=====================================================
BUG: KMSAN: use-after-free in slab_alloc_node mm/slub.c:2762 [inline]
BUG: KMSAN: use-after-free in kmem_cache_alloc_node+0x5a9/0xe60 mm/slub.c:2836
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.0-rc5+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x128/0x220 mm/kmsan/kmsan_report.c:108
 __msan_warning+0x73/0xe0 mm/kmsan/kmsan_instr.c:245
 slab_alloc_node mm/slub.c:2762 [inline]
 kmem_cache_alloc_node+0x5a9/0xe60 mm/slub.c:2836
 __alloc_skb+0x215/0xa10 net/core/skbuff.c:197
 alloc_skb include/linux/skbuff.h:1050 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x205/0xa80 drivers/block/aoe/aoecmd.c:1372
 discover_timer+0x86/0xa0 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x232/0x530 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers+0xd60/0x1270 kernel/time/timer.c:1773
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1786
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 run_ksoftirqd+0x25/0x40 kernel/softirq.c:607
 smpboot_thread_fn+0x4a3/0x990 kernel/smpboot.c:165
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:151 [inline]
 kmsan_internal_chain_origin+0xbd/0x180 mm/kmsan/kmsan.c:319
 __msan_chain_origin+0x6b/0xd0 mm/kmsan/kmsan_instr.c:179
 ___slab_alloc+0x1dbc/0x1fb0 mm/slub.c:2636
 __slab_alloc mm/slub.c:2689 [inline]
 slab_alloc_node mm/slub.c:2763 [inline]
 kmem_cache_alloc_node+0xaf4/0xe60 mm/slub.c:2836
 __alloc_skb+0x215/0xa10 net/core/skbuff.c:197
 alloc_skb include/linux/skbuff.h:1050 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x205/0xa80 drivers/block/aoe/aoecmd.c:1372
 discover_timer+0x86/0xa0 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x232/0x530 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers+0xd60/0x1270 kernel/time/timer.c:1773
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1786
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 run_ksoftirqd+0x25/0x40 kernel/softirq.c:607
 smpboot_thread_fn+0x4a3/0x990 kernel/smpboot.c:165
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:151 [inline]
 kmsan_internal_poison_shadow+0x60/0x120 mm/kmsan/kmsan.c:134
 kmsan_slab_free+0x8d/0xf0 mm/kmsan/kmsan_hooks.c:108
 slab_free_freelist_hook mm/slub.c:1473 [inline]
 slab_free mm/slub.c:3046 [inline]
 kmem_cache_free_bulk+0x3ad9/0x3f10 mm/slub.c:3171
 __kfree_skb_flush+0xb0/0x100 net/core/skbuff.c:862
 net_rx_action+0x1a5e/0x1aa0 net/core/dev.c:6483
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 do_IRQ+0x123/0x360 arch/x86/kernel/irq.c:263
 ret_from_intr+0x0/0x33
 native_irq_enable arch/x86/include/asm/irqflags.h:54 [inline]
 arch_local_irq_enable arch/x86/include/asm/irqflags.h:94 [inline]
 do_user_addr_fault+0x2de/0x1510 arch/x86/mm/fault.c:1358
 __do_page_fault+0x1a2/0x410 arch/x86/mm/fault.c:1526
 do_page_fault+0xbb/0x500 arch/x86/mm/fault.c:1550
 page_fault+0x4e/0x60 arch/x86/entry/entry_64.S:1214
=====================================================