==================================================================
BUG: KMSAN: uninit-value in pcpu_addr_in_chunk mm/percpu.c:208 [inline]
BUG: KMSAN: uninit-value in pcpu_chunk_addr_search mm/percpu.c:1308 [inline]
BUG: KMSAN: uninit-value in free_percpu+0x2b8/0xb20 mm/percpu.c:1723
CPU: 0 PID: 25383 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #101
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x149/0x260 mm/kmsan/kmsan.c:1084
 __msan_warning_32+0x6e/0xc0 mm/kmsan/kmsan_instr.c:686
 pcpu_addr_in_chunk mm/percpu.c:208 [inline]
 pcpu_chunk_addr_search mm/percpu.c:1308 [inline]
 free_percpu+0x2b8/0xb20 mm/percpu.c:1723
 ip6_dst_destroy+0x157/0x750 net/ipv6/route.c:398
 dst_destroy+0x209/0x7a0 net/core/dst.c:131
 dst_destroy_rcu+0x46/0x50 net/core/dst.c:153
 __rcu_reclaim kernel/rcu/rcu.h:178 [inline]
 rcu_do_batch kernel/rcu/tree.c:2675 [inline]
 invoke_rcu_callbacks kernel/rcu/tree.c:2930 [inline]
 __rcu_process_callbacks kernel/rcu/tree.c:2897 [inline]
 rcu_process_callbacks+0x1729/0x2020 kernel/rcu/tree.c:2914
 __do_softirq+0x56d/0x93d kernel/softirq.c:285
 invoke_softirq kernel/softirq.c:365 [inline]
 irq_exit+0x202/0x240 kernel/softirq.c:405
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525
 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863
 </IRQ>
RIP: 0010:native_restore_fl arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:78 [inline]
RIP: 0010:__msan_poison_alloca+0x14c/0x1d0 mm/kmsan/kmsan_instr.c:652
RSP: 0018:ffff88015874fcb0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000089e000c1 RBX: 0000000089e000c1 RCX: ffff88015874fcf0
RDX: 0000000000000004 RSI: 0000000000000004 RDI: 00000000e8e82de5
RBP: ffff88015874fd50 R08: 0000000001080020 R09: 0000000000000002
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff8ac8aa40 R14: 0000000000000246 R15: ffff8801b8d18000
 ktime_get_ts64+0x4c/0x820 kernel/time/timekeeping.c:867
 posix_ktime_get_ts+0x38/0x60 kernel/time/posix-timers.c:222
 __do_sys_clock_gettime kernel/time/posix-timers.c:1067 [inline]
 __se_sys_clock_gettime kernel/time/posix-timers.c:1057 [inline]
 __x64_sys_clock_gettime+0x290/0x370 kernel/time/posix-timers.c:1057
 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45882a
RSP: 002b:0000000000a3e948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045882a
RDX: 000000000072c9a0 RSI: 0000000000a3e950 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000a3e940 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000002 R14: 000000000072c9a0 R15: 00000000000f442b

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:529
 ip6_dst_alloc net/ipv6/route.c:379 [inline]
 icmp6_dst_alloc+0x674/0xc60 net/ipv6/route.c:2461
 mld_sendpack+0x70d/0x11d0 net/ipv6/mcast.c:1647
 mld_send_initial_cr+0x449/0x4c0 net/ipv6/mcast.c:2075
 mld_dad_timer_expire+0x63/0x350 net/ipv6/mcast.c:2093
 call_timer_fn+0x26a/0x5a0 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0xda7/0x11c0 kernel/time/timer.c:1666
 run_timer_softirq+0x43/0x70 kernel/time/timer.c:1692
 __do_softirq+0x56d/0x93d kernel/softirq.c:285
Local variable description: ----ac@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x196/0x5dd0 mm/page_alloc.c:4355
 alloc_pages_current+0x6b5/0x970 mm/mempolicy.c:2093
==================================================================