device syz_tun left promiscuous mode
==================================================================
BUG: KMSAN: uninit-value in rcu_cblist_dequeue+0x1f1/0x270 kernel/rcu/rcu_segcblist.c:54
CPU: 1 PID: 15 Comm: ksoftirqd/1 Not tainted 4.17.0-rc5+ #103
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x149/0x260 mm/kmsan/kmsan.c:1084
 __msan_warning_32+0x6e/0xc0 mm/kmsan/kmsan_instr.c:686
 rcu_cblist_dequeue+0x1f1/0x270 kernel/rcu/rcu_segcblist.c:54
 rcu_do_batch kernel/rcu/tree.c:2673 [inline]
 invoke_rcu_callbacks kernel/rcu/tree.c:2930 [inline]
 __rcu_process_callbacks kernel/rcu/tree.c:2897 [inline]
 rcu_process_callbacks+0x1981/0x2000 kernel/rcu/tree.c:2914
 __do_softirq+0x56d/0x93d kernel/softirq.c:285
 run_ksoftirqd+0x1f/0x40 kernel/softirq.c:646
 smpboot_thread_fn+0x488/0x970 kernel/smpboot.c:164
 kthread+0x4e3/0x6d0 kernel/kthread.c:241
device syz_tun entered promiscuous mode
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:412

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 rcu_cblist_dequeue+0x216/0x270 kernel/rcu/rcu_segcblist.c:54
 rcu_do_batch kernel/rcu/tree.c:2672 [inline]
 invoke_rcu_callbacks kernel/rcu/tree.c:2930 [inline]
 __rcu_process_callbacks kernel/rcu/tree.c:2897 [inline]
 rcu_process_callbacks+0x176e/0x2000 kernel/rcu/tree.c:2914
 __do_softirq+0x56d/0x93d kernel/softirq.c:285
Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 rcu_segcblist_enqueue+0x24c/0x2d0 kernel/rcu/rcu_segcblist.c:150
 __call_rcu+0x227/0xef0 kernel/rcu/tree.c:3057
 kfree_call_rcu+0x35/0x40 kernel/rcu/tree.c:3139
 __free_vmap_area+0x562/0x650 mm/vmalloc.c:585
 __purge_vmap_area_lazy+0x2c1/0x3b0 mm/vmalloc.c:702
 try_purge_vmap_area_lazy mm/vmalloc.c:717 [inline]
 free_vmap_area_noflush+0x1fa/0x230 mm/vmalloc.c:749
 free_unmap_vmap_area mm/vmalloc.c:759 [inline]
 remove_vm_area+0x3b9/0x460 mm/vmalloc.c:1504
 __vunmap+0xb0/0x3e0 mm/vmalloc.c:1522
 vfree+0x79/0x170 mm/vmalloc.c:1606
 snd_pcm_lib_free_vmalloc_buffer+0xba/0x170 sound/core/pcm_memory.c:433
 loopback_hw_free+0x1d9/0x270 sound/drivers/aloop.c:604
 snd_pcm_release_substream+0x69e/0x9c0 sound/core/pcm_native.c:2356
 snd_pcm_oss_release_file sound/core/oss/pcm_oss.c:2382 [inline]
 snd_pcm_oss_release+0x30b/0x4c0 sound/core/oss/pcm_oss.c:2562
 __fput+0x457/0xa10 fs/file_table.c:209
 ____fput+0x37/0x40 fs/file_table.c:243
 task_work_run+0x243/0x2c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x10e1/0x38d0 kernel/exit.c:867
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0xfcb/0x1f40 kernel/signal.c:2482
 do_signal+0xb8/0x1cf0 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265
 do_syscall_64+0x1af/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:189
 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:315
 __kmalloc_node+0xe25/0x11f0 mm/slub.c:3865
 kmalloc_node include/linux/slab.h:554 [inline]
 alloc_vmap_area+0x1e6/0x15a0 mm/vmalloc.c:419
 __get_vm_area_node+0x3ab/0x810 mm/vmalloc.c:1409
 __vmalloc_node_range+0x2a7/0x1170 mm/vmalloc.c:1754
 __vmalloc_node mm/vmalloc.c:1804 [inline]
 __vmalloc_node_flags mm/vmalloc.c:1818 [inline]
 vzalloc+0xd8/0xf0 mm/vmalloc.c:1857
 alloc_counters+0x99/0x910 net/ipv4/netfilter/ip_tables.c:801
 copy_entries_to_user net/ipv4/netfilter/ip_tables.c:823 [inline]
 get_entries net/ipv4/netfilter/ip_tables.c:1025 [inline]
 do_ipt_get_ctl+0x832/0x1110 net/ipv4/netfilter/ip_tables.c:1701
 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline]
 nf_getsockopt+0x47b/0x4e0 net/netfilter/nf_sockopt.c:122
 ip_getsockopt+0x284/0x3c0 net/ipv4/ip_sockglue.c:1564
 tcp_getsockopt+0x1c1/0x1f0 net/ipv4/tcp.c:3349
 sock_common_getsockopt+0x13a/0x170 net/core/sock.c:2998
 __sys_getsockopt+0x49b/0x560 net/socket.c:1940
 __do_sys_getsockopt net/socket.c:1951 [inline]
 __se_sys_getsockopt net/socket.c:1948 [inline]
 __x64_sys_getsockopt+0x15d/0x1c0 net/socket.c:1948
 do_syscall_64+0x152/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
==================================================================