KMSAN: uninit-value in hfsplus_listxattr (2)

Status: fixed on 2024/08/14 03:44
Subsystems: hfs
[Documentation on labels]
Reported-by: syzbot+01ade747b16e9c8030e0@syzkaller.appspotmail.com
Fix commit: 0570730c1630 hfsplus: fix uninit-value in copy_name
First crash: 837d, last: 812d
▶ ▼ Discussions (9)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 4.19 3/3] hfsplus: fix uninit-value in copy_name 1 (1) 2024/07/16 18:35
[PATCH AUTOSEL 5.4 3/3] hfsplus: fix uninit-value in copy_name 1 (1) 2024/07/16 18:34
[PATCH AUTOSEL 5.10 3/4] hfsplus: fix uninit-value in copy_name 1 (1) 2024/07/16 18:34
[PATCH AUTOSEL 5.15 3/4] hfsplus: fix uninit-value in copy_name 1 (1) 2024/07/16 18:34
[PATCH AUTOSEL 6.1 4/5] hfsplus: fix uninit-value in copy_name 1 (1) 2024/07/16 18:34
[PATCH AUTOSEL 6.6 6/8] hfsplus: fix uninit-value in copy_name 1 (1) 2024/07/16 18:33
[PATCH AUTOSEL 6.9 09/11] hfsplus: fix uninit-value in copy_name 1 (1) 2024/07/16 18:31
[PATCH] hfsplus: fix uninit-value in hfsplus_listxattr 1 (1) 2024/04/10 07:24
[syzbot] [hfs?] KMSAN: uninit-value in hfsplus_listxattr (2) 1 (3) 2024/04/10 05:55
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in hfsplus_listxattr hfs 7 5 1101d 1236d 0/29 auto-obsoleted due to no activity on 2023/10/27 06:23
▶ ▼ Last patch testing requests (2)
Created Duration User Patch Repo Result
2024/04/27 03:27 47m retest repro upstream report log
2024/04/09 10:05 37m (2) eadavis@qq.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git fec50db7033e OK log

Sample crash report:
loop0: detected capacity change from 0 to 1024
=====================================================
BUG: KMSAN: uninit-value in strncmp+0x11e/0x180 lib/string.c:291
 strncmp+0x11e/0x180 lib/string.c:291
 hfsplus_listxattr+0x97d/0x1a60
 vfs_listxattr fs/xattr.c:493 [inline]
 listxattr+0x1f3/0x6b0 fs/xattr.c:840
 path_listxattr fs/xattr.c:864 [inline]
 __do_sys_listxattr fs/xattr.c:876 [inline]
 __se_sys_listxattr fs/xattr.c:873 [inline]
 __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873
 do_syscall_64+0xd5/0x1f0
 entry_SYSCALL_64_after_hwframe+0x72/0x7a

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:3804 [inline]
 slab_alloc_node mm/slub.c:3845 [inline]
 kmalloc_trace+0x578/0xba0 mm/slub.c:3992
 kmalloc include/linux/slab.h:628 [inline]
 hfsplus_listxattr+0x4cc/0x1a60 fs/hfsplus/xattr.c:701
 vfs_listxattr fs/xattr.c:493 [inline]
 listxattr+0x1f3/0x6b0 fs/xattr.c:840
 path_listxattr fs/xattr.c:864 [inline]
 __do_sys_listxattr fs/xattr.c:876 [inline]
 __se_sys_listxattr fs/xattr.c:873 [inline]
 __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873
 do_syscall_64+0xd5/0x1f0
 entry_SYSCALL_64_after_hwframe+0x72/0x7a

CPU: 0 PID: 5019 Comm: syz-executor940 Not tainted 6.9.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
=====================================================

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/09 04:10 upstream fec50db7033e 53df08b6 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_listxattr
2024/05/03 04:48 upstream 49a73b1652c5 ddfc15a1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_listxattr
2024/05/03 02:48 upstream 49a73b1652c5 ddfc15a1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_listxattr
2024/04/08 08:52 upstream 9fe30842a90b ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_listxattr
2024/04/08 08:41 upstream 9fe30842a90b ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_listxattr
2024/04/08 08:41 upstream 9fe30842a90b ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_listxattr
* Struck through repros no longer work on HEAD.