================================================================== BUG: KMSAN: uninit-value in __list_add_valid+0x1a2/0x450 lib/list_debug.c:23 CPU: 0 PID: 3596 Comm: syz-executor5 Not tainted 4.16.0+ #82 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676 __list_add_valid+0x1a2/0x450 lib/list_debug.c:23 __list_add include/linux/list.h:60 [inline] list_add include/linux/list.h:79 [inline] account_entity_enqueue kernel/sched/fair.c:2667 [inline] enqueue_entity kernel/sched/fair.c:4036 [inline] enqueue_task_fair+0xe06/0x43a0 kernel/sched/fair.c:5219 enqueue_task kernel/sched/core.c:774 [inline] activate_task kernel/sched/core.c:793 [inline] ttwu_activate kernel/sched/core.c:1664 [inline] ttwu_do_activate kernel/sched/core.c:1723 [inline] ttwu_queue kernel/sched/core.c:1868 [inline] try_to_wake_up+0x13cc/0x20a0 kernel/sched/core.c:2081 wake_up_process+0x34/0x40 kernel/sched/core.c:2154 hrtimer_wakeup+0xac/0x100 kernel/time/hrtimer.c:1598 __run_hrtimer kernel/time/hrtimer.c:1349 [inline] __hrtimer_run_queues+0xc03/0x15d0 kernel/time/hrtimer.c:1411 hrtimer_interrupt+0x426/0xaf0 kernel/time/hrtimer.c:1469 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:857 RIP: 0010:finish_lock_switch+0x38/0x50 kernel/sched/core.c:2632 RSP: 0018:ffff8801cd47fbe8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 RAX: ffff88021f0da8c0 RBX: ffff8801cc246198 RCX: ffff880000000000 RDX: ffff88021f0db8c0 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 RBP: ffff8801cd47fc00 R08: 0000000001080020 R09: 0000000000000002 R10: ffffffff7fffffff R11: ffff8801cd2d0000 R12: ffff88021fc3e8c0 R13: 0000000000000080 R14: 0000000000000000 R15: ffff88021f0da8c0 finish_task_switch+0xdb/0x230 kernel/sched/core.c:2719 context_switch kernel/sched/core.c:2869 [inline] __schedule+0x68e/0x730 kernel/sched/core.c:3446 schedule+0x1cc/0x2f0 kernel/sched/core.c:3505 freezable_schedule include/linux/freezer.h:172 [inline] do_nanosleep+0x2c3/0x9b0 kernel/time/hrtimer.c:1640 hrtimer_nanosleep kernel/time/hrtimer.c:1694 [inline] SYSC_nanosleep+0x420/0x6a0 kernel/time/hrtimer.c:1726 SyS_nanosleep+0x46/0x70 kernel/time/hrtimer.c:1713 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x480960 RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 RAX: ffffffffffffffda RBX: 00000000000001cb RCX: 0000000000480960 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 RBP: 0000000000029111 R08: 0000000000000001 R09: 0000000002881940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00000000000005a9 R15: 0000000000029111 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521 __write_once_size include/linux/compiler.h:224 [inline] __list_add include/linux/list.h:66 [inline] list_add include/linux/list.h:79 [inline] list_move include/linux/list.h:171 [inline] pick_next_task_fair+0x1edc/0x1f70 kernel/sched/fair.c:6748 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290 __schedule+0x211/0x730 kernel/sched/core.c:3420 do_task_dead+0xa4/0xd0 kernel/sched/core.c:3478 do_exit+0x340e/0x38d0 kernel/exit.c:924 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1320/0x1f20 kernel/signal.c:2469 do_signal+0xb8/0x1c80 arch/x86/kernel/signal.c:809 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265 do_syscall_64+0x36d/0x430 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521 __rb_insert lib/rbtree.c:104 [inline] rb_insert_color_cached+0xddf/0x1370 lib/rbtree.c:469 __enqueue_entity kernel/sched/fair.c:576 [inline] enqueue_entity kernel/sched/fair.c:4045 [inline] enqueue_task_fair+0x17f6/0x43a0 kernel/sched/fair.c:5219 enqueue_task kernel/sched/core.c:774 [inline] activate_task kernel/sched/core.c:793 [inline] ttwu_activate kernel/sched/core.c:1664 [inline] ttwu_do_activate kernel/sched/core.c:1723 [inline] ttwu_queue kernel/sched/core.c:1868 [inline] try_to_wake_up+0x13cc/0x20a0 kernel/sched/core.c:2081 wake_up_process+0x34/0x40 kernel/sched/core.c:2154 hrtimer_wakeup+0xac/0x100 kernel/time/hrtimer.c:1598 __run_hrtimer kernel/time/hrtimer.c:1349 [inline] __hrtimer_run_queues+0xc03/0x15d0 kernel/time/hrtimer.c:1411 hrtimer_interrupt+0x426/0xaf0 kernel/time/hrtimer.c:1469 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Local variable description: ----t.i@SYSC_nanosleep Variable was created at: SYSC_nanosleep+0x5f/0x6a0 kernel/time/hrtimer.c:1715 SyS_nanosleep+0x46/0x70 kernel/time/hrtimer.c:1713 ==================================================================