R13: 00000000004c0eac R14: 00000000004d0948 R15: 0000000000000007 ================================================================== BUG: KMSAN: uninit-value in rcu_cblist_dequeue+0x233/0x270 kernel/rcu/rcu_segcblist.c:55 CPU: 1 PID: 4479 Comm: syz-fuzzer Not tainted 4.17.0+ #6 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1117 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620 rcu_cblist_dequeue+0x233/0x270 kernel/rcu/rcu_segcblist.c:55 rcu_do_batch kernel/rcu/tree.c:2673 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2930 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2897 [inline] rcu_process_callbacks+0x19a7/0x2060 kernel/rcu/tree.c:2914 __do_softirq+0x592/0x979 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x202/0x240 kernel/softirq.c:405 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863 RIP: 0033:0x72a285 RSP: 002b:000000c420ef6fd8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 RAX: 00000000017748e0 RBX: 00000000017748e0 RCX: 000000c43a34fec0 RDX: 000000000072a280 RSI: 00000000017748e0 RDI: 000000c420ef7090 RBP: 000000c420ef7090 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000095394e R11: 0000000000000004 R12: 0000000000000000 R13: 0000000000000020 R14: 0000000000000013 R15: 000000c420ef7a30 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_save_stack mm/kmsan/kmsan.c:294 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 rcu_segcblist_enqueue+0x24c/0x2d0 kernel/rcu/rcu_segcblist.c:150 __call_rcu+0x227/0xef0 kernel/rcu/tree.c:3057 call_rcu_sched+0x32/0x40 kernel/rcu/tree.c:3097 proc_destroy_inode+0x4d/0x60 fs/proc/inode.c:86 destroy_inode fs/inode.c:267 [inline] evict+0xc82/0xdb0 fs/inode.c:575 iput_final fs/inode.c:1520 [inline] iput+0xb02/0xe50 fs/inode.c:1546 dentry_unlink_inode+0x850/0x8b0 fs/dcache.c:376 __dentry_kill+0x87e/0xd40 fs/dcache.c:568 dentry_kill+0x1a9/0xc70 fs/dcache.c:674 dput+0x277/0x560 fs/dcache.c:850 proc_flush_task_mnt fs/proc/base.c:3090 [inline] proc_flush_task+0x684/0x810 fs/proc/base.c:3136 release_task+0xa1/0x2530 kernel/exit.c:196 exit_notify kernel/exit.c:736 [inline] do_exit+0x2e11/0x3930 kernel/exit.c:887 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:189 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:315 kmem_cache_alloc+0xa97/0xb70 mm/slub.c:2772 __d_alloc+0x8b/0xe40 fs/dcache.c:1638 d_alloc fs/dcache.c:1722 [inline] d_alloc_parallel+0x1a8/0x22e0 fs/dcache.c:2519 __lookup_slow+0x18c/0x750 fs/namei.c:1613 lookup_slow fs/namei.c:1647 [inline] walk_component+0x33c/0xbb0 fs/namei.c:1769 link_path_walk+0xb12/0x2150 fs/namei.c:2095 path_openat+0x52c/0x6640 fs/namei.c:3505 do_filp_open+0x261/0x640 fs/namei.c:3540 do_sys_open+0x624/0x960 fs/open.c:1101 __do_sys_open fs/open.c:1119 [inline] __se_sys_open fs/open.c:1114 [inline] __x64_sys_open+0xf2/0x130 fs/open.c:1114 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x44/0xa9 ==================================================================