device lo entered promiscuous mode ================================================================== BUG: KMSAN: uninit-value in freelist_dereference mm/slub.c:264 [inline] BUG: KMSAN: uninit-value in get_freepointer mm/slub.c:270 [inline] BUG: KMSAN: uninit-value in get_freepointer_safe mm/slub.c:285 [inline] BUG: KMSAN: uninit-value in slab_alloc_node mm/slub.c:2689 [inline] BUG: KMSAN: uninit-value in slab_alloc mm/slub.c:2728 [inline] BUG: KMSAN: uninit-value in __kmalloc_track_caller+0x516/0xce0 mm/slub.c:4323 CPU: 0 PID: 13766 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #27 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1e0 lib/dump_stack.c:113 kmsan_report+0x195/0x2c0 mm/kmsan/kmsan.c:982 __msan_warning+0x7d/0xe0 mm/kmsan/kmsan_instr.c:645 freelist_dereference mm/slub.c:264 [inline] get_freepointer mm/slub.c:270 [inline] get_freepointer_safe mm/slub.c:285 [inline] slab_alloc_node mm/slub.c:2689 [inline] slab_alloc mm/slub.c:2728 [inline] __kmalloc_track_caller+0x516/0xce0 mm/slub.c:4323 kmemdup+0x95/0x140 mm/util.c:118 sctp_addr_wq_mgmt+0x511/0xc00 net/sctp/protocol.c:740 sctp_inetaddr_event+0x91c/0xab0 net/sctp/protocol.c:784 notifier_call_chain kernel/notifier.c:93 [inline] __blocking_notifier_call_chain kernel/notifier.c:317 [inline] blocking_notifier_call_chain+0x1a6/0x2f0 kernel/notifier.c:328 __inet_insert_ifa+0x1158/0x1280 net/ipv4/devinet.c:519 inet_insert_ifa net/ipv4/devinet.c:526 [inline] inetdev_event+0x1d5b/0x1e00 net/ipv4/devinet.c:1508 notifier_call_chain kernel/notifier.c:93 [inline] __raw_notifier_call_chain kernel/notifier.c:394 [inline] raw_notifier_call_chain+0x13e/0x240 kernel/notifier.c:401 call_netdevice_notifiers_info net/core/dev.c:1735 [inline] call_netdevice_notifiers net/core/dev.c:1753 [inline] __dev_notify_flags+0x3b9/0x820 net/core/dev.c:7031 dev_change_flags+0x1af/0x230 net/core/dev.c:7065 devinet_ioctl+0xeb6/0x29a0 net/ipv4/devinet.c:1092 inet_ioctl+0x89a/0xa30 net/ipv4/af_inet.c:954 sock_do_ioctl+0x156/0x6e0 net/socket.c:969 sock_ioctl+0x7ad/0xda0 net/socket.c:1093 vfs_ioctl fs/ioctl.c:46 [inline] do_vfs_ioctl+0xdef/0x2740 fs/ioctl.c:686 ksys_ioctl fs/ioctl.c:701 [inline] __do_sys_ioctl fs/ioctl.c:708 [inline] __se_sys_ioctl fs/ioctl.c:706 [inline] __x64_sys_ioctl+0x280/0x320 fs/ioctl.c:706 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x455ab9 Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fe5500b3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe5500b46d4 RCX: 0000000000455ab9 RDX: 00000000200000c0 RSI: 0000000000008914 RDI: 0000000000000013 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004bfc1f R14: 00000000004cf520 R15: 0000000000000000 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:256 [inline] kmsan_save_stack mm/kmsan/kmsan.c:271 [inline] kmsan_internal_chain_origin+0x13c/0x240 mm/kmsan/kmsan.c:573 __msan_chain_origin+0x76/0xd0 mm/kmsan/kmsan_instr.c:483 ___slab_alloc+0x1eb0/0x2090 mm/slub.c:2570 __slab_alloc mm/slub.c:2623 [inline] slab_alloc_node mm/slub.c:2686 [inline] slab_alloc mm/slub.c:2728 [inline] __kmalloc+0x2f8/0x370 mm/slub.c:3776 kmalloc include/linux/slab.h:518 [inline] kzalloc include/linux/slab.h:707 [inline] fib_trie_table+0xa6/0x2e0 net/ipv4/fib_trie.c:2104 fib_new_table+0x2ec/0x6b0 net/ipv4/fib_frontend.c:97 fib_magic+0x527/0x880 net/ipv4/fib_frontend.c:873 fib_add_ifaddr+0x26e/0x8b0 net/ipv4/fib_frontend.c:907 fib_inetaddr_event+0x1de/0x330 net/ipv4/fib_frontend.c:1219 notifier_call_chain kernel/notifier.c:93 [inline] __blocking_notifier_call_chain kernel/notifier.c:317 [inline] blocking_notifier_call_chain+0x1a6/0x2f0 kernel/notifier.c:328 __inet_insert_ifa+0x1158/0x1280 net/ipv4/devinet.c:519 inet_insert_ifa net/ipv4/devinet.c:526 [inline] inetdev_event+0x1d5b/0x1e00 net/ipv4/devinet.c:1508 notifier_call_chain kernel/notifier.c:93 [inline] __raw_notifier_call_chain kernel/notifier.c:394 [inline] raw_notifier_call_chain+0x13e/0x240 kernel/notifier.c:401 call_netdevice_notifiers_info net/core/dev.c:1735 [inline] call_netdevice_notifiers net/core/dev.c:1753 [inline] __dev_notify_flags+0x3b9/0x820 net/core/dev.c:7031 dev_change_flags+0x1af/0x230 net/core/dev.c:7065 devinet_ioctl+0xeb6/0x29a0 net/ipv4/devinet.c:1092 inet_ioctl+0x89a/0xa30 net/ipv4/af_inet.c:954 sock_do_ioctl+0x156/0x6e0 net/socket.c:969 sock_ioctl+0x7ad/0xda0 net/socket.c:1093 vfs_ioctl fs/ioctl.c:46 [inline] do_vfs_ioctl+0xdef/0x2740 fs/ioctl.c:686 ksys_ioctl fs/ioctl.c:701 [inline] __do_sys_ioctl fs/ioctl.c:708 [inline] __se_sys_ioctl fs/ioctl.c:706 [inline] __x64_sys_ioctl+0x280/0x320 fs/ioctl.c:706 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x63/0xe7 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:256 [inline] kmsan_internal_poison_shadow+0xc8/0x1d0 mm/kmsan/kmsan.c:181 kmsan_kmalloc+0xa1/0x120 mm/kmsan/kmsan_hooks.c:91 __kmalloc+0x147/0x370 mm/slub.c:3782 kmalloc include/linux/slab.h:518 [inline] sock_alloc_inode+0xb9/0x2b0 net/socket.c:246 alloc_inode fs/inode.c:210 [inline] new_inode_pseudo+0x95/0x430 fs/inode.c:895 sock_alloc net/socket.c:567 [inline] __sock_create+0x392/0xf70 net/socket.c:1250 sock_create net/socket.c:1326 [inline] __sys_socket+0x184/0x670 net/socket.c:1356 __do_sys_socket net/socket.c:1365 [inline] __se_sys_socket net/socket.c:1363 [inline] __x64_sys_socket+0xd8/0x120 net/socket.c:1363 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x63/0xe7 ==================================================================