=====================================================
BUG: KMSAN: uninit-value in arch_atomic_fetch_add arch/x86/include/asm/atomic.h:184 [inline]
BUG: KMSAN: uninit-value in atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:112 [inline]
BUG: KMSAN: uninit-value in __refcount_add include/linux/refcount.h:193 [inline]
BUG: KMSAN: uninit-value in __refcount_inc include/linux/refcount.h:250 [inline]
BUG: KMSAN: uninit-value in refcount_inc include/linux/refcount.h:267 [inline]
BUG: KMSAN: uninit-value in get_task_struct include/linux/sched/task.h:104 [inline]
BUG: KMSAN: uninit-value in rwsem_mark_wake+0xb25/0xd60 kernel/locking/rwsem.c:514
 arch_atomic_fetch_add arch/x86/include/asm/atomic.h:184 [inline]
 atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:112 [inline]
 __refcount_add include/linux/refcount.h:193 [inline]
 __refcount_inc include/linux/refcount.h:250 [inline]
 refcount_inc include/linux/refcount.h:267 [inline]
 get_task_struct include/linux/sched/task.h:104 [inline]
 rwsem_mark_wake+0xb25/0xd60 kernel/locking/rwsem.c:514
 rwsem_wake kernel/locking/rwsem.c:1177 [inline]
 __up_write kernel/locking/rwsem.c:1323 [inline]
 up_write+0x1b0/0x220 kernel/locking/rwsem.c:1570
 anon_vma_unlock_write include/linux/rmap.h:121 [inline]
 __vma_adjust+0x617e/0x7a00 mm/mmap.c:941
 vma_merge+0x13b6/0x1e60 mm/mmap.c:1227
 madvise_behavior mm/madvise.c:139 [inline]
 madvise_vma mm/madvise.c:1001 [inline]
 do_madvise+0x1eb5/0x2fe0 mm/madvise.c:1202
 __do_sys_madvise mm/madvise.c:1228 [inline]
 __se_sys_madvise mm/madvise.c:1226 [inline]
 __x64_sys_madvise+0x111/0x160 mm/madvise.c:1226
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Local variable ----pmde.sroa.0@page_vma_mapped_walk created at:
 page_vma_mapped_walk+0xcf/0x35a0 mm/page_vma_mapped.c:164
 page_referenced_one+0x771/0xda0 mm/rmap.c:783
=====================================================
Kernel panic - not syncing: panic_on_kmsan set ...
CPU: 0 PID: 7900 Comm: syz-fuzzer Tainted: G    B             5.15.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106
 dump_stack+0x25/0x28 lib/dump_stack.c:113
 panic+0x44f/0xdeb kernel/panic.c:232
 kmsan_report+0x2ee/0x300 mm/kmsan/report.c:168
 __msan_warning+0xa9/0xf0 mm/kmsan/instrumentation.c:199
 arch_atomic_fetch_add arch/x86/include/asm/atomic.h:184 [inline]
 atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:112 [inline]
 __refcount_add include/linux/refcount.h:193 [inline]
 __refcount_inc include/linux/refcount.h:250 [inline]
 refcount_inc include/linux/refcount.h:267 [inline]
 get_task_struct include/linux/sched/task.h:104 [inline]
 rwsem_mark_wake+0xb25/0xd60 kernel/locking/rwsem.c:514
 rwsem_wake kernel/locking/rwsem.c:1177 [inline]
 __up_write kernel/locking/rwsem.c:1323 [inline]
 up_write+0x1b0/0x220 kernel/locking/rwsem.c:1570
 anon_vma_unlock_write include/linux/rmap.h:121 [inline]
 __vma_adjust+0x617e/0x7a00 mm/mmap.c:941
 vma_merge+0x13b6/0x1e60 mm/mmap.c:1227
 madvise_behavior mm/madvise.c:139 [inline]
 madvise_vma mm/madvise.c:1001 [inline]
 do_madvise+0x1eb5/0x2fe0 mm/madvise.c:1202
 __do_sys_madvise mm/madvise.c:1228 [inline]
 __se_sys_madvise mm/madvise.c:1226 [inline]
 __x64_sys_madvise+0x111/0x160 mm/madvise.c:1226
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x46e1d7
Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
RSP: 002b:000000c000527e08 EFLAGS: 00000206 ORIG_RAX: 000000000000001c
RAX: ffffffffffffffda RBX: 000000c015200000 RCX: 000000000046e1d7
RDX: 000000000000000f RSI: 0000000000200000 RDI: 000000c015000000
RBP: 000000c000527e48 R08: 000000c0151fa000 R09: 4df9076382efc610
R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000014
R13: 0000000000001018 R14: 000080c014800000 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..