===================================================== BUG: KMSAN: uninit-value in spin_lock include/linux/spinlock.h:338 [inline] BUG: KMSAN: uninit-value in inet_ehash_insert+0x56c/0xc80 net/ipv4/inet_hashtables.c:488 CPU: 1 PID: 5886 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x191/0x1f0 lib/dump_stack.c:113 kmsan_report+0x13a/0x2b0 mm/kmsan/kmsan_report.c:108 __msan_warning+0x73/0xe0 mm/kmsan/kmsan_instr.c:250 arch_atomic_try_cmpxchg arch/x86/include/asm/atomic.h:200 [inline] atomic_try_cmpxchg include/asm-generic/atomic-instrumented.h:695 [inline] queued_spin_lock include/asm-generic/qspinlock.h:78 [inline] do_raw_spin_lock include/linux/spinlock.h:181 [inline] __raw_spin_lock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_lock+0x56/0x90 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:338 [inline] inet_ehash_insert+0x56c/0xc80 net/ipv4/inet_hashtables.c:488 reqsk_queue_hash_req net/ipv4/inet_connection_sock.c:757 [inline] inet_csk_reqsk_queue_hash_add+0x11a/0x1d0 net/ipv4/inet_connection_sock.c:768 tcp_conn_request+0x44cc/0x4fb0 net/ipv4/tcp_input.c:6592 tcp_v6_conn_request+0x242/0x2d0 net/ipv6/tcp_ipv6.c:1074 tcp_rcv_state_process+0x28f/0x6f80 net/ipv4/tcp_input.c:6103 tcp_v6_do_rcv+0x1001/0x1ce0 net/ipv6/tcp_ipv6.c:1381 tcp_v6_rcv+0x60b7/0x6a30 net/ipv6/tcp_ipv6.c:1576 ip6_protocol_deliver_rcu+0x1433/0x22f0 net/ipv6/ip6_input.c:397 ip6_input_finish net/ipv6/ip6_input.c:438 [inline] NF_HOOK include/linux/netfilter.h:305 [inline] ip6_input+0x2af/0x340 net/ipv6/ip6_input.c:447 dst_input include/net/dst.h:442 [inline] ip6_rcv_finish net/ipv6/ip6_input.c:76 [inline] NF_HOOK include/linux/netfilter.h:305 [inline] ipv6_rcv+0x683/0x710 net/ipv6/ip6_input.c:272 __netif_receive_skb_one_core net/core/dev.c:5004 [inline] __netif_receive_skb net/core/dev.c:5118 [inline] netif_receive_skb_internal+0x4e3/0xc20 net/core/dev.c:5208 netif_receive_skb+0x1da/0x3a0 net/core/dev.c:5267 tun_rx_batched drivers/net/tun.c:1551 [inline] tun_get_user+0x6cab/0x6fe0 drivers/net/tun.c:1991 tun_chr_write_iter+0x1f2/0x360 drivers/net/tun.c:2020 do_iter_readv_writev+0xa16/0xc30 include/linux/fs.h:1864 do_iter_write+0x304/0xdc0 fs/read_write.c:970 vfs_writev fs/read_write.c:1015 [inline] do_writev+0x435/0x900 fs/read_write.c:1058 __do_sys_writev fs/read_write.c:1131 [inline] __se_sys_writev+0x9b/0xb0 fs/read_write.c:1128 __x64_sys_writev+0x4a/0x70 fs/read_write.c:1128 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x4598e1 Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b9 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007f5d6f51fba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 RAX: ffffffffffffffda RBX: 000000000000004a RCX: 00000000004598e1 RDX: 0000000000000001 RSI: 00007f5d6f51fc00 RDI: 00000000000000f0 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5d6f5206d4 R13: 00000000004c899a R14: 00000000004df9c0 R15: 00000000ffffffff Uninit was created at: kmsan_save_stack_with_flags+0x3a/0x80 mm/kmsan/kmsan.c:150 kmsan_internal_alloc_meta_for_pages mm/kmsan/kmsan_shadow.c:346 [inline] kmsan_alloc_page+0x151/0x360 mm/kmsan/kmsan_shadow.c:382 __alloc_pages_nodemask+0x142d/0x5fa0 mm/page_alloc.c:4757 alloc_pages_current+0x68d/0x9a0 mm/mempolicy.c:2153 alloc_pages include/linux/gfp.h:511 [inline] alloc_slab_page+0x10e/0x12c0 mm/slub.c:1535 allocate_slab mm/slub.c:1680 [inline] new_slab+0x2ca/0x1a00 mm/slub.c:1747 new_slab_objects mm/slub.c:2496 [inline] ___slab_alloc+0x1423/0x1fb0 mm/slub.c:2647 __slab_alloc mm/slub.c:2687 [inline] slab_alloc_node mm/slub.c:2750 [inline] slab_alloc mm/slub.c:2799 [inline] kmem_cache_alloc+0xade/0xd10 mm/slub.c:2804 reqsk_alloc include/net/request_sock.h:84 [inline] inet_reqsk_alloc net/ipv4/tcp_input.c:6402 [inline] tcp_conn_request+0x989/0x4fb0 net/ipv4/tcp_input.c:6500 tcp_v6_conn_request+0x242/0x2d0 net/ipv6/tcp_ipv6.c:1074 tcp_rcv_state_process+0x28f/0x6f80 net/ipv4/tcp_input.c:6103 tcp_v6_do_rcv+0x1001/0x1ce0 net/ipv6/tcp_ipv6.c:1381 tcp_v6_rcv+0x60b7/0x6a30 net/ipv6/tcp_ipv6.c:1576 ip6_protocol_deliver_rcu+0x1433/0x22f0 net/ipv6/ip6_input.c:397 ip6_input_finish net/ipv6/ip6_input.c:438 [inline] NF_HOOK include/linux/netfilter.h:305 [inline] ip6_input+0x2af/0x340 net/ipv6/ip6_input.c:447 dst_input include/net/dst.h:442 [inline] ip6_rcv_finish net/ipv6/ip6_input.c:76 [inline] NF_HOOK include/linux/netfilter.h:305 [inline] ipv6_rcv+0x683/0x710 net/ipv6/ip6_input.c:272 __netif_receive_skb_one_core net/core/dev.c:5004 [inline] __netif_receive_skb net/core/dev.c:5118 [inline] process_backlog+0x721/0x1410 net/core/dev.c:5929 napi_poll net/core/dev.c:6352 [inline] net_rx_action+0x74b/0x1950 net/core/dev.c:6418 __do_softirq+0x4a1/0x83a kernel/softirq.c:293 do_softirq_own_stack+0x49/0x80 arch/x86/entry/entry_64.S:1093 do_softirq kernel/softirq.c:338 [inline] __local_bh_enable_ip+0x184/0x1d0 kernel/softirq.c:190 local_bh_enable+0x36/0x40 include/linux/bottom_half.h:32 rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip6_finish_output2+0x213f/0x2670 net/ipv6/ip6_output.c:117 __ip6_finish_output+0x83d/0x8f0 net/ipv6/ip6_output.c:142 ip6_finish_output+0x2db/0x420 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip6_output+0x5d3/0x720 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:305 [inline] ip6_xmit+0x1f53/0x2650 net/ipv6/ip6_output.c:279 inet6_csk_xmit+0x3df/0x4f0 net/ipv6/inet6_connection_sock.c:135 __tcp_transmit_skb+0x409e/0x5c60 net/ipv4/tcp_output.c:1158 tcp_transmit_skb net/ipv4/tcp_output.c:1174 [inline] tcp_send_syn_data net/ipv4/tcp_output.c:3531 [inline] tcp_connect+0x552e/0x66c0 net/ipv4/tcp_output.c:3570 tcp_v6_connect+0x2562/0x26f0 net/ipv6/tcp_ipv6.c:328 __inet_stream_connect+0x2f5/0x1350 net/ipv4/af_inet.c:655 tcp_sendmsg_fastopen net/ipv4/tcp.c:1164 [inline] tcp_sendmsg_locked+0x631f/0x6950 net/ipv4/tcp.c:1206 tcp_sendmsg+0xb2/0x100 net/ipv4/tcp.c:1433 inet6_sendmsg+0x178/0x2e0 net/ipv6/af_inet6.c:576 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg net/socket.c:657 [inline] __sys_sendto+0x8fc/0xc70 net/socket.c:1952 __do_sys_sendto net/socket.c:1964 [inline] __se_sys_sendto+0x107/0x130 net/socket.c:1960 __x64_sys_sendto+0x6e/0x90 net/socket.c:1960 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x63/0xe7 =====================================================