===================================================== BUG: KMSAN: uninit-value in __list_del_entry_valid+0x403/0x410 lib/list_debug.c:54 CPU: 0 PID: 26381 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x24c/0x2e0 lib/dump_stack.c:120 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:121 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197 __list_del_entry_valid+0x403/0x410 lib/list_debug.c:54 __list_del_entry include/linux/list.h:132 [inline] list_move_tail include/linux/list.h:227 [inline] rwsem_mark_wake+0x436/0xd00 kernel/locking/rwsem.c:482 rwsem_wake kernel/locking/rwsem.c:1176 [inline] __up_write kernel/locking/rwsem.c:1322 [inline] up_write+0x1a6/0x220 kernel/locking/rwsem.c:1459 anon_vma_unlock_write include/linux/rmap.h:124 [inline] split_huge_page_to_list+0x1c3e/0x22c0 mm/huge_memory.c:2787 shrink_page_list+0x28c4/0x7840 mm/vmscan.c:1279 shrink_inactive_list+0x83f/0x14f0 mm/vmscan.c:1948 shrink_list mm/vmscan.c:2170 [inline] shrink_lruvec+0x738/0x1480 mm/vmscan.c:2465 shrink_node_memcgs+0x5a3/0xc60 mm/vmscan.c:2653 shrink_node+0x1a02/0x3400 mm/vmscan.c:2770 shrink_zones+0x98e/0xfb0 mm/vmscan.c:2973 do_try_to_free_pages+0x2fa/0x15a0 mm/vmscan.c:3028 try_to_free_pages+0xb66/0x1860 mm/vmscan.c:3267 __perform_reclaim mm/page_alloc.c:4399 [inline] __alloc_pages_direct_reclaim mm/page_alloc.c:4420 [inline] __alloc_pages_slowpath+0x1f46/0x3af0 mm/page_alloc.c:4824 __alloc_pages_nodemask+0xbbb/0xf90 mm/page_alloc.c:5034 alloc_pages_current+0x7b6/0xb60 mm/mempolicy.c:2277 alloc_pages include/linux/gfp.h:561 [inline] __get_free_pages+0x33/0xc0 mm/page_alloc.c:5059 __pte_alloc_one_kernel include/asm-generic/pgalloc.h:21 [inline] pte_alloc_one_kernel include/asm-generic/pgalloc.h:33 [inline] __pte_alloc_kernel+0x67/0x380 mm/memory.c:474 vmap_pte_range mm/vmalloc.c:209 [inline] vmap_pmd_range mm/vmalloc.c:238 [inline] vmap_pud_range mm/vmalloc.c:256 [inline] vmap_p4d_range mm/vmalloc.c:274 [inline] __map_kernel_range_noflush+0xc5a/0x11d0 mm/vmalloc.c:315 map_kernel_range_noflush mm/vmalloc.c:330 [inline] map_kernel_range mm/vmalloc.c:339 [inline] __vmalloc_area_node mm/vmalloc.c:2540 [inline] __vmalloc_node_range+0xceb/0x1310 mm/vmalloc.c:2590 __bpf_map_area_alloc+0x344/0x380 kernel/bpf/syscall.c:306 bpf_map_area_alloc+0x6c/0x80 kernel/bpf/syscall.c:313 prealloc_init kernel/bpf/hashtab.c:284 [inline] htab_map_alloc+0x17a4/0x2770 kernel/bpf/hashtab.c:508 find_and_alloc_map kernel/bpf/syscall.c:122 [inline] map_create kernel/bpf/syscall.c:828 [inline] __do_sys_bpf+0xf4d5/0x1aba0 kernel/bpf/syscall.c:4375 __se_sys_bpf+0x8e/0xa0 kernel/bpf/syscall.c:4351 __ia32_sys_bpf+0x4a/0x70 kernel/bpf/syscall.c:4351 do_syscall_32_irqs_on arch/x86/entry/common.c:79 [inline] __do_fast_syscall_32+0x127/0x180 arch/x86/entry/common.c:142 do_fast_syscall_32+0x77/0xd0 arch/x86/entry/common.c:168 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:211 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c RIP: 0023:0xf7f67549 Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 RSP: 002b:00000000f55405fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020001800 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Local variable ----pvmw@remove_migration_pte created at: remove_migration_pte+0xbe/0x1920 mm/migrate.c:204 remove_migration_pte+0xbe/0x1920 mm/migrate.c:204 =====================================================