Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. syzkaller login: [ 70.417116] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 executing program [ 70.675484] PANIC: double fault, error_code: 0x0 [ 70.680303] CPU: 0 PID: 6689 Comm: syz-executor368 Not tainted 4.20.0-rc2+ #84 [ 70.687693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.698145] ================================================================== [ 70.698150] BUG: KMSAN: uninit-value in do_raw_spin_lock+0x130/0x410 [ 70.698154] CPU: 0 PID: 6689 Comm: syz-executor368 Not tainted 4.20.0-rc2+ #84 [ 70.698158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.698161] Call Trace: [ 70.698164] <#DF> [ 70.698167] dump_stack+0x32d/0x480 [ 70.698170] ? do_raw_spin_lock+0x130/0x410 [ 70.698173] kmsan_report+0x19f/0x300 [ 70.698176] kmsan_internal_check_memory+0x35b/0x3b0 [ 70.698179] ? __msan_poison_alloca+0x1e0/0x270 [ 70.698182] kmsan_check_memory+0xd/0x10 [ 70.698185] do_raw_spin_lock+0x130/0x410 [ 70.698189] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 70.698192] _raw_spin_lock+0x27/0x30 [ 70.698195] vprintk_emit+0x1d9/0x8a0 [ 70.698198] vprintk_default+0x90/0xa0 [ 70.698201] vprintk_func+0x26b/0x2a0 [ 70.698204] printk+0x1a3/0x1f0 [ 70.698207] ? kmsan_get_origin_address+0xa/0x360 [ 70.698210] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 70.698213] show_iret_regs+0x13c/0x540 [ 70.698217] ? kmsan_get_origin_address+0xa/0x360 [ 70.698220] ? __show_regs+0xb2/0x1350 [ 70.698223] ? show_regs+0xaf/0x170 [ 70.698226] __show_regs+0xc9/0x1350 [ 70.698229] ? get_cpu_entry_area+0xc/0x30 [ 70.698232] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 70.698235] show_regs+0xaf/0x170 [ 70.698238] df_debug+0x86/0xb0 [ 70.698241] do_double_fault+0x362/0x480 [ 70.698244] double_fault+0x1e/0x30 [ 70.698247] RIP: 0010:kmsan_get_origin_address+0xa/0x360 [ 70.698255] Code: 55 d0 4c 29 e2 0f 85 e5 fe ff ff 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 0f 0b 66 90 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 89 4d d0 89 55 d4 48 89 75 c8 48 89 fb 49 bc [ 70.698258] RSP: 0018:fffffe0000002000 EFLAGS: 00010086 [ 70.698264] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 70.698268] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe0000002150 [ 70.698272] RBP: fffffe0000002018 R08: 0000000000000000 R09: 0000000000000000 [ 70.698276] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 70.698280] R13: fffffe00000021c0 R14: fffffe00000021a8 R15: fffffe00000021a8 [ 70.698282] [ 70.698285] [ 70.698288] kmsan_memmove_origins+0xbd/0x1c0 [ 70.698292] ? kmsan_memmove_shadow+0xad/0xd0 [ 70.698295] __msan_memmove+0x6c/0x80 [ 70.698298] fixup_bad_iret+0x9b/0x120 [ 70.698300] error_entry+0xad/0xc0 [ 70.698303] RIP: 0000:0x1019f [ 70.698306] Code: Bad RIP value. [ 70.698309] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 70.698316] RAX: 0000000000000000 RBX: ffffffff8b000e58 RCX: 0000000000000000 [ 70.698320] RDX: 0000000000000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.698333] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000004037f0 [ 70.698337] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 70.698341] R13: 00000000004037f0 R14: 0000000000000000 R15: 0000000000000000 [ 70.698344] ? general_protection+0x8/0x30 [ 70.698347] ? general_protection+0x8/0x30 [ 70.698350] [ 70.698353] [ 70.698356] Local variable description: ----v.addr.i.i@do_raw_spin_lock [ 70.698359] Variable was created at: [ 70.698363] do_raw_spin_lock+0x62/0x410 [ 70.698365] _raw_spin_lock+0x27/0x30 [ 70.698368] [ 70.698371] Bytes 0-7 of 8 are uninitialized [ 70.698375] Memory access of size 8 starts at fffffe00000099f8 [ 70.698379] ================================================================== [ 70.698382] Disabling lock debugging due to kernel taint [ 70.698386] Kernel panic - not syncing: panic_on_warn set ... [ 70.698390] CPU: 0 PID: 6689 Comm: syz-executor368 Tainted: G B 4.20.0-rc2+ #84 [ 70.698395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.698397] Call Trace: [ 70.698400] <#DF> [ 70.698403] dump_stack+0x32d/0x480 [ 70.698406] panic+0x624/0xc08 [ 70.698409] kmsan_report+0x300/0x300 [ 70.698412] kmsan_internal_check_memory+0x35b/0x3b0 [ 70.698415] ? __msan_poison_alloca+0x1e0/0x270 [ 70.698418] kmsan_check_memory+0xd/0x10 [ 70.698422] do_raw_spin_lock+0x130/0x410 [ 70.698425] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 70.698428] _raw_spin_lock+0x27/0x30 [ 70.698431] vprintk_emit+0x1d9/0x8a0 [ 70.698434] vprintk_default+0x90/0xa0 [ 70.698437] vprintk_func+0x26b/0x2a0 [ 70.698440] printk+0x1a3/0x1f0 [ 70.698443] ? kmsan_get_origin_address+0xa/0x360 [ 70.698446] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 70.698449] show_iret_regs+0x13c/0x540 [ 70.698453] ? kmsan_get_origin_address+0xa/0x360 [ 70.698456] ? __show_regs+0xb2/0x1350 [ 70.698459] ? show_regs+0xaf/0x170 [ 70.698462] __show_regs+0xc9/0x1350 [ 70.698465] ? get_cpu_entry_area+0xc/0x30 [ 70.698468] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 70.698471] show_regs+0xaf/0x170 [ 70.698474] df_debug+0x86/0xb0 [ 70.698477] do_double_fault+0x362/0x480 [ 70.698480] double_fault+0x1e/0x30 [ 70.698483] RIP: 0010:kmsan_get_origin_address+0xa/0x360 [ 70.698490] Code: 55 d0 4c 29 e2 0f 85 e5 fe ff ff 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 0f 0b 66 90 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 89 4d d0 89 55 d4 48 89 75 c8 48 89 fb 49 bc [ 70.698494] RSP: 0018:fffffe0000002000 EFLAGS: 00010086 [ 70.698499] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 70.698503] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe0000002150 [ 70.698507] RBP: fffffe0000002018 R08: 0000000000000000 R09: 0000000000000000 [ 70.698511] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 70.698515] R13: fffffe00000021c0 R14: fffffe00000021a8 R15: fffffe00000021a8 [ 70.698518] [ 70.698520] [ 70.698524] kmsan_memmove_origins+0xbd/0x1c0 [ 70.698527] ? kmsan_memmove_shadow+0xad/0xd0 [ 70.698530] __msan_memmove+0x6c/0x80 [ 70.698533] fixup_bad_iret+0x9b/0x120 [ 70.698536] error_entry+0xad/0xc0 [ 70.698538] RIP: 0000:0x1019f [ 70.698541] Code: Bad RIP value. [ 70.698545] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 70.698551] RAX: 0000000000000000 RBX: ffffffff8b000e58 RCX: 0000000000000000 [ 70.698555] RDX: 0000000000000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.698559] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000004037f0 [ 70.698563] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 70.698567] R13: 00000000004037f0 R14: 0000000000000000 R15: 0000000000000000 [ 70.698570] ? general_protection+0x8/0x30 [ 70.698573] ? general_protection+0x8/0x30 [ 70.698576] [ 70.699593] Kernel Offset: disabled