syzbot


KMSAN: uninit-value in hfsplus_delete_cat

Status: upstream: reported C repro on 2022/12/05 09:19
Labels: hfs (incorrect?)
Reported-by: syzbot+fdedff847a0e5e84c39f@syzkaller.appspotmail.com
First crash: 180d, last: 9h42m
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly hfs report (May 2023) 0 (1) 2023/05/30 08:18
[syzbot] KMSAN: uninit-value in hfsplus_delete_cat 0 (2) 2023/02/24 09:07
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in native_apic_mem_write (2) kernel syz 148 101d 114d 0/24 auto-obsoleted due to no activity on 2023/05/13 00:04
upstream KMSAN: kernel-infoleak in copyout (2) net C 6709 6m 1162d 23/24 upstream: reported C repro on 2020/03/26 17:19
upstream KASAN: slab-out-of-bounds Read in ntfs_iget5 ntfs3 C done 3560 4h59m 406d 0/24 upstream: reported C repro on 2022/04/22 13:07
upstream KMSAN: kernel-infoleak in _copy_to_iter (8) C 16906 now 88d 23/24 internal: reported C repro on 2023/03/06 07:23
upstream KMSAN: uninit-value in inode_go_dump gfs2 7 31d 136d 0/24 upstream: reported on 2023/01/17 10:38
upstream KMSAN: uninit-value in hfs_revalidate_dentry hfs C 1361 3h32m 189d 0/24 upstream: reported C repro on 2022/11/25 09:56
upstream KMSAN: uninit-value in reiserfs_new_inode (2) reiserfs 666 24d 190d 0/24 upstream: reported on 2022/11/24 06:39

Sample crash report:
loop0: detected capacity change from 0 to 1024
=====================================================
BUG: KMSAN: uninit-value in hfsplus_lookup+0x679/0xf20 fs/hfsplus/dir.c:83
 hfsplus_lookup+0x679/0xf20 fs/hfsplus/dir.c:83
 __lookup_slow+0x528/0x730 fs/namei.c:1685
 lookup_slow+0x6a/0xc0 fs/namei.c:1702
 walk_component+0x462/0x650 fs/namei.c:1993
 lookup_last fs/namei.c:2450 [inline]
 path_lookupat+0x27d/0x6f0 fs/namei.c:2474
 filename_lookup+0x250/0x800 fs/namei.c:2503
 user_path_at_empty+0x87/0x3a0 fs/namei.c:2876
 user_path_at include/linux/namei.h:57 [inline]
 path_setxattr+0x82/0x3f0 fs/xattr.c:645
 __do_sys_lsetxattr fs/xattr.c:673 [inline]
 __se_sys_lsetxattr fs/xattr.c:669 [inline]
 __ia32_sys_lsetxattr+0xed/0x170 fs/xattr.c:669
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:
 __alloc_pages+0x9f6/0xe90 mm/page_alloc.c:5572
 alloc_pages+0xab0/0xd80 mm/mempolicy.c:2287
 alloc_slab_page mm/slub.c:1851 [inline]
 allocate_slab mm/slub.c:1998 [inline]
 new_slab+0x425/0x15f0 mm/slub.c:2051
 ___slab_alloc+0x109c/0x32d0 mm/slub.c:3193
 __slab_alloc mm/slub.c:3292 [inline]
 __slab_alloc_node mm/slub.c:3345 [inline]
 slab_alloc_node mm/slub.c:3442 [inline]
 slab_alloc mm/slub.c:3460 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3467 [inline]
 kmem_cache_alloc_lru+0x5fb/0xa50 mm/slub.c:3483
 alloc_inode_sb include/linux/fs.h:3119 [inline]
 hfsplus_alloc_inode+0x5a/0xc0 fs/hfsplus/super.c:627
 alloc_inode+0x83/0x440 fs/inode.c:259
 iget_locked+0x2dd/0xe80 fs/inode.c:1286
 hfsplus_iget+0x63/0xb70 fs/hfsplus/super.c:64
 hfsplus_btree_open+0x13e/0x1d20 fs/hfsplus/btree.c:150
 hfsplus_fill_super+0x12bb/0x2a80 fs/hfsplus/super.c:473
 mount_bdev+0x50e/0x840 fs/super.c:1359
 hfsplus_mount+0x4d/0x60 fs/hfsplus/super.c:641
 legacy_get_tree+0x110/0x290 fs/fs_context.c:610
 vfs_get_tree+0xa5/0x500 fs/super.c:1489
 do_new_mount+0x69a/0x1580 fs/namespace.c:3145
 path_mount+0x725/0x1ec0 fs/namespace.c:3475
 do_mount fs/namespace.c:3488 [inline]
 __do_sys_mount fs/namespace.c:3697 [inline]
 __se_sys_mount+0x734/0x840 fs/namespace.c:3674
 __ia32_sys_mount+0xe3/0x150 fs/namespace.c:3674
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 1 PID: 5005 Comm: syz-executor236 Not tainted 6.2.0-syzkaller-81152-g97e36f4aa06f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
=====================================================

Crashes (542):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2023/02/24 09:07 https://github.com/google/kmsan.git master 97e36f4aa06f 9e2ebb3c .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/29 16:29 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/05/28 03:09 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/05/27 15:04 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/05/27 05:29 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/05/26 12:39 https://github.com/google/kmsan.git master f93f2feda5d6 b40ef614 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/05/06 17:32 https://github.com/google/kmsan.git master 81af97bdef5e 90c93c40 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/05/01 06:46 https://github.com/google/kmsan.git master 81af97bdef5e 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/04/30 08:54 https://github.com/google/kmsan.git master 81af97bdef5e 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/04/27 12:17 https://github.com/google/kmsan.git master 81af97bdef5e 6f5b1cc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/04/06 12:56 https://github.com/google/kmsan.git master 9189d4cb6980 08707520 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/04/06 05:59 https://github.com/google/kmsan.git master 9189d4cb6980 8b834965 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2022/12/03 22:22 https://github.com/google/kmsan.git master 49a9a20768f5 e080de16 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_delete_cat
2023/06/02 05:06 https://github.com/google/kmsan.git master 2741f1b02117 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/30 00:47 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/29 15:15 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/29 08:41 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/28 01:10 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/27 02:55 https://github.com/google/kmsan.git master f93f2feda5d6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/26 14:55 https://github.com/google/kmsan.git master f93f2feda5d6 b40ef614 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/23 11:53 https://github.com/google/kmsan.git master f93f2feda5d6 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/21 13:11 https://github.com/google/kmsan.git master dad188c049f8 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/21 01:53 https://github.com/google/kmsan.git master dad188c049f8 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/17 22:21 https://github.com/google/kmsan.git master dad188c049f8 eaac4681 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/15 02:23 https://github.com/google/kmsan.git master 46e8b6e7cfeb 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/15 01:28 https://github.com/google/kmsan.git master 46e8b6e7cfeb 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/14 09:49 https://github.com/google/kmsan.git master 46e8b6e7cfeb 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/12 08:54 https://github.com/google/kmsan.git master 46e8b6e7cfeb adb9a3cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/11 00:11 https://github.com/google/kmsan.git master 46e8b6e7cfeb 0fbd49f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/10 19:16 https://github.com/google/kmsan.git master 46e8b6e7cfeb 0fbd49f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/10 08:31 https://github.com/google/kmsan.git master 46e8b6e7cfeb 1964022b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/10 00:16 https://github.com/google/kmsan.git master 81af97bdef5e 30aa2a7e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/09 21:48 https://github.com/google/kmsan.git master 81af97bdef5e 30aa2a7e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/08 00:34 https://github.com/google/kmsan.git master 81af97bdef5e 90c93c40 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/07 05:10 https://github.com/google/kmsan.git master 81af97bdef5e 90c93c40 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/06 04:31 https://github.com/google/kmsan.git master 81af97bdef5e 4cec9341 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_rename_cat
2023/05/03 20:55 https://github.com/google/kmsan.git master 81af97bdef5e b5918830 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/03 14:23 https://github.com/google/kmsan.git master 81af97bdef5e b5918830 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/05/03 07:47 https://github.com/google/kmsan.git master 81af97bdef5e 48e0a81d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/04/30 19:15 https://github.com/google/kmsan.git master 81af97bdef5e 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/04/30 15:14 https://github.com/google/kmsan.git master 81af97bdef5e 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/04/30 06:08 https://github.com/google/kmsan.git master 81af97bdef5e 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/04/30 02:22 https://github.com/google/kmsan.git master 81af97bdef5e 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/04/08 17:41 https://github.com/google/kmsan.git master 9189d4cb6980 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/03/28 20:28 https://github.com/google/kmsan.git master 90ea0df61c98 48c74771 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/03/27 03:49 https://github.com/google/kmsan.git master 90ea0df61c98 fbf0499a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
2023/03/26 23:42 https://github.com/google/kmsan.git master 90ea0df61c98 fbf0499a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_lookup
* Struck through repros no longer work on HEAD.