===================================================== BUG: KMSAN: uninit-value in bond_neigh_setup+0xa4/0x110 drivers/net/bonding/bond_main.c:3745 CPU: 0 PID: 15807 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x220 lib/dump_stack.c:118 kmsan_report+0xf8/0x1e0 mm/kmsan/kmsan_report.c:118 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215 bond_neigh_setup+0xa4/0x110 drivers/net/bonding/bond_main.c:3745 bond_neigh_init+0x216/0x4b0 drivers/net/bonding/bond_main.c:3716 ___neigh_create+0x15f1/0x2e20 net/core/neighbour.c:613 __neigh_create+0xbd/0xd0 net/core/neighbour.c:674 ip6_finish_output2+0x149a/0x2670 net/ipv6/ip6_output.c:113 __ip6_finish_output+0x83d/0x8f0 net/ipv6/ip6_output.c:142 ip6_finish_output+0x2db/0x420 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x60a/0x770 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] mld_sendpack+0xebd/0x13d0 net/ipv6/mcast.c:1682 mld_send_cr net/ipv6/mcast.c:1978 [inline] mld_ifc_timer_expire+0x1181/0x1790 net/ipv6/mcast.c:2477 call_timer_fn+0x232/0x530 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers+0xd60/0x1270 kernel/time/timer.c:1773 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1786 __do_softirq+0x4a1/0x83a kernel/softirq.c:293 invoke_softirq kernel/softirq.c:375 [inline] irq_exit+0x230/0x280 kernel/softirq.c:416 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:536 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1140 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:834 RIP: 0010:metadata_is_contiguous+0x6/0x1c0 mm/kmsan/kmsan.c:464 Code: 14 07 a8 48 c7 c6 11 15 07 a8 48 89 da 4c 89 f9 31 c0 e8 4f 77 4a ff 0f 0b 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 28 48 c7 c0 23 56 26 a8 49 c7 c6 80 RSP: 0018:ffffbc330439f4e0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: ffff9a9bd3f52850 RCX: 0000000000000004 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffbc330439f760 RBP: ffffbc330439f4e8 R08: fffff60c8000000f R09: ffff9a9cafffb000 R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000400dc0 R13: fffff60c88e42340 R14: ffffbc330439f760 R15: 0000000000000000 kmsan_get_shadow_origin_ptr+0x5e/0xb0 mm/kmsan/kmsan_shadow.c:153 __msan_metadata_ptr_for_load_4+0x10/0x20 mm/kmsan/kmsan_instr.c:54 trace_mm_page_alloc mm/page_alloc.c:4797 [inline] __alloc_pages_nodemask+0xb27/0x5fd0 mm/page_alloc.c:4797 alloc_pages_current+0x68d/0x9a0 mm/mempolicy.c:2207 alloc_pages include/linux/gfp.h:534 [inline] __pte_alloc_one include/asm-generic/pgalloc.h:63 [inline] pte_alloc_one+0x59/0x1a0 arch/x86/mm/pgtable.c:26 __pte_alloc+0x70/0x4c0 mm/memory.c:427 do_anonymous_page mm/memory.c:3070 [inline] handle_pte_fault mm/memory.c:3945 [inline] __handle_mm_fault mm/memory.c:4077 [inline] handle_mm_fault+0x5127/0x9f80 mm/memory.c:4114 do_user_addr_fault+0x905/0x1510 arch/x86/mm/fault.c:1461 __do_page_fault+0x1a2/0x410 arch/x86/mm/fault.c:1526 do_page_fault+0xbb/0x500 arch/x86/mm/fault.c:1550 page_fault+0x4e/0x60 arch/x86/entry/entry_64.S:1213 RIP: 0010:__put_user_4+0x1c/0x30 arch/x86/lib/putuser.S:70 Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 2d 03 00 48 8b 9b d0 1a 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 RSP: 0018:ffffbc330439fdc8 EFLAGS: 00010297 RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000000 RDX: ffffcc330439fe4c RSI: 0000000000000004 RDI: ffffbc330439fe4c RBP: ffffbc330439fe90 R08: 0000000000000002 R09: ffffbc330439fd78 R10: 0000000000000004 R11: ffffffffa47babe0 R12: 0000000000000000 R13: 0000000000000000 R14: ffff9a9bd3f52850 R15: 0000000000000004 __do_sys_socketpair net/socket.c:1624 [inline] __se_sys_socketpair+0xb7/0xe0 net/socket.c:1621 __x64_sys_socketpair+0x56/0x70 net/socket.c:1621 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45a919 Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f7394b1dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a919 RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000000 R11: 0000000000000246 R12: 00007f7394b1e6d4 R13: 00000000004caacb R14: 00000000004e3f10 R15: 00000000ffffffff Local variable ----parms@bond_neigh_init created at: bond_neigh_init+0x8c/0x4b0 drivers/net/bonding/bond_main.c:3707 bond_neigh_init+0x8c/0x4b0 drivers/net/bonding/bond_main.c:3707 =====================================================