syzbot


KMSAN: uninit-value in gfs2_quota_init (2)

Status: upstream: reported C repro on 2024/11/27 19:32
Subsystems: gfs2
[Documentation on labels]
Reported-by: syzbot+9fb37b567267511a9e11@syzkaller.appspotmail.com
First crash: 358d, last: 14d
Discussions (3)
Title Replies (including bot) Last reply
[syzbot] Monthly gfs2 report (May 2025) 0 (1) 2025/05/12 13:34
[PATCH 1/2] gfs2: throw -EIO when attempting to access beyond end of device 1 (1) 2024/11/29 09:03
[syzbot] [gfs2?] KMSAN: uninit-value in gfs2_quota_init (2) 0 (3) 2024/11/29 08:41
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in gfs2_quota_init gfs2 7 1 541d 537d 0/29 auto-obsoleted due to no activity on 2024/09/04 01:16
upstream KMSAN: kernel-infoleak in _copy_to_iter (8) mm 23 C 21180 895d 989d 22/29 fixed on 2023/06/08 14:41
Last patch testing requests (12)
Created Duration User Patch Repo Result
2025/10/27 05:41 26m retest repro upstream report log
2025/09/30 10:53 3h18m retest repro upstream report log
2025/09/30 10:53 3h02m retest repro upstream report log
2025/09/30 10:53 24m retest repro upstream report log
2025/07/22 08:42 28m retest repro upstream report log
2025/07/22 08:42 28m retest repro upstream report log
2025/07/22 08:42 27m retest repro upstream report log
2025/04/29 16:13 4h46m retest repro upstream report log
2025/04/29 16:13 28m retest repro upstream report log
2025/04/29 16:13 23m retest repro upstream report log
2024/11/29 08:41 28m dmantipov@yandex.ru patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 7af08b57bcb9ebf78675c50069c54125c0a8b795 OK log
2024/11/28 14:43 35m dmantipov@yandex.ru patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git b86545e02e8c22fb89218f29d381fa8e8b91d815 OK log

Sample crash report:
syz.0.162: attempt to access beyond end of device
loop0: rw=12288, sector=36024364612714496, nr_sectors = 8 limit=32768
=====================================================
BUG: KMSAN: uninit-value in gfs2_metatype_check_i fs/gfs2/util.h:125 [inline]
BUG: KMSAN: uninit-value in gfs2_quota_init+0x219f/0x2730 fs/gfs2/quota.c:1430
 gfs2_metatype_check_i fs/gfs2/util.h:125 [inline]
 gfs2_quota_init+0x219f/0x2730 fs/gfs2/quota.c:1430
 gfs2_make_fs_rw+0x1d5/0x460 fs/gfs2/super.c:149
 gfs2_fill_super+0x3d31/0x3f50 fs/gfs2/ops_fstype.c:1280
 get_tree_bdev_flags+0x6e6/0x920 fs/super.c:1691
 get_tree_bdev+0x38/0x50 fs/super.c:1714
 gfs2_get_tree+0x57/0x350 fs/gfs2/ops_fstype.c:1337
 vfs_get_tree+0xb3/0x5c0 fs/super.c:1751
 fc_mount fs/namespace.c:1208 [inline]
 do_new_mount_fc fs/namespace.c:3651 [inline]
 do_new_mount+0x839/0x15f0 fs/namespace.c:3727
 path_mount+0x747/0x1fb0 fs/namespace.c:4037
 do_mount fs/namespace.c:4050 [inline]
 __do_sys_mount fs/namespace.c:4238 [inline]
 __se_sys_mount+0x6f7/0x7e0 fs/namespace.c:4215
 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4215
 x64_sys_call+0x3604/0x3e30 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 __alloc_frozen_pages_noprof+0x689/0xf00 mm/page_alloc.c:5206
 alloc_pages_mpol+0x328/0x860 mm/mempolicy.c:2416
 alloc_frozen_pages_noprof mm/mempolicy.c:2487 [inline]
 alloc_pages_noprof mm/mempolicy.c:2507 [inline]
 folio_alloc_noprof+0x109/0x360 mm/mempolicy.c:2517
 filemap_alloc_folio_noprof+0x9d/0x420 mm/filemap.c:1020
 __filemap_get_folio+0xb45/0x1930 mm/filemap.c:2012
 gfs2_getbuf+0x246/0xce0 fs/gfs2/meta_io.c:144
 gfs2_meta_ra+0x13c/0x720 fs/gfs2/meta_io.c:531
 gfs2_quota_init+0x759/0x2730 fs/gfs2/quota.c:1427
 gfs2_make_fs_rw+0x1d5/0x460 fs/gfs2/super.c:149
 gfs2_fill_super+0x3d31/0x3f50 fs/gfs2/ops_fstype.c:1280
 get_tree_bdev_flags+0x6e6/0x920 fs/super.c:1691
 get_tree_bdev+0x38/0x50 fs/super.c:1714
 gfs2_get_tree+0x57/0x350 fs/gfs2/ops_fstype.c:1337
 vfs_get_tree+0xb3/0x5c0 fs/super.c:1751
 fc_mount fs/namespace.c:1208 [inline]
 do_new_mount_fc fs/namespace.c:3651 [inline]
 do_new_mount+0x839/0x15f0 fs/namespace.c:3727
 path_mount+0x747/0x1fb0 fs/namespace.c:4037
 do_mount fs/namespace.c:4050 [inline]
 __do_sys_mount fs/namespace.c:4238 [inline]
 __se_sys_mount+0x6f7/0x7e0 fs/namespace.c:4215
 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4215
 x64_sys_call+0x3604/0x3e30 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

CPU: 0 UID: 0 PID: 6804 Comm: syz.0.162 Not tainted syzkaller #0 PREEMPT(none) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
=====================================================

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/13 04:54 upstream 8765f467912f ff1712fe .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2024/11/26 02:03 upstream 9f16d5e6f220 a84878fc .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2024/11/26 01:14 upstream 9f16d5e6f220 a84878fc .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2024/11/26 00:24 upstream 9f16d5e6f220 a84878fc .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2025/11/05 08:36 upstream c9cfc122f037 a6c9c731 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2025/11/03 12:33 upstream 6146a0f1dfae 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2025/10/13 02:12 upstream 8765f467912f ff1712fe .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2025/07/08 05:27 upstream d7b8f8e20813 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2025/06/30 17:31 upstream d0b3b7b22dfa fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2024/12/20 12:33 upstream 8faabc041a00 1d58202c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
2024/11/25 23:36 upstream 9f16d5e6f220 a84878fc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in gfs2_quota_init
* Struck through repros no longer work on HEAD.