syzbot

 sign-in | mailing list | source | docs
🐞 Open [978] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12472] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KMSAN: uninit-value in tomoyo_path_chown

Status: fixed on 2023/02/24 13:50
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+541e21dcc32c4046cba9@syzkaller.appspotmail.com
Fix commit: f52d74b190f8 open: always initialize ownership fields
First crash: 601d, last: 576d
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[PATCH (urgent)] vfs: fix uninitialized uid/gid in chown_common() 7 (7) 2022/09/20 00:45
[syzbot] KMSAN: uninit-value in tomoyo_path_chown 0 (1) 2022/09/19 08:10
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in from_kuid kernel 10 796d 873d 20/26 fixed on 2022/03/08 16:11
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2022/09/20 09:04 22m brauner@kernel.org patch https://github.com/google/kmsan.git master OK log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in tomoyo_path_chown+0x121/0x240 security/tomoyo/tomoyo.c:366
 tomoyo_path_chown+0x121/0x240 security/tomoyo/tomoyo.c:366
 security_path_chown+0x17d/0x260 security/security.c:1224
 chown_common+0x9f2/0xef0 fs/open.c:729
 vfs_fchown fs/open.c:802 [inline]
 ksys_fchown+0x229/0x360 fs/open.c:813
 __do_sys_fchown fs/open.c:821 [inline]
 __se_sys_fchown fs/open.c:819 [inline]
 __x64_sys_fchown+0x8a/0xe0 fs/open.c:819
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Local variable newattrs created at:
 chown_common+0xd1/0xef0 fs/open.c:708
 vfs_fchown fs/open.c:802 [inline]
 ksys_fchown+0x229/0x360 fs/open.c:813

CPU: 0 PID: 3490 Comm: syz-executor426 Not tainted 6.0.0-rc2-syzkaller-47460-g3a2b6b904ea7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
=====================================================

Crashes (13763):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/08/26 10:22 https://github.com/google/kmsan.git master 3a2b6b904ea7 15195ea3 .config strace log report syz C ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 10:07 https://github.com/google/kmsan.git master 8f4ae27df775 7c41a9ba .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 09:41 https://github.com/google/kmsan.git master 8f4ae27df775 7c41a9ba .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 06:55 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 06:00 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 05:19 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 04:19 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 03:15 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 02:51 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 02:31 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 01:11 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 21:30 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 20:46 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 20:46 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 19:13 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 18:09 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 17:07 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 14:55 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 14:07 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 13:05 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 12:16 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 11:34 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 10:41 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 09:38 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 09:26 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 08:22 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 07:28 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 07:21 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 06:18 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 06:08 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 05:05 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 04:11 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 03:40 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 03:35 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 02:31 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/08/26 05:20 https://github.com/google/kmsan.git master 3a2b6b904ea7 15195ea3 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in tomoyo_path_chown
2022/09/20 00:20 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 23:31 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 22:29 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 19:42 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 17:28 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 17:03 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 15:56 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 14:11 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
2022/09/19 10:39 https://github.com/google/kmsan.git master 8f4ae27df775 dd9a85ff .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in tomoyo_path_chown
* Struck through repros no longer work on HEAD.