=====================================================
BUG: KMSAN: uninit-value in ___bpf_prog_run+0x8b1b/0x97a0 kernel/bpf/core.c:1586
CPU: 1 PID: 31470 Comm: syz-executor.5 Not tainted 5.7.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x220 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121
 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215
 ___bpf_prog_run+0x8b1b/0x97a0 kernel/bpf/core.c:1586
 __bpf_prog_run32+0x101/0x170 kernel/bpf/core.c:1681
 bpf_dispatcher_nop_func include/linux/bpf.h:545 [inline]
 bpf_prog_run_pin_on_cpu include/linux/filter.h:599 [inline]
 bpf_prog_run_clear_cb include/linux/filter.h:721 [inline]
 run_filter net/packet/af_packet.c:2012 [inline]
 packet_rcv+0x70f/0x2160 net/packet/af_packet.c:2085
 dev_queue_xmit_nit+0x1199/0x1270 net/core/dev.c:2276
 xmit_one net/core/dev.c:3473 [inline]
 dev_hard_start_xmit+0x20f/0xab0 net/core/dev.c:3493
 __dev_queue_xmit+0x2f8d/0x3b20 net/core/dev.c:4052
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4085
 hsr_xmit net/hsr/hsr_forward.c:228 [inline]
 hsr_forward_do net/hsr/hsr_forward.c:285 [inline]
 hsr_forward_skb+0x2614/0x30d0 net/hsr/hsr_forward.c:361
 send_hsr_supervision_frame+0x10a7/0x1500 net/hsr/hsr_device.c:304
 hsr_announce+0x1e2/0x370 net/hsr/hsr_device.c:332
 call_timer_fn+0x218/0x510 kernel/time/timer.c:1405
 expire_timers kernel/time/timer.c:1450 [inline]
 __run_timers+0xcff/0x1210 kernel/time/timer.c:1774
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1787
 __do_softirq+0x311/0x83d kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:546
 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1143
 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:834
 </IRQ>
RIP: 0010:kmsan_slab_alloc+0xb4/0xe0 mm/kmsan/kmsan_hooks.c:83
Code: eb 0a ba 01 00 00 00 e8 1a ed ff ff be ff ff ff ff 65 0f c1 35 ad d6 35 51 ff ce 75 1c e8 84 01 31 ff 4c 89 65 d8 ff 75 d8 9d <48> 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 31 3a 29 bc
RSP: 0018:ffffab22413ff358 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 79dda329734f6600 RBX: ffff8d12b72c3cc0 RCX: 0000000000000031
RDX: 0000000000000030 RSI: 0000000000000000 RDI: ffff8d12b72c3cc0
RBP: ffffab22413ff388 R08: ffffdd1e4000000f R09: ffff8d1322bfb000
R10: 000000000000000e R11: ffffffffbb80083d R12: 0000000000000246
R13: 0000000000000000 R14: 0000000000000a20 R15: ffff8d13207f81c0
 slab_alloc_node mm/slub.c:2802 [inline]
 slab_alloc mm/slub.c:2811 [inline]
 kmem_cache_alloc+0x711/0xd70 mm/slub.c:2816
 dst_alloc+0x2b6/0x8e0 net/core/dst.c:93
 rt_dst_alloc net/ipv4/route.c:1628 [inline]
 __mkroute_output net/ipv4/route.c:2442 [inline]
 ip_route_output_key_hash_rcu+0x261c/0x3810 net/ipv4/route.c:2671
 ip_route_output_key_hash net/ipv4/route.c:2497 [inline]
 __ip_route_output_key include/net/route.h:126 [inline]
 ip_route_output_flow+0x1e1/0x3d0 net/ipv4/route.c:2760
 udp_sendmsg+0x3056/0x4100 net/ipv4/udp.c:1144
 inet_sendmsg+0x276/0x2e0 net/ipv4/af_inet.c:807
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0x1056/0x1350 net/socket.c:2362
 ___sys_sendmsg net/socket.c:2416 [inline]
 __sys_sendmmsg+0x863/0xd60 net/socket.c:2499
 __compat_sys_sendmmsg net/compat.c:672 [inline]
 __do_compat_sys_sendmmsg net/compat.c:679 [inline]
 __se_compat_sys_sendmmsg+0xcd/0xf0 net/compat.c:676
 __ia32_compat_sys_sendmmsg+0x56/0x70 net/compat.c:676
 do_syscall_32_irqs_on arch/x86/entry/common.c:339 [inline]
 do_fast_syscall_32+0x3bf/0x6d0 arch/x86/entry/common.c:398
 entry_SYSENTER_compat+0x68/0x77 arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7fdcdd9
Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f5dd70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020006d00
RDX: 0000000000000237 RSI: 000000001ffffffe RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:310
 __msan_chain_origin+0x50/0x90 mm/kmsan/kmsan_instr.c:165
 ___bpf_prog_run+0x6cbe/0x97a0 kernel/bpf/core.c:1391
 __bpf_prog_run32+0x101/0x170 kernel/bpf/core.c:1681
 bpf_dispatcher_nop_func include/linux/bpf.h:545 [inline]
 bpf_prog_run_pin_on_cpu include/linux/filter.h:599 [inline]
 bpf_prog_run_clear_cb include/linux/filter.h:721 [inline]
 run_filter net/packet/af_packet.c:2012 [inline]
 packet_rcv+0x70f/0x2160 net/packet/af_packet.c:2085
 dev_queue_xmit_nit+0x1199/0x1270 net/core/dev.c:2276
 xmit_one net/core/dev.c:3473 [inline]
 dev_hard_start_xmit+0x20f/0xab0 net/core/dev.c:3493
 __dev_queue_xmit+0x2f8d/0x3b20 net/core/dev.c:4052
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4085
 hsr_xmit net/hsr/hsr_forward.c:228 [inline]
 hsr_forward_do net/hsr/hsr_forward.c:285 [inline]
 hsr_forward_skb+0x2614/0x30d0 net/hsr/hsr_forward.c:361
 send_hsr_supervision_frame+0x10a7/0x1500 net/hsr/hsr_device.c:304
 hsr_announce+0x1e2/0x370 net/hsr/hsr_device.c:332
 call_timer_fn+0x218/0x510 kernel/time/timer.c:1405
 expire_timers kernel/time/timer.c:1450 [inline]
 __run_timers+0xcff/0x1210 kernel/time/timer.c:1774
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1787
 __do_softirq+0x311/0x83d kernel/softirq.c:293

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:310
 __msan_chain_origin+0x50/0x90 mm/kmsan/kmsan_instr.c:165
 ___bpf_prog_run+0x6c64/0x97a0 kernel/bpf/core.c:1391
 __bpf_prog_run32+0x101/0x170 kernel/bpf/core.c:1681
 bpf_dispatcher_nop_func include/linux/bpf.h:545 [inline]
 bpf_prog_run_pin_on_cpu include/linux/filter.h:599 [inline]
 bpf_prog_run_clear_cb include/linux/filter.h:721 [inline]
 run_filter net/packet/af_packet.c:2012 [inline]
 packet_rcv+0x70f/0x2160 net/packet/af_packet.c:2085
 dev_queue_xmit_nit+0x1199/0x1270 net/core/dev.c:2276
 xmit_one net/core/dev.c:3473 [inline]
 dev_hard_start_xmit+0x20f/0xab0 net/core/dev.c:3493
 __dev_queue_xmit+0x2f8d/0x3b20 net/core/dev.c:4052
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4085
 hsr_xmit net/hsr/hsr_forward.c:228 [inline]
 hsr_forward_do net/hsr/hsr_forward.c:285 [inline]
 hsr_forward_skb+0x2614/0x30d0 net/hsr/hsr_forward.c:361
 send_hsr_supervision_frame+0x10a7/0x1500 net/hsr/hsr_device.c:304
 hsr_announce+0x1e2/0x370 net/hsr/hsr_device.c:332
 call_timer_fn+0x218/0x510 kernel/time/timer.c:1405
 expire_timers kernel/time/timer.c:1450 [inline]
 __run_timers+0xcff/0x1210 kernel/time/timer.c:1774
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1787
 __do_softirq+0x311/0x83d kernel/softirq.c:293

Local variable ----regs@__bpf_prog_run32 created at:
 __bpf_prog_run32+0x87/0x170 kernel/bpf/core.c:1681
 __bpf_prog_run32+0x87/0x170 kernel/bpf/core.c:1681
=====================================================