KMSAN: uninit-value in __copy_skb

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KMSAN: uninit-value in __copy_skb_header (3) net	C			5	1613d	1627d	0/26	auto-obsoleted due to no activity on 2022/09/09 16:00
upstream	KMSAN: uninit-value in __copy_skb_header (2) net				3	1938d	1938d	0/26	auto-closed as invalid on 2019/07/02 02:46

RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000013 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 R13: 00000000000004e4 R14: 00000000006fb600 R15: 0000000000000008 ================================================================== BUG: KMSAN: uninit-value in __skb_dst_copy include/net/dst.h:290 [inline] BUG: KMSAN: uninit-value in skb_dst_copy include/net/dst.h:296 [inline] BUG: KMSAN: uninit-value in __copy_skb_header+0x2d7/0x830 net/core/skbuff.c:799 CPU: 1 PID: 16038 Comm: syz-executor7 Not tainted 4.16.0+ #87 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683 __skb_dst_copy include/net/dst.h:290 [inline] skb_dst_copy include/net/dst.h:296 [inline] __copy_skb_header+0x2d7/0x830 net/core/skbuff.c:799 __skb_clone+0xa0/0x990 net/core/skbuff.c:853 skb_clone+0x3e8/0x590 net/core/skbuff.c:1287 sctp_ulpevent_make_rcvmsg+0x1e4/0xda0 net/sctp/ulpevent.c:660 sctp_ulpq_tail_data+0xf3/0x14d0 net/sctp/ulpqueue.c:108 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1468 [inline] sctp_side_effects net/sctp/sm_sideeffect.c:1210 [inline] sctp_do_sm+0xf99/0x8c20 net/sctp/sm_sideeffect.c:1181 sctp_assoc_bh_rcv+0x6cd/0xab0 net/sctp/associola.c:1065 sctp_inq_push+0x30b/0x450 net/sctp/inqueue.c:95 sctp_backlog_rcv+0x250/0xb10 net/sctp/input.c:350 sk_backlog_rcv include/net/sock.h:908 [inline] __release_sock+0x2d6/0x680 net/core/sock.c:2271 release_sock+0x97/0x2a0 net/core/sock.c:2786 sctp_recvmsg+0xec6/0x11a0 net/sctp/socket.c:2228 inet_recvmsg+0x4c2/0x5f0 net/ipv4/af_inet.c:796 sock_recvmsg_nosec net/socket.c:803 [inline] sock_recvmsg+0x1d0/0x230 net/socket.c:810 ___sys_recvmsg+0x3fb/0x810 net/socket.c:2205 __sys_recvmsg net/socket.c:2250 [inline] SYSC_recvmsg+0x298/0x3c0 net/socket.c:2262 SyS_recvmsg+0x54/0x80 net/socket.c:2257 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x455979 RSP: 002b:00007f0a24e08c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f RAX: ffffffffffffffda RBX: 00007f0a24e096d4 RCX: 0000000000455979 RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000013 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 R13: 00000000000004e4 R14: 00000000006fb600 R15: 0000000000000008 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:188 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:314 kmem_cache_alloc+0xaab/0xb90 mm/slub.c:2756 skb_clone+0x31e/0x590 net/core/skbuff.c:1280 sctp_ulpevent_make_rcvmsg+0x1e4/0xda0 net/sctp/ulpevent.c:660 sctp_ulpq_tail_data+0xf3/0x14d0 net/sctp/ulpqueue.c:108 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1468 [inline] sctp_side_effects net/sctp/sm_sideeffect.c:1210 [inline] sctp_do_sm+0xf99/0x8c20 net/sctp/sm_sideeffect.c:1181 sctp_assoc_bh_rcv+0x6cd/0xab0 net/sctp/associola.c:1065 sctp_inq_push+0x30b/0x450 net/sctp/inqueue.c:95 sctp_backlog_rcv+0x250/0xb10 net/sctp/input.c:350 sk_backlog_rcv include/net/sock.h:908 [inline] __release_sock+0x2d6/0x680 net/core/sock.c:2271 release_sock+0x97/0x2a0 net/core/sock.c:2786 sctp_recvmsg+0xec6/0x11a0 net/sctp/socket.c:2228 inet_recvmsg+0x4c2/0x5f0 net/ipv4/af_inet.c:796 sock_recvmsg_nosec net/socket.c:803 [inline] sock_recvmsg+0x1d0/0x230 net/socket.c:810 ___sys_recvmsg+0x3fb/0x810 net/socket.c:2205 __sys_recvmsg net/socket.c:2250 [inline] SYSC_recvmsg+0x298/0x3c0 net/socket.c:2262 SyS_recvmsg+0x54/0x80 net/socket.c:2257 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 ==================================================================