===================================================== BUG: KMSAN: uninit-value in skb_dst_drop include/net/dst.h:274 [inline] BUG: KMSAN: uninit-value in skb_release_head_state+0xe3/0x3b0 net/core/skbuff.c:1172 skb_dst_drop include/net/dst.h:274 [inline] skb_release_head_state+0xe3/0x3b0 net/core/skbuff.c:1172 skb_release_all net/core/skbuff.c:1186 [inline] __napi_kfree_skb+0x25/0x90 net/core/skbuff.c:1470 net_tx_action+0x2d4/0x940 net/core/dev.c:5277 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0x68/0x120 kernel/softirq.c:637 irq_exit_rcu+0x12/0x20 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x83/0x90 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 kmsan_internal_set_shadow_origin+0x1e/0x100 mm/kmsan/core.c:196 __msan_poison_alloca+0x15e/0x1b0 mm/kmsan/instrumentation.c:289 arch_local_save_flags arch/x86/include/asm/irqflags.h:87 [inline] arch_local_irq_save arch/x86/include/asm/irqflags.h:123 [inline] crng_make_state+0x85/0x630 drivers/char/random.c:347 _get_random_bytes+0x96/0x280 drivers/char/random.c:385 get_random_bytes+0x26/0x30 drivers/char/random.c:417 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:776 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:805 [inline] nsim_dev_trap_report_work+0x9f8/0x1230 drivers/net/netdevsim/dev.c:850 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xae0/0x1c40 kernel/workqueue.c:3312 worker_thread+0xea5/0x1520 kernel/workqueue.c:3390 kthread+0x3dd/0x540 kernel/kthread.c:389 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Uninit was created at: __alloc_pages_noprof+0x9d6/0xe70 mm/page_alloc.c:4719 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] alloc_slab_page mm/slub.c:2321 [inline] allocate_slab+0x203/0x1220 mm/slub.c:2484 new_slab mm/slub.c:2537 [inline] ___slab_alloc+0x12ef/0x35e0 mm/slub.c:3723 __slab_alloc mm/slub.c:3813 [inline] __slab_alloc_node mm/slub.c:3866 [inline] slab_alloc_node mm/slub.c:4025 [inline] kmem_cache_alloc_noprof+0x57a/0xb20 mm/slub.c:4044 skb_clone+0x303/0x550 net/core/skbuff.c:2071 dev_queue_xmit_nit+0x4d0/0x12a0 net/core/dev.c:2313 xmit_one net/core/dev.c:3576 [inline] dev_hard_start_xmit+0x17d/0xa20 net/core/dev.c:3596 sch_direct_xmit+0x3c5/0xd50 net/sched/sch_generic.c:343 __dev_xmit_skb net/core/dev.c:3809 [inline] __dev_queue_xmit+0x2f86/0x5610 net/core/dev.c:4389 dev_queue_xmit include/linux/netdevice.h:3105 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip_finish_output2+0x187c/0x1b70 net/ipv4/ip_output.c:235 __ip_finish_output+0x287/0x810 ip_finish_output+0x4b/0x550 net/ipv4/ip_output.c:323 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip_output+0x15f/0x3f0 net/ipv4/ip_output.c:433 dst_output include/net/dst.h:450 [inline] ip_local_out net/ipv4/ip_output.c:129 [inline] __ip_queue_xmit+0x1e95/0x2040 net/ipv4/ip_output.c:535 ip_queue_xmit+0x60/0x80 net/ipv4/ip_output.c:549 __tcp_transmit_skb+0x3c6b/0x4880 net/ipv4/tcp_output.c:1466 tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline] tcp_write_xmit+0x3a3d/0x8f00 net/ipv4/tcp_output.c:2829 __tcp_push_pending_frames+0xc4/0x380 net/ipv4/tcp_output.c:3014 tcp_push_pending_frames include/net/tcp.h:2106 [inline] tcp_data_snd_check net/ipv4/tcp_input.c:5702 [inline] tcp_rcv_established+0x1af4/0x2610 net/ipv4/tcp_input.c:6136 tcp_v4_do_rcv+0x7f3/0x11a0 net/ipv4/tcp_ipv4.c:1909 tcp_v4_rcv+0x51d0/0x5740 net/ipv4/tcp_ipv4.c:2344 ip_protocol_deliver_rcu+0x2a3/0x13d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] ip_local_deliver+0x21f/0x490 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:460 [inline] ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline] ip_list_rcv_finish net/ipv4/ip_input.c:631 [inline] ip_sublist_rcv+0x15f3/0x17f0 net/ipv4/ip_input.c:639 ip_list_rcv+0x9ef/0xa40 net/ipv4/ip_input.c:674 __netif_receive_skb_list_ptype net/core/dev.c:5703 [inline] __netif_receive_skb_list_core+0x15c5/0x1670 net/core/dev.c:5751 __netif_receive_skb_list net/core/dev.c:5803 [inline] netif_receive_skb_list_internal+0x1085/0x1700 net/core/dev.c:5895 gro_normal_list include/net/gro.h:515 [inline] napi_complete_done+0x425/0x880 net/core/dev.c:6246 virtqueue_napi_complete drivers/net/virtio_net.c:694 [inline] virtnet_poll+0x5b9d/0x6a20 drivers/net/virtio_net.c:2826 __napi_poll+0xe7/0x980 net/core/dev.c:6771 napi_poll net/core/dev.c:6840 [inline] net_rx_action+0xa5a/0x19b0 net/core/dev.c:6962 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0x68/0x120 kernel/softirq.c:637 irq_exit_rcu+0x12/0x20 kernel/softirq.c:649 common_interrupt+0x94/0xa0 arch/x86/kernel/irq.c:278 asm_common_interrupt+0x2b/0x40 arch/x86/include/asm/idtentry.h:693 CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: events nsim_dev_trap_report_work =====================================================