================================================================== BUG: KMSAN: uninit-value in __list_del_entry_valid+0x38a/0x440 lib/list_debug.c:54 CPU: 0 PID: 3508 Comm: syzkaller275482 Not tainted 4.16.0+ #82 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676 __list_del_entry_valid+0x38a/0x440 lib/list_debug.c:54 __list_del_entry include/linux/list.h:117 [inline] list_del_init include/linux/list.h:159 [inline] account_entity_dequeue kernel/sched/fair.c:2682 [inline] dequeue_entity kernel/sched/fair.c:4127 [inline] dequeue_task_fair+0xac0/0x2ea0 kernel/sched/fair.c:5266 dequeue_task kernel/sched/core.c:785 [inline] deactivate_task+0x50d/0x780 kernel/sched/core.c:801 __schedule+0x164/0x730 kernel/sched/core.c:3396 schedule+0x1cc/0x2f0 kernel/sched/core.c:3505 freezable_schedule include/linux/freezer.h:172 [inline] do_nanosleep+0x2c3/0x9b0 kernel/time/hrtimer.c:1640 hrtimer_nanosleep kernel/time/hrtimer.c:1694 [inline] SYSC_nanosleep+0x420/0x6a0 kernel/time/hrtimer.c:1726 SyS_nanosleep+0x46/0x70 kernel/time/hrtimer.c:1713 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x440af0 RSP: 002b:00007ffe5705dda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 RAX: ffffffffffffffda RBX: 00000000000035de RCX: 0000000000440af0 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe5705ddb0 RBP: 00000000000035de R08: 0000000000000db4 R09: 00000000026db940 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000024b0 R13: 00000000001079e3 R14: 0000000000000000 R15: 0000000000000000 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521 __list_add include/linux/list.h:64 [inline] list_add include/linux/list.h:79 [inline] list_move include/linux/list.h:171 [inline] pick_next_task_fair+0x1e89/0x1f70 kernel/sched/fair.c:6748 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290 __schedule+0x211/0x730 kernel/sched/core.c:3420 preempt_schedule_common kernel/sched/core.c:3585 [inline] _cond_resched+0x5e/0xd0 kernel/sched/core.c:4932 zap_pmd_range mm/memory.c:1443 [inline] zap_pud_range mm/memory.c:1470 [inline] zap_p4d_range mm/memory.c:1491 [inline] unmap_page_range+0x35e0/0x3be0 mm/memory.c:1512 unmap_single_vma+0x45b/0x5f0 mm/memory.c:1557 unmap_vmas+0x1f4/0x360 mm/memory.c:1587 exit_mmap+0x3da/0x950 mm/mmap.c:3020 __mmput+0x16c/0x610 kernel/fork.c:961 mmput+0xab/0xf0 kernel/fork.c:982 exit_mm+0x6ed/0x7a0 kernel/exit.c:545 do_exit+0xc01/0x38d0 kernel/exit.c:854 do_group_exit+0x1a0/0x360 kernel/exit.c:970 SYSC_exit_group+0x21/0x30 kernel/exit.c:981 SyS_exit_group+0x25/0x30 kernel/exit.c:979 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521 __write_once_size include/linux/compiler.h:224 [inline] __list_add include/linux/list.h:66 [inline] list_add include/linux/list.h:79 [inline] account_entity_enqueue kernel/sched/fair.c:2667 [inline] enqueue_entity kernel/sched/fair.c:4036 [inline] enqueue_task_fair+0x2962/0x43a0 kernel/sched/fair.c:5219 enqueue_task kernel/sched/core.c:774 [inline] activate_task kernel/sched/core.c:793 [inline] ttwu_activate kernel/sched/core.c:1664 [inline] ttwu_do_activate kernel/sched/core.c:1723 [inline] ttwu_queue kernel/sched/core.c:1868 [inline] try_to_wake_up+0x13cc/0x20a0 kernel/sched/core.c:2081 wake_up_process+0x34/0x40 kernel/sched/core.c:2154 hrtimer_wakeup+0xac/0x100 kernel/time/hrtimer.c:1598 __run_hrtimer kernel/time/hrtimer.c:1349 [inline] __hrtimer_run_queues+0xc03/0x15d0 kernel/time/hrtimer.c:1411 hrtimer_interrupt+0x426/0xaf0 kernel/time/hrtimer.c:1469 local_apic_timer_interrupt+0x66/0x230 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Local variable description: ----t.i@SYSC_nanosleep Variable was created at: SYSC_nanosleep+0x5f/0x6a0 kernel/time/hrtimer.c:1715 SyS_nanosleep+0x46/0x70 kernel/time/hrtimer.c:1713 ==================================================================