=====================================================
BUG: KMSAN: uninit-value in __skb_flow_dissect+0x5153/0x8070 net/core/flow_dissector.c:1418
CPU: 1 PID: 20560 Comm: kworker/1:0 Not tainted 5.6.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events nsim_dev_trap_report_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x220 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215
 __skb_flow_dissect+0x5153/0x8070 net/core/flow_dissector.c:1418
 skb_flow_dissect include/linux/skbuff.h:1295 [inline]
 fl_classify+0x3f5/0x1310 net/sched/cls_flower.c:319
 tcf_classify+0x280/0x700 net/sched/cls_api.c:1581
 hfsc_classify net/sched/sch_hfsc.c:1132 [inline]
 hfsc_enqueue+0x536/0x1700 net/sched/sch_hfsc.c:1539
 __dev_xmit_skb net/core/dev.c:3721 [inline]
 __dev_queue_xmit+0x20b3/0x4220 net/core/dev.c:4032
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4096
 neigh_direct_output+0x42/0x50 net/core/neighbour.c:1527
 neigh_output include/net/neighbour.h:510 [inline]
 ip_finish_output2+0x1acc/0x2610 net/ipv4/ip_output.c:228
 __ip_finish_output+0xaa7/0xd80 net/ipv4/ip_output.c:306
 ip_finish_output+0x166/0x410 net/ipv4/ip_output.c:316
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0x593/0x680 net/ipv4/ip_output.c:430
 dst_output include/net/dst.h:436 [inline]
 ip_local_out+0x164/0x1d0 net/ipv4/ip_output.c:125
 iptunnel_xmit+0x899/0xe00 net/ipv4/ip_tunnel_core.c:81
 udp_tunnel_xmit_skb+0x52a/0x650 net/ipv4/udp_tunnel.c:192
 geneve_xmit_skb drivers/net/geneve.c:929 [inline]
 geneve_xmit+0x28ed/0x2c20 drivers/net/geneve.c:1004
 __netdev_start_xmit include/linux/netdevice.h:4524 [inline]
 netdev_start_xmit include/linux/netdevice.h:4538 [inline]
 xmit_one net/core/dev.c:3470 [inline]
 dev_hard_start_xmit+0x531/0xab0 net/core/dev.c:3486
 __dev_queue_xmit+0x37de/0x4220 net/core/dev.c:4063
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4096
 neigh_resolve_output+0xab0/0xb40 net/core/neighbour.c:1487
 neigh_output include/net/neighbour.h:510 [inline]
 ip6_finish_output2+0x20fd/0x2640 net/ipv6/ip6_output.c:116
 __ip6_finish_output+0x824/0x8e0 net/ipv6/ip6_output.c:142
 ip6_finish_output+0x166/0x410 net/ipv6/ip6_output.c:152
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip6_output+0x60a/0x770 net/ipv6/ip6_output.c:175
 dst_output include/net/dst.h:436 [inline]
 NF_HOOK include/linux/netfilter.h:307 [inline]
 mld_sendpack+0xeba/0x13d0 net/ipv6/mcast.c:1682
 mld_send_cr net/ipv6/mcast.c:1978 [inline]
 mld_ifc_timer_expire+0x1158/0x1750 net/ipv6/mcast.c:2477
 call_timer_fn+0x218/0x510 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers+0xcff/0x1210 kernel/time/timer.c:1773
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1786
 __do_softirq+0x311/0x83d kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:546
 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1149
 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:834
 </IRQ>
RIP: 0010:kmsan_slab_free+0x8c/0xb0 mm/kmsan/kmsan_hooks.c:111
Code: 00 00 b9 03 00 00 00 e8 12 ea ff ff be ff ff ff ff 65 0f c1 35 f5 5c 14 5c ff ce 75 1a e8 9c ee 30 ff 4c 89 7d e0 ff 75 e0 9d <48> 83 c4 10 5b 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c 28 b1 31 c0
RSP: 0018:ffffa273c17ef908 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: ff9f362039c51c00 RBX: ffff8ed09e680e00 RCX: 0000000000000039
RDX: 0000000000000038 RSI: 0000000000000000 RDI: ffff8ece87bae900
RBP: ffffa273c17ef930 R08: ffffde5ec000000f R09: ffff8ecfafffb000
R10: 000000000000000a R11: ffffffffb080083d R12: ffff8ece87bae900
R13: 0000000000000000 R14: ffff8ece87bae900 R15: 0000000000000246
 slab_free_freelist_hook mm/slub.c:1477 [inline]
 slab_free mm/slub.c:3040 [inline]
 kmem_cache_free+0x33d/0x2cf0 mm/slub.c:3056
 kfree_skbmem net/core/skbuff.c:645 [inline]
 __kfree_skb+0x1de/0x240 net/core/skbuff.c:681
 consume_skb+0x2ae/0x320 net/core/skbuff.c:839
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:390 [inline]
 nsim_dev_trap_report_work+0xaed/0x1030 drivers/net/netdevsim/dev.c:415
 process_one_work+0x1555/0x1f40 kernel/workqueue.c:2264
 worker_thread+0xef6/0x2450 kernel/workqueue.c:2410
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:353

Local variable ----skb_key@fl_classify created at:
 fl_classify+0xd4/0x1310 net/sched/cls_flower.c:303
 fl_classify+0xd4/0x1310 net/sched/cls_flower.c:303
=====================================================