=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbd1/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Not tainted 5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbd1/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbde/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbde/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:312 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1275/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1275/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:313 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1295/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:313 [inline]
 profile_hits+0x1295/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbd1/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbd1/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbde/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbde/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x54/0xa0 mm/kmsan/kmsan_instr.c:147
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1285/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:309 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1252/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:309 [inline]
 profile_hits+0x1252/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbd1/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbd1/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbde/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbde/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x54/0xa0 mm/kmsan/kmsan_instr.c:147
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1285/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:309 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1252/0x12f0 kernel/profile.c:398
CPU: 1 PID: 148 Comm: kworker/u4:3 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:309 [inline]
 profile_hits+0x1252/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0018:ffff888103c479a0 EFLAGS: 00000206
RAX: ffff888237a54b58 RBX: 0000000000000000 RCX: 000000022644db58
RDX: ffff88822644db58 RSI: 0000000000000020 RDI: ffffffff9245bb58
RBP: ffff888103c479b8 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9245bb58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 srcu_funnel_gp_start kernel/rcu/srcutree.c:692 [inline]
 srcu_gp_start_if_needed+0x1116/0x1730 kernel/rcu/srcutree.c:843
 __call_srcu kernel/rcu/srcutree.c:888 [inline]
 __synchronize_srcu kernel/rcu/srcutree.c:934 [inline]
 synchronize_srcu_expedited+0x297/0x2f0 kernel/rcu/srcutree.c:960
 synchronize_srcu+0x434/0x7c0 kernel/rcu/srcutree.c:1011
 fsnotify_connector_destroy_workfn+0x95/0x190 fs/notify/mark.c:164
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 10402 Comm: syz-executor.4 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:kmsan_get_metadata+0x166/0x180 mm/kmsan/kmsan_shadow.c:197
Code: 00 00 00 00 00 16 00 00 48 01 c8 48 c1 e8 04 48 b9 00 d0 cc cc cc cc cc cc 48 0f af c8 48 09 d9 48 b8 00 00 00 00 80 88 ff ff <e9> fd fe ff ff 31 c0 5b 41 5e 41 5f 5d c3 0f 0b 66 2e 0f 1f 84 00
RSP: 0018:ffff888067e66d80 EFLAGS: 00000206
RAX: ffff888000000000 RBX: 0000000000000e48 RCX: 0000000067666e48
RDX: 0000000067e66e48 RSI: 00000000000000c0 RDI: ffff888067e66e48
RBP: ffff888067e66d98 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000b9d61c83 R11: 00000000ffffffff R12: ffff888067e66e48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
 kmsan_get_shadow_origin_ptr+0x6f/0xb0 mm/kmsan/kmsan_shadow.c:145
 __msan_metadata_ptr_for_load_4+0x10/0x20 mm/kmsan/kmsan_instr.c:54
 csd_lock_wait kernel/smp.c:228 [inline]
 smp_call_function_single+0x47e/0x690 kernel/smp.c:516
 smp_call_function_many_cond+0xdd9/0x1190 kernel/smp.c:652
 smp_call_function_many kernel/smp.c:715 [inline]
 smp_call_function kernel/smp.c:737 [inline]
 on_each_cpu+0xe7/0x1c0 kernel/smp.c:836
 flush_tlb_kernel_range+0x19d/0x220 arch/x86/mm/tlb.c:957
 kmsan_map_kernel_range_noflush+0x1c4/0x210 mm/kmsan/kmsan_shadow.c:320
 map_kernel_range_noflush mm/vmalloc.c:329 [inline]
 map_kernel_range mm/vmalloc.c:339 [inline]
 __vmalloc_area_node mm/vmalloc.c:2540 [inline]
 __vmalloc_node_range+0xc83/0x1310 mm/vmalloc.c:2590
 __vmalloc_node mm/vmalloc.c:2633 [inline]
 vmalloc+0xe0/0xf0 mm/vmalloc.c:2666
 xt_compat_init_offsets+0x299/0x430 net/netfilter/x_tables.c:713
 ebt_compat_init_offsets net/bridge/netfilter/ebtables.c:1694 [inline]
 compat_table_info+0x168/0x14a0 net/bridge/netfilter/ebtables.c:1705
 compat_do_ebt_get_ctl net/bridge/netfilter/ebtables.c:2258 [inline]
 do_ebt_get_ctl+0x9f8/0x4230 net/bridge/netfilter/ebtables.c:2321
 nf_getsockopt+0x571/0x5d0 net/netfilter/nf_sockopt.c:116
 ip_getsockopt+0x1b95/0x3a80 net/ipv4/ip_sockglue.c:1777
 tcp_getsockopt+0x1de/0x210 net/ipv4/tcp.c:4239
 sock_common_getsockopt+0x13a/0x170 net/core/sock.c:3236
 __sys_getsockopt+0x68a/0xc10 net/socket.c:2161
 __do_compat_sys_socketcall net/compat.c:495 [inline]
 __se_compat_sys_socketcall+0xdbd/0x16b0 net/compat.c:424
 __ia32_compat_sys_socketcall+0x3e/0x60 net/compat.c:424
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x127/0x180 arch/x86/entry/common.c:142
 do_fast_syscall_32+0x77/0xd0 arch/x86/entry/common.c:168
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:211
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fdb549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000ffae7f50 EFLAGS: 00000286 ORIG_RAX: 0000000000000066
RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffae7f68
RDX: 00000000ffae7fe0 RSI: 000000000816c0d4 RDI: 00000000ffae7fe0
RBP: 000000000816c000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x54/0xa0 mm/kmsan/kmsan_instr.c:147
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1285/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 10402 Comm: syz-executor.4 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:kmsan_get_metadata+0x166/0x180 mm/kmsan/kmsan_shadow.c:197
Code: 00 00 00 00 00 16 00 00 48 01 c8 48 c1 e8 04 48 b9 00 d0 cc cc cc cc cc cc 48 0f af c8 48 09 d9 48 b8 00 00 00 00 80 88 ff ff <e9> fd fe ff ff 31 c0 5b 41 5e 41 5f 5d c3 0f 0b 66 2e 0f 1f 84 00
RSP: 0018:ffff888067e66d80 EFLAGS: 00000206
RAX: ffff888000000000 RBX: 0000000000000e48 RCX: 0000000067666e48
RDX: 0000000067e66e48 RSI: 00000000000000c0 RDI: ffff888067e66e48
RBP: ffff888067e66d98 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000b9d61c83 R11: 00000000ffffffff R12: ffff888067e66e48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
 kmsan_get_shadow_origin_ptr+0x6f/0xb0 mm/kmsan/kmsan_shadow.c:145
 __msan_metadata_ptr_for_load_4+0x10/0x20 mm/kmsan/kmsan_instr.c:54
 csd_lock_wait kernel/smp.c:228 [inline]
 smp_call_function_single+0x47e/0x690 kernel/smp.c:516
 smp_call_function_many_cond+0xdd9/0x1190 kernel/smp.c:652
 smp_call_function_many kernel/smp.c:715 [inline]
 smp_call_function kernel/smp.c:737 [inline]
 on_each_cpu+0xe7/0x1c0 kernel/smp.c:836
 flush_tlb_kernel_range+0x19d/0x220 arch/x86/mm/tlb.c:957
 kmsan_map_kernel_range_noflush+0x1c4/0x210 mm/kmsan/kmsan_shadow.c:320
 map_kernel_range_noflush mm/vmalloc.c:329 [inline]
 map_kernel_range mm/vmalloc.c:339 [inline]
 __vmalloc_area_node mm/vmalloc.c:2540 [inline]
 __vmalloc_node_range+0xc83/0x1310 mm/vmalloc.c:2590
 __vmalloc_node mm/vmalloc.c:2633 [inline]
 vmalloc+0xe0/0xf0 mm/vmalloc.c:2666
 xt_compat_init_offsets+0x299/0x430 net/netfilter/x_tables.c:713
 ebt_compat_init_offsets net/bridge/netfilter/ebtables.c:1694 [inline]
 compat_table_info+0x168/0x14a0 net/bridge/netfilter/ebtables.c:1705
 compat_do_ebt_get_ctl net/bridge/netfilter/ebtables.c:2258 [inline]
 do_ebt_get_ctl+0x9f8/0x4230 net/bridge/netfilter/ebtables.c:2321
 nf_getsockopt+0x571/0x5d0 net/netfilter/nf_sockopt.c:116
 ip_getsockopt+0x1b95/0x3a80 net/ipv4/ip_sockglue.c:1777
 tcp_getsockopt+0x1de/0x210 net/ipv4/tcp.c:4239
 sock_common_getsockopt+0x13a/0x170 net/core/sock.c:3236
 __sys_getsockopt+0x68a/0xc10 net/socket.c:2161
 __do_compat_sys_socketcall net/compat.c:495 [inline]
 __se_compat_sys_socketcall+0xdbd/0x16b0 net/compat.c:424
 __ia32_compat_sys_socketcall+0x3e/0x60 net/compat.c:424
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x127/0x180 arch/x86/entry/common.c:142
 do_fast_syscall_32+0x77/0xd0 arch/x86/entry/common.c:168
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:211
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fdb549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000ffae7f50 EFLAGS: 00000286 ORIG_RAX: 0000000000000066
RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffae7f68
RDX: 00000000ffae7fe0 RSI: 000000000816c0d4 RDI: 00000000ffae7fe0
RBP: 000000000816c000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x54/0xa0 mm/kmsan/kmsan_instr.c:147
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1285/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 10402 Comm: syz-executor.4 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:kmsan_get_metadata+0x166/0x180 mm/kmsan/kmsan_shadow.c:197
Code: 00 00 00 00 00 16 00 00 48 01 c8 48 c1 e8 04 48 b9 00 d0 cc cc cc cc cc cc 48 0f af c8 48 09 d9 48 b8 00 00 00 00 80 88 ff ff <e9> fd fe ff ff 31 c0 5b 41 5e 41 5f 5d c3 0f 0b 66 2e 0f 1f 84 00
RSP: 0018:ffff888067e66d80 EFLAGS: 00000206
RAX: ffff888000000000 RBX: 0000000000000e48 RCX: 0000000067666e48
RDX: 0000000067e66e48 RSI: 00000000000000c0 RDI: ffff888067e66e48
RBP: ffff888067e66d98 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000b9d61c83 R11: 00000000ffffffff R12: ffff888067e66e48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
 kmsan_get_shadow_origin_ptr+0x6f/0xb0 mm/kmsan/kmsan_shadow.c:145
 __msan_metadata_ptr_for_load_4+0x10/0x20 mm/kmsan/kmsan_instr.c:54
 csd_lock_wait kernel/smp.c:228 [inline]
 smp_call_function_single+0x47e/0x690 kernel/smp.c:516
 smp_call_function_many_cond+0xdd9/0x1190 kernel/smp.c:652
 smp_call_function_many kernel/smp.c:715 [inline]
 smp_call_function kernel/smp.c:737 [inline]
 on_each_cpu+0xe7/0x1c0 kernel/smp.c:836
 flush_tlb_kernel_range+0x19d/0x220 arch/x86/mm/tlb.c:957
 kmsan_map_kernel_range_noflush+0x1c4/0x210 mm/kmsan/kmsan_shadow.c:320
 map_kernel_range_noflush mm/vmalloc.c:329 [inline]
 map_kernel_range mm/vmalloc.c:339 [inline]
 __vmalloc_area_node mm/vmalloc.c:2540 [inline]
 __vmalloc_node_range+0xc83/0x1310 mm/vmalloc.c:2590
 __vmalloc_node mm/vmalloc.c:2633 [inline]
 vmalloc+0xe0/0xf0 mm/vmalloc.c:2666
 xt_compat_init_offsets+0x299/0x430 net/netfilter/x_tables.c:713
 ebt_compat_init_offsets net/bridge/netfilter/ebtables.c:1694 [inline]
 compat_table_info+0x168/0x14a0 net/bridge/netfilter/ebtables.c:1705
 compat_do_ebt_get_ctl net/bridge/netfilter/ebtables.c:2258 [inline]
 do_ebt_get_ctl+0x9f8/0x4230 net/bridge/netfilter/ebtables.c:2321
 nf_getsockopt+0x571/0x5d0 net/netfilter/nf_sockopt.c:116
 ip_getsockopt+0x1b95/0x3a80 net/ipv4/ip_sockglue.c:1777
 tcp_getsockopt+0x1de/0x210 net/ipv4/tcp.c:4239
 sock_common_getsockopt+0x13a/0x170 net/core/sock.c:3236
 __sys_getsockopt+0x68a/0xc10 net/socket.c:2161
 __do_compat_sys_socketcall net/compat.c:495 [inline]
 __se_compat_sys_socketcall+0xdbd/0x16b0 net/compat.c:424
 __ia32_compat_sys_socketcall+0x3e/0x60 net/compat.c:424
 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline]
 __do_fast_syscall_32+0x127/0x180 arch/x86/entry/common.c:142
 do_fast_syscall_32+0x77/0xd0 arch/x86/entry/common.c:168
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:211
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fdb549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000ffae7f50 EFLAGS: 00000286 ORIG_RAX: 0000000000000066
RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffae7f68
RDX: 00000000ffae7fe0 RSI: 000000000816c0d4 RDI: 00000000ffae7fe0
RBP: 000000000816c000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x54/0xa0 mm/kmsan/kmsan_instr.c:147
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1285/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650

Local variable ----bucket_expiry@__mod_timer created at:
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
 __mod_timer+0x90/0x22b0 kernel/time/timer.c:959
=====================================================