===================================================== BUG: KMSAN: uninit-value in memcmp lib/string.c:665 [inline] BUG: KMSAN: uninit-value in bcmp+0xc3/0x1c0 lib/string.c:697 memcmp lib/string.c:665 [inline] bcmp+0xc3/0x1c0 lib/string.c:697 iowarrior_callback+0x3fe/0xa30 drivers/usb/misc/iowarrior.c:185 __usb_hcd_giveback_urb+0x572/0x840 drivers/usb/core/hcd.c:1650 usb_hcd_giveback_urb+0x157/0x720 drivers/usb/core/hcd.c:1734 dummy_timer+0xd3f/0x6aa0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x564/0xe40 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x3ab/0x1490 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0xa6/0x3a0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x40/0x90 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 smap_save mm/kmsan/instrumentation.c:91 [inline] get_shadow_origin_ptr mm/kmsan/instrumentation.c:35 [inline] __msan_metadata_ptr_for_store_1+0x14/0x40 mm/kmsan/instrumentation.c:91 update_stack_state+0x82/0x270 arch/x86/kernel/unwind_frame.c:215 unwind_next_frame+0x19a/0x470 arch/x86/kernel/unwind_frame.c:315 arch_stack_walk+0x1ec/0x2d0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xaa/0xe0 kernel/stacktrace.c:122 ref_tracker_free+0x103/0xec0 lib/ref_tracker.c:239 netdev_tracker_free include/linux/netdevice.h:4067 [inline] netdev_put include/linux/netdevice.h:4084 [inline] dst_destroy+0x1f8/0x680 net/core/dst.c:117 dst_destroy_rcu+0x22/0x30 net/core/dst.c:135 rcu_do_batch kernel/rcu/tree.c:2569 [inline] rcu_core+0xa59/0x1e70 kernel/rcu/tree.c:2843 rcu_core_si+0x12/0x20 kernel/rcu/tree.c:2860 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0x68/0x120 kernel/softirq.c:637 irq_exit_rcu+0x12/0x20 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x83/0x90 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 get_current arch/x86/include/asm/current.h:49 [inline] __sanitizer_cov_trace_pc+0x15/0x70 kernel/kcov.c:206 update_stack_state+0x1bc/0x270 arch/x86/kernel/unwind_frame.c:243 unwind_next_frame+0x19a/0x470 arch/x86/kernel/unwind_frame.c:315 arch_stack_walk+0x1ec/0x2d0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xaa/0xe0 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:73 [inline] kmsan_internal_poison_memory+0x49/0x90 mm/kmsan/core.c:57 kmsan_slab_free+0xd0/0x140 mm/kmsan/hooks.c:87 slab_free_hook mm/slub.c:2214 [inline] slab_free mm/slub.c:4473 [inline] kfree+0x238/0xb70 mm/slub.c:4594 tomoyo_realpath_from_path+0x9fe/0xaa0 security/tomoyo/realpath.c:286 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x246/0xa50 security/tomoyo/file.c:822 tomoyo_inode_getattr+0x34/0x40 security/tomoyo/tomoyo.c:123 security_inode_getattr+0x12a/0x210 security/security.c:2269 vfs_getattr+0x75/0x530 fs/stat.c:204 vfs_statx_path fs/stat.c:251 [inline] vfs_statx+0x1dd/0x680 fs/stat.c:315 vfs_fstatat+0x1fa/0x2a0 fs/stat.c:341 __do_sys_newfstatat fs/stat.c:505 [inline] __se_sys_newfstatat+0x64/0x870 fs/stat.c:499 __x64_sys_newfstatat+0xbd/0x110 fs/stat.c:499 x64_sys_call+0x16d6/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:263 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:3994 [inline] slab_alloc_node mm/slub.c:4037 [inline] __do_kmalloc_node mm/slub.c:4157 [inline] __kmalloc_noprof+0x661/0xf30 mm/slub.c:4170 kmalloc_noprof include/linux/slab.h:685 [inline] kmalloc_array_noprof include/linux/slab.h:726 [inline] iowarrior_probe+0x10ea/0x1b90 drivers/usb/misc/iowarrior.c:836 usb_probe_interface+0xd6f/0x1350 drivers/usb/core/driver.c:399 really_probe+0x4db/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x2ab/0x5d0 drivers/base/dd.c:799 driver_probe_device+0x72/0x890 drivers/base/dd.c:829 __device_attach_driver+0x568/0x9e0 drivers/base/dd.c:957 bus_for_each_drv+0x403/0x620 drivers/base/bus.c:457 __device_attach+0x3c1/0x650 drivers/base/dd.c:1029 device_initial_probe+0x32/0x40 drivers/base/dd.c:1078 bus_probe_device+0x3dc/0x5c0 drivers/base/bus.c:532 device_add+0x13aa/0x1ba0 drivers/base/core.c:3679 usb_set_configuration+0x31c9/0x38d0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x109/0x2a0 drivers/usb/core/generic.c:254 usb_probe_device+0x3a7/0x690 drivers/usb/core/driver.c:294 really_probe+0x4db/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x2ab/0x5d0 drivers/base/dd.c:799 driver_probe_device+0x72/0x890 drivers/base/dd.c:829 __device_attach_driver+0x568/0x9e0 drivers/base/dd.c:957 bus_for_each_drv+0x403/0x620 drivers/base/bus.c:457 __device_attach+0x3c1/0x650 drivers/base/dd.c:1029 device_initial_probe+0x32/0x40 drivers/base/dd.c:1078 bus_probe_device+0x3dc/0x5c0 drivers/base/bus.c:532 device_add+0x13aa/0x1ba0 drivers/base/core.c:3679 usb_new_device+0x15f4/0x2470 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x4ff8/0x72d0 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xae0/0x1c40 kernel/workqueue.c:3312 worker_thread+0xea5/0x1520 kernel/workqueue.c:3390 kthread+0x3dd/0x540 kernel/kthread.c:389 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 CPU: 1 UID: 0 PID: 4620 Comm: udevd Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 =====================================================