KMSAN: uninit-value in inode_go_dump

Status: auto-obsoleted due to no activity on 2023/09/17 03:31
Subsystems: gfs2
[Documentation on labels]
Reported-by: syzbot+79333ce1ae874ab7ffbb@syzkaller.appspotmail.com
First crash: 1293d, last: 1146d
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly cluster report 1 (2) 2023/03/30 10:09
[syzbot] [gfs2?] KMSAN: uninit-value in inode_go_dump 0 (1) 2023/01/17 10:38
▶ ▼ Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in inode_go_dump (2) gfs2 7 1 1044d 1044d 0/29 auto-obsoleted due to no activity on 2023/12/17 04:58
upstream KMSAN: uninit-value in inode_go_dump (3) gfs2 7 1 939d 931d 0/29 auto-obsoleted due to no activity on 2024/04/10 06:12
upstream KMSAN: uninit-value in inode_go_dump (4) gfs2 7 1 832d 828d 0/29 auto-obsoleted due to no activity on 2024/07/26 23:01
upstream KMSAN: uninit-value in inode_go_dump (5) gfs2 7 syz, C 6 611d 665d 28/29 fixed on 2025/05/06 15:33
upstream KMSAN: uninit-value in native_apic_mem_write (2) kernel 7 syz 148 1253d 1266d 0/29 auto-obsoleted due to no activity on 2023/05/13 00:04
upstream KMSAN: kernel-infoleak in copyout (2) net 17 syz, C 6723 1146d 2315d 22/29 fixed on 2023/06/08 14:41
upstream KMSAN: kernel-infoleak in _copy_to_iter (8) mm 21 syz, C 21180 1146d 1240d 22/29 fixed on 2023/06/08 14:41
upstream KMSAN: uninit-value in reiserfs_new_inode (2) fs 7 syz, C 1339 907d 1342d 0/29 auto-obsoleted due to no activity on 2024/04/12 15:06
upstream KMSAN: uninit-value in zswap_frontswap_store mm 7 syz, C 4027 856d 1139d 0/29 auto-obsoleted due to no activity on 2024/06/01 21:32

Sample crash report:
gfs2: fsid=syz:syz.0: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0x125/0x510 fs/gfs2/ops_fstype.c:886
=====================================================
BUG: KMSAN: uninit-value in inode_go_dump+0x49d/0x4d0 fs/gfs2/glops.c:554
 inode_go_dump+0x49d/0x4d0 fs/gfs2/glops.c:554
 gfs2_dump_glock+0x22a5/0x23d0 fs/gfs2/glock.c:2385
 gfs2_consist_inode_i+0x19f/0x220 fs/gfs2/util.c:465
 gfs2_dinode_in fs/gfs2/glops.c:469 [inline]
 gfs2_inode_refresh+0xf2c/0x1570 fs/gfs2/glops.c:489
 inode_go_instantiate+0x6e/0xc0 fs/gfs2/glops.c:508
 gfs2_instantiate+0x26f/0x4b0 fs/gfs2/glock.c:454
 gfs2_glock_holder_ready fs/gfs2/glock.c:1319 [inline]
 gfs2_glock_wait+0x2a4/0x3e0 fs/gfs2/glock.c:1339
 gfs2_glock_nq+0x2078/0x2ea0 fs/gfs2/glock.c:1587
 gfs2_glock_nq_init fs/gfs2/glock.h:261 [inline]
 init_journal+0x1208/0x38b0 fs/gfs2/ops_fstype.c:792
 init_inodes+0x125/0x510 fs/gfs2/ops_fstype.c:886
 gfs2_fill_super+0x3c55/0x44c0 fs/gfs2/ops_fstype.c:1250
 get_tree_bdev+0x88a/0xd10 fs/super.c:1303
 gfs2_get_tree+0x5c/0x340 fs/gfs2/ops_fstype.c:1335
 vfs_get_tree+0xa5/0x500 fs/super.c:1510
 do_new_mount+0x68d/0x1540 fs/namespace.c:3039
 path_mount+0x725/0x1ee0 fs/namespace.c:3369
 do_mount fs/namespace.c:3382 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x725/0x810 fs/namespace.c:3568
 __ia32_sys_mount+0xe3/0x150 fs/namespace.c:3568
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:
 __alloc_pages+0x9a4/0xe00 mm/page_alloc.c:4791
 alloc_pages+0xd01/0x1040
 alloc_slab_page mm/slub.c:1851 [inline]
 allocate_slab mm/slub.c:1998 [inline]
 new_slab+0x41e/0x1580 mm/slub.c:2051
 ___slab_alloc+0x10f9/0x3100 mm/slub.c:3192
 __slab_alloc mm/slub.c:3291 [inline]
 __slab_alloc_node mm/slub.c:3344 [inline]
 slab_alloc_node mm/slub.c:3441 [inline]
 slab_alloc mm/slub.c:3459 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3466 [inline]
 kmem_cache_alloc_lru+0x58f/0x9b0 mm/slub.c:3482
 alloc_inode_sb include/linux/fs.h:2711 [inline]
 gfs2_alloc_inode+0x66/0x210 fs/gfs2/super.c:1476
 alloc_inode+0x83/0x440 fs/inode.c:260
 iget5_locked+0xa9/0x210 fs/inode.c:1241
 gfs2_inode_lookup+0xbe/0x1440 fs/gfs2/inode.c:124
 gfs2_lookup_root fs/gfs2/ops_fstype.c:462 [inline]
 init_sb+0xe62/0x1880 fs/gfs2/ops_fstype.c:529
 gfs2_fill_super+0x32ce/0x44c0 fs/gfs2/ops_fstype.c:1217
 get_tree_bdev+0x88a/0xd10 fs/super.c:1303
 gfs2_get_tree+0x5c/0x340 fs/gfs2/ops_fstype.c:1335
 vfs_get_tree+0xa5/0x500 fs/super.c:1510
 do_new_mount+0x68d/0x1540 fs/namespace.c:3039
 path_mount+0x725/0x1ee0 fs/namespace.c:3369
 do_mount fs/namespace.c:3382 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x725/0x810 fs/namespace.c:3568
 __ia32_sys_mount+0xe3/0x150 fs/namespace.c:3568
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 0 PID: 5570 Comm: syz-executor.3 Not tainted 6.4.0-rc4-syzkaller-g2741f1b02117 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
=====================================================

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/09 03:30 https://github.com/google/kmsan.git master 2741f1b02117 7086cdb9 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in inode_go_dump
2023/05/02 01:53 https://github.com/google/kmsan.git master 81af97bdef5e 62df2017 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in inode_go_dump
2023/03/22 17:21 https://github.com/google/kmsan.git master 90ea0df61c98 d846e076 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in inode_go_dump
2023/02/04 03:22 https://github.com/google/kmsan.git master eda666ff2276 1b2f701a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in inode_go_dump
2023/01/22 17:06 https://github.com/google/kmsan.git master e919e2b1bc1c 559a440a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in inode_go_dump
2023/01/22 14:13 https://github.com/google/kmsan.git master e919e2b1bc1c 559a440a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in inode_go_dump
2023/01/16 09:21 https://github.com/google/kmsan.git master e919e2b1bc1c a63719e7 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in inode_go_dump
2023/01/12 19:07 https://github.com/google/kmsan.git master 219e919e391d 96166539 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in inode_go_dump
* Struck through repros no longer work on HEAD.