BUG: KMSAN: uninit-value in receive_mergeable drivers/net/virtio_net.c:1839 [inline] BUG: KMSAN: uninit-value in receive_buf+0x25e3/0x5fd0 drivers/net/virtio_net.c:1955 receive_mergeable drivers/net/virtio_net.c:1839 [inline] receive_buf+0x25e3/0x5fd0 drivers/net/virtio_net.c:1955 virtnet_receive drivers/net/virtio_net.c:2259 [inline] virtnet_poll+0xd1c/0x23c0 drivers/net/virtio_net.c:2362 __napi_poll+0xe7/0x980 net/core/dev.c:6722 napi_poll net/core/dev.c:6791 [inline] net_rx_action+0x82a/0x1850 net/core/dev.c:6907 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0x68/0x120 kernel/softirq.c:637 irq_exit_rcu+0x12/0x20 kernel/softirq.c:649 common_interrupt+0x94/0xa0 arch/x86/kernel/irq.c:278 asm_common_interrupt+0x2b/0x40 arch/x86/include/asm/idtentry.h:693 __preempt_count_sub arch/x86/include/asm/preempt.h:84 [inline] kmsan_virt_addr_valid arch/x86/include/asm/kmsan.h:95 [inline] virt_to_page_or_null+0xf0/0x150 mm/kmsan/shadow.c:75 kmsan_get_metadata+0x146/0x1d0 mm/kmsan/shadow.c:143 kmsan_get_shadow_origin_ptr+0x4d/0xb0 mm/kmsan/shadow.c:102 get_shadow_origin_ptr mm/kmsan/instrumentation.c:36 [inline] __msan_metadata_ptr_for_load_8+0x24/0x40 mm/kmsan/instrumentation.c:92 on_stack+0x57/0x1b0 update_stack_state+0xc1/0x270 arch/x86/kernel/unwind_frame.c:228 unwind_next_frame+0x19a/0x470 arch/x86/kernel/unwind_frame.c:315 arch_stack_walk+0x1ec/0x2d0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xaa/0xe0 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:74 [inline] kmsan_internal_poison_memory+0x49/0x90 mm/kmsan/core.c:58 kmsan_free_page+0xdd/0x160 mm/kmsan/shadow.c:212 free_pages_prepare mm/page_alloc.c:1041 [inline] free_unref_folios+0x2f2/0x27a0 mm/page_alloc.c:2632 folios_put_refs+0xafe/0xb90 mm/swap.c:1024 free_pages_and_swap_cache+0x9fb/0xa30 mm/swap_state.c:332 __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline] tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:366 [inline] tlb_flush_mmu+0x7b4/0xd20 mm/mmu_gather.c:373 tlb_finish_mmu+0x101/0x260 mm/mmu_gather.c:465 exit_mmap+0x4cc/0xe60 mm/mmap.c:3354 __mmput+0x147/0x5d0 kernel/fork.c:1346 mmput+0x8a/0xa0 kernel/fork.c:1368 exec_mmap+0x80a/0x9b0 fs/exec.c:1063 begin_new_exec+0x1ac4/0x2bd0 fs/exec.c:1329 load_elf_binary+0x1412/0x4e10 fs/binfmt_elf.c:996 search_binary_handler fs/exec.c:1797 [inline] exec_binprm fs/exec.c:1839 [inline] bprm_execve+0xc57/0x21c0 fs/exec.c:1891 do_execveat_common+0xceb/0xd70 fs/exec.c:1998 do_execve fs/exec.c:2072 [inline] __do_sys_execve fs/exec.c:2148 [inline] __se_sys_execve fs/exec.c:2143 [inline] __x64_sys_execve+0xf4/0x130 fs/exec.c:2143 x64_sys_call+0x164f/0x3b90 arch/x86/include/generated/asm/syscalls_64.h:60 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: __alloc_pages_noprof+0x9d6/0xe70 mm/page_alloc.c:4701 alloc_pages_mpol_noprof+0x299/0x990 mm/mempolicy.c:2265 alloc_pages_noprof+0x1bf/0x1e0 mm/mempolicy.c:2336 skb_page_frag_refill+0x2bf/0x7c0 net/core/sock.c:2920 virtnet_rq_alloc+0x43/0xbb0 drivers/net/virtio_net.c:882 add_recvbuf_mergeable drivers/net/virtio_net.c:2110 [inline] try_fill_recv+0x3f0/0x2f50 drivers/net/virtio_net.c:2155 virtnet_open+0x1cc/0xb00 drivers/net/virtio_net.c:2434 __dev_open+0x546/0x6f0 net/core/dev.c:1472 __dev_change_flags+0x309/0x9a0 net/core/dev.c:8781 dev_change_flags+0x8e/0x1d0 net/core/dev.c:8853 devinet_ioctl+0x13ec/0x22c0 net/ipv4/devinet.c:1177 inet_ioctl+0x4bd/0x6d0 net/ipv4/af_inet.c:1003 sock_do_ioctl+0xb7/0x540 net/socket.c:1222 sock_ioctl+0x727/0xd70 net/socket.c:1341 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x261/0x450 fs/ioctl.c:893 __x64_sys_ioctl+0x96/0xe0 fs/ioctl.c:893 x64_sys_call+0x18c0/0x3b90 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 PID: 4787 Comm: dhcpcd-run-hook Not tainted 6.10.0-rc3-syzkaller-00174-ga3e18a540541 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 =====================================================