syzbot


KMSAN: uninit-value in inode_set_ctime_to_ts

Status: upstream: reported on 2026/02/15 05:42
Subsystems: kernfs
[Documentation on labels]
Reported-by: syzbot+e2fd93a2773af7f9ea51@syzkaller.appspotmail.com
First crash: 60d, last: 5d06h
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernfs?] KMSAN: uninit-value in inode_set_ctime_to_ts 0 (1) 2026/02/15 05:42

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in inode_set_ctime_to_ts+0x1eb/0x3f0 fs/inode.c:2777
 inode_set_ctime_to_ts+0x1eb/0x3f0 fs/inode.c:2777
 setattr_copy+0xc20/0xd30 fs/attr.c:368
 shmem_setattr+0x1233/0x1a00 mm/shmem.c:1385
 notify_change+0x1abe/0x1bd0 fs/attr.c:556
 vfs_utimes+0x72c/0xaf0 fs/utimes.c:67
 do_utimes_path fs/utimes.c:99 [inline]
 do_utimes+0x2d8/0x4f0 fs/utimes.c:139
 __do_sys_utimensat fs/utimes.c:158 [inline]
 __se_sys_utimensat fs/utimes.c:142 [inline]
 __x64_sys_utimensat+0x1b8/0x450 fs/utimes.c:142
 x64_sys_call+0x370c/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:281
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 inode_set_ctime_to_ts+0x1e4/0x3f0 fs/inode.c:2777
 setattr_copy+0xc20/0xd30 fs/attr.c:368
 shmem_setattr+0x1233/0x1a00 mm/shmem.c:1385
 notify_change+0x1abe/0x1bd0 fs/attr.c:556
 vfs_utimes+0x72c/0xaf0 fs/utimes.c:67
 do_utimes_path fs/utimes.c:99 [inline]
 do_utimes+0x2d8/0x4f0 fs/utimes.c:139
 __do_sys_utimensat fs/utimes.c:158 [inline]
 __se_sys_utimensat fs/utimes.c:142 [inline]
 __x64_sys_utimensat+0x1b8/0x450 fs/utimes.c:142
 x64_sys_call+0x370c/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:281
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 inode_set_ctime_to_ts+0x19f/0x3f0 fs/inode.c:-1
 setattr_copy+0xc20/0xd30 fs/attr.c:368
 shmem_setattr+0x1233/0x1a00 mm/shmem.c:1385
 notify_change+0x1abe/0x1bd0 fs/attr.c:556
 vfs_utimes+0x72c/0xaf0 fs/utimes.c:67
 do_utimes_path fs/utimes.c:99 [inline]
 do_utimes+0x2d8/0x4f0 fs/utimes.c:139
 __do_sys_utimensat fs/utimes.c:158 [inline]
 __se_sys_utimensat fs/utimes.c:142 [inline]
 __x64_sys_utimensat+0x1b8/0x450 fs/utimes.c:142
 x64_sys_call+0x370c/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:281
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable newattrs created at:
 vfs_utimes+0x43/0xaf0 fs/utimes.c:24
 do_utimes_path fs/utimes.c:99 [inline]
 do_utimes+0x2d8/0x4f0 fs/utimes.c:139

CPU: 1 UID: 0 PID: 6275 Comm: udevd Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
=====================================================

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/02 02:52 upstream 9147566d8016 0cb124d5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/03/24 06:53 upstream c369299895a5 baf8bf12 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/14 09:24 upstream cd7a5651db26 1e62d198 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/14 06:52 upstream cd7a5651db26 1e62d198 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/11 11:18 upstream dc855b77719f 441e25b7 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/04/07 08:47 upstream bfe62a454542 4440e7c2 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/13 02:19 upstream 37a93dd5c49b 504cb1bf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/11 05:37 upstream dc855b77719f 441e25b7 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in inode_set_ctime_to_ts
* Struck through repros no longer work on HEAD.