IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 ================================================================== BUG: KMSAN: uninit-value in rcu_cblist_dequeue+0x233/0x270 kernel/rcu/rcu_segcblist.c:55 CPU: 1 PID: 4542 Comm: syz-executor4 Not tainted 4.17.0+ #5 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1117 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620 rcu_cblist_dequeue+0x233/0x270 kernel/rcu/rcu_segcblist.c:55 rcu_do_batch kernel/rcu/tree.c:2673 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2930 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2897 [inline] rcu_process_callbacks+0x19a7/0x2060 kernel/rcu/tree.c:2914 __do_softirq+0x592/0x979 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x202/0x240 kernel/softirq.c:405 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863 RIP: 0010:finish_lock_switch+0x38/0x50 kernel/sched/core.c:2626 RSP: 0018:ffff88013085fc60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: ffff88021f2dac40 RBX: 0000000000000001 RCX: ffff880000000000 RDX: ffff88021f2dbc40 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 RBP: ffff88013085fc78 R08: 0000000001080020 R09: 0000000000000002 R10: ffffffff7fffffff R11: ffffffff813553c0 R12: ffff88021fd3ec40 R13: ffff880134024358 R14: 0000000000000000 R15: ffff88021f2dac40 finish_task_switch+0xde/0x270 kernel/sched/core.c:2725 context_switch kernel/sched/core.c:2883 [inline] __schedule+0x66b/0x770 kernel/sched/core.c:3524 schedule+0x1cc/0x2f0 kernel/sched/core.c:3568 exit_to_usermode_loop arch/x86/entry/common.c:152 [inline] prepare_exit_to_usermode+0x1cc/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x455747 RSP: 002b:0000000000a3d9e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000455747 RDX: 000000000227a9b3 RSI: 0000000000a3da80 RDI: 0000000000a3da80 RBP: 0000000000a3f790 R08: 0000000000000000 R09: 0000000000000010 R10: 000000000000000a R11: 0000000000000206 R12: 000000000227a940 R13: 0000000000000000 R14: 00000000000002e5 R15: 0000000000031e0a Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_save_stack mm/kmsan/kmsan.c:294 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 rcu_segcblist_enqueue+0x24c/0x2d0 kernel/rcu/rcu_segcblist.c:150 __call_rcu+0x227/0xef0 kernel/rcu/tree.c:3057 call_rcu_sched+0x32/0x40 kernel/rcu/tree.c:3097 free_pid+0x441/0x450 kernel/pid.c:156 __change_pid kernel/pid.c:294 [inline] detach_pid+0x35a/0x370 kernel/pid.c:299 __unhash_process kernel/exit.c:75 [inline] __exit_signal kernel/exit.c:156 [inline] release_task+0x10a0/0x2530 kernel/exit.c:200 exit_notify kernel/exit.c:736 [inline] do_exit+0x2e11/0x3930 kernel/exit.c:887 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:189 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:315 kmem_cache_alloc+0xa97/0xb70 mm/slub.c:2772 alloc_pid+0x7f/0xce0 kernel/pid.c:168 copy_process+0x3fbb/0x9be0 kernel/fork.c:1809 _do_fork+0x353/0xf60 kernel/fork.c:2089 __do_sys_clone kernel/fork.c:2196 [inline] __se_sys_clone kernel/fork.c:2190 [inline] __x64_sys_clone+0x15e/0x1b0 kernel/fork.c:2190 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x44/0xa9 ==================================================================