syzbot


KMSAN: uninit-value in path_init

Status: closed as invalid on 2022/06/14 13:16
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 175d, last: 174d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in path_init 1 456d 444d 0/24 auto-closed as invalid on 2022/01/03 09:55

Sample crash report:
loop4: detected capacity change from 0 to 131456
=====================================================
BUG: KMSAN: uninit-value in path_init+0x1002/0x1bf0
 path_init+0x1002/0x1bf0
 path_lookupat+0x7a/0x890
 filename_lookup+0x375/0xa40
 fs_lookup_param+0x336/0x6d0
 ext4_parse_param+0x219c/0x45f0
 parse_apply_sb_mount_options+0x6c5/0x1400
 ext4_fill_super+0x3952/0x11bf0
 get_tree_bdev+0x9ef/0xdd0
 ext4_get_tree+0x54/0x60
 vfs_get_tree+0xdc/0x5d0
 do_new_mount+0x7ae/0x16f0
 path_mount+0xf8e/0x26c0
 __se_sys_mount+0x8e0/0x9b0
 __ia32_sys_mount+0x15b/0x1b0
 __do_fast_syscall_32+0x95/0xf0
 do_fast_syscall_32+0x33/0x70
 do_SYSENTER_32+0x1b/0x20
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Uninit was stored to memory at:
 filename_lookup+0x550/0xa40
 fs_lookup_param+0x336/0x6d0
 ext4_parse_param+0x219c/0x45f0
 parse_apply_sb_mount_options+0x6c5/0x1400
 ext4_fill_super+0x3952/0x11bf0
 get_tree_bdev+0x9ef/0xdd0
 ext4_get_tree+0x54/0x60
 vfs_get_tree+0xdc/0x5d0
 do_new_mount+0x7ae/0x16f0
 path_mount+0xf8e/0x26c0
 __se_sys_mount+0x8e0/0x9b0
 __ia32_sys_mount+0x15b/0x1b0
 __do_fast_syscall_32+0x95/0xf0
 do_fast_syscall_32+0x33/0x70
 do_SYSENTER_32+0x1b/0x20
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c

Local variable param.i created at:
 parse_apply_sb_mount_options+0x393/0x1400
 ext4_fill_super+0x3952/0x11bf0

CPU: 1 PID: 4579 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
=====================================================

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2022/06/13 21:19 https://github.com/google/kmsan.git master 2f3064574275 0d5abf15 .config log report info KMSAN: uninit-value in path_init
ci-upstream-kmsan-gce-386 2022/06/13 20:56 https://github.com/google/kmsan.git master 2f3064574275 0d5abf15 .config log report info KMSAN: uninit-value in path_init
ci-upstream-kmsan-gce-386 2022/06/13 19:24 https://github.com/google/kmsan.git master 2f3064574275 0d5abf15 .config log report info KMSAN: uninit-value in path_init
ci-upstream-kmsan-gce-386 2022/06/13 18:52 https://github.com/google/kmsan.git master 2f3064574275 0d5abf15 .config log report info KMSAN: uninit-value in path_init
ci-upstream-kmsan-gce-386 2022/06/13 16:13 https://github.com/google/kmsan.git master 2f3064574275 0d5abf15 .config log report info KMSAN: uninit-value in path_init
ci-upstream-kmsan-gce-386 2022/06/13 14:51 https://github.com/google/kmsan.git master 2f3064574275 0d5abf15 .config log report info KMSAN: uninit-value in path_init
ci-upstream-kmsan-gce-386 2022/06/13 13:18 https://github.com/google/kmsan.git master 2f3064574275 0d5abf15 .config log report info KMSAN: uninit-value in path_init
* Struck through repros no longer work on HEAD.