===================================================== BUG: KMSAN: uninit-value in can_receive+0x12c/0x4a0 net/can/af_can.c:656 can_receive+0x12c/0x4a0 net/can/af_can.c:656 can_rcv+0x1ff/0x3b0 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6079 [inline] __netif_receive_skb+0x477/0xac0 net/core/dev.c:6192 process_backlog+0x485/0xa00 net/core/dev.c:6544 __napi_poll+0xdd/0x8a0 net/core/dev.c:7594 napi_poll net/core/dev.c:7657 [inline] net_rx_action+0xbc8/0x1c30 net/core/dev.c:7784 handle_softirqs+0x169/0x6e0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x66/0x180 kernel/softirq.c:723 irq_exit_rcu+0x12/0x20 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0x84/0x90 arch/x86/kernel/apic/apic.c:1052 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:697 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:95 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0x33/0x60 kernel/locking/spinlock.c:194 unlock_hrtimer_base kernel/time/hrtimer.c:1013 [inline] hrtimer_start_range_ns+0x16e3/0x1910 kernel/time/hrtimer.c:1325 hrtimer_start include/linux/hrtimer.h:259 [inline] j1939_tp_schedule_txtimer+0xc7/0x110 net/can/j1939/transport.c:703 j1939_sk_send_loop net/can/j1939/socket.c:1169 [inline] j1939_sk_sendmsg+0x1bb4/0x2760 net/can/j1939/socket.c:1282 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg+0x333/0x3d0 net/socket.c:742 ____sys_sendmsg+0x7e0/0xd80 net/socket.c:2630 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2684 __sys_sendmsg+0x1aa/0x300 net/socket.c:2716 __compat_sys_sendmsg net/compat.c:346 [inline] __do_compat_sys_sendmsg net/compat.c:353 [inline] __se_compat_sys_sendmsg net/compat.c:350 [inline] __ia32_compat_sys_sendmsg+0xa4/0x100 net/compat.c:350 ia32_sys_call+0x3f6c/0x4310 arch/x86/include/generated/asm/syscalls_32.h:371 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb0/0x150 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x38/0x80 arch/x86/entry/syscall_32.c:331 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:369 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Uninit was created at: slab_post_alloc_hook mm/slub.c:4985 [inline] slab_alloc_node mm/slub.c:5288 [inline] __do_kmalloc_node mm/slub.c:5649 [inline] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 mm/slub.c:5759 kmalloc_reserve+0x22f/0x4b0 net/core/skbuff.c:601 pskb_expand_head+0x1fc/0x1610 net/core/skbuff.c:2241 netif_skb_check_for_xdp net/core/dev.c:5439 [inline] netif_receive_generic_xdp net/core/dev.c:5470 [inline] do_xdp_generic+0xa79/0x1690 net/core/dev.c:5538 __netif_receive_skb_core+0x2bc2/0x7150 net/core/dev.c:5889 __netif_receive_skb_one_core net/core/dev.c:6077 [inline] __netif_receive_skb+0xcc/0xac0 net/core/dev.c:6192 process_backlog+0x485/0xa00 net/core/dev.c:6544 __napi_poll+0xdd/0x8a0 net/core/dev.c:7594 napi_poll net/core/dev.c:7657 [inline] net_rx_action+0xbc8/0x1c30 net/core/dev.c:7784 handle_softirqs+0x169/0x6e0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x66/0x180 kernel/softirq.c:723 irq_exit_rcu+0x12/0x20 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0x84/0x90 arch/x86/kernel/apic/apic.c:1052 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:697 CPU: 0 UID: 0 PID: 25636 Comm: syz.7.7460 Tainted: G W syzkaller #0 PREEMPT(none) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 =====================================================