syzbot

 sign-in | mailing list | source | docs
🐞 Open [984] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12475] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in search_by_key

Status: fixed on 2020/11/16 12:12
Subsystems: reiserfs
[Documentation on labels]
Reported-by: syzbot+d94d02749498bb7bab4b@syzkaller.appspotmail.com
Fix commit: 4443390e08d3 reiserfs: Initialize inode keys properly
First crash: 1307d, last: 1255d
▶ ▼ Discussions (10)
Title Replies (including bot) Last reply
[tip: perf/urgent] reiserfs: Initialize inode keys properly 1 (1) 2020/10/19 17:02
[PATCH 5.9 00/15] 5.9.1-rc1 review 26 (26) 2020/10/19 17:02
[PATCH 4.4 00/16] 4.4.240-rc1 review 21 (21) 2020/10/17 16:19
[PATCH 4.9 00/16] 4.9.240-rc1 review 20 (20) 2020/10/17 16:14
[PATCH 4.14 00/18] 4.14.202-rc1 review 22 (22) 2020/10/17 16:11
[PATCH 4.19 00/21] 4.19.152-rc1 review 32 (32) 2020/10/17 16:09
[PATCH 5.4 00/22] 5.4.72-rc1 review 26 (26) 2020/10/17 16:07
[PATCH 5.8 00/14] 5.8.16-rc1 review 23 (23) 2020/10/17 16:05
[PATCH] reiserfs: Initialize inode keys properly 1 (1) 2020/09/21 13:12
KMSAN: uninit-value in search_by_key 1 (2) 2020/09/21 10:10
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: slab-out-of-bounds Read in search_by_key (2) reiserfs C 4435 102d 533d 26/26 fixed on 2024/01/30 15:47

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in comp_keys fs/reiserfs/stree.c:83 [inline]
BUG: KMSAN: uninit-value in bin_search fs/reiserfs/stree.c:173 [inline]
BUG: KMSAN: uninit-value in search_by_key+0x301e/0x67f0 fs/reiserfs/stree.c:743
CPU: 1 PID: 30241 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:122
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:201
 comp_keys fs/reiserfs/stree.c:83 [inline]
 bin_search fs/reiserfs/stree.c:173 [inline]
 search_by_key+0x301e/0x67f0 fs/reiserfs/stree.c:743
 reiserfs_read_locked_inode+0x1fc/0x30b0 fs/reiserfs/inode.c:1561
 reiserfs_fill_super+0x2ad7/0x6160 fs/reiserfs/super.c:2081
 mount_bdev+0x619/0x900 fs/super.c:1417
 get_super_block+0xc9/0xe0 fs/reiserfs/super.c:2606
 legacy_get_tree+0x163/0x2e0 fs/fs_context.c:592
 vfs_get_tree+0xd8/0x5d0 fs/super.c:1547
 do_new_mount fs/namespace.c:2875 [inline]
 path_mount+0x3dde/0x5db0 fs/namespace.c:3192
 do_mount+0x1c6/0x220 fs/namespace.c:3205
 __do_compat_sys_mount fs/compat.c:122 [inline]
 __se_compat_sys_mount+0x7bb/0xaa0 fs/compat.c:89
 __ia32_compat_sys_mount+0x62/0x80 fs/compat.c:89
 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline]
 __do_fast_syscall_32+0x129/0x180 arch/x86/entry/common.c:139
 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162
 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f7c549
Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f5575f20 EFLAGS: 00000292 ORIG_RAX: 0000000000000015
RAX: ffffffffffffffda RBX: 00000000f5575f7c RCX: 0000000020000100
RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000f5575fbc
RBP: 00000000f5575f7c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Local variable ----key@reiserfs_read_locked_inode created at:
 reiserfs_read_locked_inode+0xb4/0x30b0 fs/reiserfs/inode.c:1544
 reiserfs_read_locked_inode+0xb4/0x30b0 fs/reiserfs/inode.c:1544
=====================================================

Crashes (1549):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/11 10:51 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/11 02:21 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 22:28 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 14:51 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 14:51 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 13:24 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 12:05 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 10:59 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 09:51 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 09:21 https://github.com/google/kmsan.git master e16174226146 cca87986 .config console log report info ci-upstream-kmsan-gce-386
2020/11/10 03:11 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/09 14:02 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/08 21:13 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/08 03:49 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/06 20:44 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/06 11:31 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 12:50 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 03:24 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 02:21 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 01:21 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/05 00:09 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/04 23:03 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/04 21:49 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/04 21:42 https://github.com/google/kmsan.git master e16174226146 64069d48 .config console log report info ci-upstream-kmsan-gce-386
2020/11/04 10:44 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/03 21:54 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/03 06:14 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/03 05:02 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/03 04:10 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/03 02:57 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/03 01:55 https://github.com/google/kmsan.git master e16174226146 cba33199 .config console log report info ci-upstream-kmsan-gce-386
2020/11/02 21:39 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/11/02 01:13 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 18:24 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 18:17 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 17:14 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 16:12 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 15:10 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 14:42 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 13:17 https://github.com/google/kmsan.git master e16174226146 8bc4594f .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 04:33 https://github.com/google/kmsan.git master e16174226146 18e33098 .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 03:29 https://github.com/google/kmsan.git master e16174226146 18e33098 .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 03:16 https://github.com/google/kmsan.git master e16174226146 18e33098 .config console log report info ci-upstream-kmsan-gce-386
2020/10/31 01:53 https://github.com/google/kmsan.git master e16174226146 18e33098 .config console log report info ci-upstream-kmsan-gce-386
2020/09/21 09:41 https://github.com/google/kmsan.git master c5a13b33ec11 9564d2e9 .config console log report info ci-upstream-kmsan-gce-386
2020/09/20 13:40 https://github.com/google/kmsan.git master c5a13b33ec11 9564d2e9 .config console log report info ci-upstream-kmsan-gce-386
* Struck through repros no longer work on HEAD.