syzbot


KMSAN: uninit-value in inode_set_ctime_to_ts

Status: upstream: reported on 2026/02/15 05:42
Subsystems: kernfs
[Documentation on labels]
Reported-by: syzbot+e2fd93a2773af7f9ea51@syzkaller.appspotmail.com
First crash: 64d, last: 8h33m
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernfs?] KMSAN: uninit-value in inode_set_ctime_to_ts 0 (1) 2026/02/15 05:42

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in inode_set_ctime_to_ts+0x1eb/0x3b0 fs/inode.c:2770
 inode_set_ctime_to_ts+0x1eb/0x3b0 fs/inode.c:2770
 setattr_copy+0xc20/0xd30 fs/attr.c:368
 shmem_setattr+0x1230/0x1a00 mm/shmem.c:1385
 notify_change+0x1abe/0x1bd0 fs/attr.c:556
 chown_common+0x745/0xcb0 fs/open.c:776
 do_fchownat+0x20f/0x490 fs/open.c:804
 __do_sys_chown fs/open.c:824 [inline]
 __se_sys_chown fs/open.c:822 [inline]
 __x64_sys_chown+0x9d/0x110 fs/open.c:822
 x64_sys_call+0x30cc/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:93
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 inode_set_ctime_to_ts+0x1e4/0x3b0 fs/inode.c:2770
 setattr_copy+0xc20/0xd30 fs/attr.c:368
 shmem_setattr+0x1230/0x1a00 mm/shmem.c:1385
 notify_change+0x1abe/0x1bd0 fs/attr.c:556
 chown_common+0x745/0xcb0 fs/open.c:776
 do_fchownat+0x20f/0x490 fs/open.c:804
 __do_sys_chown fs/open.c:824 [inline]
 __se_sys_chown fs/open.c:822 [inline]
 __x64_sys_chown+0x9d/0x110 fs/open.c:822
 x64_sys_call+0x30cc/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:93
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 inode_set_ctime_to_ts+0x19f/0x3b0 fs/inode.c:-1
 setattr_copy+0xc20/0xd30 fs/attr.c:368
 shmem_setattr+0x1230/0x1a00 mm/shmem.c:1385
 notify_change+0x1abe/0x1bd0 fs/attr.c:556
 chown_common+0x745/0xcb0 fs/open.c:776
 do_fchownat+0x20f/0x490 fs/open.c:804
 __do_sys_chown fs/open.c:824 [inline]
 __se_sys_chown fs/open.c:822 [inline]
 __x64_sys_chown+0x9d/0x110 fs/open.c:822
 x64_sys_call+0x30cc/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:93
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable newattrs created at:
 chown_common+0xbc/0xcb0 fs/open.c:746
 do_fchownat+0x20f/0x490 fs/open.c:804

CPU: 0 UID: 0 PID: 5132 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
=====================================================

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/16 19:22 upstream 1d51b370a0f8 321ae225 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/04/15 20:46 upstream 1f5ffc672165 c441f497 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/04/15 05:59 upstream 508fed679541 e2e976a8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/04/14 05:21 upstream 0f0013213293 1a086e7c .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/04/02 02:52 upstream 9147566d8016 0cb124d5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/03/24 06:53 upstream c369299895a5 baf8bf12 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/14 09:24 upstream cd7a5651db26 1e62d198 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/14 06:52 upstream cd7a5651db26 1e62d198 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/11 11:18 upstream dc855b77719f 441e25b7 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/04/07 08:47 upstream bfe62a454542 4440e7c2 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/13 02:19 upstream 37a93dd5c49b 504cb1bf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in inode_set_ctime_to_ts
2026/02/11 05:37 upstream dc855b77719f 441e25b7 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in inode_set_ctime_to_ts
* Struck through repros no longer work on HEAD.