===================================================== BUG: KMSAN: uninit-value in __list_add_valid+0x286/0x420 lib/list_debug.c:26 CPU: 0 PID: 18717 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x24c/0x2e0 lib/dump_stack.c:120 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:121 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197 __list_add_valid+0x286/0x420 lib/list_debug.c:26 __list_add include/linux/list.h:67 [inline] list_add_tail include/linux/list.h:100 [inline] rwsem_down_read_slowpath kernel/locking/rwsem.c:955 [inline] __down_read_common+0x4f4/0x1270 kernel/locking/rwsem.c:1213 __down_read kernel/locking/rwsem.c:1222 [inline] down_read+0x2b/0x30 kernel/locking/rwsem.c:1355 anon_vma_lock_read include/linux/rmap.h:129 [inline] page_lock_anon_vma_read+0x3d6/0x610 mm/rmap.c:570 rmap_walk_anon_lock mm/rmap.c:1823 [inline] rmap_walk_anon+0x112/0x1290 mm/rmap.c:1865 rmap_walk mm/rmap.c:1952 [inline] page_referenced+0xaca/0xc30 mm/rmap.c:895 page_check_references mm/vmscan.c:991 [inline] shrink_page_list+0x1dd1/0x7840 mm/vmscan.c:1220 shrink_inactive_list+0x83f/0x14f0 mm/vmscan.c:1948 shrink_list mm/vmscan.c:2170 [inline] shrink_lruvec+0x738/0x1480 mm/vmscan.c:2465 shrink_node_memcgs+0x5a3/0xc60 mm/vmscan.c:2653 shrink_node+0x1a02/0x3400 mm/vmscan.c:2770 shrink_zones+0x98e/0xfb0 mm/vmscan.c:2973 do_try_to_free_pages+0x2fa/0x15a0 mm/vmscan.c:3028 try_to_free_pages+0xb66/0x1860 mm/vmscan.c:3267 __perform_reclaim mm/page_alloc.c:4399 [inline] __alloc_pages_direct_reclaim mm/page_alloc.c:4420 [inline] __alloc_pages_slowpath+0x1f46/0x3af0 mm/page_alloc.c:4824 __alloc_pages_nodemask+0xbbb/0xf90 mm/page_alloc.c:5034 alloc_pages_current+0x7b6/0xb60 mm/mempolicy.c:2277 alloc_pages include/linux/gfp.h:561 [inline] __get_free_pages+0x33/0xc0 mm/page_alloc.c:5059 __pte_alloc_one_kernel include/asm-generic/pgalloc.h:21 [inline] pte_alloc_one_kernel include/asm-generic/pgalloc.h:33 [inline] __pte_alloc_kernel+0x67/0x380 mm/memory.c:474 vmap_pte_range mm/vmalloc.c:209 [inline] vmap_pmd_range mm/vmalloc.c:238 [inline] vmap_pud_range mm/vmalloc.c:256 [inline] vmap_p4d_range mm/vmalloc.c:274 [inline] __map_kernel_range_noflush+0xc5a/0x11d0 mm/vmalloc.c:315 map_kernel_range_noflush mm/vmalloc.c:330 [inline] map_kernel_range mm/vmalloc.c:339 [inline] __vmalloc_area_node mm/vmalloc.c:2540 [inline] __vmalloc_node_range+0xceb/0x1310 mm/vmalloc.c:2590 __bpf_map_area_alloc+0x344/0x380 kernel/bpf/syscall.c:306 bpf_map_area_alloc+0x6c/0x80 kernel/bpf/syscall.c:313 htab_map_alloc+0x57e/0x2770 kernel/bpf/hashtab.c:485 find_and_alloc_map kernel/bpf/syscall.c:122 [inline] map_create kernel/bpf/syscall.c:828 [inline] __do_sys_bpf+0xf4d5/0x1aba0 kernel/bpf/syscall.c:4375 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4351 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4351 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline] __do_fast_syscall_32+0x127/0x180 arch/x86/entry/common.c:142 do_fast_syscall_32+0x77/0xd0 arch/x86/entry/common.c:168 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:211 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c RIP: 0023:0xf7fde549 Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 RSP: 002b:00000000f55d85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Local variable ----pvmw@remove_migration_pte created at: remove_migration_pte+0xbe/0x1920 mm/migrate.c:204 remove_migration_pte+0xbe/0x1920 mm/migrate.c:204 =====================================================