syzbot


KMSAN: uninit-value in ext4_inlinedir_to_tree

Status: fixed on 2024/08/14 03:44
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+eaba5abe296837a640c0@syzkaller.appspotmail.com
Fix commit: 8dc9c3da79c8 ext4: fix uninitialized variable in ext4_inlinedir_to_tree
First crash: 161d, last: 111d
Discussions (7)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 5.15 07/10] ext4: fix uninitialized variable in ext4_inlinedir_to_tree 1 (1) 2024/07/28 15:49
[PATCH AUTOSEL 6.1 14/17] ext4: fix uninitialized variable in ext4_inlinedir_to_tree 1 (1) 2024/07/28 15:47
[PATCH AUTOSEL 6.6 17/20] ext4: fix uninitialized variable in ext4_inlinedir_to_tree 1 (1) 2024/07/28 15:45
[PATCH AUTOSEL 6.10 29/34] ext4: fix uninitialized variable in ext4_inlinedir_to_tree 1 (1) 2024/07/28 15:40
[PATCH] Fix uninitialized variable in ext4_inlinedir_to_tree 2 (2) 2024/06/28 17:17
[syzbot] Monthly ext4 report (Jun 2024) 0 (1) 2024/06/14 08:14
[syzbot] [ext4?] KMSAN: uninit-value in ext4_inlinedir_to_tree 1 (5) 2024/04/30 17:28
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in number (4) kernel C 7189 681d 1059d 0/28 closed as invalid on 2022/11/28 10:01
upstream KMSAN: uninit-value in htree_dirblock_to_tree ext4 204 508d 639d 22/28 fixed on 2023/07/01 16:05
android-54 KASAN: slab-out-of-bounds Read in ext4_inlinedir_to_tree C 1 18d 173d 0/2 upstream: reported C repro on 2024/04/14 03:10
upstream KASAN: use-after-free Read in ext4_inlinedir_to_tree ext4 C done 5 15d 36d 0/28 upstream: reported C repro on 2024/08/28 22:55
android-6-1 KASAN: slab-out-of-bounds Read in ext4_inlinedir_to_tree origin:upstream C error 1 56d 172d 0/2 upstream: reported C repro on 2024/04/14 08:35
android-5-10 KASAN: use-after-free Read in ext4_inlinedir_to_tree C error 1 56d 173d 0/2 upstream: reported C repro on 2024/04/14 03:44
Last patch testing requests (4)
Created Duration User Patch Repo Result
2024/06/29 08:56 27m retest repro upstream error
2024/04/30 17:28 32m shenxiaxi26@gmail.com patch upstream OK log
2024/04/30 07:12 1h11m shenxiaxi26@gmail.com patch upstream log
2024/04/30 05:34 1h34m eadavis@qq.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master OK log

Sample crash report:
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #12: comm syz-executor253: Siphash requires key
=====================================================
BUG: KMSAN: uninit-value in ext4_inlinedir_to_tree+0xde2/0x15a0 fs/ext4/inline.c:1415
 ext4_inlinedir_to_tree+0xde2/0x15a0 fs/ext4/inline.c:1415
 ext4_htree_fill_tree+0x1941/0x1cd0 fs/ext4/namei.c:1210
 ext4_dx_readdir fs/ext4/dir.c:597 [inline]
 ext4_readdir+0x4bbf/0x5b00 fs/ext4/dir.c:142
 iterate_dir+0x688/0x870 fs/readdir.c:110
 __do_sys_getdents64 fs/readdir.c:409 [inline]
 __se_sys_getdents64+0x169/0x530 fs/readdir.c:394
 __x64_sys_getdents64+0x96/0xe0 fs/readdir.c:394
 x64_sys_call+0x343d/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:218
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable hinfo created at:
 ext4_htree_fill_tree+0x52/0x1cd0 fs/ext4/namei.c:1185
 ext4_dx_readdir fs/ext4/dir.c:597 [inline]
 ext4_readdir+0x4bbf/0x5b00 fs/ext4/dir.c:142

CPU: 1 PID: 5020 Comm: syz-executor253 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
=====================================================

Crashes (267):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/25 18:16 upstream e88c4cfcb7b8 8bdc0f22 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/14 05:46 upstream 614da38e2f7a a9616ff5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/13 16:34 upstream 614da38e2f7a 2aa5052f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/13 08:01 upstream 614da38e2f7a 2aa5052f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/12 15:47 upstream 614da38e2f7a 4d75f4f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/12 08:00 upstream 614da38e2f7a 4d75f4f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/12 01:38 upstream 614da38e2f7a c7d7d815 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/11 22:58 upstream 614da38e2f7a c7d7d815 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/10 10:08 upstream 614da38e2f7a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/10 09:07 upstream 614da38e2f7a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/10 07:27 upstream 614da38e2f7a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/10 05:36 upstream 614da38e2f7a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/08 09:58 upstream 614da38e2f7a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/08 07:52 upstream 614da38e2f7a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/07 15:34 upstream 614da38e2f7a 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/07 12:53 upstream 614da38e2f7a 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/07 02:12 upstream 614da38e2f7a 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/06 02:23 upstream 614da38e2f7a 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/05 14:18 upstream 614da38e2f7a e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/05 06:42 upstream 614da38e2f7a e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/05 05:35 upstream 614da38e2f7a e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/04 03:28 upstream 614da38e2f7a 0aba2352 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/01 13:57 upstream 614da38e2f7a 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/01 08:03 upstream 614da38e2f7a 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/01 02:01 upstream 614da38e2f7a 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/14 12:57 upstream 101b7a97143a a9616ff5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/13 16:25 upstream 101b7a97143a 2aa5052f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/13 11:56 upstream 101b7a97143a 2aa5052f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/12 21:09 upstream 101b7a97143a 4d75f4f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/12 12:42 upstream 101b7a97143a 4d75f4f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/10 13:56 upstream 101b7a97143a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/10 12:42 upstream 101b7a97143a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/08 14:15 upstream 101b7a97143a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/08 12:01 upstream 101b7a97143a 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/07 03:38 upstream 101b7a97143a 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/07 02:37 upstream 101b7a97143a 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/06 07:35 upstream 101b7a97143a 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/06 05:56 upstream 101b7a97143a 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/05 17:02 upstream 101b7a97143a e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/05 15:28 upstream 101b7a97143a e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/05 10:55 upstream 101b7a97143a e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/05 09:29 upstream 101b7a97143a e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/05 07:54 upstream 101b7a97143a e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/01 15:16 upstream 101b7a97143a 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/01 12:17 upstream 101b7a97143a 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
2024/06/01 06:50 upstream 101b7a97143a 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ext4_inlinedir_to_tree
* Struck through repros no longer work on HEAD.