================================================================== BUG: KMSAN: uninit-value in __hlist_del include/linux/list.h:749 [inline] BUG: KMSAN: uninit-value in detach_timer kernel/time/timer.c:811 [inline] BUG: KMSAN: uninit-value in expire_timers kernel/time/timer.c:1356 [inline] BUG: KMSAN: uninit-value in __run_timers+0xb99/0x11a0 kernel/time/timer.c:1685 CPU: 0 PID: 6241 Comm: syz-executor.2 Not tainted 5.2.0+ #14 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x191/0x1f0 lib/dump_stack.c:113 kmsan_report+0x162/0x2d0 mm/kmsan/kmsan_report.c:109 __msan_warning+0x75/0xe0 mm/kmsan/kmsan_instr.c:294 __hlist_del include/linux/list.h:749 [inline] detach_timer kernel/time/timer.c:811 [inline] expire_timers kernel/time/timer.c:1356 [inline] __run_timers+0xb99/0x11a0 kernel/time/timer.c:1685 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1698 __do_softirq+0x4ad/0x858 kernel/softirq.c:293 invoke_softirq kernel/softirq.c:375 [inline] irq_exit+0x238/0x290 kernel/softirq.c:416 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:536 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1070 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:813 RIP: 0010:kmsan_slab_free+0xac/0x100 mm/kmsan/kmsan_hooks.c:198 Code: 00 b9 01 00 00 00 e8 43 c3 ff ff 65 ff 0d e0 51 03 7e 65 8b 05 d9 51 03 7e 85 c0 75 2e e8 8c 9d 3b ff 4c 89 7d d0 ff 75 d0 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 e0 75 0b 48 83 c4 18 5b 41 5e RSP: 0018:ffff8880ac03eca8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: ffff88812f807080 RCX: 0000000000000081 RDX: 0000000000000080 RSI: fffffdffffffffff RDI: ffff88814f4ae400 RBP: ffff8880ac03ecd8 R08: 0000000000000001 R09: 0000778000000000 R10: ffffd0ffffffffff R11: 0000100000000000 R12: 00000000b8600247 R13: 0000000000000000 R14: ffff88814f4ae200 R15: 0000000000000246 slab_free_freelist_hook mm/slub.c:1449 [inline] slab_free mm/slub.c:3021 [inline] kfree+0x4b2/0x2960 mm/slub.c:3977 skb_free_head net/core/skbuff.c:588 [inline] skb_release_data+0xaa8/0xb50 net/core/skbuff.c:608 skb_release_all net/core/skbuff.c:662 [inline] __kfree_skb+0x8a/0x210 net/core/skbuff.c:676 consume_skb+0x2b0/0x2e0 net/core/skbuff.c:736 netlink_broadcast_filtered+0x1a2e/0x1c10 net/netlink/af_netlink.c:1517 netlink_broadcast net/netlink/af_netlink.c:1539 [inline] nlmsg_multicast include/net/netlink.h:965 [inline] nlmsg_notify+0x22a/0x3b0 net/netlink/af_netlink.c:2525 rtnl_notify+0x193/0x1b0 net/core/rtnetlink.c:737 inet6_netconf_notify_devconf+0x2de/0x3d0 net/ipv6/addrconf.c:584 __addrconf_sysctl_register+0x779/0x7d0 net/ipv6/addrconf.c:6852 addrconf_sysctl_register+0x2c7/0x370 net/ipv6/addrconf.c:6889 ipv6_add_dev+0x1c02/0x1f80 net/ipv6/addrconf.c:443 ipv6_find_idev net/ipv6/addrconf.c:479 [inline] inet6_rtm_newaddr+0xb57/0x39d0 net/ipv6/addrconf.c:4772 rtnetlink_rcv_msg+0x115a/0x1580 net/core/rtnetlink.c:5214 netlink_rcv_skb+0x431/0x620 net/netlink/af_netlink.c:2482 rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:5232 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline] netlink_unicast+0xf3e/0x1020 net/netlink/af_netlink.c:1333 netlink_sendmsg+0x127e/0x12f0 net/netlink/af_netlink.c:1922 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg net/socket.c:665 [inline] __sys_sendto+0xa95/0xb90 net/socket.c:1958 __do_sys_sendto net/socket.c:1970 [inline] __se_sys_sendto+0x107/0x130 net/socket.c:1966 __x64_sys_sendto+0x6e/0x90 net/socket.c:1966 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:302 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x413663 Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 2d 2c 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff RSP: 002b:0000000000a6fad8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000413663 RDX: 0000000000000040 RSI: 0000000000a70070 RDI: 0000000000000003 RBP: 0000000000a6fb40 R08: 0000000000a6fae0 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00000000004beab4 R14: 0000000000000000 R15: 0000000000000000 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:187 [inline] kmsan_internal_poison_shadow+0x53/0xa0 mm/kmsan/kmsan.c:146 kmsan_slab_alloc+0xaa/0x120 mm/kmsan/kmsan_hooks.c:175 slab_alloc_node mm/slub.c:2773 [inline] slab_alloc mm/slub.c:2782 [inline] __kmalloc_track_caller+0xa0d/0xbe0 mm/slub.c:4361 kmemdup+0x95/0x140 mm/util.c:119 __addrconf_sysctl_register+0xe1/0x7d0 net/ipv6/addrconf.c:6824 addrconf_sysctl_register+0x2c7/0x370 net/ipv6/addrconf.c:6889 ipv6_add_dev+0x1c02/0x1f80 net/ipv6/addrconf.c:443 addrconf_notify+0x8a7/0x5790 net/ipv6/addrconf.c:3488 notifier_call_chain kernel/notifier.c:95 [inline] __raw_notifier_call_chain kernel/notifier.c:396 [inline] raw_notifier_call_chain+0x13d/0x240 kernel/notifier.c:403 call_netdevice_notifiers_info net/core/dev.c:1749 [inline] call_netdevice_notifiers_extack net/core/dev.c:1761 [inline] call_netdevice_notifiers net/core/dev.c:1775 [inline] register_netdevice+0x2126/0x2690 net/core/dev.c:8762 veth_newlink+0x10e4/0x13b0 drivers/net/veth.c:1292 __rtnl_newlink net/core/rtnetlink.c:3187 [inline] rtnl_newlink+0x2a73/0x38d0 net/core/rtnetlink.c:3245 rtnetlink_rcv_msg+0x115a/0x1580 net/core/rtnetlink.c:5214 netlink_rcv_skb+0x431/0x620 net/netlink/af_netlink.c:2482 rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:5232 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline] netlink_unicast+0xf3e/0x1020 net/netlink/af_netlink.c:1333 netlink_sendmsg+0x127e/0x12f0 net/netlink/af_netlink.c:1922 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg net/socket.c:665 [inline] __sys_sendto+0xa95/0xb90 net/socket.c:1958 __do_sys_sendto net/socket.c:1970 [inline] __se_sys_sendto+0x107/0x130 net/socket.c:1966 __x64_sys_sendto+0x6e/0x90 net/socket.c:1966 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:302 entry_SYSCALL_64_after_hwframe+0x63/0xe7 ==================================================================