Content-Type: multipart/mixed; boundary="------------8H55T9hPyaNqrV0guVBciFzF"
Message-ID: <60e9caf1-7b9f-c5a4-a3e8-ff9135e16197@gmail.com>
Date:   Fri, 7 Jan 2022 01:17:41 +0300
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
 Thunderbird/91.4.1
Subject: Re: [syzbot] KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3)
Content-Language: en-US
To:     syzbot <syzbot+003c0a286b9af5412510@syzkaller.appspotmail.com>,
        glider@google.com, gregkh@linuxfoundation.org, johan@kernel.org,
        linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org,
        stern@rowland.harvard.edu, syzkaller-bugs@googlegroups.com
References: <000000000000be665505d4d9ebd6@google.com>
From:   Pavel Skripkin <paskripkin@gmail.com>
In-Reply-To: <000000000000be665505d4d9ebd6@google.com>
Precedence: bulk

This is a multi-part message in MIME format.
--------------8H55T9hPyaNqrV0guVBciFzF
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

On 1/5/22 21:28, syzbot wrote:
> Hello,
> 
> syzbot found the following issue on:
> 
> HEAD commit:    81c325bbf94e kmsan: hooks: do not check memory in kmsan_in..
> git tree:       https://github.com/google/kmsan.git master
> console output: https://syzkaller.appspot.com/x/log.txt?x=14a07163b00000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=2d8b9a11641dc9aa
> dashboard link: https://syzkaller.appspot.com/bug?extid=003c0a286b9af5412510
> compiler:       clang version 14.0.0 (/usr/local/google/src/llvm-git-monorepo 2b554920f11c8b763cd9ed9003f4e19b919b8e1f), GNU ld (GNU Binutils for Debian) 2.35.2
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=100165dbb00000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=10c97e77b00000
> 
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+003c0a286b9af5412510@syzkaller.appspotmail.com
> 

Heh, I think, more reports like this will appear soon. Syzbot learned 
how to tweak usb read functions return values, I guess?

#syz test: https://github.com/google/kmsan.git master


With regards,
Pavel Skripkin
--------------8H55T9hPyaNqrV0guVBciFzF
Content-Type: text/plain; charset=UTF-8; name="ph"
Content-Disposition: attachment; filename="ph"
Content-Transfer-Encoding: base64
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--------------8H55T9hPyaNqrV0guVBciFzF--