syzbot

netlink: 'syz-executor4': attribute type 3 has an invalid length.
print_req_error: 122 callbacks suppressed
print_req_error: I/O error, dev loop0, sector 160
==================================================================
BUG: KMSAN: uninit-value in __unwind_start+0x5c4/0x600 arch/x86/kernel/unwind_frame.c:411
CPU: 1 PID: 9212 Comm: loop0 Not tainted 4.20.0-rc7+ #12
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x173/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x12e/0x2a0 mm/kmsan/kmsan.c:611
 __msan_warning+0x81/0xf0 mm/kmsan/kmsan_instr.c:295
 __unwind_start+0x5c4/0x600 arch/x86/kernel/unwind_frame.c:411
 unwind_start arch/x86/include/asm/unwind.h:54 [inline]
 __save_stack_trace+0x467/0xb90 arch/x86/kernel/stacktrace.c:43
 save_stack_trace+0xa2/0xe0 arch/x86/kernel/stacktrace.c:60
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:202 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:217 [inline]
 kmsan_internal_chain_origin+0x134/0x230 mm/kmsan/kmsan.c:437
 __msan_chain_origin+0x74/0xe0 mm/kmsan/kmsan_instr.c:182
 __skb_clone+0x889/0x990 net/core/skbuff.c:866
 skb_clone+0x3e8/0x580 net/core/skbuff.c:1287
 __tcp_transmit_skb+0x393/0x5ba0 net/ipv4/tcp_output.c:1041
 tcp_transmit_skb net/ipv4/tcp_output.c:1176 [inline]
 tcp_write_xmit+0x31dd/0xa840 net/ipv4/tcp_output.c:2395
 __tcp_push_pending_frames+0x124/0x4e0 net/ipv4/tcp_output.c:2571
 tcp_push_pending_frames include/net/tcp.h:1775 [inline]
 tcp_data_snd_check+0x182/0xa20 net/ipv4/tcp_input.c:5158
 tcp_rcv_established+0x1ac0/0x2850 net/ipv4/tcp_input.c:5650
 tcp_v4_do_rcv+0x686/0xd70 net/ipv4/tcp_ipv4.c:1534
 tcp_v4_rcv+0x6948/0x6f30 net/ipv4/tcp_ipv4.c:1826
 ip_local_deliver_finish+0x7a2/0xea0 net/ipv4/ip_input.c:215
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ip_local_deliver+0x44b/0x510 net/ipv4/ip_input.c:256
 dst_input include/net/dst.h:450 [inline]
 ip_rcv_finish net/ipv4/ip_input.c:415 [inline]
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ip_rcv+0x6b6/0x740 net/ipv4/ip_input.c:524
 __netif_receive_skb_one_core net/core/dev.c:4946 [inline]
 __netif_receive_skb net/core/dev.c:5056 [inline]
 process_backlog+0x766/0x10f0 net/core/dev.c:5864
 napi_poll net/core/dev.c:6287 [inline]
 net_rx_action+0x816/0x1aa0 net/core/dev.c:6353
 __do_softirq+0x53f/0x93a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x214/0x250 kernel/softirq.c:416
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:536
 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1063
 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:814
 </IRQ>
RIP: 0010:_raw_spin_unlock_irqrestore+0x4b/0x70 kernel/locking/spinlock.c:185
Code: 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 28 48 89 df e8 98 6c 4a f7 c6 00 00 c6 03 00 4d 85 e4 75 1c 4c 89 7d d8 ff 75 d8 9d <48> 83 c4 08 5b 41 5c 41 5e 41 5f 5d c3 e8 83 76 4a f7 eb d1 44 89
RSP: 0018:ffff88819bd1fe30 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: ffff88818c8df698 RBX: ffff88818638f698 RCX: ffff88818c8df698
RDX: ffff8881dbb5f698 RSI: 0000160000000000 RDI: ccccccccccccd000
RBP: ffff88819bd1fe58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: ffffffff8169e0b0 R12: 0000000000000000
R13: ffff88818638f690 R14: 0000000000000000 R15: 0000000000000286
 spin_unlock_irqrestore include/linux/spinlock.h:384 [inline]
 complete+0x10e/0x170 kernel/sched/completion.c:37
 kthread+0x3c6/0x4e0 kernel/kthread.c:240
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Local variable description: ----data@perf_swevent_hrtimer
Variable was created at:
 perf_swevent_hrtimer+0x70/0xbe0 kernel/events/core.c:9136
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0xbfc/0x15c0 kernel/time/hrtimer.c:1460
==================================================================