================================================================== BUG: KMSAN: uninit-value in __hlist_del include/linux/list.h:703 [inline] BUG: KMSAN: uninit-value in detach_timer kernel/time/timer.c:817 [inline] BUG: KMSAN: uninit-value in expire_timers kernel/time/timer.c:1353 [inline] BUG: KMSAN: uninit-value in __run_timers+0xc85/0x11d0 kernel/time/timer.c:1682 CPU: 1 PID: 10668 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #3 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x173/0x1d0 lib/dump_stack.c:113 kmsan_report+0x12e/0x2a0 mm/kmsan/kmsan.c:613 __msan_warning+0x82/0xf0 mm/kmsan/kmsan_instr.c:313 __hlist_del include/linux/list.h:703 [inline] detach_timer kernel/time/timer.c:817 [inline] expire_timers kernel/time/timer.c:1353 [inline] __run_timers+0xc85/0x11d0 kernel/time/timer.c:1682 run_timer_softirq+0x2e/0x50 kernel/time/timer.c:1695 __do_softirq+0x53f/0x93a kernel/softirq.c:293 invoke_softirq kernel/softirq.c:375 [inline] irq_exit+0x214/0x250 kernel/softirq.c:416 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:536 smp_apic_timer_interrupt+0x48/0x70 arch/x86/kernel/apic/apic.c:1063 apic_timer_interrupt+0x2e/0x40 arch/x86/entry/entry_64.S:814 RIP: 0010:queued_fetch_set_pending_acquire arch/x86/include/asm/qspinlock.h:23 [inline] RIP: 0010:queued_spin_lock_slowpath+0x542/0xb80 kernel/locking/qspinlock.c:363 Code: 8b 7d b0 e9 03 03 00 00 8b 3a e8 a9 50 88 00 85 db 75 15 eb 39 8b 7d c8 e8 9b 50 88 00 eb 10 66 0f 1f 84 00 00 00 00 00 f3 90 <4d> 85 e4 75 e6 41 8b 1f 44 21 f3 4c 89 ff e8 5b 46 88 00 0f b6 00 RSP: 0018:ffff888044def408 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888217df76d0 RDX: ffff88820bdf06d0 RSI: 0000160000000000 RDI: ccccccccccccd000 RBP: ffff888044def498 R08: ffff888044def468 R09: 00000000fffffffe R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 00000000000000ff R15: ffffffff8c60d6d0 queued_spin_lock include/asm-generic/qspinlock.h:90 [inline] do_raw_spin_lock include/linux/spinlock.h:180 [inline] __raw_spin_lock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_lock+0x108/0x110 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] alloc_vmap_area+0x3da/0x15f0 mm/vmalloc.c:432 __get_vm_area_node+0x3e6/0x7f0 mm/vmalloc.c:1397 get_vm_area+0xbf/0xd0 mm/vmalloc.c:1435 kmsan_vmalloc_area_node+0x6d/0x1b0 mm/kmsan/kmsan_hooks.c:250 __vmalloc_area_node mm/vmalloc.c:1709 [inline] __vmalloc_node_range+0xc14/0x13a0 mm/vmalloc.c:1756 __vmalloc_node mm/vmalloc.c:1801 [inline] vmalloc_user+0xde/0x440 mm/vmalloc.c:1871 kcov_mmap+0x2a/0x120 kernel/kcov.c:279 call_mmap include/linux/fs.h:1862 [inline] mmap_region+0x2d98/0x3aa0 mm/mmap.c:1786 do_mmap+0x183e/0x1e70 mm/mmap.c:1559 do_mmap_pgoff include/linux/mm.h:2328 [inline] vm_mmap_pgoff+0x313/0x430 mm/util.c:350 ksys_mmap_pgoff+0xa2e/0xae0 mm/mmap.c:1609 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:100 [inline] __se_sys_mmap+0x172/0x1a0 arch/x86/kernel/sys_x86_64.c:91 __x64_sys_mmap+0x69/0x90 arch/x86/kernel/sys_x86_64.c:91 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x457f1a Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 RSP: 002b:00007ffe966ceeb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f1a RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 RBP: 00000000000000ed R08: 00000000000000ed R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000200000 R14: 0000000000000001 R15: 0000000000000000 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:204 [inline] kmsan_internal_poison_shadow+0x92/0x150 mm/kmsan/kmsan.c:158 kmsan_kmalloc+0xa6/0x130 mm/kmsan/kmsan_hooks.c:176 kmsan_slab_alloc+0xe/0x10 mm/kmsan/kmsan_hooks.c:185 slab_post_alloc_hook mm/slab.h:446 [inline] slab_alloc_node mm/slub.c:2759 [inline] slab_alloc mm/slub.c:2767 [inline] __kmalloc_track_caller+0xafc/0xce0 mm/slub.c:4353 kmemdup+0x7a/0xf0 mm/util.c:111 __devinet_sysctl_register+0xe4/0x780 net/ipv4/devinet.c:2471 devinet_sysctl_register+0x2ef/0x3a0 net/ipv4/devinet.c:2523 inetdev_init+0x54e/0xa00 net/ipv4/devinet.c:274 inetdev_event+0x417/0x1d80 net/ipv4/devinet.c:1479 notifier_call_chain kernel/notifier.c:93 [inline] __raw_notifier_call_chain kernel/notifier.c:394 [inline] raw_notifier_call_chain+0x13d/0x240 kernel/notifier.c:401 call_netdevice_notifiers_info net/core/dev.c:1733 [inline] call_netdevice_notifiers net/core/dev.c:1751 [inline] register_netdevice+0x210d/0x2660 net/core/dev.c:8570 team_newlink+0x15e/0x1d0 drivers/net/team/team.c:2132 rtnl_newlink+0x283a/0x35c0 net/core/rtnetlink.c:3175 rtnetlink_rcv_msg+0x115b/0x1550 net/core/rtnetlink.c:4950 netlink_rcv_skb+0x444/0x640 net/netlink/af_netlink.c:2477 rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:4968 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline] netlink_unicast+0xf40/0x1020 net/netlink/af_netlink.c:1336 netlink_sendmsg+0x127f/0x1300 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg net/socket.c:631 [inline] __sys_sendto+0x8c4/0xac0 net/socket.c:1788 __do_sys_sendto net/socket.c:1800 [inline] __se_sys_sendto+0x107/0x130 net/socket.c:1796 __x64_sys_sendto+0x6e/0x90 net/socket.c:1796 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x63/0xe7 ==================================================================