================================================================== BUG: KMSAN: uninit-value in update_stack_state+0x673/0xa40 arch/x86/kernel/unwind_frame.c:222 CPU: 0 PID: 6908 Comm: syz-executor4 Not tainted 4.16.0+ #84 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x14a/0x1d0 lib/dump_stack.c:53 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676 update_stack_state+0x673/0xa40 arch/x86/kernel/unwind_frame.c:222 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236 __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x87b/0xab0 lib/fault-inject.c:149 should_failslab+0x279/0x2a0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc_node mm/slub.c:2663 [inline] slab_alloc mm/slub.c:2745 [inline] __kmalloc+0xc2/0x350 mm/slub.c:3785 kmalloc include/linux/slab.h:517 [inline] kzalloc include/linux/slab.h:701 [inline] snd_seq_port_connect+0xdf/0x7a0 sound/core/seq/seq_ports.c:571 netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. snd_seq_ioctl_subscribe_port+0x7d7/0xb10 sound/core/seq/seq_clientmgr.c:1459 snd_seq_kernel_client_ctl+0x555/0x5d0 sound/core/seq/seq_clientmgr.c:2360 snd_seq_oss_midi_open+0x65b/0xc20 sound/core/seq/oss/seq_oss_midi.c:366 snd_seq_oss_synth_reset+0x67d/0xcd0 sound/core/seq/oss/seq_oss_synth.c:419 snd_seq_oss_reset+0x97/0x360 sound/core/seq/oss/seq_oss_init.c:448 snd_seq_oss_release+0xf2/0x3d0 sound/core/seq/oss/seq_oss_init.c:425 odev_release+0x85/0xe0 sound/core/seq/oss/seq_oss.c:153 __fput+0x49e/0xa10 fs/file_table.c:209 ____fput+0x37/0x40 fs/file_table.c:243 task_work_run+0x243/0x2c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop arch/x86/entry/common.c:166 [inline] prepare_exit_to_usermode+0x33c/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265 do_syscall_64+0x36d/0x430 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x455329 RSP: 002b:00007f47ee155c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 00007f47ee1566d4 RCX: 0000000000455329 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000014 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 R13: 0000000000000052 R14: 00000000006f3850 R15: 0000000000000000 Local variable description: ----flags.i.i.i@rcu_all_qs Variable was created at: rcu_all_qs+0x32/0x1f0 kernel/rcu/tree.c:478 _cond_resched+0x3c/0xd0 kernel/sched/core.c:4935 ==================================================================