KMSAN: uninit-value in calc_wheel

Kernel	Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KMSAN: uninit-value in calc_wheel_index kernel	7				1	2684d	2684d	0/29	closed as invalid on 2018/06/27 15:08

RDX: 00000000fffffe5e RSI: 0000000020000000 RDI: 0000000000000013 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 R13: 00000000004bfe23 R14: 00000000004d0320 R15: 0000000000000000 ================================================================== BUG: KMSAN: uninit-value in calc_wheel_index+0xb4/0x440 kernel/time/timer.c:499 CPU: 1 PID: 8188 Comm: kworker/1:5 Not tainted 4.17.0+ #9 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events defense_work_handler Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1125 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620 calc_wheel_index+0xb4/0x440 kernel/time/timer.c:499 __internal_add_timer kernel/time/timer.c:547 [inline] internal_add_timer kernel/time/timer.c:590 [inline] __mod_timer+0x1aee/0x2bf0 kernel/time/timer.c:1055 mod_timer kernel/time/timer.c:1102 [inline] add_timer+0xab/0xf0 kernel/time/timer.c:1138 __queue_delayed_work+0x28e/0x450 kernel/workqueue.c:1533 queue_delayed_work_on+0x1e8/0x210 kernel/workqueue.c:1558 queue_delayed_work include/linux/workqueue.h:526 [inline] schedule_delayed_work include/linux/workqueue.h:627 [inline] defense_work_handler+0x108/0x120 net/netfilter/ipvs/ip_vs_ctl.c:232 process_one_work+0x12e4/0x1fa0 kernel/workqueue.c:2145 worker_thread+0x113c/0x24f0 kernel/workqueue.c:2279 kthread+0x4db/0x6c0 kernel/kthread.c:241 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:413 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 do_timer+0xa0/0xc0 kernel/time/timekeeping.c:2177 tick_do_update_jiffies64+0x28a/0x4b0 kernel/time/tick-sched.c:88 tick_sched_do_timer kernel/time/tick-sched.c:135 [inline] tick_sched_timer+0xf8/0x520 kernel/time/tick-sched.c:1267 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 do_timer+0xa0/0xc0 kernel/time/timekeeping.c:2177 tick_do_update_jiffies64+0x28a/0x4b0 kernel/time/tick-sched.c:88 tick_sched_do_timer kernel/time/tick-sched.c:135 [inline] tick_sched_timer+0xf8/0x520 kernel/time/tick-sched.c:1267 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 do_timer+0xa0/0xc0 kernel/time/timekeeping.c:2177 tick_do_update_jiffies64+0x28a/0x4b0 kernel/time/tick-sched.c:88 tick_sched_do_timer kernel/time/tick-sched.c:135 [inline] tick_sched_timer+0xf8/0x520 kernel/time/tick-sched.c:1267 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 do_timer+0xa0/0xc0 kernel/time/timekeeping.c:2177 tick_do_update_jiffies64+0x28a/0x4b0 kernel/time/tick-sched.c:88 tick_sched_do_timer kernel/time/tick-sched.c:135 [inline] tick_sched_timer+0xf8/0x520 kernel/time/tick-sched.c:1267 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 do_timer+0xa0/0xc0 kernel/time/timekeeping.c:2177 tick_do_update_jiffies64+0x28a/0x4b0 kernel/time/tick-sched.c:88 tick_sched_do_timer kernel/time/tick-sched.c:135 [inline] tick_sched_timer+0xf8/0x520 kernel/time/tick-sched.c:1267 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 do_timer+0xa0/0xc0 kernel/time/timekeeping.c:2177 tick_do_update_jiffies64+0x28a/0x4b0 kernel/time/tick-sched.c:88 tick_sched_do_timer kernel/time/tick-sched.c:135 [inline] tick_sched_timer+0xf8/0x520 kernel/time/tick-sched.c:1267 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 do_timer+0xa0/0xc0 kernel/time/timekeeping.c:2177 tick_do_update_jiffies64+0x28a/0x4b0 kernel/time/tick-sched.c:88 tick_sched_do_timer kernel/time/tick-sched.c:135 [inline] tick_sched_timer+0xf8/0x520 kernel/time/tick-sched.c:1267 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Local variable description: ----info.i.i@syscall_return_slowpath Variable was created at: syscall_return_slowpath+0x6b/0x710 arch/x86/entry/common.c:247 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 ==================================================================