syzbot


KMSAN: uninit-value in bcmp (3)

Status: upstream: reported C repro on 2024/08/11 22:40
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+0399100e525dd9696764@syzkaller.appspotmail.com
First crash: 105d, last: 2d10h
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [usb?] KMSAN: uninit-value in bcmp (3) 1 (4) 2024/10/06 17:26
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in bcmp net C error done 907 671d 1992d 22/28 fixed on 2023/02/24 13:50
upstream KASAN: use-after-free Read in bcmp ntfs3 C done 289 339d 497d 25/28 fixed on 2023/12/21 03:45
upstream KMSAN: uninit-value in bcmp (2) sound btrfs C 7 289d 311d 25/28 fixed on 2024/04/10 03:59
Last patch testing requests (2)
Created Duration User Patch Repo Result
2024/10/06 18:54 30m retest repro upstream OK log
2024/10/06 16:55 29m qianqiang.liu@163.com patch upstream OK log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in memcmp lib/string.c:665 [inline]
BUG: KMSAN: uninit-value in bcmp+0xc3/0x1c0 lib/string.c:697
 memcmp lib/string.c:665 [inline]
 bcmp+0xc3/0x1c0 lib/string.c:697
 ni_update_parent+0xeda/0x14b0 fs/ntfs3/frecord.c:3273
 ni_write_inode+0x1cf4/0x1de0 fs/ntfs3/frecord.c:3389
 ntfs3_write_inode+0x94/0xb0 fs/ntfs3/inode.c:1016
 write_inode fs/fs-writeback.c:1503 [inline]
 __writeback_single_inode+0x8da/0x1290 fs/fs-writeback.c:1723
 writeback_sb_inodes+0xa34/0x1c20 fs/fs-writeback.c:1954
 __writeback_inodes_wb+0x14c/0x440 fs/fs-writeback.c:2025
 wb_writeback+0x50b/0xcb0 fs/fs-writeback.c:2136
 wb_check_background_flush fs/fs-writeback.c:2206 [inline]
 wb_do_writeback fs/fs-writeback.c:2294 [inline]
 wb_workfn+0x122c/0x1940 fs/fs-writeback.c:2321
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xae0/0x1c40 kernel/workqueue.c:3310
 worker_thread+0xea7/0x14f0 kernel/workqueue.c:3391
 kthread+0x3e2/0x540 kernel/kthread.c:389
 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

Uninit was stored to memory at:
 ni_add_name+0xe1b/0x10d0 fs/ntfs3/frecord.c:3117
 ntfs_link_inode+0x265/0x310 fs/ntfs3/inode.c:1735
 ntfs_link+0x21d/0x500 fs/ntfs3/namei.c:146
 vfs_link+0x94c/0xb70 fs/namei.c:4739
 do_linkat+0x4f5/0xfd0 fs/namei.c:4809
 __do_sys_linkat fs/namei.c:4837 [inline]
 __se_sys_linkat fs/namei.c:4834 [inline]
 __x64_sys_linkat+0x186/0x230 fs/namei.c:4834
 x64_sys_call+0x37e1/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:266
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:4091 [inline]
 slab_alloc_node mm/slub.c:4134 [inline]
 kmem_cache_alloc_noprof+0x637/0xb20 mm/slub.c:4141
 ntfs_link_inode+0x8f/0x310 fs/ntfs3/inode.c:1723
 ntfs_link+0x21d/0x500 fs/ntfs3/namei.c:146
 vfs_link+0x94c/0xb70 fs/namei.c:4739
 do_linkat+0x4f5/0xfd0 fs/namei.c:4809
 __do_sys_linkat fs/namei.c:4837 [inline]
 __se_sys_linkat fs/namei.c:4834 [inline]
 __x64_sys_linkat+0x186/0x230 fs/namei.c:4834
 x64_sys_call+0x37e1/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:266
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

CPU: 0 UID: 0 PID: 3858 Comm: kworker/u8:17 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
Workqueue: writeback wb_workfn (flush-7:0)
=====================================================

Crashes (35):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/09 23:46 upstream da4373fbcf00 6b856513 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bcmp
2024/11/09 22:15 upstream da4373fbcf00 6b856513 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bcmp
2024/11/18 20:06 upstream adc218676eef 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bcmp
2024/10/30 18:41 upstream c1e939a21eb1 66aeb999 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bcmp
2024/09/22 09:56 upstream 88264981f208 6f888b75 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bcmp
2024/09/22 07:20 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bcmp
2024/08/15 08:24 upstream 9d5906799f7d e4bacdaf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in bcmp
2024/11/02 11:47 upstream 11066801dd4b f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/02 11:39 upstream 11066801dd4b f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 17:44 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 17:44 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 17:44 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 17:38 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 17:38 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 17:38 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 09:59 upstream 6c52d4da1c74 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 09:59 upstream 6c52d4da1c74 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/11/01 09:55 upstream 6c52d4da1c74 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 17:41 upstream 0fc810ae3ae1 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 17:41 upstream 0fc810ae3ae1 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 17:41 upstream 0fc810ae3ae1 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 17:41 upstream 0fc810ae3ae1 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 14:20 upstream 0fc810ae3ae1 fb888278 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 14:20 upstream 0fc810ae3ae1 fb888278 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 14:20 upstream 0fc810ae3ae1 fb888278 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 14:20 upstream 0fc810ae3ae1 fb888278 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 06:11 upstream 4236f913808c fb888278 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 06:10 upstream 4236f913808c fb888278 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/10/31 06:10 upstream 4236f913808c fb888278 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/09/22 18:22 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/08/08 13:41 upstream 6a0e38264012 de12cf65 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/08/08 13:41 upstream 6a0e38264012 de12cf65 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/08/08 13:40 upstream 6a0e38264012 de12cf65 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/08/07 22:36 upstream d4560686726f 7b2f2f35 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
2024/08/07 22:32 upstream d4560686726f 7b2f2f35 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in bcmp
* Struck through repros no longer work on HEAD.