===================================================== BUG: KMSAN: uninit-value in __netif_receive_skb_core+0x4a4/0x64b0 net/core/dev.c:5353 __netif_receive_skb_core+0x4a4/0x64b0 net/core/dev.c:5353 __netif_receive_skb_one_core net/core/dev.c:5521 [inline] __netif_receive_skb+0xc3/0x5a0 net/core/dev.c:5637 process_backlog+0x480/0x8b0 net/core/dev.c:5965 __napi_poll+0xe4/0x950 net/core/dev.c:6527 napi_poll net/core/dev.c:6594 [inline] net_rx_action+0x884/0x16d0 net/core/dev.c:6727 __do_softirq+0x1b7/0x78f kernel/softirq.c:553 do_softirq+0x9a/0xf0 kernel/softirq.c:454 __local_bh_enable_ip+0x99/0xa0 kernel/softirq.c:381 local_bh_enable+0x28/0x30 include/linux/bottom_half.h:33 tun_rx_batched+0x840/0x920 tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was stored to memory at: __copy_skb_header+0x68a/0x840 net/core/skbuff.c:1380 __skb_clone+0x57/0x650 net/core/skbuff.c:1422 skb_clone+0x3aa/0x540 net/core/skbuff.c:1912 hsr_get_untagged_frame+0x76/0x970 net/hsr/hsr_forward.c:164 hsr_forward_skb+0x14ba/0x30f0 net/hsr/hsr_forward.c:620 hsr_handle_frame+0xa15/0xb40 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x1cdf/0x64b0 net/core/dev.c:5417 __netif_receive_skb_one_core net/core/dev.c:5521 [inline] __netif_receive_skb+0xc3/0x5a0 net/core/dev.c:5637 netif_receive_skb_internal net/core/dev.c:5723 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5782 tun_rx_batched+0x83b/0x920 tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was stored to memory at: create_stripped_skb_hsr net/hsr/hsr_forward.c:145 [inline] hsr_get_untagged_frame+0x820/0x970 net/hsr/hsr_forward.c:155 hsr_forward_skb+0x14ba/0x30f0 net/hsr/hsr_forward.c:620 hsr_handle_frame+0xa15/0xb40 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x1cdf/0x64b0 net/core/dev.c:5417 __netif_receive_skb_one_core net/core/dev.c:5521 [inline] __netif_receive_skb+0xc3/0x5a0 net/core/dev.c:5637 netif_receive_skb_internal net/core/dev.c:5723 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5782 tun_rx_batched+0x83b/0x920 tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at: slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767 slab_alloc_node mm/slub.c:3478 [inline] kmem_cache_alloc_node+0x577/0xa80 mm/slub.c:3523 kmalloc_reserve+0x148/0x470 net/core/skbuff.c:559 __alloc_skb+0x318/0x740 net/core/skbuff.c:644 __pskb_copy_fclone+0xd5/0x1680 net/core/skbuff.c:2010 __pskb_copy include/linux/skbuff.h:1350 [inline] create_stripped_skb_hsr net/hsr/hsr_forward.c:128 [inline] hsr_get_untagged_frame+0x19a/0x970 net/hsr/hsr_forward.c:155 hsr_forward_skb+0x14ba/0x30f0 net/hsr/hsr_forward.c:620 hsr_handle_frame+0xa15/0xb40 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x1cdf/0x64b0 net/core/dev.c:5417 __netif_receive_skb_one_core net/core/dev.c:5521 [inline] __netif_receive_skb+0xc3/0x5a0 net/core/dev.c:5637 netif_receive_skb_internal net/core/dev.c:5723 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5782 tun_rx_batched+0x83b/0x920 tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd CPU: 0 PID: 7553 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-10885-g0468be89b3fa #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 =====================================================