===================================================== BUG: KMSAN: uninit-value in __netif_receive_skb_core+0x4a4/0x5e90 net/core/dev.c:5282 __netif_receive_skb_core+0x4a4/0x5e90 net/core/dev.c:5282 __netif_receive_skb_one_core net/core/dev.c:5450 [inline] __netif_receive_skb+0xc3/0x5a0 net/core/dev.c:5566 process_backlog+0x480/0x8b0 net/core/dev.c:5894 __napi_poll+0xe4/0x950 net/core/dev.c:6460 napi_poll net/core/dev.c:6527 [inline] net_rx_action+0x884/0x16d0 net/core/dev.c:6660 __do_softirq+0x1b7/0x78f kernel/softirq.c:553 do_softirq+0x9a/0xf0 kernel/softirq.c:454 __local_bh_enable_ip+0x99/0xa0 kernel/softirq.c:381 local_bh_enable+0x28/0x30 include/linux/bottom_half.h:33 tun_rx_batched+0x840/0x920 tun_get_user+0x54ca/0x6920 drivers/net/tun.c:1997 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2043 call_write_iter include/linux/fs.h:1877 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was stored to memory at: __copy_skb_header+0x68a/0x840 net/core/skbuff.c:1335 __skb_clone+0x57/0x650 net/core/skbuff.c:1377 skb_clone+0x3aa/0x540 net/core/skbuff.c:1867 hsr_get_untagged_frame+0x76/0x970 net/hsr/hsr_forward.c:164 hsr_forward_skb+0x14ba/0x30f0 net/hsr/hsr_forward.c:620 hsr_handle_frame+0xa15/0xb40 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x1d13/0x5e90 net/core/dev.c:5346 __netif_receive_skb_one_core net/core/dev.c:5450 [inline] __netif_receive_skb+0xc3/0x5a0 net/core/dev.c:5566 netif_receive_skb_internal net/core/dev.c:5652 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5711 tun_rx_batched+0x83b/0x920 tun_get_user+0x54ca/0x6920 drivers/net/tun.c:1997 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2043 call_write_iter include/linux/fs.h:1877 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was stored to memory at: create_stripped_skb_hsr net/hsr/hsr_forward.c:145 [inline] hsr_get_untagged_frame+0x820/0x970 net/hsr/hsr_forward.c:155 hsr_forward_skb+0x14ba/0x30f0 net/hsr/hsr_forward.c:620 hsr_handle_frame+0xa15/0xb40 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x1d13/0x5e90 net/core/dev.c:5346 __netif_receive_skb_one_core net/core/dev.c:5450 [inline] __netif_receive_skb+0xc3/0x5a0 net/core/dev.c:5566 netif_receive_skb_internal net/core/dev.c:5652 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5711 tun_rx_batched+0x83b/0x920 tun_get_user+0x54ca/0x6920 drivers/net/tun.c:1997 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2043 call_write_iter include/linux/fs.h:1877 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at: slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767 slab_alloc_node mm/slub.c:3470 [inline] kmem_cache_alloc_node+0x577/0xa80 mm/slub.c:3515 kmalloc_reserve+0x148/0x470 net/core/skbuff.c:559 __alloc_skb+0x318/0x740 net/core/skbuff.c:644 __pskb_copy_fclone+0xd5/0x1690 net/core/skbuff.c:1965 __pskb_copy include/linux/skbuff.h:1353 [inline] create_stripped_skb_hsr net/hsr/hsr_forward.c:128 [inline] hsr_get_untagged_frame+0x19a/0x970 net/hsr/hsr_forward.c:155 hsr_forward_skb+0x14ba/0x30f0 net/hsr/hsr_forward.c:620 hsr_handle_frame+0xa15/0xb40 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x1d13/0x5e90 net/core/dev.c:5346 __netif_receive_skb_one_core net/core/dev.c:5450 [inline] __netif_receive_skb+0xc3/0x5a0 net/core/dev.c:5566 netif_receive_skb_internal net/core/dev.c:5652 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5711 tun_rx_batched+0x83b/0x920 tun_get_user+0x54ca/0x6920 drivers/net/tun.c:1997 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2043 call_write_iter include/linux/fs.h:1877 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd CPU: 0 PID: 11428 Comm: syz-executor.0 Not tainted 6.5.0-rc6-syzkaller-00253-g9e6c269de404 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 =====================================================