===================================================== BUG: KMSAN: use-after-free in __skb_unlink include/linux/skbuff.h:2010 [inline] BUG: KMSAN: use-after-free in __skb_try_recv_from_queue+0x8b1/0xe00 net/core/datagram.c:199 CPU: 1 PID: 31864 Comm: udevd Not tainted 5.4.0-rc3+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x191/0x1f0 lib/dump_stack.c:113 kmsan_report+0x14a/0x2f0 mm/kmsan/kmsan_report.c:110 __msan_warning+0x73/0xf0 mm/kmsan/kmsan_instr.c:245 __skb_unlink include/linux/skbuff.h:2010 [inline] __skb_try_recv_from_queue+0x8b1/0xe00 net/core/datagram.c:199 __skb_try_recv_datagram+0x2bd/0x6b0 net/core/datagram.c:269 __skb_recv_datagram net/core/datagram.c:302 [inline] skb_recv_datagram+0x227/0x450 net/core/datagram.c:321 netlink_recvmsg+0x178/0x18e0 net/netlink/af_netlink.c:1940 sock_recvmsg_nosec net/socket.c:871 [inline] sock_recvmsg+0x3b3/0x3c0 net/socket.c:889 ___sys_recvmsg+0x461/0x11e0 net/socket.c:2480 __sys_recvmsg net/socket.c:2537 [inline] __do_sys_recvmsg net/socket.c:2547 [inline] __se_sys_recvmsg+0x2fa/0x450 net/socket.c:2544 __x64_sys_recvmsg+0x4a/0x70 net/socket.c:2544 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x7fbd62c78210 Code: 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 90 83 3d e5 d3 2a 00 00 75 10 b8 2f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e bb 00 00 48 89 04 24 RSP: 002b:00007fff1f712ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f RAX: ffffffffffffffda RBX: 00007fff1f715060 RCX: 00007fbd62c78210 RDX: 0000000000000000 RSI: 00007fff1f712f60 RDI: 000000000000000b RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff1f712fc0 R13: 00000000016017a0 R14: 00000000016017a0 R15: 000000000000000b Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:151 [inline] kmsan_internal_poison_shadow+0x60/0x110 mm/kmsan/kmsan.c:134 kmsan_slab_free+0x8d/0x100 mm/kmsan/kmsan_hooks.c:108 slab_free_freelist_hook mm/slub.c:1473 [inline] slab_free mm/slub.c:3040 [inline] kmem_cache_free+0x2d1/0x2b70 mm/slub.c:3056 kfree_skbmem net/core/skbuff.c:644 [inline] __kfree_skb+0x1dd/0x210 net/core/skbuff.c:680 consume_skb+0x2b0/0x2e0 net/core/skbuff.c:838 skb_free_datagram+0x52/0x180 net/core/datagram.c:328 netlink_recvmsg+0xd2d/0x18e0 net/netlink/af_netlink.c:1996 sock_recvmsg_nosec net/socket.c:871 [inline] sock_recvmsg+0x3b3/0x3c0 net/socket.c:889 ___sys_recvmsg+0x461/0x11e0 net/socket.c:2480 __sys_recvmsg net/socket.c:2537 [inline] __do_sys_recvmsg net/socket.c:2547 [inline] __se_sys_recvmsg+0x2fa/0x450 net/socket.c:2544 __x64_sys_recvmsg+0x4a/0x70 net/socket.c:2544 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x63/0xe7 =====================================================