[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 82.960098][ T30] audit: type=1800 audit(1567617792.013:25): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 82.983171][ T30] audit: type=1800 audit(1567617792.043:26): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.022912][ T30] audit: type=1800 audit(1567617792.063:27): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. 2019/09/04 17:23:25 fuzzer started 2019/09/04 17:23:29 dialing manager at 10.128.0.26:36635 2019/09/04 17:23:29 syscalls: 2376 2019/09/04 17:23:29 code coverage: enabled 2019/09/04 17:23:29 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/04 17:23:29 extra coverage: enabled 2019/09/04 17:23:29 setuid sandbox: enabled 2019/09/04 17:23:29 namespace sandbox: enabled 2019/09/04 17:23:29 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/04 17:23:29 fault injection: enabled 2019/09/04 17:23:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/04 17:23:29 net packet injection: enabled 2019/09/04 17:23:29 net device setup: enabled 17:26:01 executing program 0: syzkaller login: [ 252.865150][T12386] IPVS: ftp: loaded support on port[0] = 21 [ 253.006407][T12386] chnl_net:caif_netlink_parms(): no params data found [ 253.062259][T12386] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.069490][T12386] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.078315][T12386] device bridge_slave_0 entered promiscuous mode [ 253.088198][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.095430][T12386] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.104237][T12386] device bridge_slave_1 entered promiscuous mode [ 253.136305][T12386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.148995][T12386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.181542][T12386] team0: Port device team_slave_0 added [ 253.190810][T12386] team0: Port device team_slave_1 added [ 253.367316][T12386] device hsr_slave_0 entered promiscuous mode [ 253.622954][T12386] device hsr_slave_1 entered promiscuous mode [ 253.892523][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.899780][T12386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.907596][T12386] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.914812][T12386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.994348][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.015266][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.027663][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.038282][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.049922][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 254.071347][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.085865][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.095379][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.106099][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.113326][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.132582][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.141969][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.151372][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.158585][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.200956][T12386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.211937][T12386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.226658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.237017][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.246957][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.256783][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.266377][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.276018][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.285550][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.294714][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.304197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.313390][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.325078][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.334716][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.376436][T12386] 8021q: adding VLAN 0 to HW filter on device batadv0 17:26:03 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x79, 0x1a, 0x78, 0x8, 0xb95, 0x772a, 0x55cd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x77, 0x2d, 0x35}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0xb4, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000003280)={0x14, 0x0, 0x0}, &(0x7f0000000600)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001f00)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0x40, 0x9, 0x1, 0x39d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ethernet(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x1, "aa"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 254.853106][ T2893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 255.112331][ T2893] usb 1-1: Using ep0 maxpacket: 8 [ 255.232918][ T2893] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 255.241219][ T2893] usb 1-1: config 0 has no interface number 0 [ 255.247526][ T2893] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=55.cd [ 255.256682][ T2893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.267321][ T2893] usb 1-1: config 0 descriptor?? [ 255.523471][ T2893] asix 1-1:0.119 (unnamed net_device) (uninitialized): invalid hw address, using random 17:26:04 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x42f, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000000540)={0xa}, 0x1a, &(0x7f0000000580)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xfffffffffffffde0}, @wireless={0xb}]}, 0x9, [{0xfffffffffffffd80, &(0x7f00000005c0)=@string={0x33, 0x3, "2e6ae5e4c8fc29fcae73612dd43b6bd0ffb95b599ed84007404456f5ddb995919441c8d961fed5339a696ad9ae5beb3123"}}, {0x12, &(0x7f0000000600)=@string={0x12, 0x3, "aedc3ec085dd285e2d7b6981c08b4b70"}}, {0xce, &(0x7f0000000080)=@string={0xce, 0x3, "63deea08bed3d373b675eca1e198e85ae4792a26dbbb3a1d9d2d921bc31b4b120227d256cfc1ff19375a7869e81debd0feb637729b925cb8155feb1f5b9001306541392a049fe55e7d8cea30954d8e27ed449e20573bd2e232a5bd24a54e02364eb2734619d03e6c4c121c3445ef1f22259e8cd2570864958db3697cfed75fa7aac8119d8e9f4704ee788cb73191f78255692761f51b645964bd3f9e21965da7668fb455e565c06ab2b0303ab457b2fbd5f2b6d7f72152d7d5710983cfdc2e89b2f8fb836de86b9337e70836"}}, {0xf9, &(0x7f00000006c0)=@string={0xf9, 0x3, "cd255ce7cb2e1e36e0897d6e17acf4a272774796c70969963435678a953e9567be3b101dd107cc9c6d521d03017e8c23139d0df3638655c0e3bebfaab9477386be0cad7229af5c845d3f9f108e310fe3ec379b2916ebd81dea3d096e15fbb7aaab333863a7afee0fb197cab96003aeea9ebb100c38ccbd368ba47e62cb89c5e18c790d582f4b7695bb3a0fec1f2f1a240fb58d76a12e6bd9290f9ff21800753e7226ff2e0224b5ac518afa39945a3a1359b97f95f749136b5e65dcbe9ad7085396d04b8ab9574978941f3c0bf7ef5cbad6a4a8806364a170be2e4971ccd56e4c67d58cf9e2edf329137fde6bd95e1ce7fa7afbf4f0d6e7"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x3}}, {0x4, &(0x7f0000000800)=@lang_id={0x4}}, {0x1002, &(0x7f0000000840)=@string={0x1002, 0x3, "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"}}, {0xfffffffffffffee7, &(0x7f0000001880)=@string={0x2a, 0x3, "83b41bafe9133507b093b2693b0caf48fb57586247fac045aceb14d77013438b2cf098419e0bebd7"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4}}]}) [ 256.188160][T12399] IPVS: ftp: loaded support on port[0] = 21 [ 256.340428][T12399] chnl_net:caif_netlink_parms(): no params data found [ 256.386917][T12396] ================================================================== [ 256.395052][T12396] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 256.397268][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.402255][T12396] CPU: 0 PID: 12396 Comm: syz-executor.0 Not tainted 5.3.0-rc6+ #0 [ 256.402265][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.402272][T12396] Call Trace: [ 256.402302][T12396] dump_stack+0x191/0x1f0 [ 256.402327][T12396] kmsan_report+0x162/0x2d0 [ 256.402350][T12396] kmsan_internal_check_memory+0x455/0x8d0 [ 256.402401][T12396] kmsan_copy_to_user+0xa9/0xb0 [ 256.409519][T12399] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.417325][T12396] _copy_to_user+0x16b/0x1f0 [ 256.417351][T12396] fuzzer_ioctl+0x2605/0x5690 [ 256.417372][T12396] ? refcount_inc_not_zero_checked+0x1a0/0x240 [ 256.417400][T12396] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 256.417418][T12396] ? next_event+0x6a0/0x6a0 [ 256.417437][T12396] full_proxy_unlocked_ioctl+0x1ca/0x380 [ 256.417466][T12396] ? full_proxy_poll+0x320/0x320 [ 256.417483][T12396] do_vfs_ioctl+0xea8/0x2c50 [ 256.417518][T12396] ? security_file_ioctl+0x1bd/0x200 [ 256.417542][T12396] __se_sys_ioctl+0x1da/0x270 [ 256.417569][T12396] __x64_sys_ioctl+0x4a/0x70 [ 256.417587][T12396] do_syscall_64+0xbc/0xf0 [ 256.417608][T12396] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 256.417622][T12396] RIP: 0033:0x4596e7 [ 256.417640][T12396] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.417647][T12396] RSP: 002b:00007fd8364023e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.417662][T12396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004596e7 [ 256.417670][T12396] RDX: 00007fd836402830 RSI: 0000000080085502 RDI: 0000000000000003 [ 256.417678][T12396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 256.417686][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8364036d4 [ 256.417696][T12396] R13: 00000000004beee6 R14: 00000000004dffa0 R15: 00000000ffffffff [ 256.417712][T12396] [ 256.417716][T12396] Uninit was stored to memory at: [ 256.417738][T12396] kmsan_internal_chain_origin+0xcc/0x150 [ 256.417753][T12396] kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 256.417764][T12396] kmsan_memcpy_metadata+0xb/0x10 [ 256.417778][T12396] __msan_memcpy+0x56/0x70 [ 256.417791][T12396] gadget_setup+0x498/0xb60 [ 256.417807][T12396] dummy_timer+0x1fba/0x6770 [ 256.417820][T12396] call_timer_fn+0x232/0x530 [ 256.417834][T12396] __run_timers+0xcdc/0x11a0 [ 256.417847][T12396] run_timer_softirq+0x2d/0x50 [ 256.417859][T12396] __do_softirq+0x4a1/0x83a [ 256.417873][T12396] irq_exit+0x230/0x280 [ 256.417890][T12396] exiting_irq+0xe/0x10 [ 256.417904][T12396] smp_apic_timer_interrupt+0x48/0x70 [ 256.417920][T12396] apic_timer_interrupt+0x2e/0x40 [ 256.417934][T12396] kmsan_get_shadow_origin_ptr+0x189/0x3a0 [ 256.417947][T12396] __msan_metadata_ptr_for_store_4+0x13/0x20 [ 256.417963][T12396] sha256_generic_block_fn+0x324/0x8870 [ 256.417976][T12396] crypto_sha256_update+0x3f6/0x480 [ 256.417990][T12396] crypto_shash_update+0x4eb/0x550 [ 256.418005][T12396] ima_calc_file_hash+0x170a/0x3240 [ 256.418020][T12396] ima_collect_measurement+0x4a5/0x9e0 [ 256.418033][T12396] process_measurement+0x1a7d/0x2ba0 [ 256.418044][T12396] ima_file_check+0x131/0x170 [ 256.418054][T12396] path_openat+0x4b09/0x6bb0 [ 256.418064][T12396] do_filp_open+0x2b8/0x710 [ 256.418074][T12396] do_sys_open+0x642/0xa30 [ 256.418086][T12396] __se_sys_openat+0xcb/0xe0 [ 256.418097][T12396] __x64_sys_openat+0x56/0x70 [ 256.418108][T12396] do_syscall_64+0xbc/0xf0 [ 256.418123][T12396] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 256.418127][T12396] [ 256.418131][T12396] Uninit was stored to memory at: [ 256.418142][T12396] kmsan_internal_chain_origin+0xcc/0x150 [ 256.418176][T12396] __msan_chain_origin+0x6b/0xe0 [ 256.429801][T12399] device bridge_slave_0 entered promiscuous mode [ 256.431526][T12396] dummy_timer+0x2d76/0x6770 [ 256.443367][T12399] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.446111][T12396] call_timer_fn+0x232/0x530 [ 256.451059][T12399] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.457968][T12396] __run_timers+0xcdc/0x11a0 [ 256.457981][T12396] run_timer_softirq+0x2d/0x50 [ 256.457992][T12396] __do_softirq+0x4a1/0x83a [ 256.458004][T12396] irq_exit+0x230/0x280 [ 256.458017][T12396] exiting_irq+0xe/0x10 [ 256.458029][T12396] smp_apic_timer_interrupt+0x48/0x70 [ 256.458044][T12396] apic_timer_interrupt+0x2e/0x40 [ 256.458057][T12396] kmsan_get_shadow_origin_ptr+0x189/0x3a0 [ 256.458068][T12396] __msan_metadata_ptr_for_store_4+0x13/0x20 [ 256.458084][T12396] sha256_generic_block_fn+0x324/0x8870 [ 256.458095][T12396] crypto_sha256_update+0x3f6/0x480 [ 256.458126][T12396] crypto_shash_update+0x4eb/0x550 [ 256.464198][T12399] device bridge_slave_1 entered promiscuous mode [ 256.467363][T12396] ima_calc_file_hash+0x170a/0x3240 [ 256.498250][T12399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.499106][T12396] ima_collect_measurement+0x4a5/0x9e0 [ 256.507451][T12399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.509070][T12396] process_measurement+0x1a7d/0x2ba0 [ 256.898205][T12396] ima_file_check+0x131/0x170 [ 256.902867][T12396] path_openat+0x4b09/0x6bb0 [ 256.907442][T12396] do_filp_open+0x2b8/0x710 [ 256.911928][T12396] do_sys_open+0x642/0xa30 [ 256.916327][T12396] __se_sys_openat+0xcb/0xe0 [ 256.920903][T12396] __x64_sys_openat+0x56/0x70 [ 256.925562][T12396] do_syscall_64+0xbc/0xf0 [ 256.929966][T12396] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 256.935837][T12396] [ 256.938163][T12396] Uninit was stored to memory at: [ 256.943188][T12396] kmsan_internal_chain_origin+0xcc/0x150 [ 256.948891][T12396] __msan_chain_origin+0x6b/0xe0 [ 256.953812][T12396] usb_control_msg+0x61b/0x7f0 [ 256.958577][T12396] usbnet_write_cmd+0x386/0x430 [ 256.963414][T12396] asix_write_cmd+0x155/0x270 [ 256.968076][T12396] ax88772a_hw_reset+0x1ab/0x1030 [ 256.973083][T12396] ax88772_bind+0x67a/0x11f0 [ 256.977660][T12396] usbnet_probe+0x10ae/0x3960 [ 256.982326][T12396] usb_probe_interface+0xd19/0x1310 [ 256.987511][T12396] really_probe+0x1373/0x1dc0 [ 256.992175][T12396] driver_probe_device+0x1ba/0x510 [ 256.997271][T12396] __device_attach_driver+0x5b8/0x790 [ 257.002627][T12396] bus_for_each_drv+0x28e/0x3b0 [ 257.007465][T12396] __device_attach+0x489/0x750 [ 257.012217][T12396] device_initial_probe+0x4a/0x60 [ 257.017225][T12396] bus_probe_device+0x131/0x390 [ 257.022076][T12396] device_add+0x25b5/0x2df0 [ 257.026572][T12396] usb_set_configuration+0x309f/0x3710 [ 257.032014][T12396] generic_probe+0xe7/0x280 [ 257.036503][T12396] usb_probe_device+0x146/0x200 [ 257.041338][T12396] really_probe+0x1373/0x1dc0 [ 257.045999][T12396] driver_probe_device+0x1ba/0x510 [ 257.051095][T12396] __device_attach_driver+0x5b8/0x790 [ 257.056453][T12396] bus_for_each_drv+0x28e/0x3b0 [ 257.061302][T12396] __device_attach+0x489/0x750 [ 257.066052][T12396] device_initial_probe+0x4a/0x60 [ 257.071059][T12396] bus_probe_device+0x131/0x390 [ 257.075894][T12396] device_add+0x25b5/0x2df0 [ 257.080379][T12396] usb_new_device+0x23e5/0x2fb0 [ 257.085213][T12396] hub_event+0x581d/0x72f0 [ 257.089619][T12396] process_one_work+0x1572/0x1ef0 [ 257.094631][T12396] worker_thread+0x111b/0x2460 [ 257.099377][T12396] kthread+0x4b5/0x4f0 [ 257.103447][T12396] ret_from_fork+0x35/0x40 [ 257.107895][T12396] [ 257.110223][T12396] Uninit was stored to memory at: [ 257.115266][T12396] kmsan_internal_chain_origin+0xcc/0x150 [ 257.120979][T12396] __msan_chain_origin+0x6b/0xe0 [ 257.125906][T12396] ax88772_bind+0xa12/0x11f0 [ 257.130509][T12396] usbnet_probe+0x10ae/0x3960 [ 257.135175][T12396] usb_probe_interface+0xd19/0x1310 [ 257.140360][T12396] really_probe+0x1373/0x1dc0 [ 257.145029][T12396] driver_probe_device+0x1ba/0x510 [ 257.150126][T12396] __device_attach_driver+0x5b8/0x790 [ 257.155482][T12396] bus_for_each_drv+0x28e/0x3b0 [ 257.160319][T12396] __device_attach+0x489/0x750 [ 257.165067][T12396] device_initial_probe+0x4a/0x60 [ 257.170076][T12396] bus_probe_device+0x131/0x390 [ 257.174911][T12396] device_add+0x25b5/0x2df0 [ 257.179405][T12396] usb_set_configuration+0x309f/0x3710 [ 257.184867][T12396] generic_probe+0xe7/0x280 [ 257.189354][T12396] usb_probe_device+0x146/0x200 [ 257.194193][T12396] really_probe+0x1373/0x1dc0 [ 257.198854][T12396] driver_probe_device+0x1ba/0x510 [ 257.203950][T12396] __device_attach_driver+0x5b8/0x790 [ 257.209306][T12396] bus_for_each_drv+0x28e/0x3b0 [ 257.214140][T12396] __device_attach+0x489/0x750 [ 257.218889][T12396] device_initial_probe+0x4a/0x60 [ 257.223898][T12396] bus_probe_device+0x131/0x390 [ 257.228731][T12396] device_add+0x25b5/0x2df0 [ 257.233222][T12396] usb_new_device+0x23e5/0x2fb0 [ 257.238054][T12396] hub_event+0x581d/0x72f0 [ 257.242482][T12396] process_one_work+0x1572/0x1ef0 [ 257.247492][T12396] worker_thread+0x111b/0x2460 [ 257.252243][T12396] kthread+0x4b5/0x4f0 [ 257.256445][T12396] ret_from_fork+0x35/0x40 [ 257.260844][T12396] [ 257.263160][T12396] Local variable description: ----buf.i@asix_get_phy_addr [ 257.270259][T12396] Variable was created at: [ 257.274679][T12396] asix_get_phy_addr+0x4d/0x280 [ 257.279516][T12396] ax88772_bind+0x472/0x11f0 [ 257.284087][T12396] [ 257.286401][T12396] Byte 10 of 16 is uninitialized [ 257.291320][T12396] Memory access of size 16 starts at ffff888112a34930 [ 257.298060][T12396] Data copied to user address 00007fd836402830 [ 257.304191][T12396] ================================================================== [ 257.312259][T12396] Disabling lock debugging due to kernel taint [ 257.318398][T12396] Kernel panic - not syncing: panic_on_warn set ... [ 257.324993][T12396] CPU: 0 PID: 12396 Comm: syz-executor.0 Tainted: G B 5.3.0-rc6+ #0 [ 257.334256][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.344295][T12396] Call Trace: [ 257.347582][T12396] dump_stack+0x191/0x1f0 [ 257.351904][T12396] panic+0x3c9/0xc1e [ 257.355821][T12396] kmsan_report+0x2ca/0x2d0 [ 257.360317][T12396] kmsan_internal_check_memory+0x455/0x8d0 [ 257.366123][T12396] kmsan_copy_to_user+0xa9/0xb0 [ 257.370971][T12396] _copy_to_user+0x16b/0x1f0 [ 257.375559][T12396] fuzzer_ioctl+0x2605/0x5690 [ 257.380225][T12396] ? refcount_inc_not_zero_checked+0x1a0/0x240 [ 257.386388][T12396] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 257.392362][T12396] ? next_event+0x6a0/0x6a0 [ 257.396854][T12396] full_proxy_unlocked_ioctl+0x1ca/0x380 [ 257.402484][T12396] ? full_proxy_poll+0x320/0x320 [ 257.407409][T12396] do_vfs_ioctl+0xea8/0x2c50 [ 257.412006][T12396] ? security_file_ioctl+0x1bd/0x200 [ 257.417287][T12396] __se_sys_ioctl+0x1da/0x270 [ 257.421958][T12396] __x64_sys_ioctl+0x4a/0x70 [ 257.426538][T12396] do_syscall_64+0xbc/0xf0 [ 257.430971][T12396] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 257.436852][T12396] RIP: 0033:0x4596e7 [ 257.440732][T12396] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.460322][T12396] RSP: 002b:00007fd8364023e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.468722][T12396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004596e7 [ 257.476680][T12396] RDX: 00007fd836402830 RSI: 0000000080085502 RDI: 0000000000000003 [ 257.484653][T12396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 257.492612][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8364036d4 [ 257.500586][T12396] R13: 00000000004beee6 R14: 00000000004dffa0 R15: 00000000ffffffff [ 257.510002][T12396] Kernel Offset: disabled [ 257.514327][T12396] Rebooting in 86400 seconds..