===================================================== BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 kernel/smp.c:549 __flush_smp_call_function_queue+0x343/0x1810 kernel/smp.c:549 generic_smp_call_function_single_interrupt+0x1c/0x30 kernel/smp.c:477 __sysvec_call_function_single+0x48/0x350 arch/x86/kernel/smp.c:272 instr_sysvec_call_function_single arch/x86/kernel/smp.c:267 [inline] sysvec_call_function_single+0x7c/0x90 arch/x86/kernel/smp.c:267 asm_sysvec_call_function_single+0x1f/0x30 arch/x86/include/asm/idtentry.h:704 kmsan_phys_addr_valid arch/x86/include/asm/kmsan.h:55 [inline] kmsan_virt_addr_valid arch/x86/include/asm/kmsan.h:79 [inline] virt_to_page_or_null+0x27/0x170 mm/kmsan/shadow.c:75 kmsan_get_shadow_origin_ptr+0x4a/0xb0 mm/kmsan/shadow.c:102 get_shadow_origin_ptr mm/kmsan/instrumentation.c:38 [inline] __msan_metadata_ptr_for_load_8+0x24/0x40 mm/kmsan/instrumentation.c:94 skb_peek include/linux/skbuff.h:2197 [inline] __skb_dequeue include/linux/skbuff.h:2503 [inline] __skb_queue_purge_reason include/linux/skbuff.h:3441 [inline] __skb_queue_purge include/linux/skbuff.h:3447 [inline] qdisc_reset+0x35e/0x7b0 net/sched/sch_generic.c:1060 __qdisc_destroy+0xa2/0x430 net/sched/sch_generic.c:1096 qdisc_put net/sched/sch_generic.c:1128 [inline] dev_shutdown+0x68d/0x840 net/sched/sch_generic.c:1493 unregister_netdevice_many_notify+0x201d/0x4a60 net/core/dev.c:12409 unregister_netdevice_many net/core/dev.c:12484 [inline] unregister_netdevice_queue+0x368/0x570 net/core/dev.c:12294 unregister_netdevice include/linux/netdevice.h:3444 [inline] _cfg80211_unregister_wdev+0x17e/0x870 net/wireless/core.c:1374 cfg80211_unregister_wdev+0x23/0x30 net/wireless/core.c:1430 ieee80211_remove_interfaces+0x6d7/0xbb0 net/mac80211/iface.c:2512 ieee80211_unregister_hw+0x75/0x3d0 net/mac80211/main.c:1714 mac80211_hwsim_del_radio+0x59a/0x760 drivers/net/wireless/virtual/mac80211_hwsim.c:6132 hwsim_exit_net+0x192b/0x1c00 drivers/net/wireless/virtual/mac80211_hwsim.c:7029 ops_exit_list net/core/net_namespace.c:199 [inline] ops_undo_list+0x6c5/0xb80 net/core/net_namespace.c:252 cleanup_net+0xc24/0x1680 net/core/net_namespace.c:702 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xb65/0x1e40 kernel/workqueue.c:3397 worker_thread+0xee4/0x1590 kernel/workqueue.c:3478 kthread+0x53a/0x5f0 kernel/kthread.c:436 ret_from_fork+0x20f/0x8d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Local variable rf.i259 created at: ttwu_queue kernel/sched/core.c:3971 [inline] try_to_wake_up+0xe21/0x20f0 kernel/sched/core.c:4302 swake_up_locked kernel/sched/swait.c:30 [inline] swake_up_one+0xd0/0x420 kernel/sched/swait.c:53 CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: netns cleanup_net =====================================================