==================================================================
BUG: KMSAN: uninit-value in do_error_trap+0x39b/0x600 arch/x86/kernel/traps.c:297
CPU: 0 PID: 9700 Comm: syz-executor5 Not tainted 4.16.0+ #87
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683
 do_error_trap+0x39b/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:kmsan_copy_to_user+0x141/0x160 mm/kmsan/kmsan.c:1213
RSP: 0018:ffff8801aa57f958 EFLAGS: 00010206
RAX: ffff88014dab9d80 RBX: ffff88014680b000 RCX: 0000000000001000
RDX: 00007ffffffff000 RSI: ffff88014680b000 RDI: 4495fdefa2707000
RBP: ffff8801aa57f9a0 R08: 0000000001080020 R09: ffff880145f1b000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
R13: 4495fdefa2707000 R14: 0000000000001000 R15: 0000000000000000
 copy_to_user include/linux/uaccess.h:184 [inline]
 old_dev_ioctl net/bridge/br_ioctl.c:178 [inline]
 br_dev_ioctl+0x2ab6/0x2b30 net/bridge/br_ioctl.c:392
 dev_ifsioc+0x8a8/0x10c0 net/core/dev_ioctl.c:334
 dev_ioctl+0xc3e/0x1cf0 net/core/dev_ioctl.c:525
 sock_ioctl+0x744/0xca0 net/socket.c:1015
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455979
RSP: 002b:00007fa7b550ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fa7b550f6d4 RCX: 0000000000455979
RDX: 0000000020000080 RSI: 00000000000089f0 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000003ac R14: 00000000006f98c0 R15: 0000000000000000

Local variable description: ----timeout@futex_wait
Variable was created at:
 futex_wait+0xde/0xc20 kernel/futex.c:2613
 do_futex+0x284a/0x6ad0 kernel/futex.c:3527
==================================================================