KMSAN: uninit-value in audit_log_vformat (2)

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: 5356842d [EXPERIMENTAL] kmsan: eagerly allocate shadow at ..
git tree: https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=12f06720100000
kernel config: https://syzkaller.appspot.com/x/.config?x=a5915107b3106aaa
dashboard link: https://syzkaller.appspot.com/bug?extid=49e69b4d71a420ceda3e
compiler: clang version 10.0.0 (https://github.com/llvm/llvm-project/ c2443155a0fb245c8f17f2c1c72b6ea391e86e81)
userspace arch: i386
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=133b5dabe00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=143e1610100000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+49e69b...@syzkaller.appspotmail.com

=====================================================
BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:608 [inline]
BUG: KMSAN: uninit-value in string+0x522/0x690 lib/vsprintf.c:689
CPU: 1 PID: 8854 Comm: syz-executor694 Not tainted 5.6.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1c9/0x220 lib/dump_stack.c:118
kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:118
__msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215
string_nocheck lib/vsprintf.c:608 [inline]
string+0x522/0x690 lib/vsprintf.c:689
vsnprintf+0x207d/0x31b0 lib/vsprintf.c:2574
audit_log_vformat+0x583/0xcd0 kernel/audit.c:1858
audit_log_format+0x220/0x260 kernel/audit.c:1892
audit_receive_msg kernel/audit.c:1344 [inline]
audit_receive+0x18a4/0x6d50 kernel/audit.c:1515
netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline]
netlink_unicast+0xf9e/0x1100 net/netlink/af_netlink.c:1329
netlink_sendmsg+0x1246/0x14d0 net/netlink/af_netlink.c:1918
sock_sendmsg_nosec net/socket.c:652 [inline]
sock_sendmsg net/socket.c:672 [inline]
____sys_sendmsg+0x12b6/0x1350 net/socket.c:2345
___sys_sendmsg net/socket.c:2399 [inline]
__sys_sendmsg+0x451/0x5f0 net/socket.c:2432
__compat_sys_sendmsg net/compat.c:642 [inline]
__do_compat_sys_sendmsg net/compat.c:649 [inline]
__se_compat_sys_sendmsg net/compat.c:646 [inline]
__ia32_compat_sys_sendmsg+0xed/0x130 net/compat.c:646
do_syscall_32_irqs_on arch/x86/entry/common.c:339 [inline]
do_fast_syscall_32+0x3c7/0x6e0 arch/x86/entry/common.c:410
entry_SYSENTER_compat+0x68/0x77 arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7fa0d99
Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000ffb27c7c EFLAGS: 00000246 ORIG_RAX: 0000000000000172
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0
RDX: 0000000000000000 RSI: 00000000080ea078 RDI: 00000000ffb27cd0
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline]
kmsan_internal_poison_shadow+0x66/0xd0 mm/kmsan/kmsan.c:127
kmsan_slab_alloc+0x8a/0xe0 mm/kmsan/kmsan_hooks.c:82
slab_alloc_node mm/slub.c:2801 [inline]
__kmalloc_node_track_caller+0xb40/0x1200 mm/slub.c:4420
__kmalloc_reserve net/core/skbuff.c:142 [inline]
__alloc_skb+0x2fd/0xac0 net/core/skbuff.c:210
alloc_skb include/linux/skbuff.h:1081 [inline]
netlink_alloc_large_skb net/netlink/af_netlink.c:1175 [inline]
netlink_sendmsg+0x7d3/0x14d0 net/netlink/af_netlink.c:1893
sock_sendmsg_nosec net/socket.c:652 [inline]
sock_sendmsg net/socket.c:672 [inline]
____sys_sendmsg+0x12b6/0x1350 net/socket.c:2345
___sys_sendmsg net/socket.c:2399 [inline]
__sys_sendmsg+0x451/0x5f0 net/socket.c:2432
__compat_sys_sendmsg net/compat.c:642 [inline]
__do_compat_sys_sendmsg net/compat.c:649 [inline]
__se_compat_sys_sendmsg net/compat.c:646 [inline]
__ia32_compat_sys_sendmsg+0xed/0x130 net/compat.c:646
do_syscall_32_irqs_on arch/x86/entry/common.c:339 [inline]
do_fast_syscall_32+0x3c7/0x6e0 arch/x86/entry/common.c:410
entry_SYSENTER_compat+0x68/0x77 arch/x86/entry/entry_64_compat.S:139
=====================================================


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches

[Paul Moore]

Are there any ongoing problems with [vsn]printf() in the kernel at the
moment with syzbot?

I ask because on first look I'm not seeing any obvious problems in the
audit portion of this code path.

paul moore
www.paul-moore.com

[Dmitry Vyukov]

None I am aware of. Alex?
Can it be related to data_len==0? I don't see any obvious checks for
this. And in that case will 0-terminate out-of-bounds (at offset -1?)
and print potentially uninit data. But I looked at the code only very
briefly so potentially I am totally wrong.

> --
> You received this message because you are subscribed to the Google Groups "syzkaller-bugs" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-bug...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-bugs/CAHC9VhTZ_itetT4cx32vW3A79tb76dzjaBC_0S8Y_%3DDcEBL2nw%40mail.gmail.com.

[Paul Moore]

Bingo, that's likely it. Thanks.

I was in the process of fixing another audit bug when I looked at this
and got fixated on the varg stuff, not the variables themselves. I'll
have a patch out later today.

--
paul moore
www.paul-moore.com

[syzbot]

Hello,

syzbot tried to test the proposed patch but build/boot failed:

drivers/usb/musb/musb_trace.o
CC drivers/usb/roles/class.o
CC drivers/usb/roles/intel-xhci-usb-role-switch.o
CC drivers/usb/misc/emi26.o
CC drivers/usb/serial/usb-serial.o
CC drivers/usb/serial/generic.o
AR drivers/staging/rtl8712/built-in.a
AR drivers/staging/built-in.a
CC drivers/usb/serial/bus.o
AR drivers/media/usb/tm6000/built-in.a
CC drivers/media/usb/uvc/uvc_queue.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8192de/table.o
CC drivers/usb/storage/scsiglue.o
AR drivers/net/wireless/realtek/rtlwifi/rtl8192ce/built-in.a
CC drivers/usb/storage/uas.o
AR drivers/media/usb/zr364xx/built-in.a
CC drivers/usb/storage/protocol.o
AR drivers/usb/misc/sisusbvga/built-in.a
CC drivers/usb/phy/phy-tahvo.o
CC net/netfilter/xt_connlabel.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8192de/trx.o
CC drivers/usb/phy/phy-gpio-vbus-usb.o
AR drivers/usb/host/whci/built-in.a
CC drivers/usb/phy/phy-isp1301.o
CC drivers/usb/musb/musb_virthub.o
CC drivers/usb/musb/musb_host.o
CC drivers/usb/musb/musb_gadget_ep0.o
CC net/netfilter/xt_connlimit.o
CC net/netfilter/xt_conntrack.o
CC drivers/usb/serial/console.o
CC drivers/media/usb/uvc/uvc_v4l2.o
CC drivers/net/wireless/ath/ath9k/eeprom_def.o
CC drivers/usb/typec/altmodes/displayport.o
AR drivers/usb/mon/built-in.a
CC drivers/usb/host/ohci-pci.o
CC drivers/usb/storage/transport.o
CC drivers/usb/serial/aircable.o
CC net/netfilter/xt_cpu.o
CC drivers/media/usb/gspca/touptek.o
CC drivers/media/usb/uvc/uvc_video.o
CC drivers/usb/host/ohci-platform.o
CC drivers/usb/serial/ark3116.o
CC drivers/usb/usbip/usbip_event.o
CC drivers/usb/usbip/usbip_common.o
CC drivers/usb/usbip/vhci_sysfs.o
CC net/netfilter/xt_dccp.o
CC drivers/usb/usbip/vhci_tx.o
CC drivers/usb/host/uhci-hcd.o
AR drivers/usb/gadget/udc/built-in.a
AR drivers/usb/gadget/built-in.a
AR drivers/net/wireless/realtek/rtlwifi/rtl8192ee/built-in.a
CC drivers/usb/musb/musb_gadget.o
CC drivers/usb/musb/musb_debugfs.o
CC drivers/usb/typec/mux/pi3usb30532.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/dm.o
CC drivers/media/usb/uvc/uvc_ctrl.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/fw.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/hal_btc.o
CC drivers/usb/misc/emi62.o
AR drivers/usb/roles/built-in.a
CC drivers/usb/misc/ezusb.o
CC drivers/media/usb/uvc/uvc_status.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/dm.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/fw.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/hw.o
CC drivers/usb/typec/tcpm/tcpm.o
AR drivers/usb/typec/altmodes/built-in.a
CC drivers/usb/typec/tcpm/fusb302.o
CC drivers/usb/typec/tcpm/wcove.o
CC drivers/usb/typec/tcpm/tcpci.o
CC drivers/usb/typec/tcpm/tcpci_rt1711h.o
CC drivers/usb/storage/usb.o
CC drivers/usb/misc/ftdi-elan.o
CC drivers/usb/host/xhci.o
CC drivers/net/wireless/ath/ath9k/eeprom_4k.o
CC drivers/media/usb/uvc/uvc_isight.o
CC drivers/net/wireless/ath/ath9k/eeprom_9287.o
CC drivers/media/usb/uvc/uvc_debugfs.o
CC drivers/usb/wusbcore/crypto.o
AR drivers/usb/phy/built-in.a
CC drivers/usb/wusbcore/devconnect.o
CC drivers/usb/usbip/vhci_rx.o
AR drivers/usb/typec/mux/built-in.a
CC drivers/usb/serial/belkin_sa.o
CC net/netfilter/xt_devgroup.o
CC net/netfilter/xt_dscp.o
CC drivers/usb/serial/ch341.o
CC net/netfilter/xt_ecn.o
CC drivers/usb/storage/initializers.o
CC drivers/usb/wusbcore/dev-sysfs.o
CC drivers/net/wireless/ath/ath9k/ani.o
CC drivers/net/wireless/ath/ath9k/mac.o
CC drivers/usb/storage/sierra_ms.o
CC drivers/usb/serial/cp210x.o
CC drivers/usb/host/xhci-mem.o
CC drivers/usb/host/xhci-ext-caps.o
CC net/netfilter/xt_hashlimit.o
CC drivers/usb/typec/ucsi/ucsi.o
CC net/netfilter/xt_esp.o
CC drivers/media/usb/gspca/tv8532.o
CC drivers/usb/storage/option_ms.o
CC drivers/media/usb/gspca/vc032x.o
CC net/netfilter/xt_helper.o
CC drivers/usb/typec/class.o
CC drivers/usb/usbip/vhci_hcd.o
CC drivers/usb/typec/mux.o
CC drivers/media/usb/uvc/uvc_metadata.o
CC net/netfilter/xt_hl.o
CC drivers/media/usb/uvc/uvc_entity.o
AR drivers/net/wireless/realtek/rtlwifi/rtl8192de/built-in.a
CC drivers/usb/typec/bus.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8192se/rf.o
CC net/netfilter/xt_ipcomp.o
CC drivers/media/usb/gspca/vicam.o
CC drivers/media/usb/gspca/xirlink_cit.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723com/main.o
CC net/netfilter/xt_iprange.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723com/dm_common.o
CC drivers/media/usb/gspca/zc3xx.o
CC drivers/usb/host/xhci-ring.o
AR drivers/net/wireless/marvell/mwifiex/built-in.a
AR drivers/usb/musb/built-in.a
AR drivers/net/wireless/marvell/built-in.a
CC drivers/net/wireless/ath/ath9k/ar9002_mac.o
CC drivers/usb/storage/usual-tables.o
CC drivers/net/wireless/ath/ath9k/ar9003_mac.o
CC drivers/usb/misc/idmouse.o
CC drivers/usb/misc/iowarrior.o
CC drivers/usb/storage/debug.o
CC drivers/usb/wusbcore/mmc.o
CC drivers/usb/wusbcore/pal.o
CC drivers/usb/serial/cyberjack.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/hal_bt_coexist.o
CC drivers/usb/storage/alauda.o
CC drivers/usb/typec/ucsi/trace.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/led.o
CC net/netfilter/xt_ipvs.o
CC drivers/usb/typec/tps6598x.o
CC drivers/usb/host/xhci-hub.o
CC drivers/usb/typec/ucsi/ucsi_acpi.o
CC drivers/usb/typec/ucsi/ucsi_ccg.o
CC net/netfilter/xt_l2tp.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/dm.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/fw.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/phy.o
CC drivers/usb/wusbcore/rh.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723com/fw_common.o
CC net/netfilter/xt_length.o
CC drivers/usb/host/xhci-dbg.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723com/phy_common.o
CC drivers/net/wireless/realtek/rtlwifi/base.o
AR drivers/media/usb/uvc/built-in.a
CC net/netfilter/xt_limit.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/hw.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/led.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8192se/sw.o
CC drivers/usb/host/xhci-trace.o
CC drivers/usb/misc/isight_firmware.o
CC drivers/net/wireless/ath/ath9k/ar9003_eeprom.o
CC net/netfilter/xt_mac.o
CC drivers/net/wireless/ath/ath9k/ar9003_paprd.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/hw.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8192se/table.o
CC net/netfilter/xt_multiport.o
CC drivers/usb/usbip/stub_dev.o
CC drivers/net/wireless/ath/ath9k/btcoex.o
CC drivers/usb/usbip/stub_main.o
CC drivers/usb/usbip/stub_rx.o
CC drivers/usb/misc/usblcd.o
CC drivers/usb/usbip/stub_tx.o
CC drivers/usb/host/xhci-dbgcap.o
CC drivers/net/wireless/realtek/rtlwifi/cam.o
CC drivers/usb/misc/ldusb.o
CC drivers/usb/misc/legousbtower.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8192se/trx.o
CC drivers/usb/usbip/vudc_dev.o
CC drivers/net/wireless/ath/ath9k/ar9003_mci.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/pwrseq.o
CC drivers/usb/serial/cypress_m8.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/led.o
CC drivers/usb/wusbcore/reservation.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/phy.o
CC drivers/usb/storage/cypress_atacb.o
CC drivers/usb/host/xhci-dbgtty.o
CC drivers/usb/host/xhci-debugfs.o
AR drivers/usb/typec/ucsi/built-in.a
CC drivers/net/wireless/ath/ath9k/ar9003_aic.o
CC drivers/usb/misc/usbtest.o
CC drivers/usb/wusbcore/security.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/pwrseq.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/rf.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/phy.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/pwrseq.o
CC drivers/usb/host/xhci-pci.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/rf.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/sw.o
CC drivers/usb/host/sl811_cs.o
CC drivers/usb/host/sl811-hcd.o
CC drivers/usb/host/xhci-plat.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/rf.o
CC drivers/usb/host/u132-hcd.o
CC drivers/usb/usbip/vudc_sysfs.o
CC drivers/usb/usbip/vudc_tx.o
CC drivers/usb/misc/ehset.o
CC drivers/usb/misc/trancevibrator.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/table.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723ae/trx.o
CC drivers/usb/usbip/vudc_rx.o
CC net/netfilter/xt_nfacct.o
CC drivers/usb/wusbcore/wusbhc.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/sw.o
CC drivers/usb/storage/datafab.o
CC drivers/usb/storage/ene_ub6250.o
CC drivers/usb/host/r8a66597-hcd.o
CC drivers/net/wireless/realtek/rtlwifi/core.o
CC drivers/net/wireless/realtek/rtlwifi/debug.o
CC drivers/usb/serial/usb_debug.o
CC drivers/usb/misc/uss720.o
CC drivers/usb/wusbcore/wa-nep.o
CC drivers/usb/wusbcore/wa-hc.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/sw.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/table.o
AR drivers/usb/typec/tcpm/built-in.a
CC drivers/net/wireless/ath/ath9k/ar9003_rtt.o
AR drivers/usb/typec/built-in.a
CC drivers/usb/host/hwa-hc.o
CC drivers/net/wireless/ath/ath9k/common.o
CC drivers/net/wireless/ath/ath9k/common-init.o
CC drivers/net/wireless/ath/ath9k/common-beacon.o
CC net/netfilter/xt_osf.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/table.o
CC drivers/usb/host/fsl-mph-dr-of.o
CC drivers/usb/misc/usbsevseg.o
CC drivers/net/wireless/ath/ath9k/common-debug.o
CC drivers/net/wireless/ath/ath9k/common-spectral.o
CC drivers/usb/storage/freecom.o
CC drivers/usb/usbip/vudc_transfer.o
CC drivers/net/wireless/ath/ath9k/htc_hst.o
CC drivers/net/wireless/ath/ath9k/hif_usb.o
AR drivers/net/wireless/realtek/rtlwifi/rtl8192se/built-in.a
CC drivers/usb/host/ehci-fsl.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8821ae/trx.o
CC drivers/usb/usbip/vudc_main.o
AR drivers/media/usb/gspca/built-in.a
AR drivers/media/usb/built-in.a
CC drivers/usb/serial/digi_acceleport.o
AR drivers/media/built-in.a
CC drivers/net/wireless/ath/ath9k/wmi.o
CC drivers/usb/host/bcma-hcd.o
CC drivers/net/wireless/realtek/rtlwifi/rtl8723be/trx.o
CC drivers/usb/storage/isd200.o
CC drivers/usb/storage/jumpshot.o
CC drivers/net/wireless/ath/ath9k/htc_drv_txrx.o
AR drivers/net/wireless/realtek/rtlwifi/rtl8723com/built-in.a
CC drivers/usb/host/ssb-hcd.o
CC drivers/usb/misc/yurex.o
CC drivers/usb/storage/karma.o
CC drivers/usb/misc/usb251xb.o
CC drivers/usb/storage/onetouch.o
CC drivers/net/wireless/ath/ath9k/htc_drv_main.o
CC drivers/usb/storage/realtek_cr.o
CC net/netfilter/xt_owner.o
CC drivers/usb/wusbcore/wa-rpipe.o
CC drivers/usb/misc/usb3503.o
CC drivers/usb/host/fotg210-hcd.o
CC drivers/usb/host/max3421-hcd.o
CC drivers/net/wireless/ath/ath9k/htc_drv_beacon.o
CC drivers/usb/wusbcore/wa-xfer.o
CC drivers/usb/wusbcore/cbaf.o
CC drivers/net/wireless/realtek/rtlwifi/efuse.o
CC drivers/net/wireless/realtek/rtlwifi/rc.o
CC net/netfilter/xt_cgroup.o
CC drivers/net/wireless/realtek/rtlwifi/ps.o
CC drivers/usb/misc/usb4604.o
CC drivers/net/wireless/realtek/rtlwifi/regd.o
CC drivers/usb/misc/chaoskey.o
CC drivers/net/wireless/ath/ath9k/htc_drv_init.o
CC net/netfilter/xt_pkttype.o
CC net/netfilter/xt_physdev.o
CC net/netfilter/xt_policy.o
AR drivers/usb/usbip/built-in.a
CC drivers/usb/storage/sddr09.o
CC drivers/usb/storage/sddr55.o
CC drivers/net/wireless/realtek/rtlwifi/stats.o
CC drivers/net/wireless/ath/ath9k/htc_drv_gpio.o
CC net/netfilter/xt_quota.o
CC drivers/usb/serial/io_edgeport.o
CC drivers/usb/storage/shuttle_usbat.o
CC drivers/usb/misc/lvstest.o
CC drivers/net/wireless/realtek/rtlwifi/pci.o
CC drivers/net/wireless/realtek/rtlwifi/usb.o
AR drivers/net/wireless/realtek/rtlwifi/rtl8723ae/built-in.a
CC net/netfilter/xt_rateest.o
CC drivers/usb/serial/io_ti.o
CC drivers/usb/serial/empeg.o
CC drivers/net/wireless/ath/ath9k/htc_drv_debug.o
CC drivers/usb/serial/f81232.o
CC drivers/usb/serial/f81534.o
CC drivers/usb/serial/ftdi_sio.o
CC net/netfilter/xt_realm.o
CC net/netfilter/xt_recent.o
CC drivers/usb/serial/garmin_gps.o
CC drivers/usb/serial/ipaq.o
CC net/netfilter/xt_sctp.o
CC net/netfilter/xt_socket.o
CC drivers/usb/serial/ipw.o
CC drivers/usb/serial/ir-usb.o
CC net/netfilter/xt_state.o
CC net/netfilter/xt_statistic.o
CC drivers/usb/serial/iuu_phoenix.o
CC net/netfilter/xt_string.o
CC net/netfilter/xt_tcpmss.o
CC drivers/usb/serial/keyspan.o
CC drivers/usb/serial/keyspan_pda.o
CC drivers/usb/serial/kl5kusb105.o
CC drivers/usb/serial/kobil_sct.o
AR drivers/usb/misc/built-in.a
CC drivers/usb/serial/mct_u232.o
CC drivers/usb/serial/metro-usb.o
CC net/netfilter/xt_time.o
CC drivers/usb/serial/mos7720.o
CC drivers/usb/serial/mos7840.o
CC net/netfilter/xt_u32.o
CC drivers/usb/serial/mxuport.o
CC drivers/usb/serial/opticon.o
CC drivers/usb/serial/navman.o
CC drivers/usb/serial/omninet.o
CC drivers/usb/serial/option.o
AR drivers/net/wireless/realtek/rtlwifi/rtl8723be/built-in.a
CC drivers/usb/serial/oti6858.o
CC drivers/usb/serial/pl2303.o
CC drivers/usb/serial/qcaux.o
CC drivers/usb/serial/safe_serial.o
CC drivers/usb/serial/qcserial.o
CC drivers/usb/serial/quatech2.o
CC drivers/usb/serial/sierra.o
CC drivers/usb/serial/usb-serial-simple.o
CC drivers/usb/serial/spcp8x5.o
CC drivers/usb/serial/ssu100.o
CC drivers/usb/serial/symbolserial.o
CC drivers/usb/serial/usb_wwan.o
CC drivers/usb/serial/ti_usb_3410_5052.o
CC drivers/usb/serial/upd78f0730.o
CC drivers/usb/serial/visor.o
CC drivers/usb/serial/wishbone-serial.o
CC drivers/usb/serial/whiteheat.o
CC drivers/usb/serial/xsens_mt.o
AR drivers/usb/storage/built-in.a
AR drivers/net/wireless/ath/ath9k/built-in.a
AR drivers/net/wireless/ath/built-in.a
AR drivers/net/wireless/realtek/rtlwifi/rtl8821ae/built-in.a
AR net/netfilter/built-in.a
AR drivers/usb/wusbcore/built-in.a
AR net/built-in.a
AR drivers/usb/host/built-in.a
AR drivers/usb/serial/built-in.a
AR drivers/usb/built-in.a
AR drivers/net/wireless/realtek/rtlwifi/built-in.a
AR drivers/net/wireless/realtek/built-in.a
AR drivers/net/wireless/ralink/rt2x00/built-in.a
AR drivers/net/wireless/ralink/built-in.a
AR drivers/net/wireless/built-in.a
AR drivers/net/built-in.a
AR drivers/built-in.a
Makefile:170: recipe for target 'sub-make' failed
make: *** [sub-make] Error 2


Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=1300f5d7e00000


Tested on:

commit: c1da0718 audit: check the length of userspace generated au..
git tree: https://github.com/pcmoore/misc-linux_kernel.git audit-testing

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger crash:

Reported-and-tested-by: syzbot+49e69b...@syzkaller.appspotmail.com

Tested on:

commit: 763dafc5 audit: check the length of userspace generated au..

git tree: https://github.com/pcmoore/misc-linux_kernel.git audit-testing

kernel config: https://syzkaller.appspot.com/x/.config?x=74efa14f69fa8fff

dashboard link: https://syzkaller.appspot.com/bug?extid=49e69b4d71a420ceda3e
compiler: clang version 10.0.0 (https://github.com/llvm/llvm-project/ c2443155a0fb245c8f17f2c1c72b6ea391e86e81)
userspace arch: i386

Note: testing is done by a robot and is best-effort only.