BUG: KMSAN: uninit-value in receive_mergeable drivers/net/virtio_net.c:1839 [inline] BUG: KMSAN: uninit-value in receive_buf+0x25e3/0x5fd0 drivers/net/virtio_net.c:1955 receive_mergeable drivers/net/virtio_net.c:1839 [inline] receive_buf+0x25e3/0x5fd0 drivers/net/virtio_net.c:1955 virtnet_receive drivers/net/virtio_net.c:2259 [inline] virtnet_poll+0xd1c/0x23c0 drivers/net/virtio_net.c:2362 __napi_poll+0xe7/0x980 net/core/dev.c:6721 napi_poll net/core/dev.c:6790 [inline] net_rx_action+0x82a/0x1850 net/core/dev.c:6906 handle_softirqs+0x1d8/0x810 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0x68/0x120 kernel/softirq.c:637 irq_exit_rcu+0x12/0x20 kernel/softirq.c:649 common_interrupt+0x94/0xa0 arch/x86/kernel/irq.c:278 asm_common_interrupt+0x2b/0x40 arch/x86/include/asm/idtentry.h:693 __preempt_count_add arch/x86/include/asm/preempt.h:79 [inline] rcu_read_lock_sched include/linux/rcupdate.h:871 [inline] pfn_valid include/linux/mmzone.h:2019 [inline] kmsan_virt_addr_valid arch/x86/include/asm/kmsan.h:94 [inline] virt_to_page_or_null+0x9b/0x150 mm/kmsan/shadow.c:75 kmsan_get_metadata+0x146/0x1d0 mm/kmsan/shadow.c:143 kmsan_get_shadow_origin_ptr+0x38/0xb0 mm/kmsan/shadow.c:97 get_shadow_origin_ptr mm/kmsan/instrumentation.c:36 [inline] __msan_metadata_ptr_for_load_8+0x24/0x40 mm/kmsan/instrumentation.c:92 filter_irq_stacks+0x60/0x1a0 kernel/stacktrace.c:397 stack_depot_save_flags+0x2c/0x6e0 lib/stackdepot.c:609 stack_depot_save+0x12/0x20 lib/stackdepot.c:685 __msan_poison_alloca+0x106/0x1b0 mm/kmsan/instrumentation.c:285 arch_local_save_flags arch/x86/include/asm/irqflags.h:67 [inline] arch_local_irq_save arch/x86/include/asm/irqflags.h:103 [inline] percpu_counter_add_batch+0x43/0x290 lib/percpu_counter.c:92 percpu_counter_add include/linux/percpu_counter.h:71 [inline] add_mm_counter include/linux/mm.h:2601 [inline] set_pte_range+0x6e6/0x1260 mm/memory.c:4681 filemap_map_order0_folio mm/filemap.c:3557 [inline] filemap_map_pages+0x150c/0x29e0 mm/filemap.c:3603 do_fault_around mm/memory.c:4852 [inline] do_read_fault mm/memory.c:4885 [inline] do_fault mm/memory.c:5024 [inline] do_pte_missing mm/memory.c:3880 [inline] handle_pte_fault mm/memory.c:5300 [inline] __handle_mm_fault mm/memory.c:5441 [inline] handle_mm_fault+0x780a/0xce10 mm/memory.c:5606 do_user_addr_fault arch/x86/mm/fault.c:1332 [inline] handle_page_fault arch/x86/mm/fault.c:1475 [inline] exc_page_fault+0x419/0x6f0 arch/x86/mm/fault.c:1533 asm_exc_page_fault+0x2b/0x30 arch/x86/include/asm/idtentry.h:623 Uninit was created at: __alloc_pages+0x9d6/0xe70 mm/page_alloc.c:4598 alloc_pages_mpol+0x299/0x990 mm/mempolicy.c:2264 alloc_pages+0x1bf/0x1e0 mm/mempolicy.c:2335 skb_page_frag_refill+0x2bf/0x7c0 net/core/sock.c:2920 virtnet_rq_alloc+0x43/0xbb0 drivers/net/virtio_net.c:882 add_recvbuf_mergeable drivers/net/virtio_net.c:2110 [inline] try_fill_recv+0x3f0/0x2f50 drivers/net/virtio_net.c:2155 virtnet_open+0x1cc/0xb00 drivers/net/virtio_net.c:2434 __dev_open+0x546/0x6f0 net/core/dev.c:1472 __dev_change_flags+0x309/0x9a0 net/core/dev.c:8780 dev_change_flags+0x8e/0x1d0 net/core/dev.c:8852 devinet_ioctl+0x13ec/0x22c0 net/ipv4/devinet.c:1177 inet_ioctl+0x4bd/0x6d0 net/ipv4/af_inet.c:1001 sock_do_ioctl+0xb7/0x540 net/socket.c:1222 sock_ioctl+0x727/0xd70 net/socket.c:1341 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0x261/0x450 fs/ioctl.c:890 __x64_sys_ioctl+0x96/0xe0 fs/ioctl.c:890 x64_sys_call+0x1883/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 PID: 4804 Comm: S50sshd Not tainted 6.9.0-syzkaller-07387-g8c06da67d0bd #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 =====================================================