===================================================== BUG: KMSAN: kernel-network-infoleak-after-free in __netdev_start_xmit include/linux/netdevice.h:4841 [inline] BUG: KMSAN: kernel-network-infoleak-after-free in netdev_start_xmit include/linux/netdevice.h:4857 [inline] BUG: KMSAN: kernel-network-infoleak-after-free in xmit_one+0x100/0x5f0 net/core/dev.c:3590 __netdev_start_xmit include/linux/netdevice.h:4841 [inline] netdev_start_xmit include/linux/netdevice.h:4857 [inline] xmit_one+0x100/0x5f0 net/core/dev.c:3590 dev_hard_start_xmit+0xe5/0x370 net/core/dev.c:3606 __dev_queue_xmit+0x1dec/0x31f0 net/core/dev.c:4256 dev_queue_xmit include/linux/netdevice.h:3009 [inline] __netlink_deliver_tap_skb net/netlink/af_netlink.c:307 [inline] __netlink_deliver_tap+0x7f6/0xca0 net/netlink/af_netlink.c:325 netlink_deliver_tap net/netlink/af_netlink.c:338 [inline] netlink_deliver_tap_kernel net/netlink/af_netlink.c:347 [inline] netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x10fb/0x1270 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x127d/0x1430 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg net/socket.c:734 [inline] ____sys_sendmsg+0xa8e/0xe70 net/socket.c:2482 ___sys_sendmsg+0x2a1/0x3f0 net/socket.c:2536 __sys_sendmsg net/socket.c:2565 [inline] __do_sys_sendmsg net/socket.c:2574 [inline] __se_sys_sendmsg net/socket.c:2572 [inline] __x64_sys_sendmsg+0x367/0x540 net/socket.c:2572 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was stored to memory at: skb_put_data include/linux/skbuff.h:2579 [inline] netlink_to_full_skb net/netlink/af_netlink.c:181 [inline] __netlink_deliver_tap_skb net/netlink/af_netlink.c:298 [inline] __netlink_deliver_tap+0x575/0xca0 net/netlink/af_netlink.c:325 netlink_deliver_tap net/netlink/af_netlink.c:338 [inline] netlink_deliver_tap_kernel net/netlink/af_netlink.c:347 [inline] netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x10fb/0x1270 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x127d/0x1430 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg net/socket.c:734 [inline] ____sys_sendmsg+0xa8e/0xe70 net/socket.c:2482 ___sys_sendmsg+0x2a1/0x3f0 net/socket.c:2536 __sys_sendmsg net/socket.c:2565 [inline] __do_sys_sendmsg net/socket.c:2574 [inline] __se_sys_sendmsg net/socket.c:2572 [inline] __x64_sys_sendmsg+0x367/0x540 net/socket.c:2572 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at: free_pages_prepare mm/page_alloc.c:1410 [inline] free_pcp_prepare+0x40/0x640 mm/page_alloc.c:1532 free_unref_page_prepare mm/page_alloc.c:3387 [inline] free_unref_page+0x41/0x940 mm/page_alloc.c:3483 free_the_page mm/page_alloc.c:770 [inline] __free_pages+0x78/0x1c0 mm/page_alloc.c:5644 free_pages+0x96/0xb0 mm/page_alloc.c:5655 _pgd_free arch/x86/mm/pgtable.c:420 [inline] pgd_free+0x1f6/0x2a0 arch/x86/mm/pgtable.c:476 mm_free_pgd kernel/fork.c:734 [inline] __mmdrop+0xd4/0x7c0 kernel/fork.c:785 mmdrop include/linux/sched/mm.h:50 [inline] __mmput+0x4a7/0x510 kernel/fork.c:1196 mmput+0x76/0x80 kernel/fork.c:1207 exit_mm+0x1b8/0x360 kernel/exit.c:516 do_exit+0xe28/0x3f70 kernel/exit.c:807 do_group_exit+0x2f9/0x390 kernel/exit.c:950 get_signal+0x19e8/0x2050 kernel/signal.c:2858 arch_do_signal_or_restart+0x56/0xae0 arch/x86/kernel/signal.c:869 exit_to_user_mode_loop+0xea/0x320 kernel/entry/common.c:168 exit_to_user_mode_prepare+0x16e/0x220 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x23/0x40 kernel/entry/common.c:296 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd Bytes 3780-3839 of 3840 are uninitialized Memory access of size 3840 starts at ffff8880984e2000 CPU: 1 PID: 3616 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-64311-g5c6259d6d19f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 =====================================================