syzbot


KMSAN: uninit-value in hsr_get_node

Status: auto-closed as invalid on 2021/07/08 06:23
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+d205b494fafacf899b18@syzkaller.appspotmail.com
First crash: 1317d, last: 1074d
Discussions (1)
Title Replies (including bot) Last reply
KMSAN: uninit-value in hsr_get_node 0 (1) 2020/08/10 15:37
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: kernel-infoleak in copyout (2) net C 6723 284d 1453d 22/26 fixed on 2023/06/08 14:41
upstream KMSAN: kernel-infoleak in _copy_to_iter (7) net C 138977 388d 740d 22/26 fixed on 2023/02/24 13:50
upstream KMSAN: uninit-value in hsr_get_node (2) net C 44 12d 64d 3/26 upstream: reported C repro on 2024/01/14 09:24
upstream KMSAN: uninit-value in IP6_ECN_decapsulate net C 981 90d 2006d 25/26 fixed on 2023/12/21 03:45

Sample crash report:
hsr_slave_0: hsr_addr_subst_dest: Unknown node
hsr_slave_1: hsr_addr_subst_dest: Unknown node
=====================================================
BUG: KMSAN: uninit-value in hsr_get_node+0x45d/0xba0 net/hsr/hsr_framereg.c:220
CPU: 1 PID: 18196 Comm: syz-executor.4 Not tainted 5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 hsr_get_node+0x45d/0xba0 net/hsr/hsr_framereg.c:220
 fill_frame_info net/hsr/hsr_forward.c:498 [inline]
 hsr_forward_skb+0x9d9/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hsr_get_node+0x498/0xba0 net/hsr/hsr_framereg.c:225
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 hsr_get_node+0x498/0xba0 net/hsr/hsr_framereg.c:225
 fill_frame_info net/hsr/hsr_forward.c:498 [inline]
 hsr_forward_skb+0x9d9/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:511 [inline]
BUG: KMSAN: uninit-value in hsr_forward_skb+0x2184/0x2610 net/hsr/hsr_forward.c:537
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 fill_frame_info net/hsr/hsr_forward.c:511 [inline]
 hsr_forward_skb+0x2184/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hsr_fill_frame_info+0x3cb/0x570 net/hsr/hsr_forward.c:457
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 hsr_fill_frame_info+0x3cb/0x570 net/hsr/hsr_forward.c:457
 fill_frame_info net/hsr/hsr_forward.c:520 [inline]
 hsr_forward_skb+0xc63/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_consume_entry+0x27a/0x310 kernel/stacktrace.c:89
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_save+0x193/0x1a0 kernel/stacktrace.c:115
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 fill_frame_info net/hsr/hsr_forward.c:506 [inline]
 hsr_forward_skb+0x2175/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_consume_entry+0x27a/0x310 kernel/stacktrace.c:89
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_save+0x193/0x1a0 kernel/stacktrace.c:115
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 fill_frame_info net/hsr/hsr_forward.c:506 [inline]
 hsr_forward_skb+0x2175/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_consume_entry+0x27a/0x310 kernel/stacktrace.c:89
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_save+0x193/0x1a0 kernel/stacktrace.c:115
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 fill_frame_info net/hsr/hsr_forward.c:506 [inline]
 hsr_forward_skb+0x2175/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_consume_entry+0x27a/0x310 kernel/stacktrace.c:89
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_save+0x193/0x1a0 kernel/stacktrace.c:115
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 fill_frame_info net/hsr/hsr_forward.c:506 [inline]
 hsr_forward_skb+0x2175/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_consume_entry+0x27a/0x310 kernel/stacktrace.c:89
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_save+0x193/0x1a0 kernel/stacktrace.c:115
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 fill_frame_info net/hsr/hsr_forward.c:506 [inline]
 hsr_forward_skb+0x2175/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_consume_entry+0x27a/0x310 kernel/stacktrace.c:89
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_save+0x193/0x1a0 kernel/stacktrace.c:115
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 fill_frame_info net/hsr/hsr_forward.c:506 [inline]
 hsr_forward_skb+0x2175/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_consume_entry+0x27a/0x310 kernel/stacktrace.c:89
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_save+0x193/0x1a0 kernel/stacktrace.c:115
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 fill_frame_info net/hsr/hsr_forward.c:506 [inline]
 hsr_forward_skb+0x2175/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fce549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55c85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740
RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_consume_entry+0x27a/0x310 kernel/stacktrace.c:89
 arch_stack_walk+0x2fa/0x3c0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:121
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 stack_trace_save+0x193/0x1a0 kernel/stacktrace.c:115
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 kmsan_memcpy_memmove_metadata+0x25e/0x2d0 mm/kmsan/kmsan.c:226
 kmsan_memmove_metadata+0xe/0x10 mm/kmsan/kmsan.c:251
 __msan_memmove+0x46/0x60 mm/kmsan/kmsan_instr.c:92
 hsr_create_tagged_frame+0x714/0x1130 net/hsr/hsr_forward.c:268
 hsr_forward_do net/hsr/hsr_forward.c:396 [inline]
 hsr_forward_skb+0x159d/0x2610 net/hsr/hsr_forward.c:541
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x57/0xa0 mm/kmsan/kmsan_instr.c:147
 fill_frame_info net/hsr/hsr_forward.c:506 [inline]
 hsr_forward_skb+0x2175/0x2610 net/hsr/hsr_forward.c:537
 hsr_dev_xmit+0x133/0x230 net/hsr/hsr_device.c:220
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x148d/0x1700 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x4a1/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 pskb_expand_head+0x25e/0x1e20 net/core/skbuff.c:1638
 skb_ensure_writable+0x4cf/0x590 net/core/skbuff.c:5511
 __bpf_try_make_writable net/core/filter.c:1654 [inline]
 bpf_try_make_writable net/core/filter.c:1660 [inline]
 bpf_try_make_head_writable net/core/filter.c:1668 [inline]
 ____bpf_clone_redirect net/core/filter.c:2442 [inline]
 bpf_clone_redirect+0x25d/0x660 net/core/filter.c:2420
 ___bpf_prog_run+0x4279/0x93e0 kernel/bpf/core.c:1513
 __bpf_prog_run512+0x12e/0x190 kernel/bpf/core.c:1691
 bpf_test_run+0x544/0xea0 include/linux/filter.h:743
 bpf_prog_test_run_skb+0x1914/0x3500 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3122 [inline]
 __do_sys_bpf+0xbd97/0x1a840 kernel/bpf/syscall.c:4400
 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4340
 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4340
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x102/0x160 arch/x86/entry/common.c:141
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:166
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:209
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
=====================================================
=====================================================
BUG: KMSAN: uninit-value in stack_trace_consume_entry+0x171/0x310 kernel/stacktrace.c:88
CPU: 1 PID: 18196 Comm: syz-executor.4 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:

Crashes (304):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/09 06:02 https://github.com/google/kmsan.git master 29ad81a1074a 6a81331a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/03/31 07:43 https://github.com/google/kmsan.git master 29ad81a1074a 6a81331a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/03/30 11:06 https://github.com/google/kmsan.git master 29ad81a1074a 6a81331a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/03/27 11:31 https://github.com/google/kmsan.git master 29ad81a1074a a8529b82 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/03/27 10:16 https://github.com/google/kmsan.git master 29ad81a1074a a8529b82 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/03/26 10:10 https://github.com/google/kmsan.git master 29ad81a1074a 6a383ecf .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/03/17 17:44 https://github.com/google/kmsan.git master 29ad81a1074a fdb2bb2c .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/03/10 11:33 https://github.com/google/kmsan.git master 29ad81a1074a 26967e35 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/27 05:25 https://github.com/google/kmsan.git master 29ad81a1074a 4c37c133 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/18 09:42 https://github.com/google/kmsan.git master 29ad81a1074a 14052202 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/16 01:14 https://github.com/google/kmsan.git master 29ad81a1074a 98682e5e .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/13 16:04 https://github.com/google/kmsan.git master 29ad81a1074a 98682e5e .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/11 10:55 https://github.com/google/kmsan.git master 73d62e81b476 a52ee10a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/10 17:03 https://github.com/google/kmsan.git master 73d62e81b476 2bd9619f .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/09 23:22 https://github.com/google/kmsan.git master 73d62e81b476 2bd9619f .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/09 12:55 https://github.com/google/kmsan.git master 73d62e81b476 2bd9619f .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/09 07:03 https://github.com/google/kmsan.git master 73d62e81b476 2bd9619f .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/07 14:16 https://github.com/google/kmsan.git master 73d62e81b476 2ce644fc .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/03 19:11 https://github.com/google/kmsan.git master 73d62e81b476 624dad51 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/03 17:49 https://github.com/google/kmsan.git master 73d62e81b476 624dad51 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/02/01 12:05 https://github.com/google/kmsan.git master 73d62e81b476 fc9fd31e .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/01/26 12:31 https://github.com/google/kmsan.git master 73d62e81b476 52e37319 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/01/24 08:48 https://github.com/google/kmsan.git master 73d62e81b476 52e37319 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/01/22 15:31 https://github.com/google/kmsan.git master 73d62e81b476 d4f4eca5 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/01/20 04:56 https://github.com/google/kmsan.git master 73d62e81b476 63631df1 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hsr_get_node
2021/01/15 03:08 https://github.com/google/kmsan.git master 73d62e81b476 65a7a854 .config console log report info ci-upstream-kmsan-gce-386
2021/01/13 08:22 https://github.com/google/kmsan.git master 73d62e81b476 0cdd6185 .config console log report info ci-upstream-kmsan-gce-386
2021/01/12 01:16 https://github.com/google/kmsan.git master 73d62e81b476 2c1f2513 .config console log report info ci-upstream-kmsan-gce-386
2021/01/09 00:25 https://github.com/google/kmsan.git master 73d62e81b476 c104d4a3 .config console log report info ci-upstream-kmsan-gce-386
2021/01/07 12:12 https://github.com/google/kmsan.git master 73d62e81b476 c104d4a3 .config console log report info ci-upstream-kmsan-gce-386
2021/01/03 21:39 https://github.com/google/kmsan.git master 73d62e81b476 79264ae3 .config console log report info ci-upstream-kmsan-gce-386
2020/12/31 13:15 https://github.com/google/kmsan.git master 73d62e81b476 5cc121d6 .config console log report info ci-upstream-kmsan-gce-386
2020/12/29 23:11 https://github.com/google/kmsan.git master 73d62e81b476 80910769 .config console log report info ci-upstream-kmsan-gce-386
2020/12/28 08:09 https://github.com/google/kmsan.git master 73d62e81b476 2242f77f .config console log report info ci-upstream-kmsan-gce-386
2020/12/28 02:47 https://github.com/google/kmsan.git master 73d62e81b476 2242f77f .config console log report info ci-upstream-kmsan-gce-386
2020/12/25 01:38 https://github.com/google/kmsan.git master 73d62e81b476 c2c1d1dd .config console log report info ci-upstream-kmsan-gce-386
2020/12/24 08:24 https://github.com/google/kmsan.git master 73d62e81b476 c2c1d1dd .config console log report info ci-upstream-kmsan-gce-386
2020/12/18 05:55 https://github.com/google/kmsan.git master 73d62e81b476 04201c06 .config console log report info ci-upstream-kmsan-gce-386
2020/12/16 11:37 https://github.com/google/kmsan.git master 73d62e81b476 f213e07e .config console log report info ci-upstream-kmsan-gce-386
2020/12/15 20:53 https://github.com/google/kmsan.git master 73d62e81b476 97183ed7 .config console log report info ci-upstream-kmsan-gce-386
2020/12/14 21:21 https://github.com/google/kmsan.git master 73d62e81b476 97183ed7 .config console log report info ci-upstream-kmsan-gce-386
2020/12/14 06:11 https://github.com/google/kmsan.git master 73d62e81b476 b22a7ec3 .config console log report info ci-upstream-kmsan-gce-386
2020/12/12 01:39 https://github.com/google/kmsan.git master 73d62e81b476 ba24ffcd .config console log report info ci-upstream-kmsan-gce-386
2020/08/10 00:07 https://github.com/google/kmsan.git master ce8056d1f79e 70301872 .config console log report ci-upstream-kmsan-gce-386
2020/08/09 17:50 https://github.com/google/kmsan.git master ce8056d1f79e 70301872 .config console log report ci-upstream-kmsan-gce-386
* Struck through repros no longer work on HEAD.