==================================================================
BUG: KMSAN: uninit-value in __list_add_valid+0x292/0x430 lib/list_debug.c:26
CPU: 1 PID: 17369 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x162/0x2d0 mm/kmsan/kmsan_report.c:109
 __msan_warning+0x75/0xe0 mm/kmsan/kmsan_instr.c:294
 __list_add_valid+0x292/0x430 lib/list_debug.c:26
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 cma_listen_on_all drivers/infiniband/core/cma.c:2508 [inline]
 rdma_listen+0x623/0x10b0 drivers/infiniband/core/cma.c:3562
 ucma_listen+0x36e/0x5e0 drivers/infiniband/core/ucma.c:1092
 ucma_write+0x5c5/0x640 drivers/infiniband/core/ucma.c:1684
 __vfs_write+0x1a9/0xcb0 fs/read_write.c:494
 vfs_write+0x481/0x920 fs/read_write.c:558
 ksys_write+0x265/0x430 fs/read_write.c:611
 __do_sys_write fs/read_write.c:623 [inline]
 __se_sys_write+0x92/0xb0 fs/read_write.c:620
 __x64_sys_write+0x4a/0x70 fs/read_write.c:620
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x459a29
Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f814076ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29
RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f814076f6d4
R13: 00000000004c999e R14: 00000000004e10e0 R15: 00000000ffffffff

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:174 [inline]
 kmsan_internal_poison_shadow+0x58/0xb0 mm/kmsan/kmsan.c:134
 kmsan_slab_free+0x8d/0x100 mm/kmsan/kmsan_hooks.c:123
 slab_free_freelist_hook mm/slub.c:1472 [inline]
 slab_free mm/slub.c:3038 [inline]
 kfree+0x4c1/0x2db0 mm/slub.c:3980
 skb_free_head net/core/skbuff.c:591 [inline]
 skb_release_data+0x7de/0x9d0 net/core/skbuff.c:611
 skb_release_all net/core/skbuff.c:665 [inline]
 __kfree_skb+0x8a/0x210 net/core/skbuff.c:679
 sk_wmem_free_skb include/net/sock.h:1478 [inline]
 tcp_rtx_queue_unlink_and_free+0x3b9/0x9f0 include/net/tcp.h:1791
 tcp_clean_rtx_queue net/ipv4/tcp_input.c:3161 [inline]
 tcp_ack+0x38d8/0x9890 net/ipv4/tcp_input.c:3688
 tcp_rcv_established+0x1d56/0x31f0 net/ipv4/tcp_input.c:5578
 tcp_v4_do_rcv+0x684/0xd70 net/ipv4/tcp_ipv4.c:1542
 tcp_v4_rcv+0x64fb/0x6af0 net/ipv4/tcp_ipv4.c:1923
 ip_protocol_deliver_rcu+0x541/0xbc0 net/ipv4/ip_input.c:204
 ip_local_deliver_finish net/ipv4/ip_input.c:231 [inline]
 NF_HOOK include/linux/netfilter.h:305 [inline]
 ip_local_deliver+0x62a/0x7c0 net/ipv4/ip_input.c:252
 dst_input include/net/dst.h:442 [inline]
 ip_rcv_finish net/ipv4/ip_input.c:413 [inline]
 NF_HOOK include/linux/netfilter.h:305 [inline]
 ip_rcv+0x6c5/0x740 net/ipv4/ip_input.c:523
 __netif_receive_skb_one_core net/core/dev.c:5004 [inline]
 __netif_receive_skb net/core/dev.c:5118 [inline]
 netif_receive_skb_internal+0x8f4/0xc20 net/core/dev.c:5208
 napi_skb_finish net/core/dev.c:5671 [inline]
 napi_gro_receive+0x682/0xb90 net/core/dev.c:5704
 receive_buf+0x653b/0x8810 drivers/net/virtio_net.c:1061
 virtnet_receive drivers/net/virtio_net.c:1323 [inline]
 virtnet_poll+0x666/0x19d0 drivers/net/virtio_net.c:1428
 napi_poll net/core/dev.c:6352 [inline]
 net_rx_action+0x74b/0x1950 net/core/dev.c:6418
 __do_softirq+0x4a1/0x83a kernel/softirq.c:293
 invoke_softirq kernel/softirq.c:375 [inline]
 irq_exit+0x230/0x280 kernel/softirq.c:416
 exiting_irq arch/x86/include/asm/apic.h:537 [inline]
 do_IRQ+0x20d/0x3a0 arch/x86/kernel/irq.c:259
 ret_from_intr+0x0/0x33
 metadata_is_contiguous+0x1a0/0x240 mm/kmsan/kmsan.c:526
 kmsan_get_shadow_origin_ptr+0x6e/0x4c0 mm/kmsan/kmsan_shadow.c:168
 __msan_metadata_ptr_for_store_8+0x13/0x20 mm/kmsan/kmsan_instr.c:55
 __write_once_size include/linux/compiler.h:235 [inline]
 hlist_bl_set_first_rcu include/linux/rculist_bl.h:17 [inline]
 hlist_bl_add_head_rcu include/linux/rculist_bl.h:113 [inline]
 d_alloc_parallel+0x1efe/0x2220 fs/dcache.c:2612
 __lookup_slow+0x18f/0x760 fs/namei.c:1652
 lookup_slow fs/namei.c:1686 [inline]
 walk_component+0x34c/0xba0 fs/namei.c:1808
 lookup_last fs/namei.c:2271 [inline]
 path_lookupat+0x28f/0x1130 fs/namei.c:2316
 filename_lookup+0x328/0xbd0 fs/namei.c:2346
 user_path_at_empty+0x123/0x140 fs/namei.c:2606
 user_path_at include/linux/namei.h:60 [inline]
 vfs_statx fs/stat.c:187 [inline]
 vfs_stat include/linux/fs.h:3188 [inline]
 __do_sys_newstat fs/stat.c:341 [inline]
 __se_sys_newstat+0xeb/0xac0 fs/stat.c:337
 __x64_sys_newstat+0x3e/0x60 fs/stat.c:337
 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
==================================================================