=====================================================
BUG: KMSAN: uninit-value in do_user_addr_fault+0x860/0x1f20 arch/x86/mm/fault.c:1341
 do_user_addr_fault+0x860/0x1f20 arch/x86/mm/fault.c:1341
 handle_page_fault arch/x86/mm/fault.c:1505 [inline]
 exc_page_fault+0x61/0x140 arch/x86/mm/fault.c:1561
 asm_exc_page_fault+0x1e/0x30

Local variable regs created at:
 __bpf_prog_run32+0x84/0x180 kernel/bpf/core.c:2073
 bpf_dispatcher_nop_func include/linux/bpf.h:804 [inline]
 __bpf_prog_run include/linux/filter.h:628 [inline]
 bpf_prog_run include/linux/filter.h:635 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2022 [inline]
 bpf_trace_run2+0x129/0x380 kernel/trace/bpf_trace.c:2059

CPU: 1 PID: 6990 Comm: syz-executor.2 Not tainted 5.18.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
=====================================================
Kernel panic - not syncing: kmsan.panic set ...
CPU: 1 PID: 6990 Comm: syz-executor.2 Tainted: G    B             5.18.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106
 dump_stack+0x25/0x28 lib/dump_stack.c:113
 panic+0x4fe/0xc73 kernel/panic.c:250
 kmsan_report+0x2cd/0x2d0 mm/kmsan/report.c:208
 __msan_warning+0x94/0x110 mm/kmsan/instrumentation.c:256
 do_user_addr_fault+0x860/0x1f20 arch/x86/mm/fault.c:1341
 handle_page_fault arch/x86/mm/fault.c:1505 [inline]
 exc_page_fault+0x61/0x140 arch/x86/mm/fault.c:1561
 asm_exc_page_fault+0x1e/0x30
RIP: 0023:0xf6e0f64e
Code: ff 81 c2 db 69 12 00 56 89 c1 53 83 ec 04 8b 9a c8 f2 f5 00 8b b2 c0 f2 f5 00 8b 82 c4 f2 f5 00 01 de 39 d8 72 15 39 f0 73 11 <89> 08 8d 48 04 89 8a c4 f2 f5 00 83 c4 04 5b 5e c3 83 ec 0c 56 53
RSP: 002b:00000000ffa98cb0 EFLAGS: 00010287
RAX: 000000002de20000 RBX: 000000002de20000 RCX: 0000000000000000
RDX: 00000000f6f36000 RSI: 000000002e420000 RDI: 00000000f6f36000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
Kernel Offset: disabled
Rebooting in 86400 seconds..
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	81 c2 db 69 12 00    	add    $0x1269db,%edx
   6:	56                   	push   %rsi
   7:	89 c1                	mov    %eax,%ecx
   9:	53                   	push   %rbx
   a:	83 ec 04             	sub    $0x4,%esp
   d:	8b 9a c8 f2 f5 00    	mov    0xf5f2c8(%rdx),%ebx
  13:	8b b2 c0 f2 f5 00    	mov    0xf5f2c0(%rdx),%esi
  19:	8b 82 c4 f2 f5 00    	mov    0xf5f2c4(%rdx),%eax
  1f:	01 de                	add    %ebx,%esi
  21:	39 d8                	cmp    %ebx,%eax
  23:	72 15                	jb     0x3a
  25:	39 f0                	cmp    %esi,%eax
  27:	73 11                	jae    0x3a
* 29:	89 08                	mov    %ecx,(%rax) <-- trapping instruction
  2b:	8d 48 04             	lea    0x4(%rax),%ecx
  2e:	89 8a c4 f2 f5 00    	mov    %ecx,0xf5f2c4(%rdx)
  34:	83 c4 04             	add    $0x4,%esp
  37:	5b                   	pop    %rbx
  38:	5e                   	pop    %rsi
  39:	c3                   	retq
  3a:	83 ec 0c             	sub    $0xc,%esp
  3d:	56                   	push   %rsi
  3e:	53                   	push   %rbx