=====================================================
BUG: KMSAN: uninit-value in __alloc_skb+0x215/0xa10 net/core/skbuff.c:197
CPU: 0 PID: 12551 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x13a/0x2b0 mm/kmsan/kmsan_report.c:108
 __msan_warning+0x73/0xe0 mm/kmsan/kmsan_instr.c:250
 slab_alloc_node mm/slub.c:2749 [inline]
 kmem_cache_alloc_node+0x5d0/0xe70 mm/slub.c:2828
 __alloc_skb+0x215/0xa10 net/core/skbuff.c:197
 alloc_skb include/linux/skbuff.h:1056 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x205/0xa80 drivers/block/aoe/aoecmd.c:1372
 discover_timer+0x86/0xa0 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x232/0x530 kernel/time/timer.c:1322
 expire_timers kernel/time/timer.c:1366 [inline]
 __run_timers+0xcdc/0x11a0 kernel/time/timer.c:1685
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1698
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:537
 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:837
 </IRQ>
RIP: 0010:kmsan_alloc_page+0x30e/0x360 mm/kmsan/kmsan_shadow.c:401
Code: c3 50 48 39 c1 7c e5 65 ff 0d 02 ef fe 7d 65 8b 05 fb ee fe 7d 85 c0 75 39 e8 4e 20 38 ff 48 8b 45 b0 48 89 45 a8 ff 75 a8 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 12 44 89 f8 48 83 c4 30
RSP: 0018:ffff888190e4f858 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000246 RBX: ffffea0007cdb748 RCX: 0000000000000010
RDX: ffffea0007d5feb0 RSI: 0000000000000004 RDI: ffffea0007d5fa00
RBP: ffff888190e4f8b0 R08: 0000000000000000 R09: ffff88812fc41410
R10: ffffffff8ea3a170 R11: ffffffff8182a660 R12: ffffea0007b6d300
R13: 0000000000000001 R14: ffffea0007d5ff00 R15: 0000000000000000
 __alloc_pages_nodemask+0x142d/0x5fa0 mm/page_alloc.c:4757
 __alloc_pages include/linux/gfp.h:475 [inline]
 __alloc_pages_node include/linux/gfp.h:488 [inline]
 alloc_pages_node include/linux/gfp.h:502 [inline]
 alloc_thread_stack_node kernel/fork.c:249 [inline]
 dup_task_struct kernel/fork.c:856 [inline]
 copy_process+0xa9f/0x8e30 kernel/fork.c:1858
 _do_fork+0x25c/0xeb0 kernel/fork.c:2371
 __do_sys_clone kernel/fork.c:2526 [inline]
 __se_sys_clone+0x32a/0x370 kernel/fork.c:2507
 __x64_sys_clone+0x62/0x80 kernel/fork.c:2507
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x45c429
Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
RSP: 002b:0000000000a6fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6ab766a700 RCX: 000000000045c429
RDX: 00007f6ab766a9d0 RSI: 00007f6ab7669db0 RDI: 00000000003d0f00
RBP: 0000000000a6fce0 R08: 00007f6ab766a700 R09: 00007f6ab766a700
R10: 00007f6ab766a9d0 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000a6fb7f R14: 00007f6ab766a9c0 R15: 000000000075bf2c

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:150 [inline]
 kmsan_internal_chain_origin+0xd2/0x170 mm/kmsan/kmsan.c:314
 __msan_chain_origin+0x6b/0xe0 mm/kmsan/kmsan_instr.c:184
 ___slab_alloc+0x1dbc/0x1fb0 mm/slub.c:2634
 __slab_alloc mm/slub.c:2687 [inline]
 slab_alloc_node mm/slub.c:2750 [inline]
 kmem_cache_alloc_node+0x769/0xe70 mm/slub.c:2828
 __alloc_skb+0x215/0xa10 net/core/skbuff.c:197
 alloc_skb include/linux/skbuff.h:1056 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:426 [inline]
 aoecmd_cfg+0x205/0xa80 drivers/block/aoe/aoecmd.c:1372
 discover_timer+0x86/0xa0 drivers/block/aoe/aoemain.c:24
 call_timer_fn+0x232/0x530 kernel/time/timer.c:1322
 expire_timers kernel/time/timer.c:1366 [inline]
 __run_timers+0xcdc/0x11a0 kernel/time/timer.c:1685
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1698
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:537
 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:837
 native_restore_fl arch/x86/include/asm/irqflags.h:41 [inline]
 arch_local_irq_restore arch/x86/include/asm/irqflags.h:84 [inline]
 kmsan_alloc_page+0x30e/0x360 mm/kmsan/kmsan_shadow.c:401
 __alloc_pages_nodemask+0x142d/0x5fa0 mm/page_alloc.c:4757
 __alloc_pages include/linux/gfp.h:475 [inline]
 __alloc_pages_node include/linux/gfp.h:488 [inline]
 alloc_pages_node include/linux/gfp.h:502 [inline]
 alloc_thread_stack_node kernel/fork.c:249 [inline]
 dup_task_struct kernel/fork.c:856 [inline]
 copy_process+0xa9f/0x8e30 kernel/fork.c:1858
 _do_fork+0x25c/0xeb0 kernel/fork.c:2371
 __do_sys_clone kernel/fork.c:2526 [inline]
 __se_sys_clone+0x32a/0x370 kernel/fork.c:2507
 __x64_sys_clone+0x62/0x80 kernel/fork.c:2507
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x63/0xe7

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:150 [inline]
 kmsan_internal_poison_shadow+0x53/0x100 mm/kmsan/kmsan.c:134
 kmsan_slab_free+0x8d/0x100 mm/kmsan/kmsan_hooks.c:123
 slab_free_freelist_hook mm/slub.c:1472 [inline]
 slab_free mm/slub.c:3038 [inline]
 kmem_cache_free_bulk+0x3ad9/0x3f50 mm/slub.c:3163
 __kfree_skb_flush+0xb0/0x100 net/core/skbuff.c:862
 net_rx_action+0x1908/0x1950 net/core/dev.c:6441
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 run_ksoftirqd+0x25/0x40 kernel/softirq.c:607
 smpboot_thread_fn+0x4a3/0x990 kernel/smpboot.c:165
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355
=====================================================