8021q: adding VLAN 0 to HW filter on device team0 ================================================================== BUG: KMSAN: uninit-value in hrtimer_get_softexpires_tv64 include/linux/hrtimer.h:275 [inline] BUG: KMSAN: uninit-value in __hrtimer_run_queues+0x39a/0x15d0 kernel/time/hrtimer.c:1457 CPU: 1 PID: 6593 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1084 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683 hrtimer_get_softexpires_tv64 include/linux/hrtimer.h:275 [inline] __hrtimer_run_queues+0x39a/0x15d0 kernel/time/hrtimer.c:1457 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863 RIP: 0010:mem_cgroup_disabled include/linux/memcontrol.h:285 [inline] RIP: 0010:lock_page_memcg+0x41/0x300 mm/memcontrol.c:1609 RSP: 0018:ffff88014f31f1f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: ffff8801fdc8fdc8 RBX: ffffea0008ec4ca0 RCX: ffff880000000000 RDX: ffff8801fd88fdc8 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 RBP: ffff88014f31f250 R08: 0000000000000000 R09: 0000000000000002 R10: ffffffff8a001508 R11: 0000000000000000 R12: 0000000000000000 R13: ffffea0008ec4ca0 R14: 0000000000000001 R15: ffff8801525bc358 page_remove_file_rmap mm/rmap.c:1214 [inline] page_remove_rmap+0x1bb/0xe30 mm/rmap.c:1299 zap_pte_range mm/memory.c:1337 [inline] zap_pmd_range mm/memory.c:1441 [inline] zap_pud_range mm/memory.c:1470 [inline] zap_p4d_range mm/memory.c:1491 [inline] unmap_page_range+0x1db4/0x3be0 mm/memory.c:1512 unmap_single_vma+0x45b/0x5f0 mm/memory.c:1557 unmap_vmas+0x1f4/0x360 mm/memory.c:1587 exit_mmap+0x43d/0x970 mm/mmap.c:3105 __mmput+0x16c/0x610 kernel/fork.c:962 netlink: 'syz-executor6': attribute type 4 has an invalid length. mmput+0xab/0xf0 kernel/fork.c:983 exec_mmap fs/exec.c:1044 [inline] flush_old_exec+0x1adb/0x2170 fs/exec.c:1276 load_elf_binary+0x134a/0x8f70 fs/binfmt_elf.c:869 netlink: 17 bytes leftover after parsing attributes in process `syz-executor6'. search_binary_handler+0x2ef/0xac0 fs/exec.c:1653 exec_binprm fs/exec.c:1695 [inline] do_execveat_common+0x22e4/0x2da0 fs/exec.c:1817 do_execve fs/exec.c:1862 [inline] __do_sys_execve fs/exec.c:1943 [inline] __se_sys_execve fs/exec.c:1938 [inline] __x64_sys_execve+0x127/0x180 fs/exec.c:1938 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x454397 RSP: 002b:0000000000a3fac8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000454397 RDX: 00007ffcdb98c5c8 RSI: 0000000000a3fb00 RDI: 00000000004c8ca8 RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 000000000000002d R10: 0000000000000008 R11: 0000000000000207 R12: 0000000000a3ff18 R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_save_stack mm/kmsan/kmsan.c:294 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 timerqueue_add+0x472/0x4f0 lib/timerqueue.c:61 enqueue_hrtimer kernel/time/hrtimer.c:960 [inline] __run_hrtimer kernel/time/hrtimer.c:1413 [inline] __hrtimer_run_queues+0x1228/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_save_stack mm/kmsan/kmsan.c:294 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 timerqueue_add+0x472/0x4f0 lib/timerqueue.c:61 enqueue_hrtimer kernel/time/hrtimer.c:960 [inline] __run_hrtimer kernel/time/hrtimer.c:1413 [inline] __hrtimer_run_queues+0x1228/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Local variable description: ----head@free_pcppages_bulk Variable was created at: free_pcppages_bulk+0x9e/0x12e0 mm/page_alloc.c:1089 free_unref_page_commit+0x358/0x4d0 mm/page_alloc.c:2800 ==================================================================