================================================================== BUG: KMSAN: uninit-value in __list_del_entry_valid+0x183/0x440 lib/list_debug.c:42 CPU: 0 PID: 20401 Comm: syz-executor184 Not tainted 4.17.0+ #6 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1117 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620 __list_del_entry_valid+0x183/0x440 lib/list_debug.c:42 __list_del_entry include/linux/list.h:117 [inline] list_del include/linux/list.h:125 [inline] __rmqueue_smallest mm/page_alloc.c:1963 [inline] __rmqueue mm/page_alloc.c:2453 [inline] rmqueue mm/page_alloc.c:3013 [inline] get_page_from_freelist+0x8307/0xb740 mm/page_alloc.c:3352 __alloc_pages_nodemask+0x792/0x5cc0 mm/page_alloc.c:4371 __alloc_pages include/linux/gfp.h:458 [inline] __alloc_pages_node include/linux/gfp.h:471 [inline] alloc_pages_vma+0x1555/0x17f0 mm/mempolicy.c:2049 do_huge_pmd_anonymous_page+0xbdd/0x2540 mm/huge_memory.c:722 create_huge_pmd mm/memory.c:3856 [inline] __handle_mm_fault mm/memory.c:4060 [inline] handle_mm_fault+0x44ca/0x7ed0 mm/memory.c:4126 __do_page_fault+0xec6/0x1a10 arch/x86/mm/fault.c:1400 do_page_fault+0xb7/0x250 arch/x86/mm/fault.c:1477 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160 RIP: 0033:0x402f16 RSP: 002b:00007f448f365cf0 EFLAGS: 00010246 RAX: 64696d2f7665642f RBX: 0000000000700024 RCX: 000000000044d6f9 RDX: 7c0f33167a33d80c RSI: 0000000000000000 RDI: 00007f448f366608 RBP: 0000000000700020 R08: 0000000000000000 R09: 0000000000000000 R10: 00007f448f366700 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000080ee3f R14: 00007f448f3669c0 R15: 000000000000000b Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_save_stack mm/kmsan/kmsan.c:294 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 __write_once_size include/linux/compiler.h:224 [inline] __list_add include/linux/list.h:66 [inline] list_add include/linux/list.h:79 [inline] __free_one_page+0x16cb/0x1800 mm/page_alloc.c:876 free_one_page mm/page_alloc.c:1176 [inline] __free_pages_ok+0x870/0x1680 mm/page_alloc.c:1260 free_compound_page+0x8e/0xc0 mm/page_alloc.c:571 free_transhuge_page+0x3bc/0x470 mm/huge_memory.c:2732 __put_compound_page mm/swap.c:95 [inline] release_pages+0x6ff/0x1650 mm/swap.c:759 free_pages_and_swap_cache+0x55b/0x580 mm/swap_state.c:322 tlb_flush_mmu_free mm/memory.c:260 [inline] tlb_flush_mmu mm/memory.c:269 [inline] arch_tlb_finish_mmu mm/memory.c:284 [inline] tlb_finish_mmu+0x290/0x5c0 mm/memory.c:434 exit_mmap+0x539/0x980 mm/mmap.c:3107 __mmput+0x158/0x600 kernel/fork.c:962 mmput+0xab/0xf0 kernel/fork.c:983 exit_mm+0x6ed/0x7a0 kernel/exit.c:545 do_exit+0xc12/0x3930 kernel/exit.c:854 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:815 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:885 __alloc_pages_nodemask+0xf7b/0x5cc0 mm/page_alloc.c:4402 alloc_pages_current+0x6b1/0x970 mm/mempolicy.c:2093 alloc_pages include/linux/gfp.h:494 [inline] __get_free_pages+0x2d/0xc0 mm/page_alloc.c:4423 tlb_next_batch mm/memory.c:205 [inline] __tlb_remove_page_size mm/memory.c:317 [inline] __tlb_remove_page include/asm-generic/tlb.h:150 [inline] zap_pte_range mm/memory.c:1341 [inline] zap_pmd_range mm/memory.c:1442 [inline] zap_pud_range mm/memory.c:1471 [inline] zap_p4d_range mm/memory.c:1492 [inline] unmap_page_range+0x26d2/0x3be0 mm/memory.c:1513 unmap_single_vma+0x445/0x5e0 mm/memory.c:1558 unmap_vmas+0x1f4/0x360 mm/memory.c:1588 exit_mmap+0x4d7/0x980 mm/mmap.c:3105 __mmput+0x158/0x600 kernel/fork.c:962 mmput+0xab/0xf0 kernel/fork.c:983 exit_mm+0x6ed/0x7a0 kernel/exit.c:545 do_exit+0xc12/0x3930 kernel/exit.c:854 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 ==================================================================