https://github.com/google/kmsan.git boot error: KMSAN: uninit-value in receive_buf

Status: closed as invalid on 2018/07/20 11:18
Subsystems: virt net
[Documentation on labels]
First crash: 2981d, last: 2980d

Sample crash report:
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/

Listening on LPF/eth0/42:01:0a:80:0a:15
Sending[   25.388746] ==================================================================
 on   LPF/eth0/4[   25.397429] BUG: KMSAN: uninit-value in receive_mergeable drivers/net/virtio_net.c:817 [inline]
 on   LPF/eth0/4[   25.397429] BUG: KMSAN: uninit-value in receive_buf+0x324e/0x6ae0 drivers/net/virtio_net.c:917
[   25.405029] CPU: 0 PID: 2165 Comm: startpar Not tainted 4.17.0+ #5
[   25.411340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
2:01:0a:80:0a:15[   25.420676] Call Trace:
[   25.424623]  <IRQ>

[   25.426785]  __dump_stack lib/dump_stack.c:77 [inline]
[   25.426785]  dump_stack+0x185/0x1d0 lib/dump_stack.c:113
[   25.430545]  kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1117
[   25.434325]  __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620
[   25.438366]  receive_mergeable drivers/net/virtio_net.c:817 [inline]
[   25.438366]  receive_buf+0x324e/0x6ae0 drivers/net/virtio_net.c:917
[   25.442261]  virtnet_receive drivers/net/virtio_net.c:1200 [inline]
[   25.442261]  virtnet_poll+0xac2/0x1540 drivers/net/virtio_net.c:1286
[   25.446133]  ? refill_work+0x2c0/0x2c0 drivers/net/virtio_net.c:1187
[   25.450005]  napi_poll net/core/dev.c:5735 [inline]
[   25.450005]  net_rx_action+0x766/0x1a80 net/core/dev.c:5801
[   25.453969]  ? net_tx_action+0xad0/0xad0 net/core/dev.c:4289
[   25.458016]  __do_softirq+0x592/0x979 kernel/softirq.c:285
[   25.461808]  invoke_softirq kernel/softirq.c:365 [inline]
[   25.461808]  irq_exit+0x202/0x240 kernel/softirq.c:405
[   25.465268]  exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525
[   25.468701]  do_IRQ+0x17d/0x1c0 arch/x86/kernel/irq.c:264
[   25.471956]  common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
[   25.475729]  </IRQ>
[   25.477944] RIP: 0010:kmsan_set_origin_inline+0xaa/0x120 mm/kmsan/kmsan_instr.c:522
[   25.483367] RSP: 0018:ffff8801cbb9f4c8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd8
[   25.491055] RAX: ffff8801cbb0f5b8 RBX: 0000000000000002 RCX: 0000000000000003
[   25.498304] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff8801cbb9f5b8
[   25.505551] RBP: ffff8801cbb9f4f0 R08: 0000000001080020 R09: 0000000000000002
[   25.512806] R10: 0000000000000002 R11: ffffffff84715d60 R12: 0000000000000008
[   25.520077] R13: 0000000081000000 R14: ffff8801cbb9f5c0 R15: 0000000000000000
[   25.527360]  ? ptm_open_peer+0x440/0x440
[   25.531421]  ? kmsan_set_origin_inline+0x6b/0x120 mm/kmsan/kmsan_instr.c:528
[   25.536248]  __msan_poison_alloca+0x15c/0x1d0 mm/kmsan/kmsan_instr.c:590
[   25.540724]  ? _cond_resched+0x3c/0xd0 kernel/sched/core.c:5002
[   25.544592]  ? rcu_all_qs+0x32/0x1f0 kernel/rcu/tree.c:478
[   25.548283]  ? _cond_resched+0x3c/0xd0 kernel/sched/core.c:5002
[   25.552162]  rcu_all_qs+0x32/0x1f0 kernel/rcu/tree.c:478
[   25.555680]  ? dput+0x80/0x560 fs/dcache.c:834
[   25.558849]  ? __msan_metadata_ptr_for_load_4+0x10/0x20 mm/kmsan/kmsan_instr.c:320
[   25.564193]  _cond_resched+0x3c/0xd0 kernel/sched/core.c:5002
[   25.567893]  ? dput+0x2a/0x560 fs/dcache.c:829
[   25.571067]  dput+0x80/0x560 fs/dcache.c:834
[   25.574072]  ? path_pts+0x44/0x7b0 fs/namei.c:2526
[   25.577590]  path_parent_directory fs/namei.c:1432 [inline]
[   25.577590]  path_pts+0xff/0x7b0 fs/namei.c:2534
[   25.581031]  ? lockref_get+0x2c4/0x310 lib/lockref.c:43
[   25.584922]  devpts_ptmx_path fs/devpts/inode.c:142 [inline]
[   25.584922]  devpts_acquire+0x14f/0x360 fs/devpts/inode.c:217
[   25.588878]  ptmx_open+0x18b/0x7c0 drivers/tty/pty.c:815
[   25.592399]  ? ptm_open_peer+0x440/0x440 drivers/tty/pty.c:641
[   25.596437]  chrdev_open+0xc25/0xd90 fs/char_dev.c:417
[   25.600129]  ? cd_forget+0x330/0x330 include/linux/compiler.h:224
[   25.603823]  do_dentry_open+0xccc/0x1440 fs/open.c:794
[   25.607866]  vfs_open+0x1b6/0x2f0 fs/open.c:908
[   25.611306]  do_last fs/namei.c:3365 [inline]
[   25.611306]  path_openat+0x4771/0x6640 fs/namei.c:3506
[   25.615188]  ? tty_ldisc_deref+0x25/0x70 drivers/tty/tty_ldisc.c:315
[   25.619242]  ? __msan_poison_alloca+0x15c/0x1d0 mm/kmsan/kmsan_instr.c:590
[   25.623894]  ? __alloc_fd+0x428/0xb20 fs/file.c:504
[   25.627673]  ? kmsan_set_origin_inline+0x6b/0x120 mm/kmsan/kmsan_instr.c:528
[   25.632497]  do_filp_open+0x261/0x640 fs/namei.c:3540
[   25.636279]  do_sys_open+0x624/0x960 fs/open.c:1101
[   25.639982]  ? syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265
[   25.644808]  __do_sys_open fs/open.c:1119 [inline]
[   25.644808]  __se_sys_open fs/open.c:1114 [inline]
[   25.644808]  __x64_sys_open+0xf2/0x130 fs/open.c:1114
[   25.648672]  ? do_sys_open+0x960/0x960 include/linux/fsnotify.h:220
[   25.652538]  do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
[   25.656414]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   25.661579] RIP: 0033:0x7f7d8250f120
[   25.665265] RSP: 002b:00007ffc1f9299b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   25.672950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7d8250f120
[   25.680195] RDX: 0000000000000000 RSI: 0000000000000102 RDI: 0000000000406c1d
[   25.687442] RBP: 00000000008cb5d0 R08: 0000000000000001 R09: 000000000000bff6
[   25.694687] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000008cb5d0
[   25.701932] R13: 0000000000000001 R14: 0000000000002048 R15: 000000005b20b456
[   25.709180] 
[   25.710782] Uninit was stored to memory at:
[   25.715085]  kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
[   25.715085]  kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
[   25.715085]  kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
[   25.720165]  __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464
[   25.724376]  receive_mergeable drivers/net/virtio_net.c:690 [inline]
[   25.724376]  receive_buf+0x2dbb/0x6ae0 drivers/net/virtio_net.c:917
[   25.728250]  virtnet_receive drivers/net/virtio_net.c:1200 [inline]
[   25.728250]  virtnet_poll+0xac2/0x1540 drivers/net/virtio_net.c:1286
[   25.732112]  napi_poll net/core/dev.c:5735 [inline]
[   25.732112]  net_rx_action+0x766/0x1a80 net/core/dev.c:5801
[   25.736074]  __do_softirq+0x592/0x979 kernel/softirq.c:285
[   25.739850] Uninit was created at:
[   25.743367]  kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
[   25.743367]  kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:815
[   25.748359]  kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:885
[   25.752308]  __alloc_pages_nodemask+0xf7b/0x5cc0 mm/page_alloc.c:4402
[   25.757049]  alloc_pages_current+0x6b1/0x970 mm/mempolicy.c:2093
[   25.761436]  alloc_pages include/linux/gfp.h:494 [inline]
[   25.761436]  skb_page_frag_refill+0x3ba/0x5e0 net/core/sock.c:2211
[   25.765909]  add_recvbuf_mergeable drivers/net/virtio_net.c:1067 [inline]
[   25.765909]  try_fill_recv+0x3d5/0x2580 drivers/net/virtio_net.c:1108
[   25.769857]  virtnet_open+0x188/0x600 drivers/net/virtio_net.c:1311
[   25.773635]  __dev_open+0x613/0x840 net/core/dev.c:1392
[   25.777236]  __dev_change_flags+0x401/0xb60 net/core/dev.c:6955
[   25.781532]  dev_change_flags+0xca/0x230 net/core/dev.c:7024
[   25.785568]  do_setlink+0x165b/0x6010 net/core/rtnetlink.c:2362
[   25.789344]  rtnl_newlink+0x2b33/0x37a0 net/core/rtnetlink.c:2970
[   25.793292]  rtnetlink_rcv_msg+0xa44/0x1570 net/core/rtnetlink.c:4646
[   25.797587]  netlink_rcv_skb+0x37e/0x600 net/netlink/af_netlink.c:2448
[   25.801621]  rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:4664
[   25.805311]  netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline]
[   25.805311]  netlink_unicast+0x1680/0x1750 net/netlink/af_netlink.c:1336
[   25.809520]  netlink_sendmsg+0x104f/0x1350 net/netlink/af_netlink.c:1901
[   25.813729]  sock_sendmsg_nosec net/socket.c:629 [inline]
[   25.813729]  sock_sendmsg net/socket.c:639 [inline]
[   25.813729]  ___sys_sendmsg+0xec8/0x1320 net/socket.c:2117
[   25.817764]  __sys_sendmsg net/socket.c:2155 [inline]
[   25.817764]  __do_sys_sendmsg net/socket.c:2164 [inline]
[   25.817764]  __se_sys_sendmsg net/socket.c:2162 [inline]
[   25.817764]  __x64_sys_sendmsg+0x331/0x460 net/socket.c:2162
[   25.821972]  do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
[   25.825839]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   25.831000] ==================================================================
[   25.838338] Disabling lock debugging due to kernel taint
[   25.843761] Kernel panic - not syncing: panic_on_warn set ...
[   25.843761] 
[   25.851110] CPU: 0 PID: 2165 Comm: startpar Tainted: G    B             4.17.0+ #5
[   25.858797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   25.868141] Call Trace:
[   25.870714]  <IRQ>
[   25.872864]  __dump_stack lib/dump_stack.c:77 [inline]
[   25.872864]  dump_stack+0x185/0x1d0 lib/dump_stack.c:113
[   25.876496]  panic+0x3d0/0x990 kernel/panic.c:184
[   25.879683]  kmsan_report+0x29e/0x2a0 mm/kmsan/kmsan.c:1136
[   25.883463]  __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620
[   25.887503]  receive_mergeable drivers/net/virtio_net.c:817 [inline]
[   25.887503]  receive_buf+0x324e/0x6ae0 drivers/net/virtio_net.c:917
[   25.891373]  virtnet_receive drivers/net/virtio_net.c:1200 [inline]
[   25.891373]  virtnet_poll+0xac2/0x1540 drivers/net/virtio_net.c:1286
[   25.895238]  ? refill_work+0x2c0/0x2c0 drivers/net/virtio_net.c:1187
[   25.899102]  napi_poll net/core/dev.c:5735 [inline]
[   25.899102]  net_rx_action+0x766/0x1a80 net/core/dev.c:5801
[   25.903069]  ? net_tx_action+0xad0/0xad0 net/core/dev.c:4289
[   25.907112]  __do_softirq+0x592/0x979 kernel/softirq.c:285
[   25.910890]  invoke_softirq kernel/softirq.c:365 [inline]
[   25.910890]  irq_exit+0x202/0x240 kernel/softirq.c:405
[   25.914321]  exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525
[   25.917750]  do_IRQ+0x17d/0x1c0 arch/x86/kernel/irq.c:264
[   25.921012]  common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
[   25.924806]  </IRQ>
[   25.927034] RIP: 0010:kmsan_set_origin_inline+0xaa/0x120 mm/kmsan/kmsan_instr.c:522
[   25.932472] RSP: 0018:ffff8801cbb9f4c8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd8
[   25.940156] RAX: ffff8801cbb0f5b8 RBX: 0000000000000002 RCX: 0000000000000003
[   25.947404] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff8801cbb9f5b8
[   25.954651] RBP: ffff8801cbb9f4f0 R08: 0000000001080020 R09: 0000000000000002
[   25.961896] R10: 0000000000000002 R11: ffffffff84715d60 R12: 0000000000000008
[   25.969149] R13: 0000000081000000 R14: ffff8801cbb9f5c0 R15: 0000000000000000
[   25.976404]  ? ptm_open_peer+0x440/0x440 drivers/tty/pty.c:641
[   25.980533]  ? kmsan_set_origin_inline+0x6b/0x120 mm/kmsan/kmsan_instr.c:528
[   25.985453]  __msan_poison_alloca+0x15c/0x1d0 mm/kmsan/kmsan_instr.c:590
[   25.989926]  ? _cond_resched+0x3c/0xd0 kernel/sched/core.c:5002
[   25.993793]  ? rcu_all_qs+0x32/0x1f0 kernel/rcu/tree.c:478
[   25.997483]  ? _cond_resched+0x3c/0xd0 kernel/sched/core.c:5002
[   26.001348]  rcu_all_qs+0x32/0x1f0 kernel/rcu/tree.c:478
[   26.004865]  ? dput+0x80/0x560 fs/dcache.c:834
[   26.008040]  ? __msan_metadata_ptr_for_load_4+0x10/0x20 mm/kmsan/kmsan_instr.c:320
[   26.013394]  _cond_resched+0x3c/0xd0 kernel/sched/core.c:5002
[   26.017091]  ? dput+0x2a/0x560 fs/dcache.c:829
[   26.020261]  dput+0x80/0x560 fs/dcache.c:834
[   26.023259]  ? path_pts+0x44/0x7b0 fs/namei.c:2526
[   26.026775]  path_parent_directory fs/namei.c:1432 [inline]
[   26.026775]  path_pts+0xff/0x7b0 fs/namei.c:2534
[   26.030119]  ? lockref_get+0x2c4/0x310 lib/lockref.c:43
[   26.033988]  devpts_ptmx_path fs/devpts/inode.c:142 [inline]
[   26.033988]  devpts_acquire+0x14f/0x360 fs/devpts/inode.c:217
[   26.037944]  ptmx_open+0x18b/0x7c0 drivers/tty/pty.c:815
[   26.041461]  ? ptm_open_peer+0x440/0x440 drivers/tty/pty.c:641
[   26.045499]  chrdev_open+0xc25/0xd90 fs/char_dev.c:417
[   26.049190]  ? cd_forget+0x330/0x330 include/linux/compiler.h:224
[   26.052882]  do_dentry_open+0xccc/0x1440 fs/open.c:794
[   26.057186]  vfs_open+0x1b6/0x2f0 fs/open.c:908
[   26.060618]  do_last fs/namei.c:3365 [inline]
[   26.060618]  path_openat+0x4771/0x6640 fs/namei.c:3506
[   26.064485]  ? tty_ldisc_deref+0x25/0x70 drivers/tty/tty_ldisc.c:315
[   26.068528]  ? __msan_poison_alloca+0x15c/0x1d0 mm/kmsan/kmsan_instr.c:590
[   26.073178]  ? __alloc_fd+0x428/0xb20 fs/file.c:504
[   26.076955]  ? kmsan_set_origin_inline+0x6b/0x120 mm/kmsan/kmsan_instr.c:528
[   26.081790]  do_filp_open+0x261/0x640 fs/namei.c:3540
[   26.085578]  do_sys_open+0x624/0x960 fs/open.c:1101
[   26.089275]  ? syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265
[   26.094097]  __do_sys_open fs/open.c:1119 [inline]
[   26.094097]  __se_sys_open fs/open.c:1114 [inline]
[   26.094097]  __x64_sys_open+0xf2/0x130 fs/open.c:1114
[   26.097963]  ? do_sys_open+0x960/0x960 include/linux/fsnotify.h:220
[   26.101827]  do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
[   26.105695]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   26.110860] RIP: 0033:0x7f7d8250f120
[   26.114547] RSP: 002b:00007ffc1f9299b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   26.122232] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7d8250f120
[   26.129481] RDX: 0000000000000000 RSI: 0000000000000102 RDI: 0000000000406c1d
[   26.136729] RBP: 00000000008cb5d0 R08: 0000000000000001 R09: 000000000000bff6
[   26.143992] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000008cb5d0
[   26.151244] R13: 0000000000000001 R14: 0000000000002048 R15: 000000005b20b456
[   26.159227] Dumping ftrace buffer:
[   26.162763]    (ftrace buffer empty)
[   26.166452] Kernel Offset: disabled
[   26.170057] Rebooting in 86400 seconds..

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/06/13 06:13 https://github.com/google/kmsan.git master 98f29226d97d 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/06/13 06:13 https://github.com/google/kmsan.git master 98f29226d97d 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/06/13 06:13 https://github.com/google/kmsan.git master 98f29226d97d 27c5f59f .config console log report ci-upstream-kmsan-gce
2018/06/12 18:10 https://github.com/google/kmsan.git master 98f29226d97d 6dcbc435 .config console log report ci-upstream-kmsan-gce
2018/06/12 18:10 https://github.com/google/kmsan.git master 98f29226d97d 6dcbc435 .config console log report ci-upstream-kmsan-gce
2018/06/12 18:10 https://github.com/google/kmsan.git master 98f29226d97d 6dcbc435 .config console log report ci-upstream-kmsan-gce
2018/06/12 17:27 https://github.com/google/kmsan.git master 98f29226d97d 598eb192 .config console log report ci-upstream-kmsan-gce
2018/06/12 17:27 https://github.com/google/kmsan.git master 98f29226d97d 598eb192 .config console log report ci-upstream-kmsan-gce
2018/06/12 15:59 https://github.com/google/kmsan.git master 98f29226d97d 112eec79 .config console log report ci-upstream-kmsan-gce
2018/06/12 15:59 https://github.com/google/kmsan.git master 98f29226d97d 112eec79 .config console log report ci-upstream-kmsan-gce
2018/06/12 15:59 https://github.com/google/kmsan.git master 98f29226d97d 112eec79 .config console log report ci-upstream-kmsan-gce
2018/06/12 09:57 https://github.com/google/kmsan.git master 98f29226d97d 112eec79 .config console log report ci-upstream-kmsan-gce
2018/06/12 09:57 https://github.com/google/kmsan.git master 98f29226d97d 112eec79 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.