syzbot


KMSAN: uninit-value in hfsplus_listxattr

Status: auto-obsoleted due to no activity on 2023/10/27 06:23
Subsystems: hfs
[Documentation on labels]
Reported-by: syzbot+92ef9ee419803871020e@syzkaller.appspotmail.com
First crash: 410d, last: 221d
Discussions (3)
Title Replies (including bot) Last reply
Re: [syzbot] [hfs?] KMSAN: uninit-value in hfsplus_listxattr 1 (1) 2023/05/22 10:56
[PATCH] fs: hfsplus: fix uninit-value bug in hfsplus_listxattr 2 (2) 2023/05/11 04:36
[syzbot] [hfs?] KMSAN: uninit-value in hfsplus_listxattr 0 (1) 2023/03/06 18:06

Sample crash report:
loop2: detected capacity change from 0 to 1024
=======================================================
WARNING: The mand mount option has been deprecated and
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
=====================================================
BUG: KMSAN: uninit-value in strncmp+0x11e/0x180 lib/string.c:307
 strncmp+0x11e/0x180 lib/string.c:307
 is_known_namespace fs/hfsplus/xattr.c:45 [inline]
 name_len fs/hfsplus/xattr.c:397 [inline]
 hfsplus_listxattr+0xe38/0x1a50 fs/hfsplus/xattr.c:746
 vfs_listxattr fs/xattr.c:494 [inline]
 listxattr+0x1f0/0x6a0 fs/xattr.c:841
 path_listxattr fs/xattr.c:865 [inline]
 __do_sys_listxattr fs/xattr.c:877 [inline]
 __se_sys_listxattr fs/xattr.c:874 [inline]
 __ia32_sys_listxattr+0x167/0x2e0 fs/xattr.c:874
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:
 slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767
 slab_alloc_node mm/slub.c:3470 [inline]
 __kmem_cache_alloc_node+0x536/0x8d0 mm/slub.c:3509
 kmalloc_trace+0x51/0x200 mm/slab_common.c:1076
 kmalloc include/linux/slab.h:582 [inline]
 hfsplus_listxattr+0x4cc/0x1a50 fs/hfsplus/xattr.c:701
 vfs_listxattr fs/xattr.c:494 [inline]
 listxattr+0x1f0/0x6a0 fs/xattr.c:841
 path_listxattr fs/xattr.c:865 [inline]
 __do_sys_listxattr fs/xattr.c:877 [inline]
 __se_sys_listxattr fs/xattr.c:874 [inline]
 __ia32_sys_listxattr+0x167/0x2e0 fs/xattr.c:874
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 0 PID: 5253 Comm: syz-executor.2 Not tainted 6.5.0-rc2-syzkaller-00019-g74f1456c4a5f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
=====================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/19 06:23 upstream 74f1456c4a5f 022df2bb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_listxattr
2023/07/19 06:22 upstream 74f1456c4a5f 022df2bb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_listxattr
2023/07/17 18:45 upstream fdf0eaf11452 e5f10889 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_listxattr
2023/04/29 13:35 https://github.com/google/kmsan.git master 81af97bdef5e 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_listxattr
2023/01/11 23:37 https://github.com/google/kmsan.git master 80383273f7a0 96166539 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in hfsplus_listxattr
* Struck through repros no longer work on HEAD.