=====================================================
BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 kernel/smp.c:549
 __flush_smp_call_function_queue+0x343/0x1810 kernel/smp.c:549
 generic_smp_call_function_single_interrupt+0x1c/0x30 kernel/smp.c:477
 __sysvec_call_function_single+0x48/0x350 arch/x86/kernel/smp.c:272
 instr_sysvec_call_function_single arch/x86/kernel/smp.c:267 [inline]
 sysvec_call_function_single+0x7c/0x90 arch/x86/kernel/smp.c:267
 asm_sysvec_call_function_single+0x1f/0x30 arch/x86/include/asm/idtentry.h:704
 kmsan_get_shadow_origin_ptr+0xa/0xb0 mm/kmsan/shadow.c:83
 get_shadow_origin_ptr mm/kmsan/instrumentation.c:38 [inline]
 __msan_metadata_ptr_for_load_8+0x24/0x40 mm/kmsan/instrumentation.c:94
 task_stack_page include/linux/sched/task_stack.h:23 [inline]
 last_frame arch/x86/kernel/unwind_frame.c:82 [inline]
 is_last_frame arch/x86/kernel/unwind_frame.c:87 [inline]
 is_last_task_frame+0x5d/0x370 arch/x86/kernel/unwind_frame.c:156
 unwind_next_frame+0x60/0x350 arch/x86/kernel/unwind_frame.c:276
 arch_stack_walk+0x1b0/0x280 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xc2/0x100 kernel/stacktrace.c:122
 kmsan_save_stack_with_flags mm/kmsan/core.c:73 [inline]
 kmsan_internal_poison_memory+0x4a/0x90 mm/kmsan/core.c:57
 kmsan_slab_free+0xce/0x140 mm/kmsan/hooks.c:87
 slab_free_hook mm/slub.c:2615 [inline]
 slab_free mm/slub.c:6251 [inline]
 kmem_cache_free+0x254/0xea0 mm/slub.c:6378
 kfree_skbmem net/core/skbuff.c:-1 [inline]
 __kfree_skb+0x20b/0x260 net/core/skbuff.c:1204
 sk_skb_reason_drop+0x126/0x490 net/core/skbuff.c:1241
 packet_rcv+0xafb/0x2430 net/packet/af_packet.c:2224
 dev_queue_xmit_nit+0xfa4/0x1170 net/core/dev.c:2606
 xmit_one net/core/dev.c:3884 [inline]
 dev_hard_start_xmit+0x16b/0xa80 net/core/dev.c:3904
 sch_direct_xmit+0x3b2/0xcf0 net/sched/sch_generic.c:372
 __dev_xmit_skb net/core/dev.c:4209 [inline]
 __dev_queue_xmit+0x3592/0x5a00 net/core/dev.c:4831
 dev_queue_xmit include/linux/netdevice.h:3418 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0x19c0/0x1e00 net/ipv4/ip_output.c:237
 __ip_finish_output net/ipv4/ip_output.c:-1 [inline]
 ip_finish_output+0x288/0x860 net/ipv4/ip_output.c:325
 NF_HOOK_COND include/linux/netfilter.h:307 [inline]
 ip_output+0x14f/0x3e0 net/ipv4/ip_output.c:438
 dst_output include/net/dst.h:470 [inline]
 ip_local_out net/ipv4/ip_output.c:131 [inline]
 __ip_queue_xmit+0x1f82/0x20b0 net/ipv4/ip_output.c:534
 ip_queue_xmit+0x60/0x80 net/ipv4/ip_output.c:548
 __tcp_transmit_skb+0x4d3c/0x5fe0 net/ipv4/tcp_output.c:1715
 tcp_transmit_skb net/ipv4/tcp_output.c:1733 [inline]
 tcp_write_xmit+0x4e9a/0xa0b0 net/ipv4/tcp_output.c:3061
 __tcp_push_pending_frames+0xc5/0x3c0 net/ipv4/tcp_output.c:3244
 tcp_push+0x72c/0x840 net/ipv4/tcp.c:773
 tcp_sendmsg_locked+0x73fe/0x80b0 net/ipv4/tcp.c:1415
 tcp_sendmsg+0x4b/0x90 net/ipv4/tcp.c:1452
 inet_sendmsg+0x134/0x290 net/ipv4/af_inet.c:866
 sock_sendmsg_nosec net/socket.c:787 [inline]
 __sock_sendmsg net/socket.c:802 [inline]
 sock_write_iter+0x667/0x7e0 net/socket.c:1254
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0xbe1/0x15c0 fs/read_write.c:688
 ksys_write+0x1d9/0x470 fs/read_write.c:740
 __do_sys_write fs/read_write.c:751 [inline]
 __se_sys_write fs/read_write.c:748 [inline]
 __ia32_sys_write+0x9a/0xf0 fs/read_write.c:748
 ia32_sys_call+0x37a7/0x4360 arch/x86/include/generated/asm/syscalls_32.h:5
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline]
 __do_fast_syscall_32+0x195/0x470 arch/x86/entry/syscall_32.c:307
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/syscall_32.c:332
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:370
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e

Local variable warn created at:
 __dquot_alloc_space+0x4d/0x1cd0 fs/quota/dquot.c:1709
 dquot_alloc_space_nodirty include/linux/quotaops.h:292 [inline]
 dquot_alloc_block_nodirty include/linux/quotaops.h:319 [inline]
 shmem_inode_acct_blocks+0x376/0x5d0 mm/shmem.c:242

CPU: 0 UID: 0 PID: 5566 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
=====================================================