=====================================================
BUG: KMSAN: use-after-free in __read_once_size include/linux/compiler.h:206 [inline]
BUG: KMSAN: use-after-free in arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline]
BUG: KMSAN: use-after-free in atomic_read include/asm-generic/atomic-instrumented.h:27 [inline]
BUG: KMSAN: use-after-free in refcount_read include/linux/refcount.h:134 [inline]
BUG: KMSAN: use-after-free in cryptd_hash_complete crypto/cryptd.c:524 [inline]
BUG: KMSAN: use-after-free in cryptd_hash_init+0x431/0x4f0 crypto/cryptd.c:552
CPU: 0 PID: 13651 Comm: kworker/0:4 Not tainted 5.5.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: cryptd cryptd_queue_worker
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x220 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215
 __read_once_size include/linux/compiler.h:206 [inline]
 arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline]
 atomic_read include/asm-generic/atomic-instrumented.h:27 [inline]
 refcount_read include/linux/refcount.h:134 [inline]
 cryptd_hash_complete crypto/cryptd.c:524 [inline]
 cryptd_hash_init+0x431/0x4f0 crypto/cryptd.c:552
 cryptd_queue_worker+0x174/0x2e0 crypto/cryptd.c:180
 process_one_work+0x1552/0x1ef0 kernel/workqueue.c:2264
 worker_thread+0xef6/0x2450 kernel/workqueue.c:2410
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:353

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline]
 kmsan_internal_poison_shadow+0x66/0xd0 mm/kmsan/kmsan.c:127
 kmsan_slab_free+0x6e/0xb0 mm/kmsan/kmsan_hooks.c:107
 slab_free_freelist_hook mm/slub.c:1458 [inline]
 slab_free mm/slub.c:3021 [inline]
 kfree+0x565/0x30a0 mm/slub.c:3974
 tls_free_rec net/tls/tls_sw.c:352 [inline]
 tls_free_open_rec net/tls/tls_sw.c:362 [inline]
 bpf_exec_tx_verdict+0x1723/0x2120 net/tls/tls_sw.c:777
 tls_sw_sendmsg+0x1a13/0x2740 net/tls/tls_sw.c:982
 inet6_sendmsg+0x2d8/0x2e0 net/ipv6/af_inet6.c:576
 sock_sendmsg_nosec net/socket.c:639 [inline]
 sock_sendmsg net/socket.c:659 [inline]
 __sys_sendto+0x8e8/0xc50 net/socket.c:1985
 __do_sys_sendto net/socket.c:1997 [inline]
 __se_sys_sendto+0x107/0x130 net/socket.c:1993
 __x64_sys_sendto+0x6e/0x90 net/socket.c:1993
 do_syscall_64+0xb8/0x160 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
=====================================================