syzbot


KMSAN: uninit-value in tomoyo_path_chown

Status: upstream: reported C repro on 2022/09/19 08:10
Reported-by: syzbot+541e21dcc32c4046cba9@syzkaller.appspotmail.com
Fix commit: f52d74b190f8 open: always initialize ownership fields
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 156d, last: 131d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in from_kuid 10 351d 428d 22/24 fixed on 2022/03/08 16:11
Last patch testing requests:
Created Duration User Patch Repo Result
2022/09/20 09:04 22m brauner@kernel.org patch https://github.com/google/kmsan.git master OK log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in tomoyo_path_chown+0x121/0x240 security/tomoyo/tomoyo.c:366
 tomoyo_path_chown+0x121/0x240 security/tomoyo/tomoyo.c:366
 security_path_chown+0x17d/0x260 security/security.c:1224
 chown_common+0x9f2/0xef0 fs/open.c:729
 vfs_fchown fs/open.c:802 [inline]
 ksys_fchown+0x229/0x360 fs/open.c:813
 __do_sys_fchown fs/open.c:821 [inline]
 __se_sys_fchown fs/open.c:819 [inline]
 __x64_sys_fchown+0x8a/0xe0 fs/open.c:819
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Local variable newattrs created at:
 chown_common+0xd1/0xef0 fs/open.c:708
 vfs_fchown fs/open.c:802 [inline]
 ksys_fchown+0x229/0x360 fs/open.c:813

CPU: 0 PID: 3490 Comm: syz-executor426 Not tainted 6.0.0-rc2-syzkaller-47460-g3a2b6b904ea7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
=====================================================

Crashes (13763):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-upstream-kmsan-gce 2022/08/26 10:22 https://github.com/google/kmsan.git master 3a2b6b904ea7 15195ea3 .config strace log report syz C KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 10:07 https://github.com/google/kmsan.git master 8f4ae27df775 7c41a9ba .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 09:41 https://github.com/google/kmsan.git master 8f4ae27df775 7c41a9ba .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 06:55 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 06:00 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 05:19 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 04:19 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 03:15 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 02:51 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 02:31 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/20 01:11 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 21:30 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 20:46 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 20:46 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 19:13 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 18:09 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 17:07 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 14:55 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 14:07 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 13:05 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 12:16 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 11:34 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 10:41 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 09:38 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 09:26 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 08:22 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 07:28 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 07:21 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 06:18 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 06:08 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 05:05 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 04:11 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 03:40 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 03:35 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/09/19 02:31 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce 2022/08/26 05:20 https://github.com/google/kmsan.git master 3a2b6b904ea7 15195ea3 .config console log report info KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/20 00:20 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/19 23:31 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/19 22:29 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/19 19:42 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/19 17:28 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/19 17:03 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/19 15:56 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/19 14:11 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
ci-upstream-kmsan-gce-386 2022/09/19 10:39 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info [disk image] [vmlinux] KMSAN: uninit-value in tomoyo_path_chown
* Struck through repros no longer work on HEAD.