================================================================== BUG: KMSAN: uninit-value in __list_add_valid+0x1a2/0x450 lib/list_debug.c:23 CPU: 0 PID: 4535 Comm: syz-executor2 Not tainted 4.17.0+ #9 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1125 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620 __list_add_valid+0x1a2/0x450 lib/list_debug.c:23 __list_add include/linux/list.h:60 [inline] list_add include/linux/list.h:79 [inline] account_entity_enqueue kernel/sched/fair.c:2652 [inline] enqueue_entity kernel/sched/fair.c:4176 [inline] enqueue_task_fair+0xe12/0x4490 kernel/sched/fair.c:5359 enqueue_task kernel/sched/core.c:751 [inline] activate_task kernel/sched/core.c:770 [inline] ttwu_activate kernel/sched/core.c:1658 [inline] ttwu_do_activate kernel/sched/core.c:1717 [inline] ttwu_queue kernel/sched/core.c:1862 [inline] try_to_wake_up+0x162f/0x2260 kernel/sched/core.c:2075 wake_up_process+0x34/0x40 kernel/sched/core.c:2148 swake_up_locked kernel/sched/swait.c:30 [inline] swake_up+0xfb/0x3b0 kernel/sched/swait.c:40 rcu_gp_kthread_wake kernel/rcu/tree.c:1787 [inline] rcu_report_qs_rsp kernel/rcu/tree.c:2366 [inline] rcu_report_qs_rnp+0x767/0x880 kernel/rcu/tree.c:2433 rcu_report_qs_rdp kernel/rcu/tree.c:2516 [inline] rcu_check_quiescent_state kernel/rcu/tree.c:2553 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2881 [inline] rcu_process_callbacks+0x90a/0x2060 kernel/rcu/tree.c:2914 __do_softirq+0x592/0x979 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x202/0x240 kernel/softirq.c:405 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:866 RIP: 0010:my_phys_addr_valid mm/kmsan/kmsan_instr.c:103 [inline] RIP: 0010:my_virt_addr_valid mm/kmsan/kmsan_instr.c:125 [inline] RIP: 0010:msan_get_shadow_origin_ptr+0xac/0x230 mm/kmsan/kmsan_instr.c:256 RSP: 0018:ffff8801206df8a0 EFLAGS: 00000207 ORIG_RAX: ffffffffffffff13 RAX: ffff88018f37d780 RBX: ffffffff8b58c000 RCX: ffff88000000002e RDX: 000000010f37d780 RSI: 0000000000000008 RDI: 000000010f37d780 RBP: ffff8801206df8d0 R08: ffffffff81a7dae0 R09: ffff880111290468 R10: 0000000000000000 R11: ffffffff83ac4fe0 R12: 0000000000000000 R13: ffff88011046d460 R14: ffffffff8b58b000 R15: ffff88010f37d780 __msan_metadata_ptr_for_store_8+0x13/0x20 mm/kmsan/kmsan_instr.c:321 __rb_insert lib/rbtree.c:104 [inline] __rb_insert_augmented+0xb6/0x13f0 lib/rbtree.c:495 rb_insert_augmented_cached include/linux/rbtree_augmented.h:71 [inline] __anon_vma_interval_tree_insert mm/interval_tree.c:72 [inline] anon_vma_interval_tree_insert+0x4ee/0x600 mm/interval_tree.c:83 anon_vma_chain_link mm/rmap.c:143 [inline] anon_vma_fork+0x91e/0xb20 mm/rmap.c:362 dup_mmap kernel/fork.c:467 [inline] dup_mm kernel/fork.c:1235 [inline] copy_mm kernel/fork.c:1289 [inline] copy_process+0x65df/0x9be0 kernel/fork.c:1795 _do_fork+0x353/0xf60 kernel/fork.c:2089 __do_sys_clone kernel/fork.c:2196 [inline] __se_sys_clone kernel/fork.c:2190 [inline] __x64_sys_clone+0x15e/0x1b0 kernel/fork.c:2190 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x4541da RSP: 002b:0000000000a3ea70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000a3ea70 RCX: 00000000004541da RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000a3eab0 R08: 0000000000000001 R09: 000000000227d940 R10: 000000000227dc10 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001380 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 __write_once_size include/linux/compiler.h:224 [inline] __list_add include/linux/list.h:66 [inline] list_add include/linux/list.h:79 [inline] account_entity_enqueue kernel/sched/fair.c:2652 [inline] enqueue_entity kernel/sched/fair.c:4176 [inline] enqueue_task_fair+0x2947/0x4490 kernel/sched/fair.c:5359 enqueue_task kernel/sched/core.c:751 [inline] activate_task kernel/sched/core.c:770 [inline] ttwu_activate kernel/sched/core.c:1658 [inline] ttwu_do_activate kernel/sched/core.c:1717 [inline] ttwu_queue kernel/sched/core.c:1862 [inline] try_to_wake_up+0x162f/0x2260 kernel/sched/core.c:2075 wake_up_process+0x34/0x40 kernel/sched/core.c:2148 hrtimer_wakeup+0xac/0x100 kernel/time/hrtimer.c:1647 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Local variable description: ----t.i.i@__se_sys_nanosleep Variable was created at: __se_sys_nanosleep+0x5f/0x6a0 kernel/time/hrtimer.c:1762 __x64_sys_nanosleep+0x92/0xc0 kernel/time/hrtimer.c:1762 ==================================================================