================================================================== BUG: KMSAN: uninit-value in __list_add_valid+0x1a2/0x450 lib/list_debug.c:23 CPU: 1 PID: 4587 Comm: syz-executor4 Not tainted 4.17.0+ #18 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1465 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:650 __list_add_valid+0x1a2/0x450 lib/list_debug.c:23 __list_add include/linux/list.h:60 [inline] list_add include/linux/list.h:79 [inline] account_entity_enqueue kernel/sched/fair.c:2652 [inline] enqueue_entity kernel/sched/fair.c:4176 [inline] enqueue_task_fair+0xe12/0x4490 kernel/sched/fair.c:5359 enqueue_task kernel/sched/core.c:751 [inline] activate_task kernel/sched/core.c:770 [inline] ttwu_activate kernel/sched/core.c:1658 [inline] ttwu_do_activate kernel/sched/core.c:1717 [inline] ttwu_queue kernel/sched/core.c:1862 [inline] try_to_wake_up+0x162f/0x2260 kernel/sched/core.c:2075 wake_up_process+0x34/0x40 kernel/sched/core.c:2148 swake_up_locked kernel/sched/swait.c:30 [inline] swake_up+0xfb/0x3b0 kernel/sched/swait.c:40 rcu_gp_kthread_wake kernel/rcu/tree.c:1787 [inline] rcu_report_qs_rsp kernel/rcu/tree.c:2366 [inline] rcu_report_qs_rnp+0x767/0x880 kernel/rcu/tree.c:2433 rcu_report_qs_rdp kernel/rcu/tree.c:2516 [inline] rcu_check_quiescent_state kernel/rcu/tree.c:2553 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2881 [inline] rcu_process_callbacks+0x90a/0x2060 kernel/rcu/tree.c:2914 __do_softirq+0x592/0x979 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:366 [inline] irq_exit+0x207/0x240 kernel/softirq.c:407 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:868 RIP: 0010:finish_lock_switch+0x38/0x50 kernel/sched/core.c:2626 RSP: 0018:ffff88014202fc20 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: ffff88021f3d0ac0 RBX: 0000000000000000 RCX: ffff88021f3d1ac0 RDX: ffff88021f3d1ac0 RSI: aaaaaaaaaaaab000 RDI: ffffea000cbf2560 RBP: ffff88014202fc38 R08: 0000000001080020 R09: 0000000000000002 R10: ffffffff7fffffff R11: ffffffff813553c0 R12: ffff88021fdb9ac0 R13: ffff880143e2a618 R14: 0000000000000000 R15: ffff88021f3d0ac0 finish_task_switch+0xde/0x270 kernel/sched/core.c:2725 context_switch kernel/sched/core.c:2883 [inline] __schedule+0x66b/0x770 kernel/sched/core.c:3524 schedule+0x1cc/0x2f0 kernel/sched/core.c:3568 freezable_schedule include/linux/freezer.h:172 [inline] do_nanosleep+0x2c3/0x9c0 kernel/time/hrtimer.c:1689 hrtimer_nanosleep kernel/time/hrtimer.c:1743 [inline] __do_sys_nanosleep kernel/time/hrtimer.c:1775 [inline] __se_sys_nanosleep+0x4b3/0x6a0 kernel/time/hrtimer.c:1762 __x64_sys_nanosleep+0x92/0xc0 kernel/time/hrtimer.c:1762 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x4811c0 RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 RAX: ffffffffffffffda RBX: 00000000000a4569 RCX: 00000000004811c0 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000ba3940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00000000000009fe R14: 0000000000a3f160 R15: 00000000000a4531 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:312 [inline] kmsan_save_stack mm/kmsan/kmsan.c:327 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:717 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:494 __write_once_size include/linux/compiler.h:224 [inline] __list_add include/linux/list.h:66 [inline] list_add include/linux/list.h:79 [inline] account_entity_enqueue kernel/sched/fair.c:2652 [inline] enqueue_entity kernel/sched/fair.c:4176 [inline] enqueue_task_fair+0x2947/0x4490 kernel/sched/fair.c:5359 enqueue_task kernel/sched/core.c:751 [inline] activate_task kernel/sched/core.c:770 [inline] ttwu_activate kernel/sched/core.c:1658 [inline] ttwu_do_activate kernel/sched/core.c:1717 [inline] ttwu_queue kernel/sched/core.c:1862 [inline] try_to_wake_up+0x162f/0x2260 kernel/sched/core.c:2075 wake_up_process+0x34/0x40 kernel/sched/core.c:2148 hrtimer_wakeup+0xac/0x100 kernel/time/hrtimer.c:1647 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Local variable description: ----t.i.i@__se_sys_nanosleep Variable was created at: __se_sys_nanosleep+0x5f/0x6a0 kernel/time/hrtimer.c:1762 __x64_sys_nanosleep+0x92/0xc0 kernel/time/hrtimer.c:1762 ==================================================================