================================================================== BUG: KMSAN: uninit-value in __skb_try_recv_from_queue+0x4c6/0xe80 net/core/datagram.c:183 CPU: 0 PID: 8628 Comm: syz-executor6 Not tainted 4.16.0+ #87 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683 __skb_try_recv_from_queue+0x4c6/0xe80 net/core/datagram.c:183 __skb_try_recv_datagram+0x316/0x6f0 net/core/datagram.c:270 __skb_recv_datagram net/core/datagram.c:303 [inline] skb_recv_datagram+0x253/0x450 net/core/datagram.c:322 rawv6_recvmsg+0x4e2/0x1440 net/ipv6/raw.c:483 sock_common_recvmsg+0x16c/0x270 net/core/sock.c:2959 sock_recvmsg_nosec net/socket.c:803 [inline] sock_recvmsg+0x1d0/0x230 net/socket.c:810 ___sys_recvmsg+0x3fb/0x810 net/socket.c:2205 __sys_recvmsg net/socket.c:2250 [inline] SYSC_recvmsg+0x298/0x3c0 net/socket.c:2262 SyS_recvmsg+0x54/0x80 net/socket.c:2257 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x455979 RSP: 002b:00007f1d6d95fc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f RAX: ffffffffffffffda RBX: 00007f1d6d9606d4 RCX: 0000000000455979 RDX: 0000000000010022 RSI: 0000000020004500 RDI: 0000000000000013 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 000000000000049f R14: 00000000006f9f88 R15: 0000000000000000 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 __skb_clone+0x8a2/0x990 net/core/skbuff.c:865 skb_clone+0x3e8/0x590 net/core/skbuff.c:1287 ipv6_raw_deliver net/ipv6/raw.c:219 [inline] raw6_local_deliver+0x1200/0x1fd0 net/ipv6/raw.c:240 ip6_input_finish+0x585/0x2250 net/ipv6/ip6_input.c:246 NF_HOOK include/linux/netfilter.h:288 [inline] ip6_input+0x294/0x320 net/ipv6/ip6_input.c:327 dst_input include/net/dst.h:449 [inline] ip6_rcv_finish+0x46e/0x6e0 net/ipv6/ip6_input.c:71 NF_HOOK include/linux/netfilter.h:288 [inline] ipv6_rcv+0x1e16/0x2340 net/ipv6/ip6_input.c:208 __netif_receive_skb_core+0x47df/0x4a90 net/core/dev.c:4562 __netif_receive_skb net/core/dev.c:4627 [inline] process_backlog+0x62d/0xe20 net/core/dev.c:5307 napi_poll net/core/dev.c:5705 [inline] net_rx_action+0x7c1/0x1a70 net/core/dev.c:5771 __do_softirq+0x56d/0x93d kernel/softirq.c:285 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 skb_clone+0x46a/0x590 net/core/skbuff.c:1284 ipv6_raw_deliver net/ipv6/raw.c:219 [inline] raw6_local_deliver+0x1200/0x1fd0 net/ipv6/raw.c:240 ip6_input_finish+0x585/0x2250 net/ipv6/ip6_input.c:246 NF_HOOK include/linux/netfilter.h:288 [inline] ip6_input+0x294/0x320 net/ipv6/ip6_input.c:327 dst_input include/net/dst.h:449 [inline] ip6_rcv_finish+0x46e/0x6e0 net/ipv6/ip6_input.c:71 NF_HOOK include/linux/netfilter.h:288 [inline] ipv6_rcv+0x1e16/0x2340 net/ipv6/ip6_input.c:208 __netif_receive_skb_core+0x47df/0x4a90 net/core/dev.c:4562 __netif_receive_skb net/core/dev.c:4627 [inline] process_backlog+0x62d/0xe20 net/core/dev.c:5307 napi_poll net/core/dev.c:5705 [inline] net_rx_action+0x7c1/0x1a70 net/core/dev.c:5771 __do_softirq+0x56d/0x93d kernel/softirq.c:285 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:188 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:314 kmem_cache_alloc+0xaab/0xb90 mm/slub.c:2756 skb_clone+0x31e/0x590 net/core/skbuff.c:1280 ipv6_raw_deliver net/ipv6/raw.c:219 [inline] raw6_local_deliver+0x1200/0x1fd0 net/ipv6/raw.c:240 ip6_input_finish+0x585/0x2250 net/ipv6/ip6_input.c:246 NF_HOOK include/linux/netfilter.h:288 [inline] ip6_input+0x294/0x320 net/ipv6/ip6_input.c:327 dst_input include/net/dst.h:449 [inline] ip6_rcv_finish+0x46e/0x6e0 net/ipv6/ip6_input.c:71 NF_HOOK include/linux/netfilter.h:288 [inline] ipv6_rcv+0x1e16/0x2340 net/ipv6/ip6_input.c:208 __netif_receive_skb_core+0x47df/0x4a90 net/core/dev.c:4562 __netif_receive_skb net/core/dev.c:4627 [inline] process_backlog+0x62d/0xe20 net/core/dev.c:5307 napi_poll net/core/dev.c:5705 [inline] net_rx_action+0x7c1/0x1a70 net/core/dev.c:5771 __do_softirq+0x56d/0x93d kernel/softirq.c:285 ==================================================================