloc.c:4524
 __netdev_alloc_skb+0x1f1/0xa50 net/core/skbuff.c:414
 netdev_alloc_skb include/linux/skbuff.h:2671 [inline]
 dev_alloc_skb include/linux/skbuff.h:2684 [inline]
 send_hsr_supervision_frame+0x168/0x1510 net/hsr/hsr_device.c:266
 hsr_announce+0x14c/0x3a0 net/hsr/hsr_device.c:342
 call_timer_fn+0x285/0x600 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0xdb4/0x11d0 kernel/time/timer.c:1682
 run_timer_softirq+0x2e/0x50 kernel/time/timer.c:1695
 __do_softirq+0x53f/0x93a kernel/softirq.c:293
==================================================================

Crashes (2085):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/30 13:29 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 13:22 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 13:13 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 13:05 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 12:57 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 12:49 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 12:41 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 12:32 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 12:24 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 12:16 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 12:08 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 12:01 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 11:53 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 11:45 https://github.com/google/kmsan.git master 79fc24ff6184 9942de5f .config console log report ci-upstream-kmsan-gce
2018/12/30 11:30 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 11:21 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 11:13 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 11:06 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 10:58 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 10:50 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 10:41 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 10:33 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 10:25 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 10:16 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 10:09 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 10:01 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 09:52 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 09:44 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 09:36 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 09:28 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 09:20 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 09:11 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 09:04 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 09:03 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 08:55 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 08:47 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 08:38 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 08:31 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 08:23 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 08:13 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 08:05 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
2018/12/30 00:17 https://github.com/google/kmsan.git master 79fc24ff6184 35e3f847 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.