===================================================== BUG: KMSAN: uninit-value in ____bpf_skb_load_helper_8 net/core/filter.c:184 [inline] BUG: KMSAN: uninit-value in bpf_skb_load_helper_8+0xe0/0x290 net/core/filter.c:178 CPU: 1 PID: 5250 Comm: systemd-udevd Not tainted 5.7.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x220 lib/dump_stack.c:118 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215 ____bpf_skb_load_helper_8 net/core/filter.c:184 [inline] bpf_skb_load_helper_8+0xe0/0x290 net/core/filter.c:178 ___bpf_prog_run+0x214d/0x97a0 kernel/bpf/core.c:1516 __bpf_prog_run32+0x101/0x170 kernel/bpf/core.c:1681 bpf_dispatcher_nop_func include/linux/bpf.h:545 [inline] bpf_prog_run_pin_on_cpu include/linux/filter.h:599 [inline] bpf_prog_run_clear_cb include/linux/filter.h:721 [inline] run_filter net/packet/af_packet.c:2012 [inline] packet_rcv+0x70f/0x2160 net/packet/af_packet.c:2085 dev_queue_xmit_nit+0x1199/0x1270 net/core/dev.c:2276 xmit_one net/core/dev.c:3473 [inline] dev_hard_start_xmit+0x20f/0xab0 net/core/dev.c:3493 __dev_queue_xmit+0x2f8d/0x3b20 net/core/dev.c:4052 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4085 hsr_xmit net/hsr/hsr_forward.c:228 [inline] hsr_forward_do net/hsr/hsr_forward.c:285 [inline] hsr_forward_skb+0x2614/0x30d0 net/hsr/hsr_forward.c:361 send_hsr_supervision_frame+0x10a7/0x1500 net/hsr/hsr_device.c:304 hsr_announce+0x1e2/0x370 net/hsr/hsr_device.c:332 call_timer_fn+0x218/0x510 kernel/time/timer.c:1405 expire_timers kernel/time/timer.c:1450 [inline] __run_timers+0xcff/0x1210 kernel/time/timer.c:1774 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1787 __do_softirq+0x311/0x83d kernel/softirq.c:293 invoke_softirq kernel/softirq.c:375 [inline] irq_exit+0x230/0x280 kernel/softirq.c:416 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:546 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1143 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:834 RIP: 0033:0x7fdffc1c99b1 Code: f7 d8 bf ff ff ff ff 64 89 02 eb cb 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 80 3f 00 74 1b be 00 08 09 00 b8 02 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1f 89 c7 e9 00 ff ff ff 48 8b 05 b1 54 2e 00 RSP: 002b:00007fff4c3ee308 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 RAX: 000000000000000e RBX: 00007fff4c3ee4d0 RCX: 00007fdffc1c99b1 RDX: 0000000000000100 RSI: 0000000000090800 RDI: 000055fe9bb5b130 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000110 R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff4c3ee500 R13: 000055fe9bb5b130 R14: 0000000000000100 R15: 00007fff4c3ee3d0 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline] kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:310 __msan_chain_origin+0x50/0x90 mm/kmsan/kmsan_instr.c:165 ___bpf_prog_run+0x6c80/0x97a0 kernel/bpf/core.c:1391 __bpf_prog_run32+0x101/0x170 kernel/bpf/core.c:1681 bpf_dispatcher_nop_func include/linux/bpf.h:545 [inline] bpf_prog_run_pin_on_cpu include/linux/filter.h:599 [inline] bpf_prog_run_clear_cb include/linux/filter.h:721 [inline] run_filter net/packet/af_packet.c:2012 [inline] packet_rcv+0x70f/0x2160 net/packet/af_packet.c:2085 dev_queue_xmit_nit+0x1199/0x1270 net/core/dev.c:2276 xmit_one net/core/dev.c:3473 [inline] dev_hard_start_xmit+0x20f/0xab0 net/core/dev.c:3493 __dev_queue_xmit+0x2f8d/0x3b20 net/core/dev.c:4052 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4085 hsr_xmit net/hsr/hsr_forward.c:228 [inline] hsr_forward_do net/hsr/hsr_forward.c:285 [inline] hsr_forward_skb+0x2614/0x30d0 net/hsr/hsr_forward.c:361 send_hsr_supervision_frame+0x10a7/0x1500 net/hsr/hsr_device.c:304 hsr_announce+0x1e2/0x370 net/hsr/hsr_device.c:332 call_timer_fn+0x218/0x510 kernel/time/timer.c:1405 expire_timers kernel/time/timer.c:1450 [inline] __run_timers+0xcff/0x1210 kernel/time/timer.c:1774 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1787 __do_softirq+0x311/0x83d kernel/softirq.c:293 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline] kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:310 __msan_chain_origin+0x50/0x90 mm/kmsan/kmsan_instr.c:165 ___bpf_prog_run+0x6cbe/0x97a0 kernel/bpf/core.c:1391 __bpf_prog_run32+0x101/0x170 kernel/bpf/core.c:1681 bpf_dispatcher_nop_func include/linux/bpf.h:545 [inline] bpf_prog_run_pin_on_cpu include/linux/filter.h:599 [inline] bpf_prog_run_clear_cb include/linux/filter.h:721 [inline] run_filter net/packet/af_packet.c:2012 [inline] packet_rcv+0x70f/0x2160 net/packet/af_packet.c:2085 dev_queue_xmit_nit+0x1199/0x1270 net/core/dev.c:2276 xmit_one net/core/dev.c:3473 [inline] dev_hard_start_xmit+0x20f/0xab0 net/core/dev.c:3493 __dev_queue_xmit+0x2f8d/0x3b20 net/core/dev.c:4052 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4085 hsr_xmit net/hsr/hsr_forward.c:228 [inline] hsr_forward_do net/hsr/hsr_forward.c:285 [inline] hsr_forward_skb+0x2614/0x30d0 net/hsr/hsr_forward.c:361 send_hsr_supervision_frame+0x10a7/0x1500 net/hsr/hsr_device.c:304 hsr_announce+0x1e2/0x370 net/hsr/hsr_device.c:332 call_timer_fn+0x218/0x510 kernel/time/timer.c:1405 expire_timers kernel/time/timer.c:1450 [inline] __run_timers+0xcff/0x1210 kernel/time/timer.c:1774 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1787 __do_softirq+0x311/0x83d kernel/softirq.c:293 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline] kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:310 __msan_chain_origin+0x50/0x90 mm/kmsan/kmsan_instr.c:165 ___bpf_prog_run+0x6c64/0x97a0 kernel/bpf/core.c:1391 __bpf_prog_run32+0x101/0x170 kernel/bpf/core.c:1681 bpf_dispatcher_nop_func include/linux/bpf.h:545 [inline] bpf_prog_run_pin_on_cpu include/linux/filter.h:599 [inline] bpf_prog_run_clear_cb include/linux/filter.h:721 [inline] run_filter net/packet/af_packet.c:2012 [inline] packet_rcv+0x70f/0x2160 net/packet/af_packet.c:2085 dev_queue_xmit_nit+0x1199/0x1270 net/core/dev.c:2276 xmit_one net/core/dev.c:3473 [inline] dev_hard_start_xmit+0x20f/0xab0 net/core/dev.c:3493 __dev_queue_xmit+0x2f8d/0x3b20 net/core/dev.c:4052 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4085 hsr_xmit net/hsr/hsr_forward.c:228 [inline] hsr_forward_do net/hsr/hsr_forward.c:285 [inline] hsr_forward_skb+0x2614/0x30d0 net/hsr/hsr_forward.c:361 send_hsr_supervision_frame+0x10a7/0x1500 net/hsr/hsr_device.c:304 hsr_announce+0x1e2/0x370 net/hsr/hsr_device.c:332 call_timer_fn+0x218/0x510 kernel/time/timer.c:1405 expire_timers kernel/time/timer.c:1450 [inline] __run_timers+0xcff/0x1210 kernel/time/timer.c:1774 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1787 __do_softirq+0x311/0x83d kernel/softirq.c:293 Local variable ----regs@__bpf_prog_run32 created at: __bpf_prog_run32+0x87/0x170 kernel/bpf/core.c:1681 __bpf_prog_run32+0x87/0x170 kernel/bpf/core.c:1681 =====================================================