syzbot

=====================================================
BUG: KMSAN: uninit-value in ip_rcv_core+0x114b/0x1500 net/ipv4/ip_input.c:486
 ip_rcv_core+0x114b/0x1500 net/ipv4/ip_input.c:486
 ip_rcv+0xc7/0x830 net/ipv4/ip_input.c:536
 __netif_receive_skb_one_core net/core/dev.c:5465 [inline]
 __netif_receive_skb+0x1ec/0x630 net/core/dev.c:5579
 process_backlog+0x54b/0xc10 net/core/dev.c:6455
 __napi_poll+0x14c/0xc00 net/core/dev.c:7023
 napi_poll net/core/dev.c:7090 [inline]
 net_rx_action+0x7e2/0x1820 net/core/dev.c:7177
 __do_softirq+0x1ee/0x7c5 kernel/softirq.c:558
 do_softirq+0x16d/0x220 kernel/softirq.c:459
 __local_bh_enable_ip+0xd5/0xe0 kernel/softirq.c:383
 local_bh_enable+0x36/0x40 include/linux/bottom_half.h:33
 rcu_read_unlock_bh include/linux/rcupdate.h:758 [inline]
 ip_finish_output2+0x199e/0x1bb0 net/ipv4/ip_output.c:222
 __ip_finish_output+0x35e/0x960
 ip_finish_output+0x15c/0x4d0 net/ipv4/ip_output.c:309
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0x333/0x6d0 net/ipv4/ip_output.c:423
 dst_output include/net/dst.h:450 [inline]
 ip_local_out net/ipv4/ip_output.c:126 [inline]
 __ip_queue_xmit+0x1eb9/0x2540 net/ipv4/ip_output.c:525
 ip_queue_xmit+0xcc/0xf0 net/ipv4/ip_output.c:539
 __tcp_transmit_skb+0x4ac6/0x5cd0 net/ipv4/tcp_output.c:1402
 tcp_transmit_skb net/ipv4/tcp_output.c:1420 [inline]
 tcp_write_xmit+0x4835/0xaae0 net/ipv4/tcp_output.c:2680
 __tcp_push_pending_frames+0x159/0x5b0 net/ipv4/tcp_output.c:2864
 tcp_push+0x99a/0xa30 net/ipv4/tcp.c:725
 tcp_sendmsg_locked+0x657d/0x6dc0 net/ipv4/tcp.c:1412
 tcp_sendmsg+0xb2/0x100 net/ipv4/tcp.c:1440
 inet_sendmsg+0x15b/0x1d0 net/ipv4/af_inet.c:819
 sock_sendmsg_nosec net/socket.c:704 [inline]
 sock_sendmsg net/socket.c:724 [inline]
 ____sys_sendmsg+0xe11/0x12c0 net/socket.c:2409
 ___sys_sendmsg net/socket.c:2463 [inline]
 __sys_sendmmsg+0x845/0xf60 net/socket.c:2542
 __compat_sys_sendmmsg net/compat.c:361 [inline]
 __do_compat_sys_sendmmsg net/compat.c:368 [inline]
 __se_compat_sys_sendmmsg net/compat.c:365 [inline]
 __ia32_compat_sys_sendmmsg+0x127/0x180 net/compat.c:365
 do_syscall_32_irqs_on arch/x86/entry/common.c:114 [inline]
 __do_fast_syscall_32+0x96/0xf0 arch/x86/entry/common.c:180
 do_fast_syscall_32+0x34/0x70 arch/x86/entry/common.c:205
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:248
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 pskb_expand_head+0x3c9/0x1ca0 net/core/skbuff.c:1710
 skb_unclone include/linux/skbuff.h:1690 [inline]
 skb_copy_ubufs+0x3db/0x2870 net/core/skbuff.c:1422
 skb_orphan_frags_rx include/linux/skbuff.h:2853 [inline]
 __netif_receive_skb_core+0x5938/0x5de0 net/core/dev.c:5430
 __netif_receive_skb_one_core net/core/dev.c:5463 [inline]
 __netif_receive_skb+0xf2/0x630 net/core/dev.c:5579
 process_backlog+0x54b/0xc10 net/core/dev.c:6455
 __napi_poll+0x14c/0xc00 net/core/dev.c:7023
 napi_poll net/core/dev.c:7090 [inline]
 net_rx_action+0x7e2/0x1820 net/core/dev.c:7177
 __do_softirq+0x1ee/0x7c5 kernel/softirq.c:558

Uninit was created at:
 slab_post_alloc_hook mm/slab.h:524 [inline]
 slab_alloc_node mm/slub.c:3251 [inline]
 __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4974
 kmalloc_reserve net/core/skbuff.c:354 [inline]
 __alloc_skb+0x545/0xf90 net/core/skbuff.c:426
 alloc_skb_fclone include/linux/skbuff.h:1176 [inline]
 tcp_stream_alloc_skb+0x133/0x9e0 net/ipv4/tcp.c:861
 tcp_sendmsg_locked+0x1fe4/0x6dc0 net/ipv4/tcp.c:1281
 tcp_sendmsg+0xb2/0x100 net/ipv4/tcp.c:1440
 inet_sendmsg+0x15b/0x1d0 net/ipv4/af_inet.c:819
 sock_sendmsg_nosec net/socket.c:704 [inline]
 sock_sendmsg net/socket.c:724 [inline]
 ____sys_sendmsg+0xe11/0x12c0 net/socket.c:2409
 ___sys_sendmsg net/socket.c:2463 [inline]
 __sys_sendmmsg+0x845/0xf60 net/socket.c:2542
 __compat_sys_sendmmsg net/compat.c:361 [inline]
 __do_compat_sys_sendmmsg net/compat.c:368 [inline]
 __se_compat_sys_sendmmsg net/compat.c:365 [inline]
 __ia32_compat_sys_sendmmsg+0x127/0x180 net/compat.c:365
 do_syscall_32_irqs_on arch/x86/entry/common.c:114 [inline]
 __do_fast_syscall_32+0x96/0xf0 arch/x86/entry/common.c:180
 do_fast_syscall_32+0x34/0x70 arch/x86/entry/common.c:205
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:248
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

CPU: 0 PID: 24031 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
=====================================================