===================================================== BUG: KMSAN: uninit-value in bond_neigh_setup+0xa4/0x110 drivers/net/bonding/bond_main.c:3745 CPU: 0 PID: 23121 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x220 lib/dump_stack.c:118 kmsan_report+0xf8/0x1e0 mm/kmsan/kmsan_report.c:118 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215 bond_neigh_setup+0xa4/0x110 drivers/net/bonding/bond_main.c:3745 bond_neigh_init+0x216/0x4b0 drivers/net/bonding/bond_main.c:3716 ___neigh_create+0x15f1/0x2e20 net/core/neighbour.c:613 __neigh_create+0xbd/0xd0 net/core/neighbour.c:674 ip6_finish_output2+0x149a/0x2670 net/ipv6/ip6_output.c:113 __ip6_finish_output+0x83d/0x8f0 net/ipv6/ip6_output.c:142 ip6_finish_output+0x2db/0x420 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x60a/0x770 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] mld_sendpack+0xebd/0x13d0 net/ipv6/mcast.c:1682 mld_send_cr net/ipv6/mcast.c:1978 [inline] mld_ifc_timer_expire+0x1181/0x1790 net/ipv6/mcast.c:2477 call_timer_fn+0x232/0x530 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers+0xd60/0x1270 kernel/time/timer.c:1773 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1786 __do_softirq+0x4a1/0x83a kernel/softirq.c:293 invoke_softirq kernel/softirq.c:375 [inline] irq_exit+0x230/0x280 kernel/softirq.c:416 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:536 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1140 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:834 RIP: 0010:shmem_add_to_page_cache+0x517/0x13c0 mm/shmem.c:610 Code: 7d b2 e8 ec 15 28 00 c6 00 00 c6 45 b2 00 48 8d 7d b3 e8 dc 15 28 00 c6 00 00 c6 45 b3 00 4c 8d 6d b8 4c 89 ef e8 89 16 28 00 <48> c7 00 00 00 00 00 48 c7 45 b8 03 00 00 00 48 8d 7d c0 ba 10 00 RSP: 0018:ffffb571c466f4c0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 RAX: ffffbd71c466f598 RBX: 00000000ffffff00 RCX: ffffbd71c466f598 RDX: ffffc571c466f598 RSI: 0000000000000008 RDI: ffffb571c466f598 RBP: ffffb571c466f5e0 R08: 0000000000000002 R09: ffffb571c466f468 R10: 0000000000000004 R11: ffffffffa7863cc0 R12: 0000000000000000 R13: ffffb571c466f598 R14: ffffb571c466f591 R15: 0000000000000000 shmem_getpage_gfp+0x206e/0x3fb0 mm/shmem.c:1876 shmem_fault+0x52e/0xbf0 mm/shmem.c:2067 __do_fault mm/memory.c:3190 [inline] do_read_fault mm/memory.c:3587 [inline] do_fault mm/memory.c:3716 [inline] handle_pte_fault mm/memory.c:3947 [inline] __handle_mm_fault mm/memory.c:4077 [inline] handle_mm_fault+0x6c4a/0x9f80 mm/memory.c:4114 faultin_page mm/gup.c:641 [inline] __get_user_pages+0x1901/0x26f0 mm/gup.c:852 populate_vma_page_range mm/gup.c:1236 [inline] __mm_populate+0x679/0x870 mm/gup.c:1284 mm_populate include/linux/mm.h:2347 [inline] __do_sys_remap_file_pages mm/mmap.c:2969 [inline] __se_sys_remap_file_pages+0x113a/0x1270 mm/mmap.c:2879 __x64_sys_remap_file_pages+0x62/0x80 mm/mmap.c:2879 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45a9e9 Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f10e30f9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a9e9 RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10e30fa6d4 R13: 00000000004c91a3 R14: 00000000004e0fc0 R15: 00000000ffffffff Local variable ----parms@bond_neigh_init created at: bond_neigh_init+0x8c/0x4b0 drivers/net/bonding/bond_main.c:3707 bond_neigh_init+0x8c/0x4b0 drivers/net/bonding/bond_main.c:3707 =====================================================