================================================================== BUG: KMSAN: uninit-value in __rmqueue_pcplist mm/page_alloc.c:2942 [inline] BUG: KMSAN: uninit-value in rmqueue_pcplist mm/page_alloc.c:2971 [inline] BUG: KMSAN: uninit-value in rmqueue mm/page_alloc.c:2993 [inline] BUG: KMSAN: uninit-value in get_page_from_freelist+0x5f24/0xb740 mm/page_alloc.c:3352 CPU: 1 PID: 4533 Comm: syz-executor3 Not tainted 4.17.0+ #8 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1122 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620 __rmqueue_pcplist mm/page_alloc.c:2942 [inline] rmqueue_pcplist mm/page_alloc.c:2971 [inline] rmqueue mm/page_alloc.c:2993 [inline] get_page_from_freelist+0x5f24/0xb740 mm/page_alloc.c:3352 __alloc_pages_nodemask+0x792/0x5cc0 mm/page_alloc.c:4371 alloc_pages_current+0x6b1/0x970 mm/mempolicy.c:2093 alloc_pages include/linux/gfp.h:494 [inline] __vmalloc_area_node mm/vmalloc.c:1699 [inline] __vmalloc_node_range+0x83c/0x1170 mm/vmalloc.c:1759 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vzalloc+0xd8/0xf0 mm/vmalloc.c:1857 alloc_counters+0x99/0x920 net/ipv6/netfilter/ip6_tables.c:819 copy_entries_to_user net/ipv6/netfilter/ip6_tables.c:841 [inline] get_entries net/ipv6/netfilter/ip6_tables.c:1044 [inline] do_ip6t_get_ctl+0x843/0x1130 net/ipv6/netfilter/ip6_tables.c:1712 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x481/0x4e0 net/netfilter/nf_sockopt.c:122 ipv6_getsockopt+0x25b/0x480 net/ipv6/ipv6_sockglue.c:1370 tcp_getsockopt+0x1c6/0x1f0 net/ipv4/tcp.c:3349 sock_common_getsockopt+0x13f/0x180 net/core/sock.c:2998 __sys_getsockopt+0x48c/0x550 net/socket.c:1940 __do_sys_getsockopt net/socket.c:1951 [inline] __se_sys_getsockopt net/socket.c:1948 [inline] __x64_sys_getsockopt+0x15d/0x1c0 net/socket.c:1948 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45861a RSP: 002b:0000000000a3e328 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 0000000000a3e350 RCX: 000000000045861a RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000013 RBP: 0000000000704d60 R08: 0000000000a3e34c R09: 0000000000004000 R10: 0000000000a3e450 R11: 0000000000000216 R12: 0000000000000013 R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000703260 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline] kmsan_save_stack mm/kmsan/kmsan.c:294 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:686 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464 __write_once_size include/linux/compiler.h:224 [inline] __list_add include/linux/list.h:66 [inline] list_add include/linux/list.h:79 [inline] free_unref_page_commit+0x4bc/0x4d0 mm/page_alloc.c:2774 free_unref_page mm/page_alloc.c:2794 [inline] __free_pages mm/page_alloc.c:4440 [inline] free_pages+0x290/0x320 mm/page_alloc.c:4452 arch_tlb_finish_mmu mm/memory.c:291 [inline] tlb_finish_mmu+0x3f7/0x5c0 mm/memory.c:434 exit_mmap+0x539/0x980 mm/mmap.c:3107 __mmput+0x158/0x600 kernel/fork.c:962 mmput+0xab/0xf0 kernel/fork.c:983 exit_mm+0x6ed/0x7a0 kernel/exit.c:545 do_exit+0xc12/0x3930 kernel/exit.c:854 do_group_exit+0x1a0/0x360 kernel/exit.c:970 get_signal+0x1405/0x1ec0 kernel/signal.c:2482 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Local variable description: ----tlb@exit_mmap Variable was created at: exit_mmap+0x47/0x980 mm/mmap.c:3051 __mmput+0x158/0x600 kernel/fork.c:962 ==================================================================