===================================================== BUG: KMSAN: uninit-value in vmacache_find+0x928/0xa10 mm/vmacache.c:79 vmacache_find+0x928/0xa10 mm/vmacache.c:79 find_vma+0x7b/0x380 mm/mmap.c:2276 do_user_addr_fault+0xc27/0x1f20 arch/x86/mm/fault.c:1379 handle_page_fault arch/x86/mm/fault.c:1505 [inline] exc_page_fault+0x61/0x140 arch/x86/mm/fault.c:1561 asm_exc_page_fault+0x1e/0x30 Local variable regs created at: __bpf_prog_run32+0x84/0x180 kernel/bpf/core.c:2073 bpf_dispatcher_nop_func include/linux/bpf.h:804 [inline] __bpf_prog_run include/linux/filter.h:628 [inline] bpf_prog_run include/linux/filter.h:635 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2022 [inline] bpf_trace_run2+0x129/0x380 kernel/trace/bpf_trace.c:2059 CPU: 1 PID: 9040 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ===================================================== Kernel panic - not syncing: kmsan.panic set ... CPU: 1 PID: 9040 Comm: syz-executor.3 Tainted: G B 5.18.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106 dump_stack+0x25/0x28 lib/dump_stack.c:113 panic+0x4fe/0xc73 kernel/panic.c:250 kmsan_report+0x2cd/0x2d0 mm/kmsan/report.c:208 __msan_warning+0x94/0x110 mm/kmsan/instrumentation.c:256 vmacache_find+0x928/0xa10 mm/vmacache.c:79 find_vma+0x7b/0x380 mm/mmap.c:2276 do_user_addr_fault+0xc27/0x1f20 arch/x86/mm/fault.c:1379 handle_page_fault arch/x86/mm/fault.c:1505 [inline] exc_page_fault+0x61/0x140 arch/x86/mm/fault.c:1561 asm_exc_page_fault+0x1e/0x30 RIP: 0023:0xf6e62520 Code: 8d 93 e4 66 00 00 c7 83 18 6a 00 00 00 00 00 00 0f b7 00 66 3b 02 74 aa 83 ec 0c 50 e8 b9 c7 00 00 83 c4 10 eb 9c 66 90 66 90 00 c3 fa ff 81 c2 db 3a 0d 00 f7 d8 c7 c2 dc ff ff ff 65 89 02 RSP: 002b:00000000f7f785ec EFLAGS: 00010206 RAX: fffffffffffffff7 RBX: 00000000f6f36000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Kernel Offset: disabled Rebooting in 86400 seconds.. ---------------- Code disassembly (best guess): 0: 8d 93 e4 66 00 00 lea 0x66e4(%rbx),%edx 6: c7 83 18 6a 00 00 00 movl $0x0,0x6a18(%rbx) d: 00 00 00 10: 0f b7 00 movzwl (%rax),%eax 13: 66 3b 02 cmp (%rdx),%ax 16: 74 aa je 0xffffffc2 18: 83 ec 0c sub $0xc,%esp 1b: 50 push %rax 1c: e8 b9 c7 00 00 callq 0xc7da 21: 83 c4 10 add $0x10,%esp 24: eb 9c jmp 0xffffffc2 26: 66 90 xchg %ax,%ax 28: 66 90 xchg %ax,%ax * 2a: e8 00 c3 fa ff callq 0xfffac32f <-- trapping instruction 2f: 81 c2 db 3a 0d 00 add $0xd3adb,%edx 35: f7 d8 neg %eax 37: c7 c2 dc ff ff ff mov $0xffffffdc,%edx 3d: 65 89 02 mov %eax,%gs:(%rdx)