=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbd1/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Not tainted 5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbd1/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbde/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbde/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:312 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1275/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1275/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:313 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1295/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:313 [inline]
 profile_hits+0x1295/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbd1/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbd1/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbde/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbde/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x54/0xa0 mm/kmsan/kmsan_instr.c:147
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1285/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:309 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1252/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:309 [inline]
 profile_hits+0x1252/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbd1/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbd1/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbde/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbde/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:289
 __msan_chain_origin+0x54/0xa0 mm/kmsan/kmsan_instr.c:147
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1285/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:309 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1252/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8217 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:309 [inline]
 profile_hits+0x1252/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff8881213469b8 EFLAGS: 00000206
RAX: ffff888104362a48 RBX: ffff88810573c500 RCX: 0000000104762a48
RDX: ffff888104762a48 RSI: 0000000000000200 RDI: ffff888104b62a48
RBP: ffff8881213469d0 R08: ffffea000000000f R09: ffff88813fffa000
R10: ffffffff7fffffff R11: ffff888127061f40 R12: ffff888104b62a48
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 virtscsi_add_cmd+0xab3/0xc10 drivers/scsi/virtio_scsi.c:498
 virtscsi_queuecommand+0xf9e/0x11c0 drivers/scsi/virtio_scsi.c:591
 scsi_dispatch_cmd+0x661/0xc80 drivers/scsi/scsi_lib.c:1528
 scsi_queue_rq+0x4063/0x4ad0 drivers/scsi/scsi_lib.c:1692
 blk_mq_dispatch_rq_list+0x97d/0x3660 block/blk-mq.c:1369
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
 blk_mq_do_dispatch_sched+0xb61/0x1490 block/blk-mq-sched.c:199
 __blk_mq_sched_dispatch_requests+0x62b/0x960 block/blk-mq-sched.c:310
 blk_mq_sched_dispatch_requests+0x1a4/0x360 block/blk-mq-sched.c:341
 __blk_mq_run_hw_queue+0x16a/0x2a0 block/blk-mq.c:1488
 __blk_mq_delay_run_hw_queue+0x1ae/0x800 block/blk-mq.c:1565
 blk_mq_run_hw_queue+0x540/0x760 block/blk-mq.c:1618
 blk_mq_sched_insert_requests+0x4e7/0x730 block/blk-mq-sched.c:491
 blk_mq_flush_plug_list+0x999/0xc40 block/blk-mq.c:1942
 blk_flush_plug_list+0x71f/0x7a0 block/blk-core.c:1749
 blk_finish_plug+0xa0/0xd0 block/blk-core.c:1766
 read_pages+0xb50/0x1720 mm/readahead.c:150
 page_cache_ra_unbounded+0xe4e/0xf40 mm/readahead.c:238
 do_page_cache_ra+0x289/0x2a0 mm/readahead.c:267
 do_sync_mmap_readahead+0xa8b/0xc10 mm/filemap.c:2810
 filemap_fault+0x5da/0x2520 mm/filemap.c:2898
 ext4_filemap_fault+0xbb/0x130 fs/ext4/inode.c:6196
 __do_fault mm/memory.c:3639 [inline]
 do_read_fault+0x9f6/0x11e0 mm/memory.c:3941
 do_fault mm/memory.c:4069 [inline]
 handle_pte_fault mm/memory.c:4320 [inline]
 __handle_mm_fault mm/memory.c:4455 [inline]
 handle_mm_fault+0x3be2/0x4ef0 mm/memory.c:4553
 do_user_addr_fault+0x159a/0x2650 arch/x86/mm/fault.c:1403
 handle_page_fault arch/x86/mm/fault.c:1488 [inline]
 __exc_page_fault+0xe3/0x340 arch/x86/mm/fault.c:1544
 exc_page_fault+0x45/0x50 arch/x86/mm/fault.c:1500
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x44db66
Code: cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 d3 00 00 00 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 48 8b 4c 24 30 <48> 8b 01 48 8b 54 24 40 48 89 c3 48 f7 e2 70 4b 48 ba 00 00 00 00
RSP: 002b:000000c0002bf9a8 EFLAGS: 00010212
RAX: 000000c01488e240 RBX: 0000000000000002 RCX: 0000000000750be0
RDX: 0000000000750be0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000c0002bf9c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
R13: 000000c000001c80 R14: 0000008ce9b952fa R15: 00000000000000aa

Local variable ----sgs.i@virtscsi_add_cmd created at:
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:423 [inline]
 virtscsi_add_cmd+0x181/0xc10 drivers/scsi/virtio_scsi.c:494
=====================================================
clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large:
clocksource:                       'acpi_pm' wd_now: 389688 wd_last: ab0e3f mask: ffffff
clocksource:                       'tsc' cs_now: 14b16100ae7 cs_last: 147305f560b mask: ffffffffffffffff
tsc: Marking TSC unstable due to clocksource watchdog
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbd1/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8449 Comm: kworker/1:4 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events nsim_dev_trap_report_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbd1/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff88808a6b7970 EFLAGS: 00000206
RAX: ffff8880bb53f648 RBX: 0000000000000000 RCX: 00000000bb93f648
RDX: ffff8880bb93f648 RSI: 0000000000000200 RDI: ffff88810013f648
RBP: ffff88808a6b7988 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000314593d1 R11: 0000000070fa8d48 R12: ffff88810013f648
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 _extract_crng+0x678/0x6c0 drivers/char/random.c:1019
 extract_crng drivers/char/random.c:1032 [inline]
 _get_random_bytes+0x373/0x560 drivers/char/random.c:1555
 get_random_bytes+0x106/0x2f0 drivers/char/random.c:1568
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:540 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:570 [inline]
 nsim_dev_trap_report_work+0xa28/0x1180 drivers/net/netdevsim/dev.c:611
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----sg.i@wg_packet_decrypt_worker created at:
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbde/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8449 Comm: kworker/1:4 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events nsim_dev_trap_report_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbde/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff88808a6b7970 EFLAGS: 00000206
RAX: ffff8880bb53f648 RBX: 0000000000000000 RCX: 00000000bb93f648
RDX: ffff8880bb93f648 RSI: 0000000000000200 RDI: ffff88810013f648
RBP: ffff88808a6b7988 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000314593d1 R11: 0000000070fa8d48 R12: ffff88810013f648
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 _extract_crng+0x678/0x6c0 drivers/char/random.c:1019
 extract_crng drivers/char/random.c:1032 [inline]
 _get_random_bytes+0x373/0x560 drivers/char/random.c:1555
 get_random_bytes+0x106/0x2f0 drivers/char/random.c:1568
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:540 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:570 [inline]
 nsim_dev_trap_report_work+0xa28/0x1180 drivers/net/netdevsim/dev.c:611
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----sg.i@wg_packet_decrypt_worker created at:
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:308 [inline]
BUG: KMSAN: uninit-value in profile_hits+0xbeb/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8449 Comm: kworker/1:4 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events nsim_dev_trap_report_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:308 [inline]
 profile_hits+0xbeb/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff88808a6b7970 EFLAGS: 00000206
RAX: ffff8880bb53f648 RBX: 0000000000000000 RCX: 00000000bb93f648
RDX: ffff8880bb93f648 RSI: 0000000000000200 RDI: ffff88810013f648
RBP: ffff88808a6b7988 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000314593d1 R11: 0000000070fa8d48 R12: ffff88810013f648
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 _extract_crng+0x678/0x6c0 drivers/char/random.c:1019
 extract_crng drivers/char/random.c:1032 [inline]
 _get_random_bytes+0x373/0x560 drivers/char/random.c:1555
 get_random_bytes+0x106/0x2f0 drivers/char/random.c:1568
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:540 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:570 [inline]
 nsim_dev_trap_report_work+0xa28/0x1180 drivers/net/netdevsim/dev.c:611
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----sg.i@wg_packet_decrypt_worker created at:
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:312 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1275/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8449 Comm: kworker/1:4 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events nsim_dev_trap_report_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:312 [inline]
 profile_hits+0x1275/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff88808a6b7970 EFLAGS: 00000206
RAX: ffff8880bb53f648 RBX: 0000000000000000 RCX: 00000000bb93f648
RDX: ffff8880bb93f648 RSI: 0000000000000200 RDI: ffff88810013f648
RBP: ffff88808a6b7988 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000314593d1 R11: 0000000070fa8d48 R12: ffff88810013f648
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 _extract_crng+0x678/0x6c0 drivers/char/random.c:1019
 extract_crng drivers/char/random.c:1032 [inline]
 _get_random_bytes+0x373/0x560 drivers/char/random.c:1555
 get_random_bytes+0x106/0x2f0 drivers/char/random.c:1568
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:540 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:570 [inline]
 nsim_dev_trap_report_work+0xa28/0x1180 drivers/net/netdevsim/dev.c:611
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----sg.i@wg_packet_decrypt_worker created at:
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507
=====================================================
=====================================================
BUG: KMSAN: uninit-value in do_profile_hits kernel/profile.c:313 [inline]
BUG: KMSAN: uninit-value in profile_hits+0x1295/0x12f0 kernel/profile.c:398
CPU: 1 PID: 8449 Comm: kworker/1:4 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events nsim_dev_trap_report_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 do_profile_hits kernel/profile.c:313 [inline]
 profile_hits+0x1295/0x12f0 kernel/profile.c:398
 profile_hit include/linux/profile.h:64 [inline]
 profile_tick+0x215/0x220 kernel/profile.c:408
 tick_sched_handle kernel/time/tick-sched.c:227 [inline]
 tick_sched_timer+0x472/0x5b0 kernel/time/tick-sched.c:1369
 __run_hrtimer+0x48b/0xd20 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x6e2/0x1b50 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x470 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0xc1/0xf0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:_raw_spin_unlock_irqrestore+0x62/0x80 kernel/locking/spinlock.c:192
Code: 00 00 41 c6 04 24 00 81 e3 00 02 00 00 41 81 e7 00 02 00 00 48 85 db 74 0a f7 d3 44 21 fb 48 85 db 74 16 4d 85 ff 74 01 fb 5b <41> 5c 41 5e 41 5f 5d c3 e8 11 ca b6 f2 eb be 44 89 f7 e8 07 ca b6
RSP: 0000:ffff88808a6b7970 EFLAGS: 00000206
RAX: ffff8880bb53f648 RBX: 0000000000000000 RCX: 00000000bb93f648
RDX: ffff8880bb93f648 RSI: 0000000000000200 RDI: ffff88810013f648
RBP: ffff88808a6b7988 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000314593d1 R11: 0000000070fa8d48 R12: ffff88810013f648
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 _extract_crng+0x678/0x6c0 drivers/char/random.c:1019
 extract_crng drivers/char/random.c:1032 [inline]
 _get_random_bytes+0x373/0x560 drivers/char/random.c:1555
 get_random_bytes+0x106/0x2f0 drivers/char/random.c:1568
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:540 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:570 [inline]
 nsim_dev_trap_report_work+0xa28/0x1180 drivers/net/netdevsim/dev.c:611
 process_one_work+0x1219/0x1fe0 kernel/workqueue.c:2275
 worker_thread+0x10ec/0x2340 kernel/workqueue.c:2421
 kthread+0x521/0x560 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Local variable ----sg.i@wg_packet_decrypt_worker created at:
 decrypt_packet drivers/net/wireguard/receive.c:250 [inline]
 wg_packet_decrypt_worker+0x456/0x17b0 drivers/net/wireguard/receive.c:507