===================================================== BUG: KMSAN: uninit-value in __netif_receive_skb_core+0x692/0x63b0 net/core/dev.c:5233 __netif_receive_skb_core+0x692/0x63b0 net/core/dev.c:5233 __netif_receive_skb_one_core net/core/dev.c:5403 [inline] __netif_receive_skb+0xc8/0x5d0 net/core/dev.c:5519 process_backlog+0x45a/0x890 net/core/dev.c:5847 __napi_poll+0xe6/0x920 net/core/dev.c:6413 napi_poll net/core/dev.c:6480 [inline] net_rx_action+0x720/0x17e0 net/core/dev.c:6567 __do_softirq+0x1cc/0x7fb kernel/softirq.c:558 do_softirq+0x13d/0x1e0 kernel/softirq.c:459 __local_bh_enable_ip+0x93/0xa0 kernel/softirq.c:383 local_bh_enable+0x24/0x30 include/linux/bottom_half.h:33 tun_rx_batched+0x83c/0x930 tun_get_user+0x3f44/0x4530 drivers/net/tun.c:1985 tun_chr_write_iter+0x3ab/0x5d0 drivers/net/tun.c:2015 call_write_iter include/linux/fs.h:2050 [inline] new_sync_write fs/read_write.c:504 [inline] vfs_write+0xcf0/0x1810 fs/read_write.c:591 ksys_write+0x21b/0x4e0 fs/read_write.c:644 __do_sys_write fs/read_write.c:656 [inline] __se_sys_write fs/read_write.c:653 [inline] __x64_sys_write+0x8f/0xd0 fs/read_write.c:653 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was stored to memory at: __copy_skb_header+0x753/0x8c0 net/core/skbuff.c:1018 __skb_clone+0x57/0x650 net/core/skbuff.c:1059 skb_clone+0x356/0x550 net/core/skbuff.c:1527 hsr_get_untagged_frame+0x618/0x850 net/hsr/hsr_forward.c:164 hsr_forward_skb+0x19bb/0x3040 net/hsr/hsr_forward.c:623 hsr_handle_frame+0x995/0xab0 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x214d/0x63b0 net/core/dev.c:5297 __netif_receive_skb_one_core net/core/dev.c:5403 [inline] __netif_receive_skb+0xc8/0x5d0 net/core/dev.c:5519 netif_receive_skb_internal+0x174/0x340 net/core/dev.c:5605 netif_receive_skb+0x35/0x350 net/core/dev.c:5664 tun_rx_batched+0x837/0x930 tun_get_user+0x3f44/0x4530 drivers/net/tun.c:1985 tun_chr_write_iter+0x3ab/0x5d0 drivers/net/tun.c:2015 call_write_iter include/linux/fs.h:2050 [inline] new_sync_write fs/read_write.c:504 [inline] vfs_write+0xcf0/0x1810 fs/read_write.c:591 ksys_write+0x21b/0x4e0 fs/read_write.c:644 __do_sys_write fs/read_write.c:656 [inline] __se_sys_write fs/read_write.c:653 [inline] __x64_sys_write+0x8f/0xd0 fs/read_write.c:653 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was stored to memory at: create_stripped_skb_hsr net/hsr/hsr_forward.c:145 [inline] hsr_get_untagged_frame+0x757/0x850 net/hsr/hsr_forward.c:155 hsr_forward_skb+0x19bb/0x3040 net/hsr/hsr_forward.c:623 hsr_handle_frame+0x995/0xab0 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x214d/0x63b0 net/core/dev.c:5297 __netif_receive_skb_one_core net/core/dev.c:5403 [inline] __netif_receive_skb+0xc8/0x5d0 net/core/dev.c:5519 netif_receive_skb_internal+0x174/0x340 net/core/dev.c:5605 netif_receive_skb+0x35/0x350 net/core/dev.c:5664 tun_rx_batched+0x837/0x930 tun_get_user+0x3f44/0x4530 drivers/net/tun.c:1985 tun_chr_write_iter+0x3ab/0x5d0 drivers/net/tun.c:2015 call_write_iter include/linux/fs.h:2050 [inline] new_sync_write fs/read_write.c:504 [inline] vfs_write+0xcf0/0x1810 fs/read_write.c:591 ksys_write+0x21b/0x4e0 fs/read_write.c:644 __do_sys_write fs/read_write.c:656 [inline] __se_sys_write fs/read_write.c:653 [inline] __x64_sys_write+0x8f/0xd0 fs/read_write.c:653 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was created at: slab_post_alloc_hook mm/slab.h:754 [inline] slab_alloc_node mm/slub.c:3232 [inline] __kmalloc_node_track_caller+0x86c/0x1230 mm/slub.c:4963 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x353/0xce0 net/core/skbuff.c:426 __pskb_copy_fclone+0xd1/0x1780 net/core/skbuff.c:1625 __pskb_copy include/linux/skbuff.h:1364 [inline] create_stripped_skb_hsr net/hsr/hsr_forward.c:128 [inline] hsr_get_untagged_frame+0x153/0x850 net/hsr/hsr_forward.c:155 hsr_forward_skb+0x19bb/0x3040 net/hsr/hsr_forward.c:623 hsr_handle_frame+0x995/0xab0 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x214d/0x63b0 net/core/dev.c:5297 __netif_receive_skb_one_core net/core/dev.c:5403 [inline] __netif_receive_skb+0xc8/0x5d0 net/core/dev.c:5519 netif_receive_skb_internal+0x174/0x340 net/core/dev.c:5605 netif_receive_skb+0x35/0x350 net/core/dev.c:5664 tun_rx_batched+0x837/0x930 tun_get_user+0x3f44/0x4530 drivers/net/tun.c:1985 tun_chr_write_iter+0x3ab/0x5d0 drivers/net/tun.c:2015 call_write_iter include/linux/fs.h:2050 [inline] new_sync_write fs/read_write.c:504 [inline] vfs_write+0xcf0/0x1810 fs/read_write.c:591 ksys_write+0x21b/0x4e0 fs/read_write.c:644 __do_sys_write fs/read_write.c:656 [inline] __se_sys_write fs/read_write.c:653 [inline] __x64_sys_write+0x8f/0xd0 fs/read_write.c:653 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae CPU: 1 PID: 20189 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 =====================================================