syzbot


KMSAN: uninit-value in inode_set_ctime_to_ts

Status: upstream: reported on 2026/02/15 05:42
Subsystems: kernfs
[Documentation on labels]
Reported-by: syzbot+e2fd93a2773af7f9ea51@syzkaller.appspotmail.com
First crash: 13d, last: 10d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernfs?] KMSAN: uninit-value in inode_set_ctime_to_ts 0 (1) 2026/02/15 05:42

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in inode_set_ctime_to_ts+0x1eb/0x3a0 fs/inode.c:2777
 inode_set_ctime_to_ts+0x1eb/0x3a0 fs/inode.c:2777
 inode_set_ctime_current+0x646/0x1690 fs/inode.c:2842
 simple_inode_init_ts+0x43/0x180 fs/libfs.c:2133
 set_default_inode_attr fs/kernfs/inode.c:155 [inline]
 kernfs_init_inode fs/kernfs/inode.c:209 [inline]
 kernfs_get_inode+0x23a/0xb60 fs/kernfs/inode.c:255
 kernfs_iop_lookup+0x2ff/0x600 fs/kernfs/dir.c:1241
 __lookup_slow+0x56a/0x770 fs/namei.c:1916
 lookup_slow+0x6a/0xd0 fs/namei.c:1933
 walk_component fs/namei.c:2279 [inline]
 link_path_walk+0x170f/0x2650 fs/namei.c:2647
 path_lookupat+0x107/0xdf0 fs/namei.c:2803
 filename_lookup+0x2bc/0x800 fs/namei.c:2833
 vfs_statx+0xcf/0x290 fs/stat.c:353
 vfs_fstatat+0x2dc/0x400 fs/stat.c:373
 __do_sys_newfstatat fs/stat.c:538 [inline]
 __se_sys_newfstatat+0x64/0x870 fs/stat.c:532
 __x64_sys_newfstatat+0xbd/0x120 fs/stat.c:532
 x64_sys_call+0x3824/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:263
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 inode_set_ctime_to_ts+0x1e4/0x3a0 fs/inode.c:2777
 inode_set_ctime_current+0x646/0x1690 fs/inode.c:2842
 simple_inode_init_ts+0x43/0x180 fs/libfs.c:2133
 set_default_inode_attr fs/kernfs/inode.c:155 [inline]
 kernfs_init_inode fs/kernfs/inode.c:209 [inline]
 kernfs_get_inode+0x23a/0xb60 fs/kernfs/inode.c:255
 kernfs_iop_lookup+0x2ff/0x600 fs/kernfs/dir.c:1241
 __lookup_slow+0x56a/0x770 fs/namei.c:1916
 lookup_slow+0x6a/0xd0 fs/namei.c:1933
 walk_component fs/namei.c:2279 [inline]
 link_path_walk+0x170f/0x2650 fs/namei.c:2647
 path_lookupat+0x107/0xdf0 fs/namei.c:2803
 filename_lookup+0x2bc/0x800 fs/namei.c:2833
 vfs_statx+0xcf/0x290 fs/stat.c:353
 vfs_fstatat+0x2dc/0x400 fs/stat.c:373
 __do_sys_newfstatat fs/stat.c:538 [inline]
 __se_sys_newfstatat+0x64/0x870 fs/stat.c:532
 __x64_sys_newfstatat+0xbd/0x120 fs/stat.c:532
 x64_sys_call+0x3824/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:263
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 inode_set_ctime_to_ts+0x19f/0x3a0 fs/inode.c:-1
 inode_set_ctime_current+0x646/0x1690 fs/inode.c:2842
 simple_inode_init_ts+0x43/0x180 fs/libfs.c:2133
 set_default_inode_attr fs/kernfs/inode.c:155 [inline]
 kernfs_init_inode fs/kernfs/inode.c:209 [inline]
 kernfs_get_inode+0x23a/0xb60 fs/kernfs/inode.c:255
 kernfs_iop_lookup+0x2ff/0x600 fs/kernfs/dir.c:1241
 __lookup_slow+0x56a/0x770 fs/namei.c:1916
 lookup_slow+0x6a/0xd0 fs/namei.c:1933
 walk_component fs/namei.c:2279 [inline]
 link_path_walk+0x170f/0x2650 fs/namei.c:2647
 path_lookupat+0x107/0xdf0 fs/namei.c:2803
 filename_lookup+0x2bc/0x800 fs/namei.c:2833
 vfs_statx+0xcf/0x290 fs/stat.c:353
 vfs_fstatat+0x2dc/0x400 fs/stat.c:373
 __do_sys_newfstatat fs/stat.c:538 [inline]
 __se_sys_newfstatat+0x64/0x870 fs/stat.c:532
 __x64_sys_newfstatat+0xbd/0x120 fs/stat.c:532
 x64_sys_call+0x3824/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:263
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable retval created at:
 inode_set_ctime_current+0x3b/0x1690 fs/inode.c:2833
 simple_inode_init_ts+0x43/0x180 fs/libfs.c:2133

CPU: 0 UID: 0 PID: 5142 Comm: udevadm Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
=====================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/14 09:24 upstream cd7a5651db26 1e62d198 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/14 06:52 upstream cd7a5651db26 1e62d198 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/11 11:18 upstream dc855b77719f 441e25b7 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/13 02:19 upstream 37a93dd5c49b 504cb1bf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/11 05:37 upstream dc855b77719f 441e25b7 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in inode_set_ctime_to_ts
* Struck through repros no longer work on HEAD.