syzbot


KMSAN: uninit-value in ntfs_read_bh

Status: upstream: reported C repro on 2024/09/01 20:28
Subsystems: ntfs3
[Documentation on labels]
Reported-by: syzbot+7a2ba6b7b66340cff225@syzkaller.appspotmail.com
First crash: 171d, last: 6d01h
Discussions (2)
Title Replies (including bot) Last reply
Re: [syzbot] [ntfs3?] KMSAN: uninit-value in ntfs_read_bh 1 (2) 2024/11/05 21:34
[syzbot] [ntfs3?] KMSAN: uninit-value in ntfs_read_bh 0 (3) 2024/09/10 07:14
Last patch testing requests (4)
Created Duration User Patch Repo Result
2024/12/14 05:39 21m retest repro upstream report log
2024/11/05 13:33 21m surajsonawane0215@gmail.com patch upstream report log
2024/09/21 23:42 22m retest repro upstream report log
2024/09/10 07:14 26m almaz.alexandrovich@paragon-software.com patch https://github.com/Paragon-Software-Group/linux-ntfs3.git master report log

Sample crash report:
ntfs3(loop0): failed to read volume at offset 0x46c00
ntfs3(loop0): failed to read volume at offset 0x46c00
ntfs3(loop0): failed to read volume at offset 0x46c00
ntfs3(loop0): failed to read volume at offset 0x46c00
syz-executor154: attempt to access beyond end of device
loop0: rw=0, sector=106, nr_sectors = 2 limit=64
=====================================================
BUG: KMSAN: uninit-value in ntfs_fix_post_read fs/ntfs3/fsntfs.c:180 [inline]
BUG: KMSAN: uninit-value in ntfs_read_bh+0x1eb/0xde0 fs/ntfs3/fsntfs.c:1321
 ntfs_fix_post_read fs/ntfs3/fsntfs.c:180 [inline]
 ntfs_read_bh+0x1eb/0xde0 fs/ntfs3/fsntfs.c:1321
 mi_read+0x2d4/0xd50 fs/ntfs3/record.c:133
 mi_get+0x199/0x560 fs/ntfs3/record.c:85
 ni_load_mi_ex+0x21a/0x6b0 fs/ntfs3/frecord.c:150
 ni_load_mi fs/ntfs3/frecord.c:182 [inline]
 ni_enum_attr_ex+0x30b/0x590 fs/ntfs3/frecord.c:273
 attr_insert_range+0x22a9/0x2790 fs/ntfs3/attrib.c:2563
 ntfs_fallocate+0x13df/0x22c0 fs/ntfs3/file.c:685
 vfs_fallocate+0x79e/0x860 fs/open.c:338
 ksys_fallocate fs/open.c:362 [inline]
 __do_sys_fallocate fs/open.c:367 [inline]
 __se_sys_fallocate fs/open.c:365 [inline]
 __x64_sys_fallocate+0x148/0x280 fs/open.c:365
 x64_sys_call+0x4c9/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:286
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 ntfs_read_run_nb+0x786/0x1070 fs/ntfs3/fsntfs.c:1256
 ntfs_read_bh+0x64/0xde0 fs/ntfs3/fsntfs.c:1317
 mi_read+0x2d4/0xd50 fs/ntfs3/record.c:133
 mi_get+0x199/0x560 fs/ntfs3/record.c:85
 ni_load_mi_ex+0x21a/0x6b0 fs/ntfs3/frecord.c:150
 ni_load_mi fs/ntfs3/frecord.c:182 [inline]
 ni_enum_attr_ex+0x30b/0x590 fs/ntfs3/frecord.c:273
 attr_insert_range+0x22a9/0x2790 fs/ntfs3/attrib.c:2563
 ntfs_fallocate+0x13df/0x22c0 fs/ntfs3/file.c:685
 vfs_fallocate+0x79e/0x860 fs/open.c:338
 ksys_fallocate fs/open.c:362 [inline]
 __do_sys_fallocate fs/open.c:367 [inline]
 __se_sys_fallocate fs/open.c:365 [inline]
 __x64_sys_fallocate+0x148/0x280 fs/open.c:365
 x64_sys_call+0x4c9/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:286
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 __alloc_frozen_pages_noprof+0x9a7/0xe00 mm/page_alloc.c:4762
 alloc_pages_mpol+0x4cd/0x890 mm/mempolicy.c:2270
 alloc_frozen_pages_noprof mm/mempolicy.c:2341 [inline]
 alloc_pages_noprof mm/mempolicy.c:2361 [inline]
 folio_alloc_noprof+0x1dc/0x350 mm/mempolicy.c:2371
 filemap_alloc_folio_noprof+0xa6/0x440 mm/filemap.c:1019
 __filemap_get_folio+0xb9a/0x1840 mm/filemap.c:1970
 grow_dev_folio fs/buffer.c:1039 [inline]
 grow_buffers fs/buffer.c:1105 [inline]
 __getblk_slow fs/buffer.c:1131 [inline]
 bdev_getblk+0x2c9/0xab0 fs/buffer.c:1431
 __bread_gfp+0x93/0x730 fs/buffer.c:1485
 sb_bread_unmovable include/linux/buffer_head.h:352 [inline]
 ntfs_bread fs/ntfs3/fsntfs.c:1029 [inline]
 ntfs_read_run_nb+0x6b2/0x1070 fs/ntfs3/fsntfs.c:1249
 ntfs_read_bh+0x64/0xde0 fs/ntfs3/fsntfs.c:1317
 mi_read+0x2d4/0xd50 fs/ntfs3/record.c:133
 mi_format_new+0x218/0x790 fs/ntfs3/record.c:434
 ntfs_new_inode+0xc2/0x2b0 fs/ntfs3/fsntfs.c:1700
 ntfs_create_inode+0x988/0x4e40 fs/ntfs3/inode.c:1312
 ntfs_create+0x56/0x70 fs/ntfs3/namei.c:110
 lookup_open fs/namei.c:3651 [inline]
 open_last_lookups fs/namei.c:3750 [inline]
 path_openat+0x2ed8/0x6250 fs/namei.c:3986
 do_filp_open+0x268/0x600 fs/namei.c:4016
 do_sys_openat2+0x1bf/0x2f0 fs/open.c:1427
 do_sys_open fs/open.c:1442 [inline]
 __do_sys_openat fs/open.c:1458 [inline]
 __se_sys_openat fs/open.c:1453 [inline]
 __x64_sys_openat+0x2a1/0x310 fs/open.c:1453
 x64_sys_call+0x36f5/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

CPU: 0 UID: 0 PID: 5783 Comm: syz-executor154 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
=====================================================

Crashes (155):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/06 08:38 upstream 92514ef226f5 577d049b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/04 15:47 upstream 88fac17500f4 9d47f20a .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2025/02/09 23:13 upstream 9946eaf552b1 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2025/02/08 15:47 upstream 8f6629c004b1 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2025/02/06 02:02 upstream 92514ef226f5 577d049b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/11/30 05:31 upstream 509f806f7f70 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/11/12 17:31 upstream 2d5404caa8c7 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/04 22:27 upstream 360c1f1f24c6 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/04 13:03 upstream 0c559323bbaa d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/04 13:02 upstream 0c559323bbaa d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/04 06:12 upstream 0c559323bbaa d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/03 16:11 upstream 7ec462100ef9 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/03 03:22 upstream f23aa4c0761a a4c7fd36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/02 17:50 upstream e32cde8d2bd7 a4c7fd36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/01 19:06 upstream e32cde8d2bd7 ea2b66a6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/01 10:36 upstream e32cde8d2bd7 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/01 04:00 upstream e32cde8d2bd7 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/10/01 02:56 upstream e32cde8d2bd7 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/30 18:19 upstream 9852d85ec9d4 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/30 10:35 upstream 9852d85ec9d4 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/29 22:51 upstream e7ed34365879 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/29 21:09 upstream e7ed34365879 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/28 23:09 upstream 3efc57369a0c ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/28 23:09 upstream 3efc57369a0c ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/28 09:01 upstream ad46e8f95e93 440b26ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/28 07:37 upstream ad46e8f95e93 440b26ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/28 00:34 upstream e477dba5442c 2b1784d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 23:42 upstream af9c191ac2a0 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 23:33 upstream af9c191ac2a0 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 16:13 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 14:15 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 12:27 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 10:14 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 08:25 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 07:24 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 07:20 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/07 23:34 upstream d1f2d51b711a 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/07 09:51 upstream b31c44928842 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/06 18:47 upstream b831f83e40a2 ce70880a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/06 12:42 upstream ad618736883b 464ac2ed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/06 06:40 upstream ad618736883b 464ac2ed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/05 17:26 upstream c763c4339688 464ac2ed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/01 13:18 upstream 431c1646e1f8 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/08/28 20:17 upstream 86987d84b968 940f38c1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ntfs_read_bh
2024/09/24 00:34 upstream f8eb5bd9a818 89298aad .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ntfs_read_bh
2024/09/23 04:31 upstream de5cb0dcb74c 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 20:18 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ntfs_read_bh
2024/09/22 18:16 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ntfs_read_bh
* Struck through repros no longer work on HEAD.