================================================================== BUG: KMSAN: uninit-value in __list_add_valid+0x1a2/0x450 lib/list_debug.c:23 CPU: 0 PID: 7375 Comm: syz-executor2 Not tainted 4.17.0+ #17 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1368 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:634 __list_add_valid+0x1a2/0x450 lib/list_debug.c:23 __list_add include/linux/list.h:60 [inline] list_add include/linux/list.h:79 [inline] account_entity_enqueue kernel/sched/fair.c:2652 [inline] enqueue_entity kernel/sched/fair.c:4176 [inline] enqueue_task_fair+0xe12/0x4490 kernel/sched/fair.c:5359 enqueue_task kernel/sched/core.c:751 [inline] activate_task kernel/sched/core.c:770 [inline] ttwu_activate kernel/sched/core.c:1658 [inline] ttwu_do_activate kernel/sched/core.c:1717 [inline] ttwu_queue kernel/sched/core.c:1862 [inline] try_to_wake_up+0x162f/0x2260 kernel/sched/core.c:2075 wake_up_process+0x34/0x40 kernel/sched/core.c:2148 swake_up_locked kernel/sched/swait.c:30 [inline] swake_up+0xfb/0x3b0 kernel/sched/swait.c:40 rcu_gp_kthread_wake kernel/rcu/tree.c:1787 [inline] rcu_report_qs_rsp kernel/rcu/tree.c:2366 [inline] rcu_report_qs_rnp+0x767/0x880 kernel/rcu/tree.c:2433 rcu_report_qs_rdp kernel/rcu/tree.c:2516 [inline] rcu_check_quiescent_state kernel/rcu/tree.c:2553 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2881 [inline] rcu_process_callbacks+0x90a/0x2060 kernel/rcu/tree.c:2914 __do_softirq+0x592/0x979 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:366 [inline] irq_exit+0x207/0x240 kernel/softirq.c:407 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:868 RIP: 0010:msan_get_shadow_origin_ptr+0x5a/0x2c0 mm/kmsan/kmsan_instr.c:250 RSP: 0018:ffff8801afd6f678 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: ffffffff8b58c000 RBX: ffffffff8b58a000 RCX: ffff880128d96880 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0009794ba0 RBP: ffff8801afd6f6c0 R08: 0000000000000000 R09: 00000000000000b0 R10: 0000000000000000 R11: ffffffff81928e40 R12: 0000000000000008 R13: ffff88012b331d40 R14: ffffffff8b589000 R15: ffffea0009794ba0 __msan_metadata_ptr_for_load_8+0x10/0x20 mm/kmsan/kmsan_instr.c:345 compound_head include/linux/page-flags.h:142 [inline] PageUptodate include/linux/page-flags.h:445 [inline] filemap_map_pages+0xa9a/0x1ac0 mm/filemap.c:2656 do_fault_around mm/memory.c:3595 [inline] do_read_fault mm/memory.c:3629 [inline] do_fault mm/memory.c:3734 [inline] handle_pte_fault mm/memory.c:3965 [inline] __handle_mm_fault mm/memory.c:4089 [inline] handle_mm_fault+0x2f6b/0x7ed0 mm/memory.c:4126 faultin_page mm/gup.c:502 [inline] __get_user_pages+0x1376/0x25d0 mm/gup.c:702 populate_vma_page_range mm/gup.c:1206 [inline] __mm_populate+0x6cb/0x8b0 mm/gup.c:1256 mm_populate include/linux/mm.h:2245 [inline] vm_mmap_pgoff+0x3dc/0x430 mm/util.c:362 ksys_mmap_pgoff+0x260/0xaf0 mm/mmap.c:1585 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:100 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:91 [inline] __x64_sys_mmap+0x1f1/0x260 arch/x86/kernel/sys_x86_64.c:91 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x455ab9 RSP: 002b:00007fa334da0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007fa334da16d4 RCX: 0000000000455ab9 RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 RBP: 000000000072bf48 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000008031 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004c0191 R14: 00000000004cf870 R15: 0000000000000001 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:287 [inline] kmsan_save_stack mm/kmsan/kmsan.c:302 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:692 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:478 __write_once_size include/linux/compiler.h:224 [inline] __list_add include/linux/list.h:66 [inline] list_add include/linux/list.h:79 [inline] account_entity_enqueue kernel/sched/fair.c:2652 [inline] enqueue_entity kernel/sched/fair.c:4176 [inline] enqueue_task_fair+0x2947/0x4490 kernel/sched/fair.c:5359 enqueue_task kernel/sched/core.c:751 [inline] activate_task kernel/sched/core.c:770 [inline] ttwu_activate kernel/sched/core.c:1658 [inline] ttwu_do_activate kernel/sched/core.c:1717 [inline] ttwu_queue kernel/sched/core.c:1862 [inline] try_to_wake_up+0x162f/0x2260 kernel/sched/core.c:2075 wake_up_process+0x34/0x40 kernel/sched/core.c:2148 hrtimer_wakeup+0xac/0x100 kernel/time/hrtimer.c:1647 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053 Local variable description: ----t.i.i@__se_sys_nanosleep Variable was created at: __se_sys_nanosleep+0x5f/0x6a0 kernel/time/hrtimer.c:1762 __x64_sys_nanosleep+0x92/0xc0 kernel/time/hrtimer.c:1762 ==================================================================