kernel msg: ebtables bug: please report to author: Entries_size never zero ================================================================== BUG: KMSAN: uninit-value in __list_del_entry_valid+0x39e/0x440 lib/list_debug.c:54 CPU: 1 PID: 20971 Comm: syz-executor7 Not tainted 4.17.0+ #9 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1125 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620 __list_del_entry_valid+0x39e/0x440 lib/list_debug.c:54 __list_del_entry include/linux/list.h:117 [inline] list_del include/linux/list.h:125 [inline] __rmqueue_smallest mm/page_alloc.c:1963 [inline] __rmqueue mm/page_alloc.c:2453 [inline] rmqueue mm/page_alloc.c:3013 [inline] get_page_from_freelist+0x8307/0xb740 mm/page_alloc.c:3352 __alloc_pages_nodemask+0x792/0x5cc0 mm/page_alloc.c:4371 __alloc_pages include/linux/gfp.h:458 [inline] __alloc_pages_node include/linux/gfp.h:471 [inline] alloc_pages_vma+0x1555/0x17f0 mm/mempolicy.c:2049 do_huge_pmd_anonymous_page+0xbdd/0x2540 mm/huge_memory.c:722 create_huge_pmd mm/memory.c:3856 [inline] __handle_mm_fault mm/memory.c:4060 [inline] handle_mm_fault+0x44ca/0x7ed0 mm/memory.c:4126 __do_page_fault+0xec6/0x1a10 arch/x86/mm/fault.c:1400 do_page_fault+0xb7/0x250 arch/x86/mm/fault.c:1477 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1163 RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75 RSP: 0018:ffff88019eebfd28 EFLAGS: 00010202 RAX: ffffffff83ffaf00 RBX: 0000000020000000 RCX: 0000000000000001 RDX: 0000000000000001 RSI: ffff8801c1fee000 RDI: 0000000020000000 RBP: ffff88019eebfd90 R08: 0000000020ffffff R09: 0000000000000000 R10: 0000000000000000 R11: ffffffff81ac5b60 R12: 0000000000000000 R13: ffff88019eebfd30 R14: 0000000000000000 R15: ffff8801398b4358 copy_to_user include/linux/uaccess.h:183 [inline] __do_sys_mincore mm/mincore.c:262 [inline] __se_sys_mincore+0x76e/0x9d0 mm/mincore.c:224 __x64_sys_mincore+0xd8/0x110 mm/mincore.c:224 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x455a99 RSP: 002b:00007efd36410c68 EFLAGS: 00000246 ORIG_RAX: 000000000000001b RAX: ffffffffffffffda RBX: 00007efd364116d4 RCX: 0000000000455a99 RDX: 0000000020000000 RSI: 0000000000001000 RDI: 0000000020edf000 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004bff72 R14: 00000000004cf360 R15: 0000000000000000 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_save_stack mm/kmsan/kmsan.c:297 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:689 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 __list_add include/linux/list.h:63 [inline] list_add include/linux/list.h:79 [inline] __free_one_page+0x1647/0x1800 mm/page_alloc.c:876 free_one_page mm/page_alloc.c:1176 [inline] __free_pages_ok+0x870/0x1680 mm/page_alloc.c:1260 free_compound_page+0x8e/0xc0 mm/page_alloc.c:571 free_transhuge_page+0x3bc/0x470 mm/huge_memory.c:2732 __put_compound_page mm/swap.c:95 [inline] release_pages+0x6ff/0x1650 mm/swap.c:759 free_pages_and_swap_cache+0x55b/0x580 mm/swap_state.c:322 tlb_flush_mmu_free mm/memory.c:260 [inline] zap_pte_range mm/memory.c:1405 [inline] zap_pmd_range mm/memory.c:1442 [inline] zap_pud_range mm/memory.c:1471 [inline] zap_p4d_range mm/memory.c:1492 [inline] unmap_page_range+0x3228/0x3be0 mm/memory.c:1513 unmap_single_vma+0x445/0x5e0 mm/memory.c:1558 unmap_vmas+0x1f4/0x360 mm/memory.c:1588 exit_mmap+0x4d7/0x980 mm/mmap.c:3105 __mmput+0x158/0x600 kernel/fork.c:962 mmput+0xab/0xf0 kernel/fork.c:983 exit_mm+0x6ed/0x7a0 kernel/exit.c:545 do_exit+0xc12/0x3930 kernel/exit.c:854 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:282 [inline] kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:819 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:889 __alloc_pages_nodemask+0xf7b/0x5cc0 mm/page_alloc.c:4402 alloc_pages_current+0x6b1/0x970 mm/mempolicy.c:2093 alloc_pages include/linux/gfp.h:494 [inline] __get_free_pages+0x2d/0xc0 mm/page_alloc.c:4423 tlb_next_batch mm/memory.c:205 [inline] __tlb_remove_page_size mm/memory.c:317 [inline] __tlb_remove_page include/asm-generic/tlb.h:150 [inline] zap_pte_range mm/memory.c:1341 [inline] zap_pmd_range mm/memory.c:1442 [inline] zap_pud_range mm/memory.c:1471 [inline] zap_p4d_range mm/memory.c:1492 [inline] unmap_page_range+0x26d2/0x3be0 mm/memory.c:1513 unmap_single_vma+0x445/0x5e0 mm/memory.c:1558 unmap_vmas+0x1f4/0x360 mm/memory.c:1588 exit_mmap+0x4d7/0x980 mm/mmap.c:3105 __mmput+0x158/0x600 kernel/fork.c:962 mmput+0xab/0xf0 kernel/fork.c:983 exit_mm+0x6ed/0x7a0 kernel/exit.c:545 do_exit+0xc12/0x3930 kernel/exit.c:854 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 ==================================================================