=====================================================
BUG: KMSAN: uninit-value in get_running_cputimer include/linux/sched/cputime.h:80 [inline]
BUG: KMSAN: uninit-value in account_group_system_time include/linux/sched/cputime.h:144 [inline]
BUG: KMSAN: uninit-value in account_system_index_time+0x229/0x2e0 kernel/sched/cputime.c:175
get_running_cputimer include/linux/sched/cputime.h:80 [inline]
account_group_system_time include/linux/sched/cputime.h:144 [inline]
account_system_index_time+0x229/0x2e0 kernel/sched/cputime.c:175
irqtime_account_process_tick+0x11e/0x4c0 kernel/sched/cputime.c:-1
account_process_tick+0x32/0x450 kernel/sched/cputime.c:487
update_process_times+0x37/0x2d0 kernel/time/timer.c:2472
tick_sched_handle kernel/time/tick-sched.c:298 [inline]
tick_nohz_handler+0x5a0/0x7f0 kernel/time/tick-sched.c:319
__run_hrtimer kernel/time/hrtimer.c:1785 [inline]
__hrtimer_run_queues+0x579/0xc80 kernel/time/hrtimer.c:1849
hrtimer_interrupt+0x4a3/0x16b0 kernel/time/hrtimer.c:1911
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1045 [inline]
__sysvec_apic_timer_interrupt+0xad/0x4f0 arch/x86/kernel/apic/apic.c:1062
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
sysvec_apic_timer_interrupt+0x7f/0x90 arch/x86/kernel/apic/apic.c:1056
asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:697
memmove+0x28/0x1b0 arch/x86/lib/memmove_64.S:45
------------[ cut here ]------------
pool index 30820 out of bounds (803) for stack id 34747865
WARNING: lib/stackdepot.c:507 at depot_fetch_stack lib/stackdepot.c:506 [inline], CPU#0: syz.5.1671/10626
WARNING: lib/stackdepot.c:507 at stack_depot_fetch+0x89/0xc0 lib/stackdepot.c:775, CPU#0: syz.5.1671/10626
Modules linked in:
CPU: 0 UID: 0 PID: 10626 Comm: syz.5.1671 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:depot_fetch_stack lib/stackdepot.c:506 [inline]
RIP: 0010:stack_depot_fetch+0x8c/0xc0 lib/stackdepot.c:775
Code: 41 81 e6 f0 3f 00 00 42 83 7c 30 1c 00 74 40 4c 01 f0 74 1b 48 8d 48 20 49 89 0f 8b 58 14 eb 1b 48 8d 3d b7 5d 24 0c 44 89 f1 <67> 48 0f b9 3a 48 8d 3d b8 5d 24 0c 67 48 0f b9 3a 89 d8 5b 41 5e
RSP: 0018:ffff88813fc04808 EFLAGS: 00010006
RAX: ffff88823fbd4830 RBX: 0000000000000000 RCX: 0000000034747865
RDX: 0000000000000323 RSI: 0000000000007864 RDI: ffffffff92f6f340
RBP: ffff88813fc04820 R08: ffffea000000000f R09: 0000000000000000
R10: ffff88823fc83830 R11: 0000000000000001 R12: 000000000000000b
R13: ffff888057b74200 R14: 0000000034747865 R15: ffff88813fc04830
FS: 0000000000000000(0000) GS:ffff8881aa3cd000(0063) knlGS:00000000f5436b40
CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f7fd55b8 CR3: 000000011d944000 CR4: 00000000003526f0
Call Trace:
kmsan_print_origin+0x4c/0x340 mm/kmsan/report.c:100
kmsan_report+0x1d1/0x320 mm/kmsan/report.c:196
__msan_warning+0x1b/0x30 mm/kmsan/instrumentation.c:315
get_running_cputimer include/linux/sched/cputime.h:80 [inline]
account_group_system_time include/linux/sched/cputime.h:144 [inline]
account_system_index_time+0x229/0x2e0 kernel/sched/cputime.c:175
irqtime_account_process_tick+0x11e/0x4c0 kernel/sched/cputime.c:-1
account_process_tick+0x32/0x450 kernel/sched/cputime.c:487
update_process_times+0x37/0x2d0 kernel/time/timer.c:2472
tick_sched_handle kernel/time/tick-sched.c:298 [inline]
tick_nohz_handler+0x5a0/0x7f0 kernel/time/tick-sched.c:319
__run_hrtimer kernel/time/hrtimer.c:1785 [inline]
__hrtimer_run_queues+0x579/0xc80 kernel/time/hrtimer.c:1849
hrtimer_interrupt+0x4a3/0x16b0 kernel/time/hrtimer.c:1911
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1045 [inline]
__sysvec_apic_timer_interrupt+0xad/0x4f0 arch/x86/kernel/apic/apic.c:1062
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
sysvec_apic_timer_interrupt+0x7f/0x90 arch/x86/kernel/apic/apic.c:1056
asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:697
RIP: 0010:memmove+0x28/0x1b0 arch/x86/lib/memmove_64.S:45
Code: 90 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 e9 c1 c6 03 00 48 81 fa a8 02 00 00 72 05 40 38 fe 74 43 48
RSP: 0018:ffff8881299ef280 EFLAGS: 00010282
RAX: ffff8881299e1060 RBX: ffffffffffffffe4 RCX: ffffffffff855f29
RDX: ffffffffffffffe4 RSI: ffff88812a18b0fb RDI: ffff88812a18b11b
RBP: ffff8881299ef2b8 R08: ffff8881299e1024 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8881299e1040 R15: ffff8881299e1060
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
corrupt handle or use after stack_depot_put()
WARNING: lib/stackdepot.c:780 at stack_depot_fetch+0x98/0xc0 lib/stackdepot.c:780, CPU#0: syz.5.1671/10626
Modules linked in:
CPU: 0 UID: 0 PID: 10626 Comm: syz.5.1671 Tainted: G W L syzkaller #0 PREEMPT(full)
Tainted: [W]=WARN, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:stack_depot_fetch+0x98/0xc0 lib/stackdepot.c:780
Code: 00 74 40 4c 01 f0 74 1b 48 8d 48 20 49 89 0f 8b 58 14 eb 1b 48 8d 3d b7 5d 24 0c 44 89 f1 67 48 0f b9 3a 48 8d 3d b8 5d 24 0c <67> 48 0f b9 3a 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b
RSP: 0018:ffff88813fc04808 EFLAGS: 00010006
RAX: ffff88823fbd4830 RBX: 0000000000000000 RCX: 0000000034747865
RDX: 0000000000000323 RSI: 0000000000007864 RDI: ffffffff92f6f350
RBP: ffff88813fc04820 R08: ffffea000000000f R09: 0000000000000000
R10: ffff88823fc83830 R11: 0000000000000001 R12: 000000000000000b
R13: ffff888057b74200 R14: 0000000034747865 R15: ffff88813fc04830
FS: 0000000000000000(0000) GS:ffff8881aa3cd000(0063) knlGS:00000000f5436b40
CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f7fd55b8 CR3: 000000011d944000 CR4: 00000000003526f0
Call Trace:
kmsan_print_origin+0x4c/0x340 mm/kmsan/report.c:100
kmsan_report+0x1d1/0x320 mm/kmsan/report.c:196
__msan_warning+0x1b/0x30 mm/kmsan/instrumentation.c:315
get_running_cputimer include/linux/sched/cputime.h:80 [inline]
account_group_system_time include/linux/sched/cputime.h:144 [inline]
account_system_index_time+0x229/0x2e0 kernel/sched/cputime.c:175
irqtime_account_process_tick+0x11e/0x4c0 kernel/sched/cputime.c:-1
account_process_tick+0x32/0x450 kernel/sched/cputime.c:487
update_process_times+0x37/0x2d0 kernel/time/timer.c:2472
tick_sched_handle kernel/time/tick-sched.c:298 [inline]
tick_nohz_handler+0x5a0/0x7f0 kernel/time/tick-sched.c:319
__run_hrtimer kernel/time/hrtimer.c:1785 [inline]
__hrtimer_run_queues+0x579/0xc80 kernel/time/hrtimer.c:1849
hrtimer_interrupt+0x4a3/0x16b0 kernel/time/hrtimer.c:1911
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1045 [inline]
__sysvec_apic_timer_interrupt+0xad/0x4f0 arch/x86/kernel/apic/apic.c:1062
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
sysvec_apic_timer_interrupt+0x7f/0x90 arch/x86/kernel/apic/apic.c:1056
asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:697
RIP: 0010:memmove+0x28/0x1b0 arch/x86/lib/memmove_64.S:45
Code: 90 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 e9 c1 c6 03 00 48 81 fa a8 02 00 00 72 05 40 38 fe 74 43 48
RSP: 0018:ffff8881299ef280 EFLAGS: 00010282
RAX: ffff8881299e1060 RBX: ffffffffffffffe4 RCX: ffffffffff855f29
RDX: ffffffffffffffe4 RSI: ffff88812a18b0fb RDI: ffff88812a18b11b
RBP: ffff8881299ef2b8 R08: ffff8881299e1024 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8881299e1040 R15: ffff8881299e1060
---[ end trace 0000000000000000 ]---
Uninit was created at:
(stack is not available)
CPU: 0 UID: 0 PID: 10626 Comm: syz.5.1671 Tainted: G W L syzkaller #0 PREEMPT(full)
Tainted: [W]=WARN, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
=====================================================
----------------
Code disassembly (best guess):
0: 41 81 e6 f0 3f 00 00 and $0x3ff0,%r14d
7: 42 83 7c 30 1c 00 cmpl $0x0,0x1c(%rax,%r14,1)
d: 74 40 je 0x4f
f: 4c 01 f0 add %r14,%rax
12: 74 1b je 0x2f
14: 48 8d 48 20 lea 0x20(%rax),%rcx
18: 49 89 0f mov %rcx,(%r15)
1b: 8b 58 14 mov 0x14(%rax),%ebx
1e: eb 1b jmp 0x3b
20: 48 8d 3d b7 5d 24 0c lea 0xc245db7(%rip),%rdi # 0xc245dde
27: 44 89 f1 mov %r14d,%ecx
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: 48 8d 3d b8 5d 24 0c lea 0xc245db8(%rip),%rdi # 0xc245dee
36: 67 48 0f b9 3a ud1 (%edx),%rdi
3b: 89 d8 mov %ebx,%eax
3d: 5b pop %rbx
3e: 41 5e pop %r14