================================================================== BUG: KMSAN: uninit-value in hrtimer_active+0x22d/0x330 kernel/time/hrtimer.c:1329 CPU: 1 PID: 4514 Comm: syz-executor5 Not tainted 4.17.0-rc3+ #90 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683 hrtimer_active+0x22d/0x330 kernel/time/hrtimer.c:1329 entity_tick kernel/sched/fair.c:4491 [inline] task_tick_fair+0x6c7/0x1050 kernel/sched/fair.c:9948 scheduler_tick+0x288/0x480 kernel/sched/core.c:3077 update_process_times+0x157/0x1a0 kernel/time/timer.c:1641 tick_sched_handle kernel/time/tick-sched.c:164 [inline] tick_sched_timer+0x3ba/0x520 kernel/time/tick-sched.c:1274 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc03/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863 RIP: 0010:finish_lock_switch+0x38/0x50 kernel/sched/core.c:2606 RSP: 0018:ffff880147e3fc20 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: ffff88021f2dac40 RBX: ffff880147e108d8 RCX: ffff880000000000 RDX: ffff88021f2dbc40 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 RBP: ffff880147e3fc38 R08: 0000000001080020 R09: 0000000000000002 R10: ffffffff7fffffff R11: 0000000000000000 R12: ffff88021fd3ec40 R13: 0000000000000001 R14: 0000000000000000 R15: ffff88021f2dac40 finish_task_switch+0xdb/0x230 kernel/sched/core.c:2705 context_switch kernel/sched/core.c:2855 [inline] __schedule+0x688/0x730 kernel/sched/core.c:3496 schedule+0x1cc/0x2f0 kernel/sched/core.c:3555 freezable_schedule include/linux/freezer.h:172 [inline] do_nanosleep+0x2c3/0x9b0 kernel/time/hrtimer.c:1689 hrtimer_nanosleep kernel/time/hrtimer.c:1743 [inline] __do_sys_nanosleep kernel/time/hrtimer.c:1775 [inline] __se_sys_nanosleep+0x41a/0x6a0 kernel/time/hrtimer.c:1762 __x64_sys_nanosleep+0x92/0xc0 kernel/time/hrtimer.c:1762 do_syscall_64+0x154/0x220 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x481080 RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 RAX: ffffffffffffffda RBX: 0000000000000032 RCX: 0000000000481080 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 RBP: 000000000001c11e R08: 0000000000000001 R09: 000000000252b940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000002 R14: 0000000000000163 R15: 000000000001c104 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 __run_hrtimer kernel/time/hrtimer.c:1369 [inline] __hrtimer_run_queues+0x786/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 timerqueue_add+0x472/0x4f0 lib/timerqueue.c:61 enqueue_hrtimer kernel/time/hrtimer.c:960 [inline] __run_hrtimer kernel/time/hrtimer.c:1413 [inline] __hrtimer_run_queues+0x1228/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 timerqueue_add+0x472/0x4f0 lib/timerqueue.c:61 enqueue_hrtimer kernel/time/hrtimer.c:960 [inline] __run_hrtimer kernel/time/hrtimer.c:1413 [inline] __hrtimer_run_queues+0x1228/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 timerqueue_add+0x472/0x4f0 lib/timerqueue.c:61 enqueue_hrtimer kernel/time/hrtimer.c:960 [inline] __run_hrtimer kernel/time/hrtimer.c:1413 [inline] __hrtimer_run_queues+0x1228/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 timerqueue_add+0x472/0x4f0 lib/timerqueue.c:61 enqueue_hrtimer kernel/time/hrtimer.c:960 [inline] __run_hrtimer kernel/time/hrtimer.c:1413 [inline] __hrtimer_run_queues+0x1228/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 timerqueue_add+0x472/0x4f0 lib/timerqueue.c:61 enqueue_hrtimer kernel/time/hrtimer.c:960 [inline] __run_hrtimer kernel/time/hrtimer.c:1413 [inline] __hrtimer_run_queues+0x1228/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 timerqueue_add+0x472/0x4f0 lib/timerqueue.c:61 enqueue_hrtimer kernel/time/hrtimer.c:960 [inline] __run_hrtimer kernel/time/hrtimer.c:1413 [inline] __hrtimer_run_queues+0x1228/0x15d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave Variable was created at: _raw_spin_lock_irqsave+0x45/0xf0 kernel/locking/spinlock.c:150 hrtimer_interrupt+0x107/0x13c0 kernel/time/hrtimer.c:1499 ==================================================================