syzbot


KMSAN: uninit-value in reiserfs_new_inode (2)

Status: upstream: reported on 2022/11/24 06:39
Reported-by: syzbot+6450929faa7a97cd42d1@syzkaller.appspotmail.com
First crash: 2d20h, last: 1h39m
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in reiserfs_new_inode 4 522d 663d 0/24 auto-closed as invalid on 2021/10/20 16:24

Sample crash report:
REISERFS (device loop4): Using r5 hash to sort names
REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
overlayfs: upper fs needs to support d_type.
overlayfs: upper fs does not support tmpfile.
=====================================================
BUG: KMSAN: uninit-value in reiserfs_new_inode+0x193a/0x24e0 fs/reiserfs/inode.c:2050
 reiserfs_new_inode+0x193a/0x24e0 fs/reiserfs/inode.c:2050
 reiserfs_create+0x738/0xe60 fs/reiserfs/namei.c:668
 vfs_create+0x54f/0x740 fs/namei.c:3115
 ovl_do_create fs/overlayfs/overlayfs.h:176 [inline]
 ovl_create_real+0x390/0x6a0 fs/overlayfs/dir.c:188
 ovl_create_temp+0x90/0xc0 fs/overlayfs/dir.c:230
 ovl_check_rename_whiteout fs/overlayfs/super.c:1284 [inline]
 ovl_make_workdir fs/overlayfs/super.c:1419 [inline]
 ovl_get_workdir+0xeb6/0x2760 fs/overlayfs/super.c:1534
 ovl_fill_super+0x37b5/0x4680 fs/overlayfs/super.c:2090
 mount_nodev+0xd8/0x2a0 fs/super.c:1447
 ovl_mount+0x41/0x50 fs/overlayfs/super.c:2181
 legacy_get_tree+0x10c/0x280 fs/fs_context.c:610
 vfs_get_tree+0xa1/0x500 fs/super.c:1531
 do_new_mount+0x694/0x1580 fs/namespace.c:3040
 path_mount+0x71a/0x1eb0 fs/namespace.c:3370
 do_mount fs/namespace.c:3383 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x734/0x840 fs/namespace.c:3568
 __ia32_sys_mount+0xdf/0x140 fs/namespace.c:3568
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:
 __alloc_pages+0x9f1/0xe80 mm/page_alloc.c:5578
 alloc_pages+0xaae/0xd80 mm/mempolicy.c:2285
 alloc_slab_page mm/slub.c:1794 [inline]
 allocate_slab+0x1b5/0x1010 mm/slub.c:1939
 new_slab mm/slub.c:1992 [inline]
 ___slab_alloc+0x10c3/0x2d60 mm/slub.c:3180
 __slab_alloc mm/slub.c:3279 [inline]
 slab_alloc_node mm/slub.c:3364 [inline]
 slab_alloc mm/slub.c:3406 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3413 [inline]
 kmem_cache_alloc_lru+0x6f3/0xb30 mm/slub.c:3429
 alloc_inode_sb include/linux/fs.h:3117 [inline]
 reiserfs_alloc_inode+0x5e/0x140 fs/reiserfs/super.c:642
 alloc_inode+0x83/0x440 fs/inode.c:259
 new_inode_pseudo fs/inode.c:1018 [inline]
 new_inode+0x3b/0x430 fs/inode.c:1046
 reiserfs_mkdir+0x246/0x1190 fs/reiserfs/namei.c:813
 xattr_mkdir fs/reiserfs/xattr.c:76 [inline]
 create_privroot fs/reiserfs/xattr.c:882 [inline]
 reiserfs_xattr_init+0x43e/0xce0 fs/reiserfs/xattr.c:1005
 reiserfs_fill_super+0x38b2/0x3a00 fs/reiserfs/super.c:2175
 mount_bdev+0x508/0x840 fs/super.c:1401
 get_super_block+0x49/0x60 fs/reiserfs/super.c:2601
 legacy_get_tree+0x10c/0x280 fs/fs_context.c:610
 vfs_get_tree+0xa1/0x500 fs/super.c:1531
 do_new_mount+0x694/0x1580 fs/namespace.c:3040
 path_mount+0x71a/0x1eb0 fs/namespace.c:3370
 do_mount fs/namespace.c:3383 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x734/0x840 fs/namespace.c:3568
 __ia32_sys_mount+0xdf/0x140 fs/namespace.c:3568
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 0 PID: 4675 Comm: syz-executor.4 Not tainted 6.1.0-rc6-syzkaller-63555-ga472f15b3d1e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
=====================================================

Crashes (19):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2022/11/27 00:43 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 17:23 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 17:21 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 16:50 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 10:39 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 10:27 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 10:26 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 10:26 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 01:05 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 01:02 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/26 01:01 https://github.com/google/kmsan.git master a472f15b3d1e 74a66371 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/25 02:48 https://github.com/google/kmsan.git master e889f323ec44 62e26685 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/25 02:29 https://github.com/google/kmsan.git master e889f323ec44 62e26685 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/25 02:28 https://github.com/google/kmsan.git master e889f323ec44 62e26685 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/24 13:52 https://github.com/google/kmsan.git master ddce02aa9c40 12c66417 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/24 13:52 https://github.com/google/kmsan.git master ddce02aa9c40 12c66417 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/24 06:46 https://github.com/google/kmsan.git master ddce02aa9c40 12c66417 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/24 06:22 https://github.com/google/kmsan.git master ddce02aa9c40 12c66417 .config log report info KMSAN: uninit-value in reiserfs_new_inode
ci-upstream-kmsan-gce-386 2022/11/24 06:22 https://github.com/google/kmsan.git master ddce02aa9c40 12c66417 .config log report info KMSAN: uninit-value in reiserfs_new_inode
* Struck through repros no longer work on HEAD.